Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ca7a5fe9-608d-3970-8ae9-c116ae955da7.roa
File: ca7a5fe9-608d-3970-8ae9-c116ae955da7.roa (raw, json)
Hash identifier: Ar7OeNrM/uwwFt+rggQiAOZ6tYuwXAAAeMxhGPXMlJc=
Subject key identifier: F0:83:B0:24:DC:77:E5:AE:8A:C9:D1:8F:3D:C9:3B:D5:09:D3:4E:EA
Certificate issuer: /CN=4be3aeb5-b99c-47c1-984f-7f6b2621da46
Certificate serial: 010D0C9F4328584845158B45E4274B38445B24C0
Authority key identifier: C5:82:C3:C0:D3:9F:A5:3A:EF:63:32:1D:DF:27:B1:F9:D8:5A:3A:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ca7a5fe9-608d-3970-8ae9-c116ae955da7.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 397287
IP address blocks: 72.21.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:8b:45:e4:27:4b:38:44:5b:24:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be3aeb5-b99c-47c1-984f-7f6b2621da46
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=e164b906-f6df-4c5e-935d-51c6c3386533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:59:de:c4:35:9d:35:4a:a8:01:66:df:57:1d:
8a:77:5f:fb:db:41:16:a8:29:11:2a:6e:da:a3:a4:
a4:f8:08:cd:67:6a:3f:64:c3:ff:5e:84:55:97:e6:
e3:f7:05:6a:47:87:09:dd:b6:cf:1c:1b:8e:81:b4:
82:ea:01:f1:9f:81:59:59:64:a2:94:2a:30:1c:28:
7e:c9:2f:9a:69:69:8a:c0:d6:0a:a0:a7:f2:4c:8e:
1f:47:fb:ce:c0:b7:82:06:33:a7:21:d7:cb:29:92:
a8:c8:e0:b7:f5:6e:56:e6:6d:dd:33:e9:ae:0a:f2:
b4:0c:c1:f6:a7:92:8a:c3:82:55:d2:18:75:d8:c3:
b3:bc:41:f4:bd:ed:9a:01:fc:f3:2c:86:1b:bb:e4:
0d:cc:05:5c:63:dc:4a:2a:0f:34:f7:c5:5b:4b:2b:
f8:fb:b6:9a:0a:e4:36:b6:30:ca:9f:01:55:c6:a7:
b4:9a:7d:31:11:d9:82:8a:47:1d:3f:d7:a0:58:02:
ee:69:c1:97:07:9e:b2:5b:ae:e4:01:5b:db:86:5b:
a3:93:65:11:ca:57:be:99:62:22:1b:01:04:ca:56:
c3:c8:39:7e:4c:6b:36:2f:e1:f3:d0:be:7b:0d:00:
f4:5d:1b:32:a1:03:c3:f2:7e:31:05:8c:c0:e3:49:
f5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:83:B0:24:DC:77:E5:AE:8A:C9:D1:8F:3D:C9:3B:D5:09:D3:4E:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ca7a5fe9-608d-3970-8ae9-c116ae955da7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.crl
X509v3 Authority Key Identifier:
keyid:C5:82:C3:C0:D3:9F:A5:3A:EF:63:32:1D:DF:27:B1:F9:D8:5A:3A:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer
sbgp-ipAddrBlock: critical
IPv4:
72.21.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:92:83:21:75:36:09:eb:93:66:ed:12:05:90:9f:50:6c:b5:
f9:a5:02:56:2e:41:7d:22:73:a4:86:dd:6c:f6:d1:42:bf:d2:
