Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/24d72aa4-d799-3e57-a378-ee35680b2c9c.roa
File: 24d72aa4-d799-3e57-a378-ee35680b2c9c.roa (raw, json)
Hash identifier: wF+NxymNq0i9wNFF778T0JCnG5z58HRYNASPVMynwp8=
Subject key identifier: 73:9E:B5:02:30:C8:97:29:6B:B3:52:5D:BF:17:8F:CA:72:00:FF:98
Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial: 010D0C9F432858487FB5DAD9716B9CEF73FE6C50
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/24d72aa4-d799-3e57-a378-ee35680b2c9c.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 53813
IP address blocks: 136.226.230.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:da:d9:71:6b:9c:ef:73:fe:6c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=e4821cc0-5191-414e-be9e-545d3bbad914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:25:f6:5e:9c:3f:e2:22:ac:3b:fe:6a:0c:89:
7f:7a:16:60:31:90:75:44:59:63:5e:91:30:b2:2a:
27:5d:dd:48:10:17:ce:50:c6:45:50:3e:23:86:1f:
07:17:a8:11:19:f1:c5:5a:43:56:cb:1b:a8:e3:81:
29:f8:ff:4a:02:c7:09:aa:84:58:8f:db:f6:53:83:
06:8a:b1:98:e9:cc:f4:ba:41:02:d8:38:59:a3:83:
42:b8:df:74:a1:5f:12:f8:b3:2c:ff:8f:cd:5b:04:
27:58:a2:38:0e:f8:0e:2c:00:d9:0d:b4:e8:e8:53:
dd:ac:43:19:9b:f4:c7:67:26:58:d0:f3:56:43:f7:
b6:91:31:16:43:f2:c1:b2:66:4c:84:49:6b:d4:83:
bf:d8:0c:2c:cf:99:80:f4:dd:f0:e4:80:34:81:f3:
3d:f7:aa:bd:5e:85:43:9a:26:07:72:79:5f:58:a5:
4f:f0:9d:e8:aa:e4:ed:6d:6a:69:02:6f:80:92:51:
8c:8f:df:f8:58:43:5f:01:29:8b:91:d8:09:2d:64:
25:8a:5a:8c:b5:b5:ec:b1:88:42:7c:e8:f4:47:0d:
aa:0d:e6:95:6c:57:ff:ba:7f:a8:1f:28:e1:49:f3:
28:1c:42:1f:af:c0:bf:47:f5:f6:d1:bf:23:62:6f:
2e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9E:B5:02:30:C8:97:29:6B:B3:52:5D:BF:17:8F:CA:72:00:FF:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/24d72aa4-d799-3e57-a378-ee35680b2c9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
X509v3 Authority Key Identifier:
keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
sbgp-ipAddrBlock: critical
IPv4:
136.226.230.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:a3:ad:c5:92:20:c9:cd:22:59:c7:35:37:f8:cf:ef:7c:88:
00:dc:c5:94:fe:7c:62:3e:29:09:c1:8e:a9:04:4e:85:74:a5:
e6:f7:00:2d:96:4f:ae:a7:7e:fe:63:2b:bf:33:1b:ba:45:bc:
a4:71:44:9e:fe:e9:c4:4a:04:b4:3d:40:00:94:9f:41:56:51:
43:41:5e:5c:1d:28:51:ca:e9:da:4b:22:af:c4:47:48:52:46:
a0:94:de:79:0f:a6:dd:59:6b:62:3c:a6:3f:14:da:85:0a:a5:
c9:37:d0:71:80:dc:f2:b4:14:98:87:da:a5:cd:20:47:8f:b8:
7d:e3:98:aa:8b:2f:69:67:35:1d:a4:a5:ef:be:bf:e1:6c:7d:
90:de:15:c1:bc:5f:1c:35:90:8e:0b:52:f8:a7:c3:d7:6a:c0:
29:57:37:55:99:1f:ab:4c:de:13:5d:b8:09:5f:ff:80:04:9a:
78:70:af:e6:24:ad:f8:bb:bd:5f:e0:87:83:88:f1:54:95:b0:
c7:95:b7:f9:af:d5:30:07:f3:cf:5f:4e:50:a6:3c:ba:fe:8e:
99:5c:50:0e:8b:d9:1d:9c:99:36:f2:dd:59:cb:02:91:3a:01:
e0:a5:88:bc:d0:c9:49:48:66:a0:6a:3e:ac:ea:41:f9:42:37:
57:07:17:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh/tdrZcWuc73P+bFAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI1MDExMDE0MDA1MVoXDTI1MDQxMDEzMDA1MVowLzEtMCsGA1UEAxMk
ZTQ4MjFjYzAtNTE5MS00MTRlLWJlOWUtNTQ1ZDNiYmFkOTE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiX2Xpw/4iKsO/5qDIl/ehZgMZB1RFljXpEw
sionXd1IEBfOUMZFUD4jhh8HF6gRGfHFWkNWyxuo44Ep+P9KAscJqoRYj9v2U4MG
irGY6cz0ukEC2DhZo4NCuN90oV8S+LMs/4/NWwQnWKI4DvgOLADZDbTo6FPdrEMZ
m/THZyZY0PNWQ/e2kTEWQ/LBsmZMhElr1IO/2Awsz5mA9N3w5IA0gfM996q9XoVD
miYHcnlfWKVP8J3oquTtbWppAm+AklGMj9/4WENfASmLkdgJLWQlilqMtbXssYhC
fOj0Rw2qDeaVbFf/un+oHyjhSfMoHEIfr8C/R/X20b8jYm8uhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHOetQIwyJcpa7NSXb8Xj8pyAP+YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMjRkNzJhYTQtZDc5OS0z
ZTU3LWEzNzgtZWUzNTY4MGIyYzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOLmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABGjrcWSIMnNIlnHNTf4z+98iADcxZT+fGI+KQnBjqkEToV0peb3AC2W
T66nfv5jK78zG7pFvKRxRJ7+6cRKBLQ9QACUn0FWUUNBXlwdKFHK6dpLIq/ER0hS
RqCU3nkPpt1Za2I8pj8U2oUKpck30HGA3PK0FJiH2qXNIEePuH3jmKqLL2lnNR2k
pe++v+FsfZDeFcG8Xxw1kI4LUvinw9dqwClXN1WZH6tM3hNduAlf/4AEmnhwr+Yk
rfi7vV/gh4OI8VSVsMeVt/mv1TAH889fTlCmPLr+jplcUA6L2R2cmTby3VnLApE6
AeCliLzQyUlIZqBqPqzqQflCN1cHFyY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 17:25:47 2025 by rpki-client