Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/27f91211-b4f1-3e7f-8965-9d2c4feba02e.roa
File: 27f91211-b4f1-3e7f-8965-9d2c4feba02e.roa (raw, json)
Hash identifier: lXvnh/CG51Kc1Ua1ZpX3wM7ncVbHGK6+OGMn04OgPcg=
Subject key identifier: 0C:E1:E6:D3:51:B3:2C:59:E2:A7:8C:C5:B4:E0:37:D6:F2:E6:D6:36
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F432858483E1AB0D5192367C201B4B620
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/27f91211-b4f1-3e7f-8965-9d2c4feba02e.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 2914
IP address blocks: 129.250.15.0/24 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:b0:d5:19:23:67:c2:01:b4:b6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=31d51700-8939-4f73-9b26-da5a596007f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:be:81:27:c3:ac:34:95:4d:31:0f:f9:4c:53:
db:1f:c4:b2:79:5d:a0:83:1e:cd:88:9b:5f:2c:46:
8a:90:d1:b9:45:50:9c:b0:1e:93:30:d9:66:e6:8f:
f3:dc:23:9f:d8:2a:22:4f:2e:ad:36:28:de:9e:c1:
f3:b3:ef:2c:58:95:c2:eb:08:8a:e8:db:5d:7f:d1:
4c:19:cd:9a:66:2c:aa:1b:6f:d4:ff:54:d4:68:24:
e0:32:c9:8b:3c:5d:51:60:18:c3:af:c5:cf:38:6c:
8b:b4:04:97:18:a4:a1:ef:dc:d9:8e:97:8b:6f:28:
0b:62:e3:04:c9:11:61:04:68:01:98:54:58:81:00:
87:35:21:3b:7c:60:62:f5:2e:a1:b2:7c:4e:44:a4:
ad:d2:2c:7b:af:62:f5:f8:04:0c:99:63:ad:5d:97:
c7:d3:b4:a4:ca:83:c4:eb:41:b6:b4:55:7c:ba:cc:
07:11:7c:43:70:42:40:32:68:b1:37:e1:50:a3:be:
9a:ce:a8:2d:7e:f4:12:19:5e:49:e7:a9:13:50:eb:
2d:98:9c:df:74:75:22:3e:41:5b:64:ff:87:91:a9:
86:ce:70:4a:c5:b0:47:ed:56:07:08:95:25:26:03:
1a:a8:30:53:f2:54:45:86:4c:7c:57:9d:7d:b3:39:
bb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E1:E6:D3:51:B3:2C:59:E2:A7:8C:C5:B4:E0:37:D6:F2:E6:D6:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/27f91211-b4f1-3e7f-8965-9d2c4feba02e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
129.250.15.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:f4:42:c4:3c:62:da:24:d2:53:38:35:56:59:a3:40:ca:11:
82:dc:54:5b:21:58:7f:f7:03:75:b0:33:fd:fb:42:88:e8:d0:
34:98:7e:d7:e8:54:9b:95:e4:bf:97:3d:73:be:f4:a2:f8:38:
5b:01:4c:ee:72:87:9d:42:48:94:ac:1e:32:f5:27:41:7d:59:
21:c0:41:0d:88:ef:e8:85:ed:f6:65:02:4b:66:35:8e:2c:a8:
97:ca:a0:9d:a9:71:87:f1:7c:a7:06:a9:1e:e2:cf:7a:d1:09:
72:87:15:45:76:82:6b:5c:d2:ff:1b:e4:3a:96:1d:9c:ed:4c:
1a:26:13:ba:f1:5e:a7:12:12:8e:f0:77:9e:f3:2d:93:ad:3c:
91:f9:28:ad:d8:13:6d:83:4c:5c:1e:ed:26:a6:6e:dc:43:97:
0c:1d:29:0e:1e:ba:26:a0:bf:f0:98:78:85:a5:06:c8:1f:c1:
2c:3c:88:fc:9d:32:00:10:f0:91:d6:00:ad:30:c5:c6:f4:8d:
a5:4f:3a:84:dd:a6:69:52:91:fe:84:4d:f4:36:7a:84:67:37:
31:8b:71:99:61:1e:57:00:3b:b3:d3:bb:f0:69:b2:35:78:8c:
b8:ef:3c:f5:6b:04:cc:98:1e:0b:dd:e7:24:bb:a6:c8:db:70:
f9:96:c5:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+GrDVGSNnwgG0tiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk
MzFkNTE3MDAtODkzOS00ZjczLTliMjYtZGE1YTU5NjAwN2Y1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhL6BJ8OsNJVNMQ/5TFPbH8SyeV2ggx7NiJtf
LEaKkNG5RVCcsB6TMNlm5o/z3COf2CoiTy6tNijensHzs+8sWJXC6wiK6Ntdf9FM
Gc2aZiyqG2/U/1TUaCTgMsmLPF1RYBjDr8XPOGyLtASXGKSh79zZjpeLbygLYuME
yRFhBGgBmFRYgQCHNSE7fGBi9S6hsnxORKSt0ix7r2L1+AQMmWOtXZfH07SkyoPE
60G2tFV8uswHEXxDcEJAMmixN+FQo76azqgtfvQSGV5J56kTUOstmJzfdHUiPkFb
ZP+HkamGznBKxbBH7VYHCJUlJgMaqDBT8lRFhkx8V519szm7TwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAzh5tNRsyxZ4qeMxbTgN9by5tY2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMjdmOTEyMTEtYjRmMS0z
ZTdmLTg5NjUtOWQyYzRmZWJhMDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgfoPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIr0QsQ8Ytok0lM4NVZZo0DKEYLcVFshWH/3A3WwM/37Qojo0DSYftfo
VJuV5L+XPXO+9KL4OFsBTO5yh51CSJSsHjL1J0F9WSHAQQ2I7+iF7fZlAktmNY4s
qJfKoJ2pcYfxfKcGqR7iz3rRCXKHFUV2gmtc0v8b5DqWHZztTBomE7rxXqcSEo7w
d57zLZOtPJH5KK3YE22DTFwe7SambtxDlwwdKQ4euiagv/CYeIWlBsgfwSw8iPyd
MgAQ8JHWAK0wxcb0jaVPOoTdpmlSkf6ETfQ2eoRnNzGLcZlhHlcAO7PTu/BpsjV4
jLjvPPVrBMyYHgvd5yS7psjbcPmWxZ0=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:44:03 2025 by rpki-client