Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/22eb73ec-b415-3bc1-9d15-13db833fbec4.roa
File: 22eb73ec-b415-3bc1-9d15-13db833fbec4.roa (raw, json)
Hash identifier: nj+JlpcW+LxUB/a2/0GM5+kzN4gTOZ3OGmd7F/Cs2CM=
Subject key identifier: 29:6F:C1:03:A5:F6:77:EB:21:97:00:73:DB:AD:D5:4B:43:27:44:FF
Certificate issuer: /CN=530ba529-ac94-44aa-8a24-334da5fccb1e
Certificate serial: 010D0C9F432858484EDACBA947A865C3D5C19320
Authority key identifier: E2:70:AF:2A:32:F0:30:09:13:CF:91:AB:C2:55:00:27:FA:B8:C1:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/22eb73ec-b415-3bc1-9d15-13db833fbec4.roa
Signing time: Tue 24 Dec 2024 02:00:38 +0000
ROA not before: Tue 24 Dec 2024 02:00:38 +0000
ROA not after: Mon 24 Mar 2025 01:00:38 +0000
asID: 22169
IP address blocks: 204.10.136.0/24 maxlen: 24
216.239.128.0/24 maxlen: 24
2607:fe90:8000::/48 maxlen: 48
2607:fe90:8001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4e:da:cb:a9:47:a8:65:c3:d5:c1:93:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=530ba529-ac94-44aa-8a24-334da5fccb1e
Validity
Not Before: Dec 24 02:00:38 2024 GMT
Not After : Mar 24 01:00:38 2025 GMT
Subject: CN=b284377e-02d3-4264-beb7-3061fa8dff4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9b:b7:c6:11:5a:b9:50:49:f9:7f:81:63:c8:
30:cc:8e:28:95:1f:ef:fc:97:e6:69:98:a4:50:7b:
c3:de:cc:e4:25:d1:b8:79:62:a7:b8:27:9e:77:af:
b2:8f:56:89:68:f1:6b:d6:82:36:0c:5f:c3:62:4f:
df:e5:e6:f4:6a:90:2c:12:c5:36:ae:76:30:73:bc:
92:22:3e:da:9d:7d:f6:6e:08:2d:2b:aa:6d:79:92:
49:7d:f4:b6:ad:6d:b8:49:4a:e8:42:9b:92:a9:df:
0b:93:2a:3f:84:79:63:23:6f:5c:03:a3:ef:5d:d3:
2c:db:99:b6:7f:c7:27:85:d3:5d:4d:a4:07:bd:01:
52:59:4c:ec:09:df:5d:1d:21:ff:dd:ed:2d:61:c9:
1f:c1:67:66:6f:9c:3e:b8:1d:b7:00:ee:e6:e6:c8:
74:bc:03:7a:8d:53:c3:db:0c:3a:81:d7:28:02:7a:
16:75:bc:b0:f8:65:6e:a4:1d:55:87:ac:6e:29:2b:
70:2e:64:56:2c:39:e2:6f:fa:1f:51:b7:ce:60:75:
d3:88:5e:f9:e6:ad:fe:8c:85:cd:c1:15:f3:43:b4:
c6:bb:ac:39:50:61:9a:9a:63:bc:8a:49:0c:5f:1b:
34:ac:f7:b2:07:db:52:c3:27:93:c6:b8:19:08:27:
c4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6F:C1:03:A5:F6:77:EB:21:97:00:73:DB:AD:D5:4B:43:27:44:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/22eb73ec-b415-3bc1-9d15-13db833fbec4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.crl
X509v3 Authority Key Identifier:
keyid:E2:70:AF:2A:32:F0:30:09:13:CF:91:AB:C2:55:00:27:FA:B8:C1:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer
sbgp-ipAddrBlock: critical
IPv4:
204.10.136.0/24
216.239.128.0/24
IPv6:
