Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3e7bf1ea-9808-4ea0-9e27-aa60b6545bea/14ccc2fd-be2b-3f8a-b1b8-b15d164db185.roa
File: 14ccc2fd-be2b-3f8a-b1b8-b15d164db185.roa (raw, json)
Hash identifier: hAXuWZLJibZG2PymLOfshJwTo3Nj0htrj/aplAWkAFg=
Subject key identifier: D2:7C:6E:E9:85:30:01:7C:89:2E:2B:E5:9E:36:8B:07:AB:7B:A0:9B
Certificate issuer: /CN=3e7bf1ea-9808-4ea0-9e27-aa60b6545bea
Certificate serial: 010D0C9F43285848424ACC6A9F03352824CE2880
Authority key identifier: B7:53:D8:EA:D2:4D:2F:27:FD:E8:77:9F:29:E3:5D:F9:3C:3A:AC:EE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3e7bf1ea-9808-4ea0-9e27-aa60b6545bea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3e7bf1ea-9808-4ea0-9e27-aa60b6545bea/14ccc2fd-be2b-3f8a-b1b8-b15d164db185.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 400274
IP address blocks: 192.101.46.0/24 maxlen: 24
2602:80d:2000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4a:cc:6a:9f:03:35:28:24:ce:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7bf1ea-9808-4ea0-9e27-aa60b6545bea
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=a45e3eb5-c051-423d-bf69-30c7b915f47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3a:69:8f:c0:5d:90:a2:e2:b7:d6:79:dd:e6:
8b:3c:53:10:6c:b1:db:d4:91:c0:af:9a:23:9d:f8:
23:f2:7d:54:83:f2:02:cd:c2:bb:72:e4:48:5a:e7:
dc:43:2a:e3:f8:ac:5a:8f:dc:ba:d1:54:49:c0:29:
40:d6:00:1d:46:8c:0c:32:63:e7:02:00:23:b2:66:
77:c1:33:6c:fd:01:2a:5e:55:05:e1:9d:aa:1d:73:
b7:89:22:e4:59:0d:b7:85:92:1c:1a:94:f9:63:ee:
6d:01:e8:14:84:79:cd:80:87:fa:ac:cc:bd:31:be:
6a:f1:19:c8:de:a5:48:67:96:42:c4:8d:ac:d7:70:
2a:77:2e:cf:39:da:de:e6:55:c8:d5:5d:a9:f2:1a:
d6:93:aa:68:00:80:f7:72:07:e7:d4:f8:6b:92:c7:
4d:1c:36:28:5d:16:fb:5d:95:25:6b:9f:1d:36:3c:
89:98:f4:05:0c:6e:45:52:33:0a:b4:34:4a:05:d6:
3d:db:60:bc:56:3a:1b:e5:ca:d5:87:7e:f6:cc:14:
48:40:46:49:40:25:d3:d4:5e:fa:d9:cd:f6:a7:fc:
ef:a8:87:ae:32:3f:ee:6a:5b:48:a0:f7:c4:95:a6:
e7:c8:37:26:64:89:0f:55:e9:aa:84:34:2d:60:d7:
5b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7C:6E:E9:85:30:01:7C:89:2E:2B:E5:9E:36:8B:07:AB:7B:A0:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3e7bf1ea-9808-4ea0-9e27-aa60b6545bea/14ccc2fd-be2b-3f8a-b1b8-b15d164db185.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3e7bf1ea-9808-4ea0-9e27-aa60b6545bea/3e7bf1ea-9808-4ea0-9e27-aa60b6545bea.crl
X509v3 Authority Key Identifier:
keyid:B7:53:D8:EA:D2:4D:2F:27:FD:E8:77:9F:29:E3:5D:F9:3C:3A:AC:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3e7bf1ea-9808-4ea0-9e27-aa60b6545bea.cer
sbgp-ipAddrBlock: critical
IPv4:
192.101.46.0/24
IPv6:
