Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/260f63a8-7710-3443-bbef-8e200fe5e3b7.roa
File: 260f63a8-7710-3443-bbef-8e200fe5e3b7.roa (raw, json)
Hash identifier: kcg+9R0Liwdu99hfNxJthhZor+QGd/0QialpSxkoIEQ=
Subject key identifier: CD:07:CE:BF:D4:69:FA:EF:CA:B5:F1:C2:94:CD:EE:42:86:F7:05:B5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11762F5BA623A8394EA480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/260f63a8-7710-3443-bbef-8e200fe5e3b7.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 24.23.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:76:2f:5b:a6:23:a8:39:4e:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=2b6e7be1-df1e-4f7b-bffc-958144e112d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:db:58:92:c2:9a:07:b9:6a:2b:bd:63:5c:1f:
a9:b0:14:1a:b2:3e:8b:b0:09:fc:21:cf:61:02:cf:
2d:ff:32:6b:09:94:21:60:3e:9a:6c:96:00:dc:f5:
2c:1d:bc:34:fb:20:ea:4a:7c:a2:ef:78:0f:c8:12:
84:4a:1b:48:b9:60:62:d5:1d:cc:04:fa:1d:d4:62:
f9:af:d9:a1:46:62:34:9f:da:69:e6:45:b9:cf:95:
e0:ae:fd:65:e6:b5:bc:67:f8:6b:ce:b4:7e:c5:b3:
25:b0:3d:3c:e2:21:02:2f:d7:e2:b6:36:fc:c0:22:
ab:38:5f:6c:2e:a8:67:2c:7a:27:e3:ab:11:fb:bc:
b6:4d:3c:0a:98:81:aa:32:e6:67:7b:c5:e0:c0:5f:
43:61:e9:1c:e8:a1:ea:8b:e1:f7:65:03:11:0b:34:
2f:ee:fe:bd:36:de:55:52:b1:f8:19:9e:1e:ff:67:
3c:96:10:f5:5b:ed:ab:9d:2f:46:d2:fa:6f:ec:5f:
db:59:bd:21:8a:47:d7:8e:2d:b6:c4:2c:30:b3:58:
76:1d:ce:84:31:db:f4:a5:63:c1:9b:78:04:c0:4b:
81:e4:03:6f:2b:eb:26:67:6d:06:14:d5:3b:56:b9:
59:4b:2e:d8:28:e0:b1:97:55:43:27:a2:57:a3:b1:
fa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:07:CE:BF:D4:69:FA:EF:CA:B5:F1:C2:94:CD:EE:42:86:F7:05:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/260f63a8-7710-3443-bbef-8e200fe5e3b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.23.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:97:35:96:80:3c:9b:c9:69:14:72:3b:e9:57:6f:30:f0:24:
eb:bb:0e:92:bd:fd:56:8c:c9:89:19:b8:2b:8b:1b:45:9e:56:
f7:4d:9d:ed:e7:ed:5d:9b:6c:8d:aa:a7:d2:4b:8f:9b:b9:be:
57:dd:7c:32:f0:4e:05:3a:d3:70:23:0d:31:1f:26:b9:8a:7f:
a2:ae:a5:bd:19:b7:81:09:01:b3:a4:6d:c3:32:37:e2:5e:c2:
e8:7b:60:6d:d9:39:ed:ab:f7:68:98:14:7b:65:27:6f:c2:e9:
26:fd:d5:7f:38:1b:4c:8e:c4:9f:31:95:d1:2e:16:da:b7:87:
e4:52:38:97:19:0c:da:fe:eb:fc:0d:d1:cd:cb:b8:b7:dc:0d:
a6:ef:34:1d:f7:0b:67:53:f8:85:41:4d:93:d8:81:b2:bc:39:
ad:88:5f:09:2c:01:a9:5e:2c:8e:ab:a6:ed:a6:61:33:51:fc:
2d:99:73:1c:c9:e9:6f:b8:c3:43:fd:c3:99:49:33:8d:8a:2a:
6b:1f:49:41:82:af:0a:fe:32:17:bd:50:ae:dd:5f:c9:f4:87:
45:bc:e0:ca:7e:19:39:80:67:fb:84:b5:be:74:14:fc:e4:95:
ee:e7:75:42:5a:fd:3c:99:f6:65:f0:f5:c8:2b:20:0d:b8:a6:
1c:2b:dd:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEXYvW6YjqDlOpIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
MmI2ZTdiZTEtZGYxZS00ZjdiLWJmZmMtOTU4MTQ0ZTExMmQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9tYksKaB7lqK71jXB+psBQasj6LsAn8Ic9h
As8t/zJrCZQhYD6abJYA3PUsHbw0+yDqSnyi73gPyBKEShtIuWBi1R3MBPod1GL5
r9mhRmI0n9pp5kW5z5Xgrv1l5rW8Z/hrzrR+xbMlsD084iECL9fitjb8wCKrOF9s
LqhnLHon46sR+7y2TTwKmIGqMuZne8XgwF9DYekc6KHqi+H3ZQMRCzQv7v69Nt5V
UrH4GZ4e/2c8lhD1W+2rnS9G0vpv7F/bWb0hikfXji22xCwws1h2Hc6EMdv0pWPB
m3gEwEuB5ANvK+smZ20GFNU7VrlZSy7YKOCxl1VDJ6JXo7H6RQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM0Hzr/UafrvyrXxwpTN7kKG9wW1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjYwZjYzYTgtNzcxMC0z
NDQzLWJiZWYtOGUyMDBmZTVlM2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGBf8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACWXNZaAPJvJaRRyO+lXbzDwJOu7DpK9/VaMyYkZuCuLG0WeVvdNne3n
7V2bbI2qp9JLj5u5vlfdfDLwTgU603AjDTEfJrmKf6Kupb0Zt4EJAbOkbcMyN+Je
wuh7YG3ZOe2r92iYFHtlJ2/C6Sb91X84G0yOxJ8xldEuFtq3h+RSOJcZDNr+6/wN
0c3LuLfcDabvNB33C2dT+IVBTZPYgbK8Oa2IXwksAaleLI6rpu2mYTNR/C2ZcxzJ
6W+4w0P9w5lJM42KKmsfSUGCrwr+Mhe9UK7dX8n0h0W84Mp+GTmAZ/uEtb50FPzk
le7ndUJa/TyZ9mXw9cgrIA24phwr3ZY=
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:15:07 2025 by rpki-client