Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21f5c487-b454-3ffe-9aed-6bd3c8215d29.roa
File: 21f5c487-b454-3ffe-9aed-6bd3c8215d29.roa (raw, json)
Hash identifier: /MXj+bwhymctLNZDs9+luvuXj5AswH1Y8K5Op0996Ck=
Subject key identifier: F9:92:3C:E9:63:E9:48:44:00:71:16:07:D6:0D:2E:02:DE:9A:2F:F7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1178B83DB0BA2B63F43C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21f5c487-b454-3ffe-9aed-6bd3c8215d29.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 24.5.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:78:b8:3d:b0:ba:2b:63:f4:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=750253f6-cf8c-420c-bc28-5bbd6b904e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b2:a7:34:dd:07:2a:04:0c:a7:82:7e:55:2d:
bd:81:0c:10:28:cf:22:c4:c1:0b:3f:ac:df:ac:5a:
b0:46:ca:af:6f:e0:55:d7:ca:77:c4:85:df:64:3b:
d3:bf:d1:4a:3d:30:54:b2:0b:e3:b2:10:7e:94:6f:
5c:a0:ac:90:97:3b:f5:e7:98:05:60:ba:c4:25:e4:
8c:00:1e:b3:95:c1:77:14:c4:38:7c:e6:0d:0c:12:
87:e5:df:e1:04:0f:92:4b:88:4b:70:85:fb:47:26:
94:5f:35:ab:fa:d3:e1:33:56:19:fc:77:9e:d0:be:
f6:81:d7:08:62:44:15:41:37:f3:27:9c:68:99:2a:
de:9e:29:28:9d:5b:10:16:1c:79:07:34:4d:b4:19:
7b:aa:a9:f8:d4:75:b9:96:4e:46:cc:6d:78:84:4f:
74:5f:44:ea:ef:4a:44:7f:4b:29:73:3f:30:04:13:
67:e6:50:d0:11:18:2c:16:9c:f4:f5:52:40:df:86:
5c:7f:97:93:42:7f:76:d0:ed:05:7e:a1:03:c5:34:
eb:3f:76:e4:fb:45:c6:a4:33:f5:a8:ef:c2:27:85:
11:96:e9:91:22:ec:2f:a2:8a:04:5e:ab:f6:52:12:
3c:30:50:ce:b4:d0:1e:23:50:73:c0:be:fa:a9:e7:
24:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:92:3C:E9:63:E9:48:44:00:71:16:07:D6:0D:2E:02:DE:9A:2F:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21f5c487-b454-3ffe-9aed-6bd3c8215d29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.5.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:2d:f0:30:b9:4f:69:5d:45:6d:ed:fa:68:17:dc:07:64:76:
70:a6:df:10:c5:06:b4:34:72:02:7c:16:27:37:00:84:82:fb:
a6:bb:91:fa:50:04:94:3f:2d:40:ea:53:89:e9:97:cc:c6:8d:
ea:37:8b:b8:fe:13:8f:70:de:22:95:63:0a:25:b8:1c:0c:0a:
53:90:d8:89:5e:93:e4:23:01:ea:98:9c:c0:9f:9c:73:e4:4b:
ba:94:85:61:67:49:da:d9:41:b1:a7:5f:28:2a:36:56:b3:dd:
31:f5:8e:5d:60:41:8d:cf:1f:71:3e:64:53:ce:0a:8f:ca:97:
6f:48:9d:bd:bc:24:5f:3d:fb:f7:a2:2a:4f:48:cd:ee:4b:d6:
8c:dd:0d:da:75:96:69:63:06:96:cf:ba:a6:8f:00:8e:01:62:
9b:00:ae:2c:ab:3f:5c:2d:08:8a:94:29:07:b8:69:a2:9e:b7:
ee:69:58:82:54:65:08:01:f1:c6:08:c6:0f:8e:29:e2:a9:d5:
6c:4a:bd:11:1a:bb:e0:c1:5d:94:fc:7f:06:e7:bf:ef:1c:cd:
0d:0a:8e:ac:c7:d5:aa:b9:3e:d6:49:30:86:6c:87:0a:ce:f0:
46:42:b2:4d:b1:a5:c4:68:07:24:99:45:5b:4c:5a:c7:96:44:
d9:71:25:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEXi4PbC6K2P0PIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
NzUwMjUzZjYtY2Y4Yy00MjBjLWJjMjgtNWJiZDZiOTA0ZTExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rKnNN0HKgQMp4J+VS29gQwQKM8ixMELP6zf
rFqwRsqvb+BV18p3xIXfZDvTv9FKPTBUsgvjshB+lG9coKyQlzv155gFYLrEJeSM
AB6zlcF3FMQ4fOYNDBKH5d/hBA+SS4hLcIX7RyaUXzWr+tPhM1YZ/Hee0L72gdcI
YkQVQTfzJ5xomSrenikonVsQFhx5BzRNtBl7qqn41HW5lk5GzG14hE90X0Tq70pE
f0spcz8wBBNn5lDQERgsFpz09VJA34Zcf5eTQn920O0FfqEDxTTrP3bk+0XGpDP1
qO/CJ4URlumRIuwvoooEXqv2UhI8MFDOtNAeI1BzwL76qeckXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPmSPOlj6UhEAHEWB9YNLgLemi/3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjFmNWM0ODctYjQ1NC0z
ZmZlLTlhZWQtNmJkM2M4MjE1ZDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGAWdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC8t8DC5T2ldRW3t+mgX3AdkdnCm3xDFBrQ0cgJ8Fic3AISC+6a7kfpQ
BJQ/LUDqU4npl8zGjeo3i7j+E49w3iKVYwoluBwMClOQ2Ilek+QjAeqYnMCfnHPk
S7qUhWFnSdrZQbGnXygqNlaz3TH1jl1gQY3PH3E+ZFPOCo/Kl29Inb28JF89+/ei
Kk9Ize5L1ozdDdp1lmljBpbPuqaPAI4BYpsAriyrP1wtCIqUKQe4aaKet+5pWIJU
ZQgB8cYIxg+OKeKp1WxKvREau+DBXZT8fwbnv+8czQ0KjqzH1aq5PtZJMIZshwrO
8EZCsk2xpcRoBySZRVtMWseWRNlxJSk=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:54:51 2025 by rpki-client