Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/4c3c0ec3-02f4-3416-ad77-0bc8812f2ae3.roa
File: 4c3c0ec3-02f4-3416-ad77-0bc8812f2ae3.roa (raw, json)
Hash identifier: ylnBTvjtJnHen/V8c24g2f6Oe/md5B8/cMM+6sAnBPc=
Subject key identifier: 40:DA:0D:CA:9B:68:1D:4F:CE:92:73:7A:0F:58:77:92:B5:B8:B3:30
Certificate issuer: /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial: 010D0C9F43285847FC7F96E8C070AC0B17167500
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/4c3c0ec3-02f4-3416-ad77-0bc8812f2ae3.roa
Signing time: Sun 24 Nov 2024 14:00:39 +0000
ROA not before: Sun 24 Nov 2024 14:00:39 +0000
ROA not after: Sat 22 Feb 2025 14:00:39 +0000
asID: 40676
IP address blocks: 202.5.24.0/24 maxlen: 24
202.5.27.0/24 maxlen: 24
202.5.29.0/24 maxlen: 24
202.5.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fc:7f:96:e8:c0:70:ac:0b:17:16:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
Validity
Not Before: Nov 24 14:00:39 2024 GMT
Not After : Feb 22 14:00:39 2025 GMT
Subject: CN=d464964d-282f-4d7d-9f5a-06474c2e033a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6c:6a:9b:2a:c1:cd:45:35:fe:9e:93:da:a7:
9b:eb:0d:47:5f:05:90:61:f0:76:f8:04:4e:03:76:
cd:c2:74:69:07:33:40:53:68:26:3f:f9:94:bc:0b:
4c:dd:47:9d:be:a2:59:c6:99:5a:9d:40:10:ee:4c:
4b:94:3b:65:90:0e:6c:2a:2d:17:46:ba:2f:b6:90:
51:82:cc:11:3a:91:f5:ef:09:3c:f9:f9:23:74:24:
7c:fb:64:ef:4d:61:52:1c:89:87:a2:90:2c:8f:e3:
0a:57:03:c3:47:c4:bd:83:09:38:c4:92:bb:fd:30:
3c:7d:43:56:a3:61:86:48:f5:a4:cc:89:be:66:47:
f7:c7:e9:21:89:a0:c8:72:e5:6f:d2:67:7f:e1:3e:
0d:fb:e8:e2:da:58:b4:7d:7f:4e:63:8b:22:a9:44:
87:81:0a:2c:c1:34:6d:16:0c:72:2d:e0:11:48:42:
6f:f0:6f:28:e6:e1:4d:f5:f2:2a:77:7d:ab:5e:a5:
bc:ce:49:8c:e5:3f:5f:c6:49:b4:2f:5b:4b:73:82:
3e:a3:c0:34:1a:50:ce:2f:73:87:9a:03:8d:02:b8:
1f:be:a4:24:a6:44:50:1e:0a:40:fb:53:63:59:26:
8f:78:e7:45:98:bb:77:ba:15:32:23:d2:24:d8:54:
33:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DA:0D:CA:9B:68:1D:4F:CE:92:73:7A:0F:58:77:92:B5:B8:B3:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/4c3c0ec3-02f4-3416-ad77-0bc8812f2ae3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl
X509v3 Authority Key Identifier:
keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
sbgp-ipAddrBlock: critical
IPv4:
202.5.24.0/24
202.5.27.0/24
202.5.29.0-202.5.30.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:18:00:02:d0:00:77:04:ba:cf:7d:fc:53:c8:e3:00:5e:4c:
