Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/33c0f0c7-189d-3673-9471-4ef912728a13.roa
File: 33c0f0c7-189d-3673-9471-4ef912728a13.roa (raw, json)
Hash identifier: MvgZ6M9F9tpY2UfCFWy69eNwSbOacUDyvySH5wCwPvc=
Subject key identifier: 1A:9E:F8:F3:65:6C:9F:38:BF:2B:72:54:72:78:E0:41:37:A8:96:71
Certificate issuer: /CN=41b3b885-79da-40ed-ab0b-ce4a30f770db
Certificate serial: 010D0C9F43285847FF4A7CC470E3ED9501D7FB40
Authority key identifier: D0:86:28:4A:65:DA:2D:21:42:61:27:16:EE:AE:44:F7:29:E6:DB:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/33c0f0c7-189d-3673-9471-4ef912728a13.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 29888
IP address blocks: 192.136.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:7c:c4:70:e3:ed:95:01:d7:fb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b3b885-79da-40ed-ab0b-ce4a30f770db
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=53b9e217-d7ad-4877-a374-d85dfeeaa0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6e:67:56:f7:84:be:fd:b3:fc:cb:30:6a:39:
a6:f4:35:a1:2e:79:da:85:ee:f4:31:38:b1:6d:7b:
23:6a:d6:2e:10:cf:90:e3:4b:28:1b:f1:c3:b2:6b:
d7:de:37:f6:4a:59:e7:95:18:7a:11:37:d1:88:d3:
e9:90:4d:60:87:e8:32:d1:7b:08:15:f3:4c:18:60:
6e:b1:c9:db:64:38:dc:9d:34:5c:37:8f:b0:40:51:
99:97:e3:02:b4:ef:98:5c:30:d3:3a:eb:41:b3:8c:
05:b8:78:ed:f7:78:12:9d:d6:09:1b:b8:fb:41:8b:
4f:d6:14:0e:ee:34:29:af:91:f4:2d:4c:b9:04:dc:
cf:e8:d0:05:94:5e:de:fa:9a:d1:02:31:7b:2f:cf:
63:8f:fd:3c:42:de:19:63:24:ce:f4:72:db:94:85:
19:72:75:51:a5:a1:67:97:9e:4d:57:cc:3f:41:cc:
91:35:64:5a:33:e4:e1:03:1d:2e:78:d0:29:a6:e4:
69:0c:e9:15:20:bc:ff:0d:ef:59:4c:9f:cc:34:04:
84:ba:1b:65:9b:14:3c:a0:04:fb:79:13:cb:ba:26:
81:ef:94:ab:08:67:25:dc:ba:4a:48:3e:90:80:dd:
99:80:9a:dc:17:e5:e9:01:c3:f4:a9:7d:7a:f7:de:
56:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9E:F8:F3:65:6C:9F:38:BF:2B:72:54:72:78:E0:41:37:A8:96:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/33c0f0c7-189d-3673-9471-4ef912728a13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.crl
X509v3 Authority Key Identifier:
keyid:D0:86:28:4A:65:DA:2D:21:42:61:27:16:EE:AE:44:F7:29:E6:DB:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer
sbgp-ipAddrBlock: critical
IPv4:
192.136.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:37:3c:12:16:38:f8:9f:b3:c5:f7:6f:b8:75:1c:1c:82:ac:
6b:28:18:e6:9a:0c:f5:0c:a6:13:fe:4b:5a:ba:e9:81:d3:27:
