Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/ce4d1c8d-ee6d-3784-9fc8-ae9d4c245bd8.roa
File: ce4d1c8d-ee6d-3784-9fc8-ae9d4c245bd8.roa (raw, json)
Hash identifier: JYWKv8OgrfKj0PLNtYrlx/RWN3UyXLjErBhVeCyYYUI=
Subject key identifier: 27:ED:FD:33:64:8D:DA:85:E1:A5:67:C7:EC:2F:F8:24:2C:E5:52:9F
Certificate issuer: /CN=4b2ad884-5960-46cd-bf60-910c222c8cfc
Certificate serial: 010D0C9F432858485F9AE53DA254593F2818D400
Authority key identifier: 39:6E:8F:38:F6:0D:E5:AE:A9:FC:82:8E:9F:82:C6:52:BF:D9:F1:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/ce4d1c8d-ee6d-3784-9fc8-ae9d4c245bd8.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 376
IP address blocks: 204.19.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:e5:3d:a2:54:59:3f:28:18:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2ad884-5960-46cd-bf60-910c222c8cfc
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=b8a819b2-58e8-4103-bdae-cbeb891a606c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a7:3d:a9:24:9e:91:d6:f1:82:cc:67:57:7a:
f2:a2:ec:dc:91:eb:4e:76:cd:b8:6e:fb:74:da:63:
52:6f:de:e8:d4:4c:96:9e:9b:78:1c:09:29:d5:23:
69:06:7f:0e:a3:6f:b7:2d:e4:8b:95:88:9e:1b:6d:
44:71:05:76:d6:21:48:6a:b1:ef:3d:aa:f8:93:c2:
63:26:18:3a:b3:e0:bb:ec:51:3f:1b:b7:41:5a:18:
c2:f1:45:25:a8:42:99:86:59:8b:9b:ab:65:47:ed:
96:e3:f7:af:db:02:8c:e5:5d:d2:9a:2c:4b:36:00:
b3:98:31:97:c1:05:da:1a:4d:68:79:77:e2:bf:65:
ad:33:97:be:80:b3:b9:b1:5b:35:db:a6:dc:41:ed:
93:a6:fa:2a:36:6d:9b:c6:73:a4:33:4b:08:34:95:
4d:91:6b:0f:df:e0:97:4e:af:cf:1b:ed:ef:d3:59:
58:01:b5:2e:a2:2e:59:c9:2e:37:59:2e:93:3f:59:
fe:7c:3f:26:b0:b3:82:1c:c7:ce:73:3e:96:e5:09:
78:71:e2:c3:51:d8:23:04:03:f2:94:48:ca:db:72:
47:ea:24:09:15:c7:53:bb:0f:07:f5:03:bb:0e:a5:
35:bc:bf:ef:78:56:a2:95:f6:cb:ed:4a:05:58:18:
ed:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:ED:FD:33:64:8D:DA:85:E1:A5:67:C7:EC:2F:F8:24:2C:E5:52:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/ce4d1c8d-ee6d-3784-9fc8-ae9d4c245bd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/4b2ad884-5960-46cd-bf60-910c222c8cfc.crl
X509v3 Authority Key Identifier:
keyid:39:6E:8F:38:F6:0D:E5:AE:A9:FC:82:8E:9F:82:C6:52:BF:D9:F1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc.cer
sbgp-ipAddrBlock: critical
IPv4:
204.19.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:06:3a:85:20:66:82:10:f8:83:d6:24:12:69:94:08:d2:89:
ef:58:9c:68:11:36:6a:bf:38:c8:ad:e7:d2:98:12:58:0f:fe:
