Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cb3ec4c0-66c3-3625-ae3a-36a1ac356b85.roa
File: cb3ec4c0-66c3-3625-ae3a-36a1ac356b85.roa (raw, json)
Hash identifier: 9Au1JTHe4QlCn4ujK7QyUOtyGLaMKI2OCoyoQiTOhNc=
Subject key identifier: B4:0E:29:AE:09:BE:73:8B:31:09:E7:0A:25:1B:11:42:25:34:A9:1A
Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial: 010D0C9F4328584847E02844769F259CB6EF4280
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cb3ec4c0-66c3-3625-ae3a-36a1ac356b85.roa
Signing time: Sat 21 Dec 2024 14:00:52 +0000
ROA not before: Sat 21 Dec 2024 14:00:52 +0000
ROA not after: Fri 21 Mar 2025 13:00:52 +0000
asID: 1239
IP address blocks: 68.24.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:47:e0:28:44:76:9f:25:9c:b6:ef:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Validity
Not Before: Dec 21 14:00:52 2024 GMT
Not After : Mar 21 13:00:52 2025 GMT
Subject: CN=1fd493ba-7255-4644-a5b9-a98d47d80fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:47:5d:98:d3:5f:f2:e8:2d:52:95:ca:b3:d8:
b1:21:7e:97:61:e0:b2:41:a9:ad:7a:62:f2:88:37:
11:12:8a:c4:a5:a3:b4:4f:87:88:ef:08:31:22:7d:
d5:db:4c:9f:18:30:e5:32:55:a0:f1:37:1f:3b:f3:
27:9a:a1:ee:71:5d:d9:cc:92:7a:cc:1b:14:5e:eb:
0b:1f:58:70:f1:15:23:f6:66:f3:f3:87:6d:d3:0f:
e8:d9:7b:78:f9:ee:b0:c7:ab:ae:d6:eb:ad:3d:74:
29:a8:72:c5:02:a3:c1:66:53:07:02:1c:46:32:07:
6a:d2:42:19:ab:c3:79:ef:e7:5d:64:d4:f4:90:06:
8e:88:0f:b1:2f:bc:2e:06:02:bd:59:e2:73:04:22:
e8:11:87:f4:21:2d:c1:a3:59:5a:6c:54:d8:67:0f:
35:17:15:0d:b4:e6:56:27:cb:f7:5d:56:c1:51:f8:
c7:be:e0:bc:d9:b1:9c:50:56:85:80:d2:32:c2:e2:
dd:b4:b6:bb:1f:21:6b:d7:2a:ce:86:1b:0e:06:a0:
ef:9f:14:78:1a:3a:81:e2:6e:de:53:3f:4c:a1:0b:
3d:14:9f:f6:c7:82:ed:23:d4:7c:9c:2d:ad:c3:73:
23:86:9d:02:c6:9a:83:90:26:90:11:f0:4e:21:27:
d6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0E:29:AE:09:BE:73:8B:31:09:E7:0A:25:1B:11:42:25:34:A9:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cb3ec4c0-66c3-3625-ae3a-36a1ac356b85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
X509v3 Authority Key Identifier:
keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
sbgp-ipAddrBlock: critical
IPv4:
68.24.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
dd:d3:b1:b7:b6:98:2d:96:c8:7f:2f:a0:89:12:b7:f7:6a:fe:
dc:02:d9:79:45:0e:1a:65:19:a0:38:ce:81:b5:45:92:19:56:
4e:fd:1a:a2:a1:b5:ca:fe:57:d1:9f:0c:1b:b3:3a:00:f8:ac:
5b:4c:4d:93:1e:60:63:87:1c:a1:83:67:a5:89:aa:97:b0:7b:
cb:85:04:83:e3:c6:e5:c5:67:4c:16:fc:54:66:f7:72:47:1c:
7f:dc:b9:23:d2:e6:0c:0e:cd:86:f6:cd:4d:ef:a0:ff:39:a7:
7b:5a:ef:df:5e:29:81:b8:d4:ed:99:e4:41:38:fc:0b:e6:e2:
f0:56:9e:57:cd:7d:ea:e4:40:0a:17:94:49:9d:60:af:d1:f1:
60:24:08:b2:c1:85:d3:d3:93:80:02:56:33:0d:ba:d0:d5:44:
df:0c:ba:d9:35:87:63:7c:58:2d:1b:0f:db:5e:88:87:ee:5c:
2d:d8:8c:e7:13:22:3a:dc:b9:fa:b7:77:69:a4:54:f1:c9:e4:
2c:dc:c4:a9:2c:64:44:c2:3d:8f:a9:4b:1c:98:70:18:86:c2:
e1:53:2e:7c:7e:c2:0b:da:1a:7c:af:e3:45:e9:0a:cc:d9:5a:
5e:6a:c0:ad:df:34:5f:9c:6e:19:8c:2d:3b:ac:27:85:75:96:
7d:55:b5:99
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEhH4ChEdp8lnLbvQoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm
MGMzMB4XDTI0MTIyMTE0MDA1MloXDTI1MDMyMTEzMDA1MlowLzEtMCsGA1UEAxMk
MWZkNDkzYmEtNzI1NS00NjQ0LWE1YjktYTk4ZDQ3ZDgwZmJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUddmNNf8ugtUpXKs9ixIX6XYeCyQamtemLy
iDcREorEpaO0T4eI7wgxIn3V20yfGDDlMlWg8TcfO/MnmqHucV3ZzJJ6zBsUXusL
H1hw8RUj9mbz84dt0w/o2Xt4+e6wx6uu1uutPXQpqHLFAqPBZlMHAhxGMgdq0kIZ
q8N57+ddZNT0kAaOiA+xL7wuBgK9WeJzBCLoEYf0IS3Bo1labFTYZw81FxUNtOZW
J8v3XVbBUfjHvuC82bGcUFaFgNIywuLdtLa7HyFr1yrOhhsOBqDvnxR4GjqB4m7e
Uz9MoQs9FJ/2x4LtI9R8nC2tw3Mjhp0CxpqDkCaQEfBOISfWCwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLQOKa4JvnOLMQnnCiUbEUIlNKkaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm
MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvY2IzZWM0YzAtNjZjMy0z
NjI1LWFlM2EtMzZhMWFjMzU2Yjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk
OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl
ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi
ZjVjZWYwYzMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDRBgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEA3dOxt7aYLZbIfy+giRK392r+3ALZeUUOGmUZoDjOgbVFkhlWTv0aoqG1
yv5X0Z8MG7M6APisW0xNkx5gY4ccoYNnpYmql7B7y4UEg+PG5cVnTBb8VGb3ckcc
f9y5I9LmDA7NhvbNTe+g/zmne1rv314pgbjU7ZnkQTj8C+bi8FaeV8196uRACheU
SZ1gr9HxYCQIssGF09OTgAJWMw260NVE3wy62TWHY3xYLRsP216Ih+5cLdiM5xMi
Oty5+rd3aaRU8cnkLNzEqSxkRMI9j6lLHJhwGIbC4VMufH7CC9oafK/jRekKzNla
XmrArd80X5xuGYwtO6wnhXWWfVW1mQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:32:17 2025 by rpki-client