Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1c8a0a-91d9-385c-94c6-29582b4f34cf.roa
File: cf1c8a0a-91d9-385c-94c6-29582b4f34cf.roa (raw, json)
Hash identifier: BKZ7hiTHXmBo8Z1boPJqLHnbPF4pvnicJICq0lyPqB0=
Subject key identifier: 24:A3:68:62:AC:84:2F:25:8D:72:C4:D2:10:9E:19:88:60:01:9D:B8
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285847EE7D50D941B61F9669D37960
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1c8a0a-91d9-385c-94c6-29582b4f34cf.roa
Signing time: Tue 19 Nov 2024 13:34:50 +0000
ROA not before: Tue 19 Nov 2024 13:34:50 +0000
ROA not after: Mon 17 Feb 2025 13:34:50 +0000
asID: 397204
IP address blocks: 216.168.228.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ee:7d:50:d9:41:b6:1f:96:69:d3:79:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Nov 19 13:34:50 2024 GMT
Not After : Feb 17 13:34:50 2025 GMT
Subject: CN=e61814ad-7994-4f61-8c80-c9831308a995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c4:15:da:27:75:15:fe:3d:1a:7b:f8:8c:f7:
60:a3:b8:ad:85:e9:c4:25:f3:c3:ec:6b:27:4a:f3:
bf:8a:11:98:3a:5f:3e:ba:ca:1f:60:3a:ac:ba:0e:
5e:13:96:b0:a1:e9:2b:f9:fd:f7:8e:ce:61:ef:d7:
29:cd:d0:b1:8a:b8:ad:67:8a:37:c8:0e:87:7b:ef:
74:97:9a:87:85:08:58:e7:4f:d8:0a:d0:c2:76:bc:
11:6e:87:76:a2:0b:35:eb:4a:b2:a0:03:d4:6d:3a:
24:c8:21:7c:a2:60:6c:cf:fc:e2:d3:fa:02:ab:6e:
35:21:3c:93:66:1d:bb:13:8e:9a:fe:51:62:01:52:
e4:30:cc:50:da:0d:cb:55:6c:db:8c:03:89:b8:e1:
53:94:16:92:e7:94:3d:67:78:63:e3:b1:bd:b5:2c:
50:a1:86:7c:c8:59:12:45:1e:d9:e1:a1:04:16:f5:
ff:32:01:6a:ab:bc:21:0d:32:f3:e3:dd:75:88:bf:
5f:41:5b:12:0c:26:2c:90:0c:d1:4d:f8:61:aa:39:
27:37:2b:e7:64:ee:15:00:f7:e8:b8:70:c0:9c:a0:
15:f6:be:5d:b5:4e:fb:a4:c6:72:bf:23:a2:c8:c2:
5b:3c:b0:da:1d:c3:9a:b1:ad:14:c5:62:72:79:7d:
68:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A3:68:62:AC:84:2F:25:8D:72:C4:D2:10:9E:19:88:60:01:9D:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1c8a0a-91d9-385c-94c6-29582b4f34cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.168.228.53/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:0b:53:ca:fc:35:16:de:0d:2c:cf:64:17:d0:d6:14:9a:c5:
38:ef:40:27:b8:20:35:5a:84:c2:5d:76:04:2a:74:a7:6a:a5:
46:e7:0a:a7:02:ed:d4:84:c4:8a:f7:c7:c5:0d:b7:ee:da:0e:
fb:37:f2:a0:10:cf:99:ca:9b:e3:a6:43:37:20:cc:d1:79:d4:
24:4d:1c:d2:54:71:ce:f4:59:61:ab:0e:e4:6f:fd:22:24:be:
d8:3e:c4:2f:d0:86:c0:e7:64:27:55:87:c4:c0:0b:fa:df:63:
0b:8f:78:99:ef:06:e9:ba:7f:dc:72:e4:4f:aa:71:82:b0:00:
1b:05:5b:7f:ce:9d:89:67:33:f1:f1:a6:e3:8b:cc:16:f5:5e:
21:79:bc:d4:4b:79:b7:e7:6d:19:b3:b2:65:d8:6d:f9:1e:49:
82:ae:8e:9f:f9:b0:88:25:1c:d8:2c:8f:6c:ae:51:69:99:3e:
d5:eb:aa:01:27:a4:2f:1f:b7:aa:6f:7d:e4:b2:49:c8:bf:d3:
fc:55:85:52:e2:03:97:f7:88:a4:3b:c1:70:68:7c:35:92:3f:
9d:0b:63:e1:99:a4:df:e4:5f:17:df:c7:33:cd:50:02:e7:85:
8a:6e:01:fe:83:53:03:03:1f:ed:04:ac:c7:eb:f6:dc:21:43:
11:4b:cf:27
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfufVDZQbYflmnTeWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI0MTExOTEzMzQ1MFoXDTI1MDIxNzEzMzQ1MFowLzEtMCsGA1UEAxMk
ZTYxODE0YWQtNzk5NC00ZjYxLThjODAtYzk4MzEzMDhhOTk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksQV2id1Ff49Gnv4jPdgo7ithenEJfPD7Gsn
SvO/ihGYOl8+usofYDqsug5eE5awoekr+f33js5h79cpzdCxiritZ4o3yA6He+90
l5qHhQhY50/YCtDCdrwRbod2ogs160qyoAPUbTokyCF8omBsz/zi0/oCq241ITyT
Zh27E46a/lFiAVLkMMxQ2g3LVWzbjAOJuOFTlBaS55Q9Z3hj47G9tSxQoYZ8yFkS
RR7Z4aEEFvX/MgFqq7whDTLz4911iL9fQVsSDCYskAzRTfhhqjknNyvnZO4VAPfo
uHDAnKAV9r5dtU77pMZyvyOiyMJbPLDaHcOasa0UxWJyeX1odQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCSjaGKshC8ljXLE0hCeGYhgAZ24MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2YxYzhhMGEtOTFkOS0z
ODVjLTk0YzYtMjk1ODJiNGYzNGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQALC1PK/DUW3g0sz2QX0NYUmsU470AnuCA1WoTCXXYEKnSnaqVG5wqn
Au3UhMSK98fFDbfu2g77N/KgEM+ZypvjpkM3IMzRedQkTRzSVHHO9Flhqw7kb/0i
JL7YPsQv0IbA52QnVYfEwAv632MLj3iZ7wbpun/ccuRPqnGCsAAbBVt/zp2JZzPx
8abji8wW9V4hebzUS3m3520Zs7Jl2G35HkmCro6f+bCIJRzYLI9srlFpmT7V66oB
J6QvH7eqb33ksknIv9P8VYVS4gOX94ikO8FwaHw1kj+dC2PhmaTf5F8X38czzVAC
54WKbgH+g1MDAx/tBKzH6/bcIUMRS88n
-----END CERTIFICATE-----
Generated at Fri May 9 04:04:57 2025 by rpki-client