Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/d94927e5-a2f6-3299-985c-46c7fb84a7aa.roa
File: d94927e5-a2f6-3299-985c-46c7fb84a7aa.roa (raw, json)
Hash identifier: DO4zBlt6kLL2UtsTmk7+/QJCJ4LqagigSTw9NJh9VTc=
Subject key identifier: 47:F4:41:0A:05:13:81:2B:66:0D:61:D4:F0:EB:D0:12:EA:84:8A:5C
Certificate issuer: /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial: 010D0C9F432858483F802B165C11714D3D7D76C0
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/d94927e5-a2f6-3299-985c-46c7fb84a7aa.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 174
IP address blocks: 63.161.124.0/22 maxlen: 22
2600:2:103::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:2b:16:5c:11:71:4d:3d:7d:76:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=b2a686a4-9a49-450d-95a4-bbeb0b67ab2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cd:3d:79:2a:26:41:1f:b8:f0:d5:bc:c3:82:
8d:e4:09:c8:fa:c1:1f:8c:13:2f:03:0f:13:b5:aa:
b4:06:21:ab:5e:ff:4d:4b:95:4f:87:ad:a6:2d:da:
1e:9a:cb:0b:0c:e0:7f:ce:11:d8:26:c9:a0:28:c7:
40:5f:62:37:d0:ac:e9:66:9e:c2:af:e3:62:74:c3:
64:5c:94:aa:d1:e1:29:6a:32:6f:51:ec:e0:2a:ff:
cf:e8:4c:7f:4b:cc:0a:ca:a7:e5:e3:8f:c7:20:be:
e7:1f:94:35:87:3c:83:7d:f3:90:a1:5a:2b:40:20:
df:33:20:b6:a1:a6:0d:c3:d3:71:77:0c:84:43:f6:
59:51:c6:1d:da:12:18:2f:ef:20:ba:d6:b4:d5:24:
62:a7:5a:1e:9d:af:54:e8:6f:1b:1c:58:c0:48:79:
1e:61:e9:72:49:9a:6e:44:05:86:2d:82:55:0e:d9:
c7:b8:9f:1d:76:ef:4b:bf:4b:65:d7:7b:9d:48:7c:
63:89:cb:2e:bb:cd:8c:68:99:21:13:8d:12:f2:9c:
f7:9e:88:60:1c:52:23:75:51:59:38:d5:df:6d:1e:
97:bd:fd:2f:64:ba:4f:33:3a:59:21:2a:c2:ef:1d:
32:f4:c8:14:58:57:bc:dc:ea:88:ef:0d:0b:47:2d:
0f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F4:41:0A:05:13:81:2B:66:0D:61:D4:F0:EB:D0:12:EA:84:8A:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/d94927e5-a2f6-3299-985c-46c7fb84a7aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
X509v3 Authority Key Identifier:
keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
sbgp-ipAddrBlock: critical
IPv4:
63.161.124.0/22
IPv6:
2600:2:103::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:85:a8:4d:ea:7c:fa:0e:2d:b1:aa:d1:1e:98:39:d1:c4:a7:
fb:92:f8:be:f5:7f:6b:da:e7:4d:9c:1e:ea:ec:8e:f3:41:b1:
e8:18:d5:aa:02:bd:3a:12:78:b6:46:55:da:dd:05:4f:9e:67:
5e:e5:09:1d:b6:e1:cf:13:3f:fd:24:c1:3d:d8:a2:4c:80:d1:
fa:02:b2:93:20:dd:12:ba:58:98:15:d8:e4:2d:83:14:31:c8:
fc:ef:ec:19:f0:5e:66:a9:9f:66:43:4c:78:4e:25:4f:ff:e2:
87:f2:fe:c9:46:2d:5b:c0:cd:69:e7:76:17:1c:c9:73:3a:04:
44:e4:41:16:e4:ba:d1:e1:06:d2:7a:54:69:ca:40:4f:91:57:
7a:3b:3b:65:3c:8e:2f:b3:c3:27:45:3a:f4:79:12:04:1e:f2:
f4:c5:dd:d8:e8:8b:99:60:7d:45:bc:94:4d:de:3c:ed:72:96:
41:11:54:d8:31:8c:9c:4f:bd:f5:44:73:ed:1b:8e:9f:7f:84:
e6:e9:8a:a0:16:d9:9a:51:c6:1d:57:f8:aa:2b:f6:3c:3a:d2:
08:cd:d6:1c:e3:28:72:32:5d:e1:c6:87:4d:cd:5a:4b:78:c5:
ca:c4:3c:70:a4:05:7e:11:40:3e:c2:74:34:64:11:46:ba:11:
23:51:8d:87
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEg/gCsWXBFxTT19dsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk
ZjZkMB4XDTI0MTIxODE0MDA1MloXDTI1MDMxODEzMDA1MlowLzEtMCsGA1UEAxMk
YjJhNjg2YTQtOWE0OS00NTBkLTk1YTQtYmJlYjBiNjdhYjJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAks09eSomQR+48NW8w4KN5AnI+sEfjBMvAw8T
taq0BiGrXv9NS5VPh62mLdoemssLDOB/zhHYJsmgKMdAX2I30KzpZp7Cr+NidMNk
XJSq0eEpajJvUezgKv/P6Ex/S8wKyqfl44/HIL7nH5Q1hzyDffOQoVorQCDfMyC2
oaYNw9NxdwyEQ/ZZUcYd2hIYL+8guta01SRip1oena9U6G8bHFjASHkeYelySZpu
RAWGLYJVDtnHuJ8ddu9Lv0tl13udSHxjicsuu82MaJkhE40S8pz3nohgHFIjdVFZ
ONXfbR6Xvf0vZLpPMzpZISrC7x0y9MgUWFe83OqI7w0LRy0PmwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFEf0QQoFE4ErZg1h1PDr0BLqhIpcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm
MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvZDk0OTI3ZTUtYTJmNi0z
Mjk5LTk4NWMtNDZjN2ZiODRhN2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw
MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy
ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy
ZWIyMmRmNmQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCP6F8MA8E
AgACMAkDBwAmAAACAQMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAU4WoTep8+g4tsarRHpg50cSn+5L4vvV/
a9rnTZwe6uyO80Gx6BjVqgK9OhJ4tkZV2t0FT55nXuUJHbbhzxM//STBPdiiTIDR
+gKykyDdErpYmBXY5C2DFDHI/O/sGfBeZqmfZkNMeE4lT//ih/L+yUYtW8DNaed2
FxzJczoERORBFuS60eEG0npUacpAT5FXejs7ZTyOL7PDJ0U69HkSBB7y9MXd2OiL
mWB9RbyUTd487XKWQRFU2DGMnE+99URz7RuOn3+E5umKoBbZmlHGHVf4qiv2PDrS
CM3WHOMocjJd4caHTc1aS3jFysQ8cKQFfhFAPsJ0NGQRRroRI1GNhw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:42:26 2025 by rpki-client