Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/74c04573-b423-34d6-a92c-a33a7e85298a.roa
File: 74c04573-b423-34d6-a92c-a33a7e85298a.roa (raw, json)
Hash identifier: ZlQGVD2ITdzMjnEn7j4ccYsc3AHjaXd5npeEgFizqDk=
Subject key identifier: 4A:A8:DB:D7:21:90:33:9C:89:7A:5B:10:29:55:DF:1C:5A:09:E5:C6
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F4328584817051114BE73783ADA50F5C0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/74c04573-b423-34d6-a92c-a33a7e85298a.roa
Signing time: Wed 04 Dec 2024 02:00:39 +0000
ROA not before: Wed 04 Dec 2024 02:00:39 +0000
ROA not after: Tue 04 Mar 2025 02:00:39 +0000
asID: 203
IP address blocks: 20.139.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:17:05:11:14:be:73:78:3a:da:50:f5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Dec 4 02:00:39 2024 GMT
Not After : Mar 4 02:00:39 2025 GMT
Subject: CN=8886e8e1-e0d9-4b89-99de-7bd0f54cd999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:93:92:a6:c6:df:29:c1:bc:6b:e4:c2:08:4b:
16:ca:ca:1d:e2:c2:88:0f:5e:9a:b4:7d:dd:03:25:
c4:64:7d:4f:be:6e:98:93:93:26:73:72:30:56:9c:
f0:43:d3:c7:d5:e8:a8:6d:4c:54:1c:a6:7a:33:62:
7b:4b:09:39:60:d1:13:bb:18:30:43:3a:a1:ef:52:
a9:c9:43:9e:9f:9d:aa:c8:a6:10:a5:48:0d:f2:cb:
4b:5a:c3:9b:75:b8:4a:f3:0c:c9:d5:f4:f6:92:cf:
33:1c:43:7f:a1:78:db:27:81:1e:23:86:b6:33:7f:
7f:53:c4:06:8f:9c:5b:10:0b:d2:56:c8:05:f6:02:
ea:99:c3:a8:4f:5a:7f:6d:67:17:00:66:85:cc:27:
2a:89:72:b5:67:49:1e:d4:54:4f:3f:a3:11:ea:bd:
08:b2:c3:23:b6:b5:16:92:5e:fc:24:8f:d3:57:79:
58:ce:ac:a6:ae:8a:70:94:fc:3e:12:33:15:a8:b8:
46:84:0a:f7:14:d2:0c:9b:1f:75:01:ba:b7:a8:1e:
e7:c9:94:fa:9f:8f:c2:29:e9:08:ee:4e:b9:9f:48:
e1:23:76:94:43:1b:c0:c6:32:bf:43:bf:50:8d:40:
ef:0d:be:b1:24:1e:a3:70:2a:2e:b0:23:af:47:c1:
c7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A8:DB:D7:21:90:33:9C:89:7A:5B:10:29:55:DF:1C:5A:09:E5:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/74c04573-b423-34d6-a92c-a33a7e85298a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.139.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:d8:28:df:98:8c:0d:b5:bf:30:e1:50:fe:33:fb:34:dd:40:
27:39:c1:9f:72:80:87:8d:96:68:f9:b3:71:cc:43:ba:1c:ce:
04:ea:fd:22:6c:0a:2a:e8:03:e0:1f:27:44:92:40:85:30:bd:
7f:f8:f0:5e:32:e4:9c:13:7e:67:05:f2:2e:20:6d:2d:aa:23:
d9:a7:57:aa:16:b2:a6:79:05:45:00:7a:99:b9:e4:12:7b:05:
ec:00:2e:5b:f7:41:4a:6a:5f:0d:0f:10:73:9d:b5:d7:10:2c:
18:d6:ce:5d:9a:ab:de:c1:2d:d2:fd:de:f5:a4:b3:c4:c2:35:
45:95:84:ad:24:df:0a:34:87:e8:78:d0:9e:b1:f7:55:fe:9e:
c9:b2:70:6e:54:79:f3:99:f2:8f:9c:5f:a3:5f:ce:8e:3a:d8:
96:e4:6d:d0:ad:5f:b9:ad:2f:5c:90:b6:5a:be:ad:bc:3f:63:
57:f6:96:ac:62:82:12:de:09:c2:2e:fb:97:cd:47:33:51:44:
c0:ff:90:ca:be:5e:ae:19:a0:b4:43:e3:66:c0:5e:e7:df:ee:
95:57:b3:ff:a1:5b:d8:1a:e6:20:e5:4b:4b:0f:86:64:e7:5b:
54:ac:6a:7c:04:77:f9:0b:9e:5f:d5:92:a9:59:12:d0:8d:06:
54:aa:d9:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgXBREUvnN4OtpQ9cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI0MTIwNDAyMDAzOVoXDTI1MDMwNDAyMDAzOVowLzEtMCsGA1UEAxMk
ODg4NmU4ZTEtZTBkOS00Yjg5LTk5ZGUtN2JkMGY1NGNkOTk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJOSpsbfKcG8a+TCCEsWysod4sKID16atH3d
AyXEZH1Pvm6Yk5Mmc3IwVpzwQ9PH1eiobUxUHKZ6M2J7Swk5YNETuxgwQzqh71Kp
yUOen52qyKYQpUgN8stLWsObdbhK8wzJ1fT2ks8zHEN/oXjbJ4EeI4a2M39/U8QG
j5xbEAvSVsgF9gLqmcOoT1p/bWcXAGaFzCcqiXK1Z0ke1FRPP6MR6r0IssMjtrUW
kl78JI/TV3lYzqymropwlPw+EjMVqLhGhAr3FNIMmx91Abq3qB7nyZT6n4/CKekI
7k65n0jhI3aUQxvAxjK/Q79QjUDvDb6xJB6jcCousCOvR8HHBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEqo29chkDOciXpbEClV3xxaCeXGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNzRjMDQ1NzMtYjQyMy0z
NGQ2LWE5MmMtYTMzYTdlODUyOThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFItgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABvYKN+YjA21vzDhUP4z+zTdQCc5wZ9ygIeNlmj5s3HMQ7oczgTq/SJs
CiroA+AfJ0SSQIUwvX/48F4y5JwTfmcF8i4gbS2qI9mnV6oWsqZ5BUUAepm55BJ7
BewALlv3QUpqXw0PEHOdtdcQLBjWzl2aq97BLdL93vWks8TCNUWVhK0k3wo0h+h4
0J6x91X+nsmycG5UefOZ8o+cX6Nfzo462JbkbdCtX7mtL1yQtlq+rbw/Y1f2lqxi
ghLeCcIu+5fNRzNRRMD/kMq+Xq4ZoLRD42bAXuff7pVXs/+hW9ga5iDlS0sPhmTn
W1SsanwEd/kLnl/VkqlZEtCNBlSq2Q8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:26:30 2025 by rpki-client