Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/faa9c8e5-005f-3d39-bccd-d85fa09eddf2.roa
File: faa9c8e5-005f-3d39-bccd-d85fa09eddf2.roa (raw, json)
Hash identifier: vAfzIGUgXNovZoJGvR5f/LkhZVJrLYvZZr9ofNY+cTc=
Subject key identifier: 18:61:62:C9:41:06:69:4A:35:5A:09:54:16:2B:98:B9:17:BE:F6:72
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F432858486D905DAC58B41391FD0F9A80
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/faa9c8e5-005f-3d39-bccd-d85fa09eddf2.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 11232
IP address blocks: 24.124.2.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:5d:ac:58:b4:13:91:fd:0f:9a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=c210b683-5671-4208-a0d0-f16cc3bd504e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a5:e3:0a:11:b0:76:e8:ca:90:78:b9:32:95:
a5:e0:96:50:99:e0:8d:44:e5:0e:68:68:88:bd:16:
9c:d2:d8:94:ae:b1:7b:91:9a:85:47:42:43:27:26:
b1:84:ca:ff:cd:83:b3:ed:9b:c5:68:c0:df:64:b0:
42:67:74:d2:0c:92:c3:8c:dc:ee:0a:fe:0e:ce:ff:
df:55:fd:fc:04:e9:bb:48:03:8c:82:4b:77:13:91:
f5:07:69:7e:05:cc:cc:5c:ad:a3:8b:06:c7:34:a5:
1f:5e:9a:aa:14:cb:29:93:38:f7:b8:4a:b4:eb:b6:
a2:60:af:ae:56:07:d1:9a:31:39:be:f5:87:3c:0e:
48:63:9e:e0:c4:0e:4e:fb:00:dd:14:7e:4b:39:30:
37:1e:35:7f:ab:f5:dd:84:ce:6d:9a:21:3b:ed:16:
bf:7d:35:92:6c:18:a5:91:0f:13:6f:21:6b:f2:d0:
b7:66:3a:30:c9:8c:a3:22:a2:db:4b:a8:a4:ce:2c:
9f:95:a5:93:6a:bc:85:ec:cd:f8:e1:81:b6:ef:13:
9f:db:36:7d:1b:da:65:ef:c1:f1:ee:b4:c1:31:ff:
09:44:dd:fd:ae:55:ae:d0:f8:8c:8c:8c:2a:53:71:
91:a9:d3:4f:1e:0e:95:12:1d:42:a8:ff:76:56:a2:
55:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:61:62:C9:41:06:69:4A:35:5A:09:54:16:2B:98:B9:17:BE:F6:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/faa9c8e5-005f-3d39-bccd-d85fa09eddf2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
24.124.2.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:e9:41:4e:a4:e1:be:a2:90:04:bd:4c:fa:ea:6b:34:59:8b:
20:1c:94:29:07:9b:f7:c3:cd:21:11:f4:f3:50:2e:6c:e6:34:
25:fa:2a:68:8a:7c:bc:3d:b9:cf:9a:2b:6c:9c:d6:8b:02:ac:
f5:b6:1c:7d:fd:1b:8f:bb:f7:dd:02:ba:40:e4:ab:5b:18:40:
76:03:8e:53:d6:06:89:3d:56:04:fd:62:db:44:e3:7d:53:e3:
c2:82:ab:a5:b9:9a:01:bb:e6:80:42:0f:a8:56:87:82:2e:df:
7a:15:e5:a4:82:f2:e0:54:6b:e9:e3:1b:46:fe:01:4f:5b:e1:
cc:d2:35:b6:ff:78:b7:17:fb:a8:17:46:53:53:9d:18:d8:78:
e5:a0:0e:c2:56:28:5e:d8:82:c0:41:1c:c1:fd:c3:27:95:d6:
01:e2:9e:c8:15:f4:79:e1:71:d0:ac:dd:d5:22:aa:2c:7c:e7:
96:23:00:9f:1b:be:4d:79:65:f1:19:31:af:87:df:4c:eb:1a:
bc:20:ad:c0:84:de:89:c9:5e:41:a3:b2:92:56:20:4c:82:91:
fb:dd:d5:53:4f:62:7d:d6:bd:59:da:2b:fe:14:17:21:8b:7e:
f1:18:0c:8a:ee:43:4e:0f:4c:ef:56:a7:c5:2c:82:cc:05:cf:
99:1c:35:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtkF2sWLQTkf0PmoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3
MDg1MB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk
YzIxMGI2ODMtNTY3MS00MjA4LWEwZDAtZjE2Y2MzYmQ1MDRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaXjChGwdujKkHi5MpWl4JZQmeCNROUOaGiI
vRac0tiUrrF7kZqFR0JDJyaxhMr/zYOz7ZvFaMDfZLBCZ3TSDJLDjNzuCv4Ozv/f
Vf38BOm7SAOMgkt3E5H1B2l+BczMXK2jiwbHNKUfXpqqFMspkzj3uEq067aiYK+u
VgfRmjE5vvWHPA5IY57gxA5O+wDdFH5LOTA3HjV/q/XdhM5tmiE77Ra/fTWSbBil
kQ8TbyFr8tC3ZjowyYyjIqLbS6ikziyflaWTaryF7M344YG27xOf2zZ9G9pl78Hx
7rTBMf8JRN39rlWu0PiMjIwqU3GRqdNPHg6VEh1CqP92VqJVaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBhhYslBBmlKNVoJVBYrmLkXvvZyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2
M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvZmFhOWM4ZTUtMDA1Zi0z
ZDM5LWJjY2QtZDg1ZmEwOWVkZGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm
YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3
NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2
NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGHwCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADPpQU6k4b6ikAS9TPrqazRZiyAclCkHm/fDzSER9PNQLmzmNCX6KmiK
fLw9uc+aK2yc1osCrPW2HH39G4+7990CukDkq1sYQHYDjlPWBok9VgT9YttE431T
48KCq6W5mgG75oBCD6hWh4Iu33oV5aSC8uBUa+njG0b+AU9b4czSNbb/eLcX+6gX
RlNTnRjYeOWgDsJWKF7YgsBBHMH9wyeV1gHinsgV9HnhcdCs3dUiqix855YjAJ8b
vk15ZfEZMa+H30zrGrwgrcCE3onJXkGjspJWIEyCkfvd1VNPYn3WvVnaK/4UFyGL
fvEYDIruQ04PTO9Wp8UsgswFz5kcNcc=
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:04 2025 by rpki-client