43:87:b8:cc:eb:9f:c2:d1:4a:38:0b:d3:93:24:a3:ae:88:3d:
47:e0:a2:78:8b:b6:8b:7f:04:91:a1:19:7a:12:23:88:f5:da:
fa:58:7d:f9:af:26:04:fb:7a:ab:4e:2a:13:31:82:24:45:ce:
cb:2b:cc:48:76:38:fe:02:d1:d2:2e:c0:c3:1c:39:ba:06:50:
ae:1a:4b:ac:f0:ca:23:4a:f0:80:0c:3b:54:7b:2f:02:96:d4:
99:80:7d:41:f0:36:c4:1d:10:18:f6:12:73:5e:ce:96:4a:c8:
3e:3b:ed:e8:9f:43:12:ab:0e:7f:db:c0:de:46:e3:69:94:8c:
30:f5:0a:c0:0d:1b:b9:e1:e5:65:a7:7c:d3:6f:bd:0a:30:69:
c9:f4:9d:e6:12:6c:98:88:47:47:ca:26:a1:cf:6d:a0:9c:1f:
c6:cd:fa:6f:4e:25:20:b6:ab:74:5e:e0:29:cf:8b:1d:20:26:
9b:46:19:19:17:ba:1f:ad:94:c8:5b:3a:1f:14:97:f8:60:8e:
c8:fd:79:a1:48:47:eb:d4:38:69:88:fd:05:bf:24:a8:b3:1c:
e6:13:ba:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhfmuU9olRZPygY1AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGIyYWQ4ODQtNTk2MC00NmNkLWJmNjAtOTEwYzIyMmM4
Y2ZjMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk
YjhhODE5YjItNThlOC00MTAzLWJkYWUtY2JlYjg5MWE2MDZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvac9qSSekdbxgsxnV3ryouzcketOds24bvt0
2mNSb97o1EyWnpt4HAkp1SNpBn8Oo2+3LeSLlYieG21EcQV21iFIarHvPar4k8Jj
Jhg6s+C77FE/G7dBWhjC8UUlqEKZhlmLm6tlR+2W4/ev2wKM5V3SmixLNgCzmDGX
wQXaGk1oeXfiv2WtM5e+gLO5sVs126bcQe2TpvoqNm2bxnOkM0sINJVNkWsP3+CX
Tq/PG+3v01lYAbUuoi5ZyS43WS6TP1n+fD8msLOCHMfOcz6W5Ql4ceLDUdgjBAPy
lEjK23JH6iQJFcdTuw8H9QO7DqU1vL/veFailfbL7UoFWBjtWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCft/TNkjdqF4aVnx+wv+CQs5VKfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YjJh
ZDg4NC01OTYwLTQ2Y2QtYmY2MC05MTBjMjIyYzhjZmMvY2U0ZDFjOGQtZWU2ZC0z
Nzg0LTlmYzgtYWU5ZDRjMjQ1YmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGIyYWQ4ODQtNTk2MC00NmNkLWJm
NjAtOTEwYzIyMmM4Y2ZjLzRiMmFkODg0LTU5NjAtNDZjZC1iZjYwLTkxMGMyMjJj
OGNmYy5jcmwwHwYDVR0jBBgwFoAUOW6POPYN5a6p/IKOn4LGUr/Z8YIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80YjJhZDg4NC01OTYwLTQ2Y2QtYmY2MC05MTBj
MjIyYzhjZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBMqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJwGOoUgZoIQ+IPWJBJplAjSie9YnGgRNmq/OMit59KYElgP/kOHuMzr
n8LRSjgL05Mko66IPUfgoniLtot/BJGhGXoSI4j12vpYffmvJgT7eqtOKhMxgiRF
zssrzEh2OP4C0dIuwMMcOboGUK4aS6zwyiNK8IAMO1R7LwKW1JmAfUHwNsQdEBj2
EnNezpZKyD477eifQxKrDn/bwN5G42mUjDD1CsANG7nh5WWnfNNvvQowacn0neYS
bJiIR0fKJqHPbaCcH8bN+m9OJSC2q3Re4CnPix0gJptGGRkXuh+tlMhbOh8Ul/hg
jsj9eaFIR+vUOGmI/QW/JKizHOYTutU=
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:40:45 2025 by rpki-client