Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f3b133a0-cc77-3b6b-96e4-9e186d02af2b.roa
File: f3b133a0-cc77-3b6b-96e4-9e186d02af2b.roa (raw, json)
Hash identifier: /DyhYSUIXuOQmLlOw5Do4C1FkC4GHsQGFWzBk2Uytps=
Subject key identifier: 8A:C4:27:D5:AA:41:E9:96:E1:1E:37:60:81:D9:D3:83:AD:17:B6:5F
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F432858486D905C987195D4FB57A69A80
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f3b133a0-cc77-3b6b-96e4-9e186d02af2b.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 11232
IP address blocks: 24.220.229.160/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:5c:98:71:95:d4:fb:57:a6:9a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=beb260be-81ca-479e-b0e6-afda076c65fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:84:02:c0:c7:a9:e6:0a:88:e2:3a:99:1d:04:
9c:1d:58:30:6a:68:74:1b:0b:6e:b0:74:9c:dc:af:
42:ca:9b:55:5a:a8:d8:20:4d:3c:e2:a8:17:62:4b:
6e:46:87:9f:e1:95:05:9c:42:7f:0f:33:26:37:4a:
73:f6:02:04:6c:11:77:46:29:d0:96:36:15:c2:8e:
20:63:5a:f2:b8:63:b5:3e:9f:26:d0:63:2b:20:b1:
02:6a:2a:cd:40:f4:f0:3e:39:75:1e:62:91:15:9d:
e2:af:39:a9:5b:25:fa:a1:2b:22:57:e3:17:70:2c:
3e:9a:27:cc:17:42:a2:4c:1e:e1:66:8e:09:52:68:
3c:5a:52:2d:34:1f:6a:d8:23:a8:d2:28:39:61:b0:
a2:7d:cc:ff:14:1a:5a:42:89:d9:e6:94:94:c1:79:
4e:8f:65:3f:ae:c1:dd:87:a7:5e:be:92:e5:ff:2b:
33:b9:04:ad:b5:15:b6:10:59:5c:7a:6e:43:45:c7:
2a:05:bf:5a:ea:45:08:3c:1d:66:af:6f:77:15:cf:
b5:e0:80:83:6f:49:c2:a2:2c:18:7a:ac:ae:9a:6b:
49:fc:9e:3c:c7:77:c0:94:26:ed:05:69:9f:96:63:
ed:5f:6c:40:90:f3:77:0d:f4:f8:32:05:13:1c:fe:
02:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C4:27:D5:AA:41:E9:96:E1:1E:37:60:81:D9:D3:83:AD:17:B6:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f3b133a0-cc77-3b6b-96e4-9e186d02af2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
24.220.229.160/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:3a:4a:ba:1b:4c:6a:19:bc:37:a5:46:21:63:20:20:d7:ea:
03:f4:32:f3:c3:40:78:dc:d7:0a:98:c6:25:47:5b:33:30:3b:
2a:dc:a6:44:fa:c7:5a:52:40:10:b3:48:c4:e4:6b:c3:8c:7b:
52:fb:60:9d:6a:9e:3d:a6:d6:19:e8:d0:7e:93:f9:fb:16:a9:
1d:9e:96:44:f0:4a:87:8d:35:74:f2:fc:48:60:16:cd:3b:89:
45:c4:90:3e:a5:d0:97:6e:d4:f7:d2:89:df:03:23:d8:e3:5f:
82:d4:93:0e:1d:57:cb:ae:87:10:a1:2b:0e:8b:7d:44:3f:a9:
9c:0e:2f:a7:6c:b1:53:5c:33:18:8f:44:f7:da:5d:83:cd:6a:
90:30:99:fa:b3:40:6f:bc:e0:7b:ae:be:cd:8c:3c:7c:d1:4b:
30:f0:d3:04:d1:0a:e4:a3:94:d9:7b:25:bb:a8:21:65:54:f4:
dc:47:5e:3a:b8:b5:55:68:75:82:46:b9:40:56:6f:1a:bb:8c:
8c:95:ad:e9:bd:c7:0d:e4:3d:e6:f1:94:07:e9:c5:c5:d6:b8:
d8:78:a8:a6:1f:98:75:bd:4a:9c:7e:ab:62:09:00:d7:0e:b2:
2c:4a:1c:d2:f0:11:10:14:9f:83:76:9f:b9:8e:c1:88:ce:c1:
bc:e3:d1:f5
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhtkFyYcZXU+1emmoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3
MDg1MB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk
YmViMjYwYmUtODFjYS00NzllLWIwZTYtYWZkYTA3NmM2NWZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYQCwMep5gqI4jqZHQScHVgwamh0GwtusHSc
3K9CyptVWqjYIE084qgXYktuRoef4ZUFnEJ/DzMmN0pz9gIEbBF3RinQljYVwo4g
Y1ryuGO1Pp8m0GMrILECairNQPTwPjl1HmKRFZ3irzmpWyX6oSsiV+MXcCw+mifM
F0KiTB7hZo4JUmg8WlItNB9q2COo0ig5YbCifcz/FBpaQonZ5pSUwXlOj2U/rsHd
h6devpLl/yszuQSttRW2EFlcem5DRccqBb9a6kUIPB1mr293Fc+14ICDb0nCoiwY
eqyummtJ/J48x3fAlCbtBWmflmPtX2xAkPN3DfT4MgUTHP4CswIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIrEJ9WqQemW4R43YIHZ04OtF7ZfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2
M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvZjNiMTMzYTAtY2M3Ny0z
YjZiLTk2ZTQtOWUxODZkMDJhZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm
YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3
NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2
NDNhNzcwODUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEGNzloDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB6Okq6G0xqGbw3pUYhYyAg1+oD9DLzw0B43NcKmMYlR1szMDsq3KZE
+sdaUkAQs0jE5GvDjHtS+2Cdap49ptYZ6NB+k/n7FqkdnpZE8EqHjTV08vxIYBbN
O4lFxJA+pdCXbtT30onfAyPY41+C1JMOHVfLrocQoSsOi31EP6mcDi+nbLFTXDMY
j0T32l2DzWqQMJn6s0BvvOB7rr7NjDx80Usw8NME0Qrko5TZeyW7qCFlVPTcR146
uLVVaHWCRrlAVm8au4yMla3pvccN5D3m8ZQH6cXF1rjYeKimH5h1vUqcfqtiCQDX
DrIsShzS8BEQFJ+Ddp+5jsGIzsG849H1
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:51:03 2025 by rpki-client