2602:80d:2000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:24:86:80:19:a3:f4:60:3d:4d:6f:39:66:73:8a:f9:93:15:
b5:3c:e2:5c:e7:1f:80:95:c7:91:89:8a:e4:39:95:c9:49:57:
ec:be:45:9a:31:93:c8:66:02:52:90:01:48:1c:58:34:47:ec:
80:fb:65:b3:10:de:3d:a4:fa:f9:40:1e:a5:b9:55:b6:66:c4:
a3:17:31:c3:f3:c1:a4:4b:59:72:93:91:a8:d9:ea:43:e1:d1:
f0:49:fa:90:dc:a4:d1:83:56:55:ce:9c:95:ad:d5:ea:16:24:
60:8b:03:c6:de:c4:06:67:01:e8:24:95:8d:f7:8e:39:0d:03:
82:df:5a:62:44:fb:07:ca:ea:01:49:b2:e7:4f:45:0d:20:f6:
90:37:b3:1a:99:b4:be:b4:36:85:7f:f8:93:22:5e:d8:ca:29:
f6:24:ad:65:95:d5:52:44:9e:e8:5f:01:d7:d3:ef:e0:f5:34:
86:c7:e6:5a:b7:ab:f1:bd:f9:6b:e1:d6:e8:9f:22:04:b3:77:
29:e0:f2:0c:0a:86:01:33:07:b8:93:bd:f9:ec:8e:0d:10:40:
98:e6:0c:de:21:2b:a4:7f:86:19:f7:5a:61:d0:80:1f:12:17:
4b:cc:81:47:e0:be:00:53:60:b0:5f:33:70:8f:c0:e0:be:d1:
3d:dc:e1:f4
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEhCSsxqnwM1KCTOKIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2U3YmYxZWEtOTgwOC00ZWEwLTllMjctYWE2MGI2NTQ1
YmVhMB4XDTI0MTIxOTE0MDA1MloXDTI1MDMxOTEzMDA1MlowLzEtMCsGA1UEAxMk
YTQ1ZTNlYjUtYzA1MS00MjNkLWJmNjktMzBjN2I5MTVmNDdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDppj8BdkKLit9Z53eaLPFMQbLHb1JHAr5oj
nfgj8n1Ug/ICzcK7cuRIWufcQyrj+Kxaj9y60VRJwClA1gAdRowMMmPnAgAjsmZ3
wTNs/QEqXlUF4Z2qHXO3iSLkWQ23hZIcGpT5Y+5tAegUhHnNgIf6rMy9Mb5q8RnI
3qVIZ5ZCxI2s13Aqdy7POdre5lXI1V2p8hrWk6poAID3cgfn1PhrksdNHDYoXRb7
XZUla58dNjyJmPQFDG5FUjMKtDRKBdY922C8Vjob5crVh372zBRIQEZJQCXT1F76
2c32p/zvqIeuMj/ualtIoPfElabnyDcmZIkPVemqhDQtYNdbUQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFNJ8bumFMAF8iS4r5Z42iwere6CbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zZTdi
ZjFlYS05ODA4LTRlYTAtOWUyNy1hYTYwYjY1NDViZWEvMTRjY2MyZmQtYmUyYi0z
ZjhhLWIxYjgtYjE1ZDE2NGRiMTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2U3YmYxZWEtOTgwOC00ZWEwLTll
MjctYWE2MGI2NTQ1YmVhLzNlN2JmMWVhLTk4MDgtNGVhMC05ZTI3LWFhNjBiNjU0
NWJlYS5jcmwwHwYDVR0jBBgwFoAUt1PY6tJNLyf96HefKeNd+Tw6rO4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zZTdiZjFlYS05ODA4LTRlYTAtOWUyNy1hYTYw
YjY1NDViZWEuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwGUuMA8E
AgACMAkDBwAmAggNIAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASySGgBmj9GA9TW85ZnOK+ZMVtTziXOcf
gJXHkYmK5DmVyUlX7L5FmjGTyGYCUpABSBxYNEfsgPtlsxDePaT6+UAepblVtmbE
oxcxw/PBpEtZcpORqNnqQ+HR8En6kNyk0YNWVc6cla3V6hYkYIsDxt7EBmcB6CSV
jfeOOQ0Dgt9aYkT7B8rqAUmy509FDSD2kDezGpm0vrQ2hX/4kyJe2Mop9iStZZXV
UkSe6F8B19Pv4PU0hsfmWrer8b35a+HW6J8iBLN3KeDyDAqGATMHuJO9+eyODRBA
mOYM3iErpH+GGfdaYdCAHxIXS8yBR+C+AFNgsF8zcI/A4L7RPdzh9A==
-----END CERTIFICATE-----
Generated at Mon Apr 28 18:05:05 2025 by rpki-client