08:4a:94:c6:f2:19:b2:2e:8a:32:f3:17:25:a8:79:1b:d0:bb:
cb:7a:4f:3c:a0:a9:7e:e1:15:a2:07:fb:4c:1a:c3:67:1a:b0:
f5:4c:a9:63:b4:de:6e:4e:fd:21:86:ab:bd:44:d8:2f:eb:40:
a4:40:2c:fd:1a:c7:74:a4:a3:00:87:65:2a:f6:a0:e0:52:2f:
fe:1f:62:ab:28:53:b9:d5:0d:30:6b:76:ce:76:93:0b:46:90:
89:90:f0:9d:08:7c:d5:1a:95:7a:46:4a:e8:e0:1b:9b:00:fb:
d2:10:c7:30:d9:df:be:dc:d5:bb:02:ee:a2:40:b3:f0:4e:22:
f1:bc:7d:4e:90:7f:fd:ef:10:cb:21:06:d6:d6:ed:c1:7d:b8:
24:75:71:78:a3:1e:9b:26:1f:77:10:6e:c3:03:69:bc:ed:c6:
e1:ec:e5:20:7d:14:25:49:05:26:4e:26:b3:e0:f8:ca:41:93:
3a:34:23:ea:57:a5:8a:83:b8:29:de:5d:70:cd:30:ba:99:08:
c9:d9:cd:3c:4e:b3:87:44:51:9c:ff:ad:d5:4e:00:2e:69:34:
17:1c:6c:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhFFYtF5CdLOERbJMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGJlM2FlYjUtYjk5Yy00N2MxLTk4NGYtN2Y2YjI2MjFk
YTQ2MB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk
ZTE2NGI5MDYtZjZkZi00YzVlLTkzNWQtNTFjNmMzMzg2NTMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplnexDWdNUqoAWbfVx2Kd1/720EWqCkRKm7a
o6Sk+AjNZ2o/ZMP/XoRVl+bj9wVqR4cJ3bbPHBuOgbSC6gHxn4FZWWSilCowHCh+
yS+aaWmKwNYKoKfyTI4fR/vOwLeCBjOnIdfLKZKoyOC39W5W5m3dM+muCvK0DMH2
p5KKw4JV0hh12MOzvEH0ve2aAfzzLIYbu+QNzAVcY9xKKg8098VbSyv4+7aaCuQ2
tjDKnwFVxqe0mn0xEdmCikcdP9egWALuacGXB56yW67kAVvbhlujk2URyle+mWIi
GwEEylbDyDl+TGs2L+Hz0L57DQD0XRsyoQPD8n4xBYzA40n1LQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPCDsCTcd+WuisnRjz3JO9UJ007qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YmUz
YWViNS1iOTljLTQ3YzEtOTg0Zi03ZjZiMjYyMWRhNDYvY2E3YTVmZTktNjA4ZC0z
OTcwLThhZTktYzExNmFlOTU1ZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGJlM2FlYjUtYjk5Yy00N2MxLTk4
NGYtN2Y2YjI2MjFkYTQ2LzRiZTNhZWI1LWI5OWMtNDdjMS05ODRmLTdmNmIyNjIx
ZGE0Ni5jcmwwHwYDVR0jBBgwFoAUxYLDwNOfpTrvYzId3yex+dhaOgQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80YmUzYWViNS1iOTljLTQ3YzEtOTg0Zi03ZjZi
MjYyMWRhNDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBUXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEWSgyF1Ngnrk2btEgWQn1BstfmlAlYuQX0ic6SG3Wz20UK/0ghKlMby
GbIuijLzFyWoeRvQu8t6TzygqX7hFaIH+0waw2casPVMqWO03m5O/SGGq71E2C/r
QKRALP0ax3SkowCHZSr2oOBSL/4fYqsoU7nVDTBrds52kwtGkImQ8J0IfNUalXpG
SujgG5sA+9IQxzDZ377c1bsC7qJAs/BOIvG8fU6Qf/3vEMshBtbW7cF9uCR1cXij
HpsmH3cQbsMDabztxuHs5SB9FCVJBSZOJrPg+MpBkzo0I+pXpYqDuCneXXDNMLqZ
CMnZzTxOs4dEUZz/rdVOAC5pNBccbHQ=
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:25:44 2025 by rpki-client