2607:fe90:8000::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:c9:cf:7e:21:dc:5d:6a:53:61:cd:8c:07:f7:de:d9:45:a9:
52:88:65:13:5b:48:01:b3:f4:04:0a:99:a1:55:8b:67:01:32:
73:06:c2:14:9b:73:8e:cc:95:72:01:fe:85:17:15:be:13:ed:
e0:3d:20:78:0d:42:7b:60:f9:b2:09:99:9e:5b:89:aa:2f:d9:
e5:7f:58:1d:4f:e4:f4:5c:fc:e4:c9:03:26:be:45:22:27:07:
00:92:a1:e5:0c:e3:3c:84:c0:4f:e0:c9:f1:4f:98:3b:a6:62:
ae:4c:c5:33:2d:20:f6:02:7f:0c:38:4d:4e:7b:93:e2:86:89:
b4:7a:42:65:70:df:d4:ef:25:dc:87:f1:ae:6c:e2:88:8e:63:
d2:4a:b0:17:e0:bf:60:b9:ef:ef:00:1c:af:85:83:56:aa:5a:
16:18:71:7a:6e:17:d2:1e:0c:7a:76:93:a6:fc:59:02:12:0c:
ca:59:e8:bc:9d:93:15:cd:b5:0e:0f:0b:e3:f9:1f:66:15:da:
16:7d:c1:8d:92:d9:3e:14:64:4e:dc:55:f8:ab:90:23:a3:37:
b2:4b:07:d9:a2:17:2c:17:3f:17:28:a9:88:08:e6:40:29:a2:
21:db:71:8f:d1:29:38:76:df:85:37:64:bc:74:46:0f:62:5a:
d6:c5:39:0e
-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEhO2supR6hlw9XBkyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTMwYmE1MjktYWM5NC00NGFhLThhMjQtMzM0ZGE1ZmNj
YjFlMB4XDTI0MTIyNDAyMDAzOFoXDTI1MDMyNDAxMDAzOFowLzEtMCsGA1UEAxMk
YjI4NDM3N2UtMDJkMy00MjY0LWJlYjctMzA2MWZhOGRmZjRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZu3xhFauVBJ+X+BY8gwzI4olR/v/JfmaZik
UHvD3szkJdG4eWKnuCeed6+yj1aJaPFr1oI2DF/DYk/f5eb0apAsEsU2rnYwc7yS
Ij7anX32bggtK6pteZJJffS2rW24SUroQpuSqd8Lkyo/hHljI29cA6PvXdMs25m2
f8cnhdNdTaQHvQFSWUzsCd9dHSH/3e0tYckfwWdmb5w+uB23AO7m5sh0vAN6jVPD
2ww6gdcoAnoWdbyw+GVupB1Vh6xuKStwLmRWLDnib/ofUbfOYHXTiF755q3+jIXN
wRXzQ7TGu6w5UGGammO8ikkMXxs0rPeyB9tSwyeTxrgZCCfEAQIDAQABo4IDbDCC
A2gwHQYDVR0OBBYEFClvwQOl9nfrIZcAc9ut1UtDJ0T/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MzBi
YTUyOS1hYzk0LTQ0YWEtOGEyNC0zMzRkYTVmY2NiMWUvMjJlYjczZWMtYjQxNS0z
YmMxLTlkMTUtMTNkYjgzM2ZiZWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTMwYmE1MjktYWM5NC00NGFhLThh
MjQtMzM0ZGE1ZmNjYjFlLzUzMGJhNTI5LWFjOTQtNDRhYS04YTI0LTMzNGRhNWZj
Y2IxZS5jcmwwHwYDVR0jBBgwFoAU4nCvKjLwMAkTz5GrwlUAJ/q4wTEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MzBiYTUyOS1hYzk0LTQ0YWEtOGEyNC0zMzRk
YTVmY2NiMWUuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAzAqIAwQA
2O+AMA8EAgACMAkDBwEmB/6QgAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAq8nPfiHcXWpTYc2MB/fe2UWp
UohlE1tIAbP0BAqZoVWLZwEycwbCFJtzjsyVcgH+hRcVvhPt4D0geA1Ce2D5sgmZ
nluJqi/Z5X9YHU/k9Fz85MkDJr5FIicHAJKh5QzjPITAT+DJ8U+YO6ZirkzFMy0g
9gJ/DDhNTnuT4oaJtHpCZXDf1O8l3IfxrmziiI5j0kqwF+C/YLnv7wAcr4WDVqpa
Fhhxem4X0h4MenaTpvxZAhIMylnovJ2TFc21Dg8L4/kfZhXaFn3BjZLZPhRkTtxV
+KuQI6M3sksH2aIXLBc/FyipiAjmQCmiIdtxj9EpOHbfhTdkvHRGD2Ja1sU5Dg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:35:55 2025 by rpki-client