Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/33a3b984-a77f-3d78-88ae-30ae68813e02.roa
File: 33a3b984-a77f-3d78-88ae-30ae68813e02.roa (raw, json)
Hash identifier: 4vugvAmMI3WLUCT4q7SGXp/EfHaWutRCpQWFB/OMwfY=
Subject key identifier: 82:81:C0:4B:E4:29:49:8D:04:33:DC:D9:A7:5D:C8:2E:A2:79:4E:EE
Certificate issuer: /CN=a7001425-6965-4c1f-8e35-f578d112295c
Certificate serial: 010D0C9F4328584891DB30B2AD1917596DB08180
Authority key identifier: F4:6C:4D:F0:5E:17:96:E6:79:88:21:0F:C0:BA:29:70:32:D6:2B:CB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/33a3b984-a77f-3d78-88ae-30ae68813e02.roa
Signing time: Fri 17 Jan 2025 02:00:40 +0000
ROA not before: Fri 17 Jan 2025 02:00:40 +0000
ROA not after: Thu 17 Apr 2025 01:00:40 +0000
asID: 16920
IP address blocks: 128.224.254.0/24 maxlen: 24
128.224.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:91:db:30:b2:ad:19:17:59:6d:b0:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7001425-6965-4c1f-8e35-f578d112295c
Validity
Not Before: Jan 17 02:00:40 2025 GMT
Not After : Apr 17 01:00:40 2025 GMT
Subject: CN=1e77eac3-e54d-46df-81f2-20ba16e32316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bb:e4:ea:10:c9:bd:5b:fc:4a:2e:7c:c3:26:
6b:54:5c:28:8f:b2:70:6e:45:17:21:24:1f:50:9d:
85:2f:df:c2:ae:10:40:d5:63:a0:29:fd:4d:87:ef:
81:bc:db:1f:71:f4:f2:c9:b8:67:d7:5c:53:b4:66:
13:81:3c:16:e9:90:e4:6f:65:66:3e:78:c3:60:94:
9a:4a:69:c9:a1:d3:cf:e1:32:c2:49:5f:df:fd:b5:
44:33:82:83:cd:04:54:04:35:14:67:82:75:8c:41:
ba:f1:f8:3f:81:08:59:68:9e:61:ee:b2:f4:5e:4b:
2d:e4:26:98:ce:fb:e0:bf:db:33:d2:4c:53:23:c1:
37:6f:50:53:bb:13:c3:bc:10:25:8b:cb:ae:ed:85:
eb:04:ff:98:13:f2:72:e7:e9:ea:cb:ab:9e:35:3a:
95:f4:3a:d2:5c:bd:14:80:ea:5c:d0:79:4c:0f:30:
5c:30:59:a5:f5:97:d1:2e:87:f5:d8:80:61:b0:15:
b6:93:74:d7:31:23:ca:46:3c:2d:94:22:32:cf:33:
37:ea:27:e3:f1:de:96:8b:16:dd:fb:30:1a:65:0c:
1f:dd:65:61:82:f2:eb:12:d4:81:7e:9f:13:07:41:
20:d0:0e:8f:63:97:21:90:72:28:ca:54:c8:69:50:
e3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:81:C0:4B:E4:29:49:8D:04:33:DC:D9:A7:5D:C8:2E:A2:79:4E:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/33a3b984-a77f-3d78-88ae-30ae68813e02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/a7001425-6965-4c1f-8e35-f578d112295c.crl
X509v3 Authority Key Identifier:
keyid:F4:6C:4D:F0:5E:17:96:E6:79:88:21:0F:C0:BA:29:70:32:D6:2B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c.cer
