Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/aa63a8c0-a18c-3729-be8f-5f31acd85c63.roa
File: aa63a8c0-a18c-3729-be8f-5f31acd85c63.roa (raw, json)
Hash identifier: QIUxaWEaImyWrqC5dNRKgG3i5DZ8z/BAY9HfW9LPxEU=
Subject key identifier: 83:E8:2C:D9:2C:08:EB:59:62:F4:2C:B3:9D:37:48:76:9C:12:8C:C0
Certificate issuer: /CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
Certificate serial: 010D0C9F432858485B6AFBE8C1C247B4D1320800
Authority key identifier: C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/aa63a8c0-a18c-3729-be8f-5f31acd85c63.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 52262
IP address blocks: 200.12.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6a:fb:e8:c1:c2:47:b4:d1:32:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=e31acedb-b8ea-4aea-ba1f-d02a64723dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3c:ce:5d:1f:c3:33:33:de:c7:55:ab:65:ae:
14:e6:60:f6:0f:2a:d4:8c:4c:92:37:31:a9:01:78:
dc:97:a5:51:49:64:24:e0:64:cf:2b:40:45:08:87:
c5:3e:49:2f:80:4b:24:ff:3d:8d:e2:69:4d:05:f6:
73:c7:ad:a3:56:ca:02:2c:42:09:ec:1a:b0:e1:06:
d2:f5:e6:91:7c:6d:86:5d:62:1c:94:30:55:12:7c:
ca:d7:26:82:84:ae:20:48:f9:bb:b3:ba:9d:14:af:
6a:48:0c:4b:dc:3f:5b:87:29:85:40:ad:de:e0:46:
05:91:e5:fd:05:00:5f:02:a1:69:eb:18:64:ff:10:
e0:13:be:d4:f0:18:c7:0b:30:92:06:7e:41:3d:ed:
c0:db:39:33:00:dd:0e:a9:26:ea:4e:33:59:d1:ed:
41:d1:5a:db:5c:64:f7:46:eb:99:ae:28:e7:96:ba:
8c:53:f3:d4:41:6d:03:85:3b:70:31:e4:71:03:be:
ee:bc:aa:34:0a:3b:84:f0:34:30:a8:0e:f6:aa:d6:
14:35:47:4d:dd:2c:d1:ba:16:0d:d6:3f:fc:68:6c:
3b:fb:f9:77:db:46:89:f9:1c:a2:f5:69:c5:ec:c4:
5d:02:46:3d:75:e2:4e:49:3a:ef:98:b0:a9:f9:e9:
86:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E8:2C:D9:2C:08:EB:59:62:F4:2C:B3:9D:37:48:76:9C:12:8C:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/aa63a8c0-a18c-3729-be8f-5f31acd85c63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl
X509v3 Authority Key Identifier:
keyid:C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
sbgp-ipAddrBlock: critical
IPv4:
200.12.227.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:e9:51:ef:3f:af:d8:09:7b:fd:21:b0:49:ec:05:19:59:07:
c4:65:00:f2:cb:a3:2b:83:ab:fa:c1:96:1d:7e:03:10:a3:23:
74:b2:0c:7b:0a:39:eb:62:71:f4:e5:c7:9e:53:5d:2b:dd:5c:
71:99:9f:ef:cc:1b:2c:4b:1f:6c:fe:ef:9a:a7:78:f1:0e:4e:
97:bd:49:10:9d:85:85:13:76:40:35:ba:0b:87:40:e4:5b:3c:
c7:39:87:4c:47:6a:f4:4e:72:93:3c:ac:fd:09:4c:04:54:42:
3b:c8:a8:4b:1b:41:02:84:0f:8e:cc:e2:f9:d4:bb:d5:a5:5c:
13:00:50:f0:ee:b4:d2:d5:07:ca:4e:df:70:6f:9a:b1:4c:20:
4f:48:85:b8:66:cd:82:42:1c:67:bb:9c:d5:00:3a:b9:59:09:
05:53:85:f0:6d:be:04:0e:f7:70:3d:9c:2d:ed:e0:33:ff:08:
a9:3d:be:58:96:30:3c:f4:1a:66:91:f8:98:bb:9f:d8:a4:9e:
0d:fe:de:a9:b9:7f:3a:ce:62:69:1d:73:45:e8:77:88:b7:36:
db:6f:f3:d4:e4:ef:56:39:61:5a:dd:52:af:57:33:9b:ea:69:
a2:4b:56:a6:ab:fa:0c:6e:20:e3:93:8d:b0:62:4f:de:5c:e8:
ba:e1:8e:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhbavvowcJHtNEyCAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjE1MzJhZGItZWQ3ZC00M2JhLWE2NmYtMmEzMzNmYjlj
ZjYyMB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk
ZTMxYWNlZGItYjhlYS00YWVhLWJhMWYtZDAyYTY0NzIzZGRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijzOXR/DMzPex1WrZa4U5mD2DyrUjEySNzGp
AXjcl6VRSWQk4GTPK0BFCIfFPkkvgEsk/z2N4mlNBfZzx62jVsoCLEIJ7Bqw4QbS
9eaRfG2GXWIclDBVEnzK1yaChK4gSPm7s7qdFK9qSAxL3D9bhymFQK3e4EYFkeX9
BQBfAqFp6xhk/xDgE77U8BjHCzCSBn5BPe3A2zkzAN0OqSbqTjNZ0e1B0VrbXGT3
RuuZrijnlrqMU/PUQW0DhTtwMeRxA77uvKo0CjuE8DQwqA72qtYUNUdN3SzRuhYN
1j/8aGw7+/l320aJ+Ryi9WnF7MRdAkY9deJOSTrvmLCp+emGYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIPoLNksCOtZYvQss503SHacEozAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MTUz
MmFkYi1lZDdkLTQzYmEtYTY2Zi0yYTMzM2ZiOWNmNjIvYWE2M2E4YzAtYTE4Yy0z
NzI5LWJlOGYtNWYzMWFjZDg1YzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjE1MzJhZGItZWQ3ZC00M2JhLWE2
NmYtMmEzMzNmYjljZjYyLzYxNTMyYWRiLWVkN2QtNDNiYS1hNjZmLTJhMzMzZmI5
Y2Y2Mi5jcmwwHwYDVR0jBBgwFoAUyWUizQq8OtYAsr0X/ULCZsZFX80wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82MTUzMmFkYi1lZDdkLTQzYmEtYTY2Zi0yYTMz
M2ZiOWNmNjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyAzjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACLpUe8/r9gJe/0hsEnsBRlZB8RlAPLLoyuDq/rBlh1+AxCjI3SyDHsK
OeticfTlx55TXSvdXHGZn+/MGyxLH2z+75qnePEOTpe9SRCdhYUTdkA1uguHQORb
PMc5h0xHavROcpM8rP0JTARUQjvIqEsbQQKED47M4vnUu9WlXBMAUPDutNLVB8pO
33BvmrFMIE9IhbhmzYJCHGe7nNUAOrlZCQVThfBtvgQO93A9nC3t4DP/CKk9vliW
MDz0GmaR+Ji7n9ikng3+3qm5fzrOYmkdc0Xod4i3Nttv89Tk71Y5YVrdUq9XM5vq
aaJLVqar+gxuIOOTjbBiT95c6Lrhjho=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:22:03 2025 by rpki-client