Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/10cdc932-9aa5-363f-becc-f4871a63527f.roa
File: 10cdc932-9aa5-363f-becc-f4871a63527f.roa (raw, json)
Hash identifier: cq/obi7JOMPNKaCVwtxYeZeO+1SOJLoQePWcmySgU14=
Subject key identifier: 11:6D:BC:29:47:CC:10:CE:E5:66:4A:CF:D8:9C:08:6D:8D:AE:76:36
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B63FDE99DEA3A19443D6A0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/10cdc932-9aa5-363f-becc-f4871a63527f.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 36522
IP address blocks: 204.101.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:3f:de:99:de:a3:a1:94:43:d6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=8cfbc99b-220a-4276-8116-f32a3cc46f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:04:b3:23:b2:1c:07:9c:22:63:ad:53:01:2d:
2d:fe:d1:d4:54:58:79:11:97:99:6a:56:d7:4a:d9:
ee:27:c8:e7:ff:39:94:f1:82:e8:a2:27:f5:50:b4:
25:1e:58:a9:1c:c8:57:e9:92:e2:5a:b4:6b:15:b8:
2d:61:cd:1d:4c:07:f4:97:db:37:c9:7e:12:a1:e4:
90:84:c6:5e:08:f6:17:cb:e6:10:72:0b:27:8a:4b:
f3:a9:fb:eb:a9:29:b0:05:86:c6:7e:68:6b:82:d8:
ab:7f:2d:a1:3c:a7:3f:12:89:05:79:59:e8:52:aa:
9c:37:1a:e8:cb:46:2d:fb:2f:a2:8d:33:dc:30:d2:
0e:55:95:3a:5c:d3:47:47:ed:db:2e:18:3a:24:fd:
ae:45:d2:f7:4a:e8:4c:32:7a:90:5c:84:b7:1f:70:
3c:b2:ba:a5:22:ce:48:9f:31:70:c4:de:cb:b0:be:
a4:b7:79:a1:d7:15:8f:b3:d5:ac:59:9d:0a:de:81:
65:e1:09:6f:96:05:1b:ad:23:af:d6:b2:2c:67:3c:
30:8a:78:41:b0:dc:ea:fd:c3:c0:d7:92:9b:57:27:
3b:e1:fc:5e:ef:1e:a3:8b:a4:f3:e3:15:c4:71:9a:
1d:c7:db:0f:bc:27:b6:5f:d1:b7:31:a3:74:80:27:
43:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6D:BC:29:47:CC:10:CE:E5:66:4A:CF:D8:9C:08:6D:8D:AE:76:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/10cdc932-9aa5-363f-becc-f4871a63527f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
204.101.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:a8:d8:78:3c:b5:e9:d9:27:7a:84:fe:de:aa:a5:d1:d7:92:
a0:1d:fe:b0:d9:f6:c7:dc:58:e5:c6:b3:26:da:57:f2:40:68:
09:b9:08:f6:fc:dd:43:6c:8a:33:4e:bd:bc:f4:d3:a5:d7:be:
b8:a6:62:19:cc:57:5b:1b:26:4a:83:29:82:0f:d0:04:fe:cd:
6d:ba:4e:78:3d:ff:87:f6:06:5b:29:1f:df:86:74:08:7f:77:
ff:8b:e7:50:43:39:2c:ea:ca:18:be:53:37:90:be:93:ee:f3:
17:7b:6e:e4:28:bf:f3:9c:d2:78:f4:43:61:72:70:e7:d8:df:
66:b9:58:26:7a:24:20:cb:29:5b:b6:f2:89:e8:c4:f3:be:77:
04:70:78:d5:52:85:96:05:34:03:df:56:55:05:ab:52:90:9f:
79:38:dd:86:c9:d6:ba:07:9a:5c:40:11:8b:a9:f3:47:25:18:
f2:de:28:cc:d5:91:e8:73:0b:fe:96:10:f7:58:7b:14:fa:a5:
6d:95:e8:64:ff:b0:0d:66:e4:b4:21:c6:cb:31:05:4c:41:8e:
d7:aa:12:24:9d:3b:db:68:d3:f6:09:02:c1:24:b2:c4:59:ef:
fe:b8:8a:39:f1:96:c2:1b:c9:38:c3:f7:fb:02:95:3d:40:28:
b7:51:6f:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgmtj/emd6joZRD1qAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MTIwODEyMDAwMFoXDTI1MDMxMDA0MDAwMFowLzEtMCsGA1UEAxMk
OGNmYmM5OWItMjIwYS00Mjc2LTgxMTYtZjMyYTNjYzQ2Zjk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQSzI7IcB5wiY61TAS0t/tHUVFh5EZeZalbX
StnuJ8jn/zmU8YLooif1ULQlHlipHMhX6ZLiWrRrFbgtYc0dTAf0l9s3yX4SoeSQ
hMZeCPYXy+YQcgsnikvzqfvrqSmwBYbGfmhrgtirfy2hPKc/EokFeVnoUqqcNxro
y0Yt+y+ijTPcMNIOVZU6XNNHR+3bLhg6JP2uRdL3SuhMMnqQXIS3H3A8srqlIs5I
nzFwxN7LsL6kt3mh1xWPs9WsWZ0K3oFl4QlvlgUbrSOv1rIsZzwwinhBsNzq/cPA
15KbVyc74fxe7x6ji6Tz4xXEcZodx9sPvCe2X9G3MaN0gCdDKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBFtvClHzBDO5WZKz9icCG2NrnY2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMTBjZGM5MzItOWFhNS0z
NjNmLWJlY2MtZjQ4NzFhNjM1MjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGV7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIeo2Hg8tenZJ3qE/t6qpdHXkqAd/rDZ9sfcWOXGsybaV/JAaAm5CPb8
3UNsijNOvbz006XXvrimYhnMV1sbJkqDKYIP0AT+zW26Tng9/4f2BlspH9+GdAh/
d/+L51BDOSzqyhi+UzeQvpPu8xd7buQov/Oc0nj0Q2FycOfY32a5WCZ6JCDLKVu2
8onoxPO+dwRweNVShZYFNAPfVlUFq1KQn3k43YbJ1roHmlxAEYup80clGPLeKMzV
kehzC/6WEPdYexT6pW2V6GT/sA1m5LQhxssxBUxBjteqEiSdO9to0/YJAsEkssRZ
7/64ijnxlsIbyTjD9/sClT1AKLdRb6c=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:47:20 2025 by rpki-client