Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3fc9e8b3-35b0-3322-94d8-c662032786d6.roa
File: 3fc9e8b3-35b0-3322-94d8-c662032786d6.roa (raw, json)
Hash identifier: EAMF876MWhHWMI7HlVTjJQB4Fyh8fT+nk7FSNs+MqZs=
Subject key identifier: 8E:71:10:1A:81:FE:83:45:B2:46:6C:DE:4F:B7:56:0C:89:B0:30:8F
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584800AF81425D4DF234EDE55F00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3fc9e8b3-35b0-3322-94d8-c662032786d6.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 19893
IP address blocks: 128.121.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:81:42:5d:4d:f2:34:ed:e5:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=d70a10fe-e704-45f8-8b71-da9d8e4a7f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:af:23:cb:6d:f2:c1:43:90:a8:3d:15:30:8a:
94:b1:9c:6a:ce:2e:24:45:88:32:de:52:b4:88:84:
85:cf:a8:50:aa:d4:55:04:c4:56:68:a4:96:0f:81:
fc:a6:72:41:bf:be:6b:2f:55:ea:bf:ae:f8:b9:1a:
e4:54:2b:79:58:9c:56:2a:d0:eb:71:2f:b9:d1:44:
be:ba:45:dd:1a:fc:67:66:1f:93:1e:ed:c7:74:68:
42:6c:8e:cb:51:29:11:fa:fa:14:78:24:af:d1:86:
8b:69:56:41:2d:9f:d5:7e:df:5b:48:e9:6b:b7:cf:
e3:08:21:e6:70:33:69:77:ed:15:85:6d:4e:9d:78:
b8:6a:f1:2d:b7:03:52:bf:98:7c:4c:94:cd:a0:5c:
b5:31:0f:8e:db:4e:d4:96:e9:70:6b:bd:6d:32:33:
bb:4a:f2:25:a1:c4:0f:70:00:5e:ca:2b:e0:75:12:
42:9e:59:78:9e:e3:94:3e:15:80:09:df:d5:01:22:
53:73:fe:e0:82:55:2f:f0:ba:b2:a4:0d:b3:b3:2a:
d4:7d:34:37:3c:4e:e6:4b:6f:31:2f:7b:4e:ba:54:
3f:2e:0a:33:0d:7c:9b:e4:23:60:c1:50:a2:69:5e:
33:66:54:4d:51:eb:14:22:dd:fd:94:ed:2a:eb:be:
07:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:71:10:1A:81:FE:83:45:B2:46:6C:DE:4F:B7:56:0C:89:B0:30:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3fc9e8b3-35b0-3322-94d8-c662032786d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
128.121.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:c8:47:1d:ff:24:6b:81:d5:82:8f:ff:6b:43:64:3c:04:77:
74:f8:ab:f0:5e:79:fe:f4:0a:81:2f:38:1c:bc:3a:f7:0d:7e:
7f:24:b5:e3:1b:3c:57:5f:5a:f9:b9:b6:03:78:61:6f:1b:38:
09:73:d4:1b:5d:95:f7:3c:85:a5:14:41:15:61:ba:07:59:58:
f8:d7:1e:e0:70:29:9d:e6:0d:6b:f5:a6:f2:49:d7:a5:93:31:
ea:a7:59:43:07:0f:07:7b:1b:ef:92:7f:14:6e:23:85:8d:14:
fa:35:92:b8:62:a5:3c:dd:90:a6:d7:e6:08:dd:7b:1b:eb:68:
7d:2d:17:18:3c:2d:16:40:4f:e0:84:f5:49:ba:5f:04:e3:d7:
c6:53:e4:d6:af:6b:55:c7:44:3f:3c:33:d0:fc:ba:21:83:ad:
2c:27:85:69:78:63:4e:ca:26:4a:0e:43:20:f1:33:e6:b1:3d:
dd:58:dc:12:da:3d:32:32:ea:37:42:e6:3b:06:f4:9c:15:41:
f1:c8:2e:59:ee:27:00:1f:4c:15:90:67:3f:ae:4f:7b:1a:5d:
bb:58:21:47:13:90:22:d2:a0:fd:59:e0:20:3c:a1:2d:6c:e1:
92:79:d5:f2:98:33:44:9e:23:7d:92:ca:a1:86:5b:bb:65:5a:
1a:16:24:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgAr4FCXU3yNO3lXwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI0MTEyNjAyMDAyNloXDTI1MDIyNDAyMDAyNlowLzEtMCsGA1UEAxMk
ZDcwYTEwZmUtZTcwNC00NWY4LThiNzEtZGE5ZDhlNGE3Zjg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6q8jy23ywUOQqD0VMIqUsZxqzi4kRYgy3lK0
iISFz6hQqtRVBMRWaKSWD4H8pnJBv75rL1Xqv674uRrkVCt5WJxWKtDrcS+50US+
ukXdGvxnZh+THu3HdGhCbI7LUSkR+voUeCSv0YaLaVZBLZ/Vft9bSOlrt8/jCCHm
cDNpd+0VhW1OnXi4avEttwNSv5h8TJTNoFy1MQ+O207Ululwa71tMjO7SvIlocQP
cABeyivgdRJCnll4nuOUPhWACd/VASJTc/7gglUv8LqypA2zsyrUfTQ3PE7mS28x
L3tOulQ/LgozDXyb5CNgwVCiaV4zZlRNUesUIt39lO0q674HzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI5xEBqB/oNFskZs3k+3VgyJsDCPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2ZjOWU4YjMtMzViMC0z
MzIyLTk0ZDgtYzY2MjAzMjc4NmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgHkLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALPIRx3/JGuB1YKP/2tDZDwEd3T4q/Beef70CoEvOBy8OvcNfn8kteMb
PFdfWvm5tgN4YW8bOAlz1Btdlfc8haUUQRVhugdZWPjXHuBwKZ3mDWv1pvJJ16WT
MeqnWUMHDwd7G++SfxRuI4WNFPo1krhipTzdkKbX5gjdexvraH0tFxg8LRZAT+CE
9Um6XwTj18ZT5Nava1XHRD88M9D8uiGDrSwnhWl4Y07KJkoOQyDxM+axPd1Y3BLa
PTIy6jdC5jsG9JwVQfHILlnuJwAfTBWQZz+uT3saXbtYIUcTkCLSoP1Z4CA8oS1s
4ZJ51fKYM0SeI32SyqGGW7tlWhoWJIs=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:47:40 2025 by rpki-client