Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3a91960-d454-3be0-a2fb-0a5e4d7975a9.roa
File: d3a91960-d454-3be0-a2fb-0a5e4d7975a9.roa (raw, json)
Hash identifier: 12dee8e1DnHBbPn9pW4rfjbrnXf/LKmQgBqySSeyvec=
Subject key identifier: E6:C9:B4:94:B6:61:53:20:56:0C:0D:9C:72:BD:40:0B:DE:82:A3:D2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143CEA43B673CBFE47C6DB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3a91960-d454-3be0-a2fb-0a5e4d7975a9.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 24.20.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3c:ea:43:b6:73:cb:fe:47:c6:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=37a8a858-9e25-40d7-92c3-0c6aa25d22ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2e:84:b8:59:0c:6b:7d:58:a9:04:9d:c0:c2:
b0:51:51:a2:2e:00:44:04:0a:5a:5a:de:a6:88:d4:
d6:fd:fd:18:d6:a5:e1:0f:16:e5:a9:94:2b:62:57:
d1:5d:97:b5:2c:57:d6:8b:c4:4d:1e:df:b5:a4:df:
58:37:c1:5e:02:f6:c8:b9:8e:be:94:ff:67:a4:be:
f8:2a:4d:c0:88:82:09:45:d2:a7:71:4c:99:fe:a5:
a1:e7:95:3b:a6:dc:ba:fb:ca:bb:22:18:91:5e:23:
81:07:f5:72:c9:be:da:89:66:09:6b:d6:d7:08:85:
2a:da:f1:9a:1c:3e:30:67:fd:c7:09:25:86:2e:5f:
84:31:c4:09:8c:15:2f:5e:0c:e8:98:d8:d5:0e:ab:
55:48:af:a5:6b:7b:f1:6a:d5:41:42:8a:fd:6a:f9:
3c:5c:53:d7:4e:49:43:61:6e:82:b5:6d:f4:f9:e4:
56:06:2d:f0:9e:10:d9:a2:ed:8f:71:6c:d9:68:88:
28:3f:c1:0f:bb:ef:41:1b:22:f2:e3:59:2e:bb:e5:
7a:f6:74:11:f0:5b:70:12:47:4e:50:8b:42:bd:d5:
f5:a3:4f:03:9a:2b:75:5c:ed:66:3b:a3:c3:81:b8:
c4:2f:ce:b2:48:8b:6e:ed:88:53:d3:4a:c2:0f:a8:
ea:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C9:B4:94:B6:61:53:20:56:0C:0D:9C:72:BD:40:0B:DE:82:A3:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3a91960-d454-3be0-a2fb-0a5e4d7975a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
24.20.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:11:8f:57:e2:1c:4f:54:1c:39:5b:34:35:ea:95:a2:d9:02:
aa:14:60:d8:51:ae:8f:f6:6d:38:4f:6a:59:d0:ce:a4:09:3e:
c4:9a:2b:3f:49:3a:1a:e1:91:d6:91:c6:97:b6:10:10:0a:46:
92:b9:a1:3c:71:64:db:c4:84:05:d2:af:75:0f:4c:8e:5b:5c:
3f:cf:fb:a0:94:e2:ac:5f:c0:a6:fe:d9:f2:be:5a:56:0d:ab:
89:ea:68:be:17:58:9d:3d:8c:b8:bd:b3:5e:a9:ff:80:a1:92:
f5:49:6e:68:b8:5e:6f:c4:59:03:b4:14:cb:06:f7:a1:a7:e5:
82:31:27:85:b8:20:f7:d7:25:cd:1c:a9:8e:00:73:9f:fb:3c:
47:48:86:a6:c2:f3:ca:5c:84:ed:73:2d:de:4f:9c:9e:f4:ce:
64:21:d3:e2:5e:96:69:0e:bb:99:de:6e:f2:c7:05:1c:9d:7e:
f4:5b:d9:3a:16:b7:13:d1:7e:89:c3:d2:92:15:5d:87:31:47:
86:5a:f3:f6:22:08:e1:35:c7:4f:29:1e:5d:ac:14:2e:82:d6:
4a:a3:03:b4:92:ee:5e:21:3f:48:7c:fe:e1:91:99:5a:4e:ba:
98:51:f9:36:93:c4:53:22:a2:71:c9:2e:56:ba:cb:a9:29:63:
bb:02:17:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPOpDtnPL/kfG24AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
MzdhOGE4NTgtOWUyNS00MGQ3LTkyYzMtMGM2YWEyNWQyMmVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxy6EuFkMa31YqQSdwMKwUVGiLgBEBApaWt6m
iNTW/f0Y1qXhDxblqZQrYlfRXZe1LFfWi8RNHt+1pN9YN8FeAvbIuY6+lP9npL74
Kk3AiIIJRdKncUyZ/qWh55U7pty6+8q7IhiRXiOBB/Vyyb7aiWYJa9bXCIUq2vGa
HD4wZ/3HCSWGLl+EMcQJjBUvXgzomNjVDqtVSK+la3vxatVBQor9avk8XFPXTklD
YW6CtW30+eRWBi3wnhDZou2PcWzZaIgoP8EPu+9BGyLy41kuu+V69nQR8FtwEkdO
UItCvdX1o08Dmit1XO1mO6PDgbjEL86ySItu7YhT00rCD6jqMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFObJtJS2YVMgVgwNnHK9QAvegqPSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDNhOTE5NjAtZDQ1NC0z
YmUwLWEyZmItMGE1ZTRkNzk3NWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGBQUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACYRj1fiHE9UHDlbNDXqlaLZAqoUYNhRro/2bThPalnQzqQJPsSaKz9J
OhrhkdaRxpe2EBAKRpK5oTxxZNvEhAXSr3UPTI5bXD/P+6CU4qxfwKb+2fK+WlYN
q4nqaL4XWJ09jLi9s16p/4ChkvVJbmi4Xm/EWQO0FMsG96Gn5YIxJ4W4IPfXJc0c
qY4Ac5/7PEdIhqbC88pchO1zLd5PnJ70zmQh0+JelmkOu5nebvLHBRydfvRb2ToW
txPRfonD0pIVXYcxR4Za8/YiCOE1x08pHl2sFC6C1kqjA7SS7l4hP0h8/uGRmVpO
uphR+TaTxFMionHJLla6y6kpY7sCFzo=
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:53:19 2025 by rpki-client