Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/8a64148f-987d-3941-8963-41b24ce1cba9.roa
File: 8a64148f-987d-3941-8963-41b24ce1cba9.roa (raw, json)
Hash identifier: M3EQNHE5LTNDSFDLWIgE54ZJMQyBh2aaygMT8zylxJA=
Subject key identifier: EF:02:79:7B:44:B6:CC:87:C7:B9:5D:65:29:1B:F5:07:0B:23:4C:43
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F432858486D90644615A586E43D727240
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/8a64148f-987d-3941-8963-41b24ce1cba9.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 11232
IP address blocks: 24.124.16.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:64:46:15:a5:86:e4:3d:72:72:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=7496adc0-5e43-4a00-8aec-4e5c73e89d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1a:00:dc:55:03:57:a0:d6:42:99:51:a7:a5:
5e:77:da:96:1f:d2:bc:12:3f:b6:03:a1:d8:3d:25:
4a:2c:98:b7:f0:99:aa:65:58:45:e8:2c:6a:9b:b9:
71:8e:41:0f:61:c5:98:a0:e2:ba:d7:8b:7e:67:fa:
18:44:9d:47:9b:8c:9d:bd:ba:59:81:76:ed:50:e1:
eb:b5:bf:61:fe:10:2b:ad:89:d4:a5:47:b6:6c:d2:
0f:23:bf:7a:18:d8:33:34:98:3a:21:bf:4b:35:38:
7d:13:94:7d:01:ec:23:08:49:f9:e1:ca:08:c2:38:
6d:71:8f:40:ca:c7:a7:ca:23:6a:8e:6d:05:72:b5:
14:e7:25:00:3d:aa:a7:81:8d:94:03:b0:ed:63:5e:
c8:09:79:6b:8f:95:66:ce:b5:63:6b:a1:a5:e8:a2:
b2:bd:1d:19:f7:8e:de:dc:72:79:b0:06:2d:ba:ea:
e6:85:c3:00:44:40:3e:92:6d:7c:0c:59:fb:9e:d4:
be:bf:02:90:ca:01:fc:66:ea:60:0a:fb:7b:fe:b7:
bc:04:e0:fe:33:d1:39:c8:e5:92:a0:c5:2b:90:0a:
98:33:0a:29:28:d7:95:a5:59:d1:2b:f7:34:7b:c4:
8f:68:de:1c:6b:6f:3c:4d:b3:5c:d4:7b:c1:e0:3f:
4f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:02:79:7B:44:B6:CC:87:C7:B9:5D:65:29:1B:F5:07:0B:23:4C:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/8a64148f-987d-3941-8963-41b24ce1cba9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
24.124.16.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:dc:e5:65:f4:71:e2:aa:6e:c0:8b:07:58:70:ff:8c:e3:9e:
20:47:94:0d:7d:d3:4c:4e:35:53:68:46:9f:d7:42:37:45:5a:
9a:1f:8b:66:9c:84:f8:98:47:8d:8a:71:20:20:b6:48:a0:c1:
a8:41:73:cf:f2:f5:f1:22:b9:a7:66:95:22:b3:87:15:2b:c8:
a2:77:07:12:8f:26:47:a4:e9:1a:a8:68:3b:02:44:44:f8:66:
3a:93:82:e0:aa:70:f9:a2:e5:d4:b5:74:ed:4e:b5:38:6e:8e:
23:62:ce:76:92:48:c2:51:2e:52:6a:69:b4:58:23:b4:6f:33:
6d:aa:f9:53:d5:16:da:de:8d:dc:7f:09:7c:3d:9b:54:d4:50:
fa:19:15:82:bb:18:3c:d6:a7:c8:a7:75:cb:f2:dc:ba:c4:f8:
56:07:96:aa:b9:cd:d8:5b:3f:76:1a:99:d1:6a:c1:9a:c6:fa:
df:f3:40:73:ed:3e:d7:2b:2a:7c:b5:66:12:39:aa:81:01:23:
32:84:67:fc:40:c2:e2:9f:92:20:de:64:c5:a8:81:c3:6e:30:
08:3f:f2:68:49:c3:51:1e:a4:6e:a7:49:bd:e1:af:02:57:ed:
34:e8:a1:7d:7b:7c:d6:29:ed:25:76:23:9f:c5:7f:90:29:1a:
18:d4:6d:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtkGRGFaWG5D1yckAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3
MDg1MB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk
NzQ5NmFkYzAtNWU0My00YTAwLThhZWMtNGU1YzczZTg5ZDAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBoA3FUDV6DWQplRp6Ved9qWH9K8Ej+2A6HY
PSVKLJi38JmqZVhF6Cxqm7lxjkEPYcWYoOK614t+Z/oYRJ1Hm4ydvbpZgXbtUOHr
tb9h/hArrYnUpUe2bNIPI796GNgzNJg6Ib9LNTh9E5R9AewjCEn54coIwjhtcY9A
ysenyiNqjm0FcrUU5yUAPaqngY2UA7DtY17ICXlrj5VmzrVja6Gl6KKyvR0Z947e
3HJ5sAYtuurmhcMAREA+km18DFn7ntS+vwKQygH8ZupgCvt7/re8BOD+M9E5yOWS
oMUrkAqYMwopKNeVpVnRK/c0e8SPaN4ca288TbNc1HvB4D9PdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO8CeXtEtsyHx7ldZSkb9QcLI0xDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2
M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvOGE2NDE0OGYtOTg3ZC0z
OTQxLTg5NjMtNDFiMjRjZTFjYmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm
YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3
NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2
NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGHwQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADHc5WX0ceKqbsCLB1hw/4zjniBHlA1900xONVNoRp/XQjdFWpofi2ac
hPiYR42KcSAgtkigwahBc8/y9fEiuadmlSKzhxUryKJ3BxKPJkek6RqoaDsCRET4
ZjqTguCqcPmi5dS1dO1OtThujiNiznaSSMJRLlJqabRYI7RvM22q+VPVFtrejdx/
CXw9m1TUUPoZFYK7GDzWp8indcvy3LrE+FYHlqq5zdhbP3YamdFqwZrG+t/zQHPt
PtcrKny1ZhI5qoEBIzKEZ/xAwuKfkiDeZMWogcNuMAg/8mhJw1EepG6nSb3hrwJX
7TTooX17fNYp7SV2I5/Ff5ApGhjUbQ0=
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:55:43 2025 by rpki-client