b0:58:f6:0b:da:00:05:e5:3b:48:99:24:e1:5e:aa:c9:cf:f9:
23:45:05:00:d8:3c:06:14:c1:78:d3:1a:42:6f:7a:69:de:21:
7e:6a:33:f4:ed:79:90:2f:19:90:4c:51:5f:2d:07:bd:ad:41:
c3:c8:cf:30:af:98:13:65:fd:38:b5:a2:ce:d8:76:9c:87:83:
1b:1b:43:8b:93:b4:c5:5a:a0:91:ff:8b:ac:1f:17:cb:a5:cc:
cd:4a:67:7f:00:81:e8:ce:cc:df:10:ad:c3:63:a8:13:e2:11:
b8:b8:f1:c8:cd:75:54:d0:0f:02:7e:1a:ab:c1:06:2a:9a:27:
c3:fa:64:85:a0:d9:51:10:cd:73:ab:3b:ac:bd:f7:5a:ff:a7:
b7:14:a3:81:f3:3a:ef:41:24:15:b2:63:61:1b:b8:2d:ee:fd:
5e:5e:0a:b9:1c:49:c0:a0:c1:e6:69:84:18:b4:f1:db:70:58:
b1:29:88:c0:26:e1:91:ef:5c:f7:b4:e1:9d:8b:48:11:4d:37:
0c:0d:cc:4e:75:14:3f:08:da:f1:71:45:5a:dc:79:88:80:20:
7f:a0:df:9f:f0:3e:6d:30:e2:4b:54:29:13:b5:50:b7:f0:c3:
78:1c:b4:91
-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEf8f5bowHCsCxcWdQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3
NGJjMB4XDTI0MTEyNDE0MDAzOVoXDTI1MDIyMjE0MDAzOVowLzEtMCsGA1UEAxMk
ZDQ2NDk2NGQtMjgyZi00ZDdkLTlmNWEtMDY0NzRjMmUwMzNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmxqmyrBzUU1/p6T2qeb6w1HXwWQYfB2+ARO
A3bNwnRpBzNAU2gmP/mUvAtM3UedvqJZxplanUAQ7kxLlDtlkA5sKi0XRrovtpBR
gswROpH17wk8+fkjdCR8+2TvTWFSHImHopAsj+MKVwPDR8S9gwk4xJK7/TA8fUNW
o2GGSPWkzIm+Zkf3x+khiaDIcuVv0md/4T4N++ji2li0fX9OY4siqUSHgQoswTRt
FgxyLeARSEJv8G8o5uFN9fIqd32rXqW8zkmM5T9fxkm0L1tLc4I+o8A0GlDOL3OH
mgONArgfvqQkpkRQHgpA+1NjWSaPeOdFmLt3uhUyI9Ik2FQzqwIDAQABo4IDaTCC
A2UwHQYDVR0OBBYEFEDaDcqbaB1PzpJzeg9Yd5K1uLMwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2
NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvNGMzYzBlYzMtMDJmNC0z
NDE2LWFkNzctMGJjODgxMmYyYWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY5NjQzZjQtYTg0OS00YTBjLWFm
MmEtNjc3OTU3ZGU3NGJjLzM2OTY0M2Y0LWE4NDktNGEwYy1hZjJhLTY3Nzk1N2Rl
NzRiYy5jcmwwHwYDVR0jBBgwFoAUeE6WxYfl6+Xkw5CXV0KgfPfdnKkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5
NTdkZTc0YmMuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAygUYAwQA
ygUbMAwDBADKBR0DBADKBR4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAnhgAAtAAdwS6z338U8jjAF5MsFj2
C9oABeU7SJkk4V6qyc/5I0UFANg8BhTBeNMaQm96ad4hfmoz9O15kC8ZkExRXy0H
va1Bw8jPMK+YE2X9OLWizth2nIeDGxtDi5O0xVqgkf+LrB8Xy6XMzUpnfwCB6M7M
3xCtw2OoE+IRuLjxyM11VNAPAn4aq8EGKponw/pkhaDZURDNc6s7rL33Wv+ntxSj
gfM670EkFbJjYRu4Le79Xl4KuRxJwKDB5mmEGLTx23BYsSmIwCbhke9c97ThnYtI
EU03DA3MTnUUPwja8XFFWtx5iIAgf6Dfn/A+bTDiS1QpE7VQt/DDeBy0kQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 23:52:02 2025 by rpki-client