Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/fc1659ce-b47d-3ad7-bbb7-1bbae556a23e.roa
File: fc1659ce-b47d-3ad7-bbb7-1bbae556a23e.roa (raw, json)
Hash identifier: nT7+GIxCH0aqJAsGwIvRm5VZ0iP2xM7kgc3jgGHi35U=
Subject key identifier: 3F:D3:8D:1B:E3:08:51:66:E8:54:87:71:9B:F5:D9:77:92:DA:80:E3
Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial: 010D0C9F432858480215064C8668B25E0A6C07F0
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/fc1659ce-b47d-3ad7-bbb7-1bbae556a23e.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 42
IP address blocks: 204.61.208.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:15:06:4c:86:68:b2:5e:0a:6c:07:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=fc954bde-b4fd-4a12-a4c9-074fa890a154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:26:7e:da:dd:59:d9:87:be:12:bb:96:4f:67:
b6:b6:2c:2c:7a:6a:ba:25:6b:c8:e6:48:6b:a4:45:
f2:03:fb:99:8a:f9:c6:37:52:76:fd:20:59:bb:b2:
dd:9f:fa:e1:7b:1d:08:07:b7:e1:bd:92:16:b2:b1:
32:0d:54:c2:76:2f:ee:63:83:1a:19:b0:21:a8:04:
b3:31:03:f6:bd:00:d3:b8:f6:e6:c0:51:0f:20:20:
47:96:a6:91:f2:f1:c0:07:e9:10:53:c0:80:1a:91:
d8:a0:6e:d1:c3:70:3b:85:87:24:e9:c9:54:1d:e7:
32:3e:80:7a:1c:1c:3f:fa:f3:f6:31:df:0d:97:b3:
51:39:35:da:e0:81:b7:2c:c1:ac:1d:2b:ac:c9:86:
20:80:f1:fc:22:c3:86:0f:04:e2:8d:17:a8:f9:e4:
20:e5:aa:5e:84:bb:ff:af:83:83:93:d6:a3:22:2d:
55:80:73:db:8f:9d:db:df:7f:c4:b2:7e:78:d0:62:
aa:f6:b3:b4:51:df:a4:70:dd:20:63:66:b9:ad:49:
02:10:97:90:65:0c:a5:a1:1d:c2:a3:12:5b:50:ed:
58:93:80:cc:38:b1:58:29:a4:0d:3e:ad:13:41:96:
1a:53:1e:86:75:51:62:01:71:38:03:87:ac:15:f8:
4f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D3:8D:1B:E3:08:51:66:E8:54:87:71:9B:F5:D9:77:92:DA:80:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/fc1659ce-b47d-3ad7-bbb7-1bbae556a23e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
X509v3 Authority Key Identifier:
keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
sbgp-ipAddrBlock: critical
IPv4:
204.61.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:37:16:1c:ca:f7:18:4a:94:3f:5e:85:82:88:1d:c3:e0:b9:
8d:89:8d:db:66:d8:2c:91:46:18:1e:fb:ff:21:c4:12:1b:7b:
37:3f:6d:a3:09:62:70:43:75:68:f5:63:7c:3b:bf:36:5f:91:
d1:7d:d2:23:6f:51:28:be:aa:ca:20:3f:6f:7d:69:02:e3:57:
d5:06:3b:b8:e6:50:1f:e9:45:34:e9:9a:2f:5f:02:22:57:75:
83:3d:7b:c2:eb:fd:6a:c9:11:a4:f5:8f:13:db:78:f3:63:16:
9e:aa:27:2c:fc:47:f1:14:9e:ab:5f:79:b2:b4:35:0f:d6:ff:
60:90:23:34:34:ea:c2:a8:f2:c9:b8:42:bf:c1:98:3e:45:a1:
e3:b5:a6:ec:24:9a:a1:16:96:54:2a:d0:41:bc:b6:26:67:4c:
54:0d:30:d2:32:8c:d1:67:4b:6f:5c:e6:c9:97:a1:2d:ab:30:
79:87:5f:98:39:8c:14:1c:6d:2b:5c:58:63:f6:52:60:87:9b:
bc:36:67:cd:01:8d:10:a0:de:8f:67:ec:a2:2e:28:b3:af:2d:
b5:5c:d8:64:66:67:5a:92:3d:53:cf:e3:5f:04:c6:2d:f1:aa:
07:50:30:7b:64:4a:ae:a3:89:96:ad:71:40:74:f2:c7:09:f8:
72:53:4e:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgCFQZMhmiyXgpsB/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3
MTAzMB4XDTI0MTEyNjE0MDAzOVoXDTI1MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk
ZmM5NTRiZGUtYjRmZC00YTEyLWE0YzktMDc0ZmE4OTBhMTU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyZ+2t1Z2Ye+EruWT2e2tiwsemq6JWvI5khr
pEXyA/uZivnGN1J2/SBZu7Ldn/rhex0IB7fhvZIWsrEyDVTCdi/uY4MaGbAhqASz
MQP2vQDTuPbmwFEPICBHlqaR8vHAB+kQU8CAGpHYoG7Rw3A7hYck6clUHecyPoB6
HBw/+vP2Md8Nl7NROTXa4IG3LMGsHSusyYYggPH8IsOGDwTijReo+eQg5apehLv/
r4ODk9ajIi1VgHPbj53b33/Esn540GKq9rO0Ud+kcN0gY2a5rUkCEJeQZQyloR3C
oxJbUO1Yk4DMOLFYKaQNPq0TQZYaUx6GdVFiAXE4A4esFfhPbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD/TjRvjCFFm6FSHcZv12XeS2oDjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy
NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvZmMxNjU5Y2UtYjQ3ZC0z
YWQ3LWJiYjctMWJiYWU1NTZhMjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4
ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj
NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2
MGRlYzcxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzD3QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD83FhzK9xhKlD9ehYKIHcPguY2Jjdtm2CyRRhge+/8hxBIbezc/baMJ
YnBDdWj1Y3w7vzZfkdF90iNvUSi+qsogP299aQLjV9UGO7jmUB/pRTTpmi9fAiJX
dYM9e8Lr/WrJEaT1jxPbePNjFp6qJyz8R/EUnqtfebK0NQ/W/2CQIzQ06sKo8sm4
Qr/BmD5FoeO1puwkmqEWllQq0EG8tiZnTFQNMNIyjNFnS29c5smXoS2rMHmHX5g5
jBQcbStcWGP2UmCHm7w2Z80BjRCg3o9n7KIuKLOvLbVc2GRmZ1qSPVPP418Exi3x
qgdQMHtkSq6jiZatcUB08scJ+HJTTgA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:46:06 2025 by rpki-client