Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/21be8a54-9d15-3bcf-b328-06e1c263d460.roa
File: 21be8a54-9d15-3bcf-b328-06e1c263d460.roa (raw, json)
Hash identifier: JUgOI8Vxr6e/fteOiYhR/8O650sGXq0cWwLsVVHTbWY=
Subject key identifier: 2D:C3:63:76:94:9E:38:45:6A:9E:59:09:06:2D:23:69:01:94:01:16
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848B35B6C1EA02694351642E140
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/21be8a54-9d15-3bcf-b328-06e1c263d460.roa
Signing time: Wed 29 Jan 2025 02:00:39 +0000
ROA not before: Wed 29 Jan 2025 02:00:39 +0000
ROA not after: Tue 29 Apr 2025 01:00:39 +0000
asID: 3356
IP address blocks: 20.133.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:5b:6c:1e:a0:26:94:35:16:42:e1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jan 29 02:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=271ee4aa-1974-47c2-b97f-3efc57b18512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ae:0e:6f:b0:0d:17:6b:b7:a9:07:d2:f8:00:
63:13:30:9b:df:97:df:10:c2:a0:21:71:d3:0a:0a:
e5:31:11:e7:87:68:c8:8d:95:23:ea:c3:54:62:d9:
cf:5d:40:2b:6f:6c:d3:3f:e3:f6:95:fe:9d:6c:61:
36:e2:e6:9b:0b:22:75:d9:5f:23:39:3b:76:9d:d6:
69:43:e3:a2:27:b4:0d:3a:e5:d7:c1:ef:35:b6:82:
9e:03:49:95:1d:a5:d4:13:37:b0:4c:8c:eb:e2:f8:
f3:08:f3:3b:6a:2c:e8:71:a4:67:1f:50:cb:0b:73:
08:d6:a4:73:d2:25:b7:17:13:8a:9e:81:68:7b:8b:
d8:97:81:f3:31:2c:3e:8a:1a:e3:96:92:36:fa:8e:
64:08:ef:40:e7:d0:36:17:63:0b:e4:f3:e1:7c:16:
e0:8e:59:63:a1:68:09:8f:5a:f1:3c:21:c1:eb:db:
b4:17:61:73:3e:ff:22:a0:6b:fe:bc:3f:c0:44:91:
83:60:8c:4b:24:c4:65:1e:a5:a2:47:7a:43:92:d5:
7f:d2:ec:d1:f8:2d:77:0b:71:34:1a:38:b8:de:25:
8a:87:24:1a:06:97:d9:e4:06:7f:14:0a:f9:19:bd:
de:3c:79:bd:3f:f2:db:bb:d6:82:fa:b5:b8:da:0d:
6f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C3:63:76:94:9E:38:45:6A:9E:59:09:06:2D:23:69:01:94:01:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/21be8a54-9d15-3bcf-b328-06e1c263d460.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.133.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:f1:80:44:49:97:a7:28:06:dd:75:c4:09:7a:0b:97:bd:82:
d1:33:73:f2:57:94:ec:28:11:6d:e1:81:f7:ee:80:98:3f:43:
e3:55:41:db:22:b1:49:82:1f:1d:23:40:14:7a:78:a5:57:58:
aa:23:9e:5e:2e:55:3f:1e:27:f7:c6:06:55:f4:71:7e:47:1c:
4e:a7:6c:61:d8:3a:27:51:78:3b:fc:1a:08:59:64:e2:47:05:
4a:52:3d:84:6f:62:ff:a0:74:09:e7:0b:4d:3a:24:69:79:e5:
54:08:7d:40:33:e6:80:88:29:07:61:62:a9:58:6e:89:03:6a:
01:b6:d9:c0:2c:34:23:69:e4:00:17:0b:01:d0:79:10:31:c2:
a8:08:a3:c1:99:d4:11:83:66:94:ea:d2:49:d0:43:5f:46:e6:
fb:56:f2:ad:6c:f9:7d:86:1d:ef:04:72:82:ce:9a:16:ac:ff:
f8:71:7d:5e:65:22:92:45:e6:87:23:37:43:06:da:35:17:18:
e7:df:ac:a7:ce:53:57:c5:59:9d:e9:b4:c6:c9:e9:11:db:aa:
36:1e:01:6b:aa:98:82:92:78:71:87:79:ed:b1:3c:1b:4c:8e:
bd:0e:12:f7:4d:25:72:93:47:65:cc:ed:3e:25:d3:12:b7:ea:
32:75:8e:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW2weoCaUNRZC4UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk
MjcxZWU0YWEtMTk3NC00N2MyLWI5N2YtM2VmYzU3YjE4NTEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAga4Ob7ANF2u3qQfS+ABjEzCb35ffEMKgIXHT
CgrlMRHnh2jIjZUj6sNUYtnPXUArb2zTP+P2lf6dbGE24uabCyJ12V8jOTt2ndZp
Q+OiJ7QNOuXXwe81toKeA0mVHaXUEzewTIzr4vjzCPM7aizocaRnH1DLC3MI1qRz
0iW3FxOKnoFoe4vYl4HzMSw+ihrjlpI2+o5kCO9A59A2F2ML5PPhfBbgjlljoWgJ
j1rxPCHB69u0F2FzPv8ioGv+vD/ARJGDYIxLJMRlHqWiR3pDktV/0uzR+C13C3E0
Gji43iWKhyQaBpfZ5AZ/FAr5Gb3ePHm9P/Lbu9aC+rW42g1vZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC3DY3aUnjhFap5ZCQYtI2kBlAEWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjFiZThhNTQtOWQxNS0z
YmNmLWIzMjgtMDZlMWMyNjNkNDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACPxgERJl6coBt11xAl6C5e9gtEzc/JXlOwoEW3hgffugJg/Q+NVQdsi
sUmCHx0jQBR6eKVXWKojnl4uVT8eJ/fGBlX0cX5HHE6nbGHYOidReDv8GghZZOJH
BUpSPYRvYv+gdAnnC006JGl55VQIfUAz5oCIKQdhYqlYbokDagG22cAsNCNp5AAX
CwHQeRAxwqgIo8GZ1BGDZpTq0knQQ19G5vtW8q1s+X2GHe8EcoLOmhas//hxfV5l
IpJF5ocjN0MG2jUXGOffrKfOU1fFWZ3ptMbJ6RHbqjYeAWuqmIKSeHGHee2xPBtM
jr0OEvdNJXKTR2XM7T4l0xK36jJ1jrg=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:38:47 2025 by rpki-client