50:eb:20:ef:e2:66:5b:94:67:a1:43:36:e5:36:eb:b1:b7:e3:
32:7f:65:fb:0c:cc:c3:d6:e8:be:2f:26:9a:47:8a:bc:08:b6:
69:cf:e2:9b:a5:fa:4d:bc:03:48:f1:59:29:23:1a:d1:bd:3a:
f5:13:e2:f9:2d:af:fa:11:59:60:4c:ec:b8:47:e6:45:c1:30:
71:b5:36:8c:db:05:db:e1:b6:dc:95:38:62:97:c8:60:28:be:
21:3b:dd:7f:65:47:4b:e1:f3:f2:dc:0a:c4:fc:c2:6a:1b:d9:
36:cf:a1:74:b1:3b:0e:c3:ca:40:3f:6b:54:c7:80:c0:4a:c3:
ce:9c:f1:6f:b2:c7:0d:3a:f7:05:22:59:9a:70:08:3d:1d:d5:
83:e8:91:0f:ee:86:3a:e5:d0:c0:a1:d0:eb:18:da:11:07:c8:
a6:c8:15:1f:eb:66:03:ce:93:a9:50:3f:ed:27:ab:66:39:86:
00:bb:33:0b:94:5f:70:94:c5:a1:9d:e5:8b:3c:65:06:41:ab:
08:0e:0f:1b:0e:5d:63:fb:aa:1f:97:ea:1a:76:fd:71:51:07:
09:46:a3:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf/SnzEcOPtlQHX+0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDFiM2I4ODUtNzlkYS00MGVkLWFiMGItY2U0YTMwZjc3
MGRiMB4XDTI0MTEyNTE0MDAzOVoXDTI1MDIyMzE0MDAzOVowLzEtMCsGA1UEAxMk
NTNiOWUyMTctZDdhZC00ODc3LWEzNzQtZDg1ZGZlZWFhMGE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw25nVveEvv2z/Mswajmm9DWhLnnahe70MTix
bXsjatYuEM+Q40soG/HDsmvX3jf2SlnnlRh6ETfRiNPpkE1gh+gy0XsIFfNMGGBu
scnbZDjcnTRcN4+wQFGZl+MCtO+YXDDTOutBs4wFuHjt93gSndYJG7j7QYtP1hQO
7jQpr5H0LUy5BNzP6NAFlF7e+prRAjF7L89jj/08Qt4ZYyTO9HLblIUZcnVRpaFn
l55NV8w/QcyRNWRaM+ThAx0ueNAppuRpDOkVILz/De9ZTJ/MNASEuhtlmxQ8oAT7
eRPLuiaB75SrCGcl3LpKSD6QgN2ZgJrcF+XpAcP0qX16995WVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBqe+PNlbJ84vytyVHJ44EE3qJZxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MWIz
Yjg4NS03OWRhLTQwZWQtYWIwYi1jZTRhMzBmNzcwZGIvMzNjMGYwYzctMTg5ZC0z
NjczLTk0NzEtNGVmOTEyNzI4YTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDFiM2I4ODUtNzlkYS00MGVkLWFi
MGItY2U0YTMwZjc3MGRiLzQxYjNiODg1LTc5ZGEtNDBlZC1hYjBiLWNlNGEzMGY3
NzBkYi5jcmwwHwYDVR0jBBgwFoAU0IYoSmXaLSFCYScW7q5E9ynm2/QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80MWIzYjg4NS03OWRhLTQwZWQtYWIwYi1jZTRh
MzBmNzcwZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwIiwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFc3PBIWOPifs8X3b7h1HByCrGsoGOaaDPUMphP+S1q66YHTJ1DrIO/i
ZluUZ6FDNuU267G34zJ/ZfsMzMPW6L4vJppHirwItmnP4pul+k28A0jxWSkjGtG9
OvUT4vktr/oRWWBM7LhH5kXBMHG1NozbBdvhttyVOGKXyGAoviE73X9lR0vh8/Lc
CsT8wmob2TbPoXSxOw7DykA/a1THgMBKw86c8W+yxw069wUiWZpwCD0d1YPokQ/u
hjrl0MCh0OsY2hEHyKbIFR/rZgPOk6lQP+0nq2Y5hgC7MwuUX3CUxaGd5Ys8ZQZB
qwgODxsOXWP7qh+X6hp2/XFRBwlGo/U=
-----END CERTIFICATE-----
Generated at Tue Apr 29 20:31:04 2025 by rpki-client