Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3ffe83f7-cd24-3446-8c53-2bff8d8de993.roa
File: 3ffe83f7-cd24-3446-8c53-2bff8d8de993.roa (raw, json)
Hash identifier: oaLVLWHC5tVKYj14wPp+3fajBJy3P5Ef7IYM2EjpG5k=
Subject key identifier: C0:F7:0A:D9:DD:B1:4C:D4:5F:C7:0F:2E:AF:E2:88:84:17:DE:E9:7A
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F432858486D9060CD99DAB34323182F80
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3ffe83f7-cd24-3446-8c53-2bff8d8de993.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 11232
IP address blocks: 137.22.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:60:cd:99:da:b3:43:23:18:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=39a79466-8079-4080-9279-714d50d9defe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:a9:27:72:1d:64:77:40:3a:cb:f1:a4:db:
2f:8d:58:a6:14:e6:ac:9b:70:f0:34:2b:67:73:bd:
99:ef:93:c4:37:5d:18:86:ea:1d:f4:bd:0f:bd:77:
97:58:b2:c3:05:66:96:b6:fa:cd:8b:1e:e8:e5:30:
db:2f:37:e8:a3:28:5c:ec:a1:b4:fd:9a:0b:21:81:
c0:0a:cc:ae:80:f5:1b:40:f8:64:f0:ec:97:39:8f:
41:10:e0:33:e0:cc:d7:0d:a6:09:43:5f:3d:3f:24:
2a:0d:98:44:ec:60:e8:4c:ee:17:e6:ad:7c:61:da:
50:0c:63:db:9b:ea:14:1f:b2:2f:b8:09:aa:57:60:
b3:ea:4f:04:9a:96:81:5c:cd:d5:26:2a:09:71:f5:
52:0e:58:47:8b:74:c6:fa:fa:1a:43:2f:76:bd:85:
da:02:79:d3:25:b3:4c:69:c3:c1:ab:08:14:9f:5f:
a8:41:6e:d0:cb:bc:28:bc:e2:c5:75:25:68:80:d9:
70:52:06:3e:8a:df:2e:61:a0:c4:74:5f:8e:bc:94:
30:2c:b6:ba:11:bf:35:16:2a:f6:f4:ff:6c:76:5a:
cd:b7:3e:40:84:84:d6:46:e9:5e:0f:91:61:a1:5b:
c2:12:1f:51:b2:ea:b9:af:3d:7e:4f:ca:c9:72:cb:
b7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F7:0A:D9:DD:B1:4C:D4:5F:C7:0F:2E:AF:E2:88:84:17:DE:E9:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/3ffe83f7-cd24-3446-8c53-2bff8d8de993.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
137.22.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:50:13:73:25:ff:25:45:c7:37:f1:97:59:d5:52:c7:f0:5e:
64:f9:7d:b9:bf:5b:6c:55:7f:aa:a7:8d:b9:29:7e:b9:92:31:
80:7e:ca:bf:68:03:86:3d:0f:e1:32:e9:90:18:a9:10:31:96:
0c:30:3f:c3:e0:c5:5a:ee:50:84:bc:20:59:56:7c:2f:3c:3e:
d2:e4:74:df:38:90:38:63:1b:c0:b5:a0:db:1d:3a:c1:d8:f5:
79:3c:be:3a:a9:37:ad:80:cf:a8:eb:de:6c:27:02:66:de:c7:
bb:50:05:98:e4:f0:eb:6a:33:a0:44:f7:34:b4:ba:07:18:c2:
b5:81:7c:02:74:91:6c:a9:39:ac:c7:16:c8:2e:c3:d7:a4:15:
cb:15:bd:8e:8f:66:a3:f9:7b:13:35:a9:d6:49:f8:3a:dd:b5:
8a:53:bb:dd:85:b8:c1:57:51:47:3e:c0:96:e7:d8:73:6f:26:
cb:6c:da:6f:b8:c6:f9:08:7e:7f:2f:54:49:cd:0c:28:e0:17:
29:dd:fe:22:d8:26:2e:96:e1:c2:87:52:1f:2a:09:7c:63:f6:
a6:e3:5a:38:40:ae:bb:a4:9c:5c:b7:50:ce:72:e8:5c:a4:32:
3d:05:67:4b:0b:45:ca:fa:1a:50:56:08:16:31:b5:7b:64:9d:
b0:df:27:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtkGDNmdqzQyMYL4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3
MDg1MB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk
MzlhNzk0NjYtODA3OS00MDgwLTkyNzktNzE0ZDUwZDlkZWZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthGpJ3IdZHdAOsvxpNsvjVimFOasm3DwNCtn
c72Z75PEN10Yhuod9L0PvXeXWLLDBWaWtvrNix7o5TDbLzfooyhc7KG0/ZoLIYHA
CsyugPUbQPhk8OyXOY9BEOAz4MzXDaYJQ189PyQqDZhE7GDoTO4X5q18YdpQDGPb
m+oUH7IvuAmqV2Cz6k8EmpaBXM3VJioJcfVSDlhHi3TG+voaQy92vYXaAnnTJbNM
acPBqwgUn1+oQW7Qy7wovOLFdSVogNlwUgY+it8uYaDEdF+OvJQwLLa6Eb81Fir2
9P9sdlrNtz5AhITWRuleD5FhoVvCEh9Rsuq5rz1+T8rJcsu33QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMD3CtndsUzUX8cPLq/iiIQX3ul6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2
M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvM2ZmZTgzZjctY2QyNC0z
NDQ2LThjNTMtMmJmZjhkOGRlOTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm
YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3
NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2
NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFiRYgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABdQE3Ml/yVFxzfxl1nVUsfwXmT5fbm/W2xVf6qnjbkpfrmSMYB+yr9o
A4Y9D+Ey6ZAYqRAxlgwwP8PgxVruUIS8IFlWfC88PtLkdN84kDhjG8C1oNsdOsHY
9Xk8vjqpN62Az6jr3mwnAmbex7tQBZjk8OtqM6BE9zS0ugcYwrWBfAJ0kWypOazH
Fsguw9ekFcsVvY6PZqP5exM1qdZJ+DrdtYpTu92FuMFXUUc+wJbn2HNvJsts2m+4
xvkIfn8vVEnNDCjgFynd/iLYJi6W4cKHUh8qCXxj9qbjWjhArruknFy3UM5y6Fyk
Mj0FZ0sLRcr6GlBWCBYxtXtknbDfJ+c=
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:52:51 2025 by rpki-client