Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2ca242cf-cd66-3ae4-ab5f-3b4a3c3fdbd0.roa
File: 2ca242cf-cd66-3ae4-ab5f-3b4a3c3fdbd0.roa (raw, json)
Hash identifier: F4kM4kcB13l2yQP4OUomD+CTFr2/j88y4k8+v2/TDjM=
Subject key identifier: D9:D9:BB:A8:0A:83:13:64:DF:28:11:B0:34:A3:F3:20:0B:BE:CA:FC
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F4328584878BB0A34FC9383D917A491C0
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2ca242cf-cd66-3ae4-ab5f-3b4a3c3fdbd0.roa
Signing time: Wed 08 Jan 2025 02:00:39 +0000
ROA not before: Wed 08 Jan 2025 02:00:39 +0000
ROA not after: Tue 08 Apr 2025 01:00:39 +0000
asID: 11232
IP address blocks: 24.230.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:78:bb:0a:34:fc:93:83:d9:17:a4:91:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Jan 8 02:00:39 2025 GMT
Not After : Apr 8 01:00:39 2025 GMT
Subject: CN=9e2c0ed7-0047-426d-9871-73a9fc9a42f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1b:cb:d7:51:b8:af:41:d0:d9:36:e1:d1:73:
3d:b5:f6:95:52:86:e2:84:43:8d:d6:15:55:09:af:
7d:8e:89:23:01:67:05:06:d4:fa:2c:22:4b:7a:0b:
56:4a:00:51:3f:7d:72:65:2d:ec:3f:d3:7d:e3:6d:
62:50:cf:e1:8b:4b:90:ae:aa:12:de:5f:57:d5:63:
0d:cd:c3:ca:c2:a6:88:83:ea:a5:53:b0:d2:24:c8:
21:0b:e2:ba:23:af:f0:8a:71:2d:35:61:0f:2d:0e:
42:76:30:af:2f:37:63:6d:93:93:6e:cc:5f:22:cd:
6a:8a:5f:bd:bc:82:94:b8:fb:71:b2:be:1e:cb:38:
00:3d:5a:fb:7e:40:85:91:f9:25:f0:70:94:f5:a8:
1f:59:e0:de:af:d3:37:6a:5f:d4:b8:fd:e1:0d:b0:
46:b4:46:64:62:f8:14:f5:11:e1:56:1c:1e:2b:9d:
5c:72:ec:a2:7c:37:59:7c:9a:f3:98:c5:af:8d:6c:
a6:3c:6b:31:2e:9c:8b:08:38:22:81:55:21:a7:34:
29:ce:ff:15:21:d4:2c:06:2b:9f:d6:72:5e:f3:cd:
02:8a:bf:ba:25:d7:20:81:96:d2:2b:9e:c4:0e:55:
de:89:f2:d9:cd:d3:70:20:d8:cb:78:97:e0:ad:50:
c3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D9:BB:A8:0A:83:13:64:DF:28:11:B0:34:A3:F3:20:0B:BE:CA:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2ca242cf-cd66-3ae4-ab5f-3b4a3c3fdbd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
24.230.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:e4:48:52:d1:da:b5:ea:41:ad:12:f5:d0:68:75:b3:1e:a1:
0f:e2:b7:63:a3:57:1d:a9:9a:80:59:6a:36:d0:4c:2e:a1:4d:
f7:18:fa:c2:52:f0:f2:8a:8a:e9:58:a3:e8:de:ec:04:16:5a:
96:06:2b:ee:b7:42:31:b9:b1:57:cb:9e:ab:45:40:75:9f:be:
4f:47:5c:90:7c:aa:6e:90:69:ce:de:20:96:46:a2:8d:6e:78:
5e:5f:5b:4c:b1:b0:21:57:9c:6e:ec:3c:bb:cc:c6:38:f0:98:
f0:a2:ca:fe:e3:5d:ad:0d:78:ee:67:64:c1:be:e1:19:1a:d2:
2d:1b:87:6f:ad:32:68:6f:49:13:6b:0f:c5:5c:ee:a4:41:c3:
9d:01:50:57:ed:4c:fc:cf:98:d8:93:da:76:cb:13:99:a2:45:
af:d5:54:ec:24:73:7b:38:7f:e8:73:10:a5:82:67:25:bf:d6:
f4:43:74:df:93:e5:ae:6a:1f:9b:fc:a0:c4:3f:b4:2f:54:29:
5d:70:7d:54:fe:4d:5b:09:32:65:c4:f5:6e:26:a2:ff:00:6d:
d7:39:bb:4f:5d:00:72:6e:96:8d:63:b6:9f:cd:25:09:6e:11:
8d:6e:a9:bf:5c:9b:6c:6d:a7:25:0f:3c:e1:b0:7b:49:f6:64:
13:0f:8e:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh4uwo0/JOD2RekkcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3
MDg1MB4XDTI1MDEwODAyMDAzOVoXDTI1MDQwODAxMDAzOVowLzEtMCsGA1UEAxMk
OWUyYzBlZDctMDA0Ny00MjZkLTk4NzEtNzNhOWZjOWE0MmY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRvL11G4r0HQ2Tbh0XM9tfaVUobihEON1hVV
Ca99jokjAWcFBtT6LCJLegtWSgBRP31yZS3sP9N9421iUM/hi0uQrqoS3l9X1WMN
zcPKwqaIg+qlU7DSJMghC+K6I6/winEtNWEPLQ5CdjCvLzdjbZOTbsxfIs1qil+9
vIKUuPtxsr4eyzgAPVr7fkCFkfkl8HCU9agfWeDer9M3al/UuP3hDbBGtEZkYvgU
9RHhVhweK51ccuyifDdZfJrzmMWvjWymPGsxLpyLCDgigVUhpzQpzv8VIdQsBiuf
1nJe880Cir+6JdcggZbSK57EDlXeifLZzdNwINjLeJfgrVDDvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNnZu6gKgxNk3ygRsDSj8yALvsr8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2
M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvMmNhMjQyY2YtY2Q2Ni0z
YWU0LWFiNWYtM2I0YTNjM2ZkYmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm
YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3
NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2
NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGOZAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC7kSFLR2rXqQa0S9dBodbMeoQ/it2OjVx2pmoBZajbQTC6hTfcY+sJS
8PKKiulYo+je7AQWWpYGK+63QjG5sVfLnqtFQHWfvk9HXJB8qm6Qac7eIJZGoo1u
eF5fW0yxsCFXnG7sPLvMxjjwmPCiyv7jXa0NeO5nZMG+4Rka0i0bh2+tMmhvSRNr
D8Vc7qRBw50BUFftTPzPmNiT2nbLE5miRa/VVOwkc3s4f+hzEKWCZyW/1vRDdN+T
5a5qH5v8oMQ/tC9UKV1wfVT+TVsJMmXE9W4mov8Abdc5u09dAHJulo1jtp/NJQlu
EY1uqb9cm2xtpyUPPOGwe0n2ZBMPjis=
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:47:36 2025 by rpki-client