sbgp-ipAddrBlock: critical
IPv4:
128.224.254.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:04:d8:d6:ab:c2:b1:09:6f:40:ad:37:2e:a7:c4:57:6a:cf:
f3:e0:4c:2b:b3:f3:40:c5:42:a3:00:79:1f:48:7a:e4:da:4b:
1d:d9:05:19:5c:25:7c:82:37:0b:b7:99:6f:33:f1:3d:37:05:
e5:dc:26:8b:bd:b9:06:2f:dd:e5:0a:73:b9:af:4c:36:56:63:
9d:81:72:74:22:2e:e9:69:63:21:3c:0b:df:29:bd:4e:c5:ee:
7b:a3:af:c4:1f:ec:e9:fe:44:ea:3e:07:06:67:e9:f6:fa:43:
10:5d:ad:51:85:c7:6b:b2:68:dc:d8:39:4c:c1:58:79:7e:b2:
1e:d4:fe:fe:69:7a:d6:5d:50:01:15:13:da:cf:68:68:e9:95:
b0:df:21:59:7e:9c:55:1a:67:61:a7:9c:bb:60:b8:48:41:00:
8c:32:7e:33:27:ab:19:5a:20:75:af:13:4c:62:ff:32:73:66:
02:38:ba:3e:7c:33:e4:15:63:2f:75:c4:48:2f:ff:5f:4d:88:
8b:fc:50:69:a1:ff:63:a9:e5:7a:37:f7:97:48:b3:86:86:c2:
94:fe:35:c4:d5:88:ec:7b:3d:c8:49:a2:b9:93:95:6b:0c:42:
47:0f:f4:57:b4:60:c6:e6:d1:13:52:21:5f:34:21:63:a9:e6:
93:63:6a:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiR2zCyrRkXWW2wgYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTcwMDE0MjUtNjk2NS00YzFmLThlMzUtZjU3OGQxMTIy
OTVjMB4XDTI1MDExNzAyMDA0MFoXDTI1MDQxNzAxMDA0MFowLzEtMCsGA1UEAxMk
MWU3N2VhYzMtZTU0ZC00NmRmLTgxZjItMjBiYTE2ZTMyMzE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rvk6hDJvVv8Si58wyZrVFwoj7JwbkUXISQf
UJ2FL9/CrhBA1WOgKf1Nh++BvNsfcfTyybhn11xTtGYTgTwW6ZDkb2VmPnjDYJSa
SmnJodPP4TLCSV/f/bVEM4KDzQRUBDUUZ4J1jEG68fg/gQhZaJ5h7rL0Xkst5CaY
zvvgv9sz0kxTI8E3b1BTuxPDvBAli8uu7YXrBP+YE/Jy5+nqy6ueNTqV9DrSXL0U
gOpc0HlMDzBcMFml9ZfRLof12IBhsBW2k3TXMSPKRjwtlCIyzzM36ifj8d6Wixbd
+zAaZQwf3WVhgvLrEtSBfp8TB0Eg0A6PY5chkHIoylTIaVDjfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIKBwEvkKUmNBDPc2addyC6ieU7uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hNzAw
MTQyNS02OTY1LTRjMWYtOGUzNS1mNTc4ZDExMjI5NWMvMzNhM2I5ODQtYTc3Zi0z
ZDc4LTg4YWUtMzBhZTY4ODEzZTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTcwMDE0MjUtNjk2NS00YzFmLThl
MzUtZjU3OGQxMTIyOTVjL2E3MDAxNDI1LTY5NjUtNGMxZi04ZTM1LWY1NzhkMTEy
Mjk1Yy5jcmwwHwYDVR0jBBgwFoAU9GxN8F4XluZ5iCEPwLopcDLWK8swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9hNzAwMTQyNS02OTY1LTRjMWYtOGUzNS1mNTc4
ZDExMjI5NWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgOD+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACME2NarwrEJb0CtNy6nxFdqz/PgTCuz80DFQqMAeR9IeuTaSx3ZBRlc
JXyCNwu3mW8z8T03BeXcJou9uQYv3eUKc7mvTDZWY52BcnQiLulpYyE8C98pvU7F
7nujr8Qf7On+ROo+BwZn6fb6QxBdrVGFx2uyaNzYOUzBWHl+sh7U/v5petZdUAEV
E9rPaGjplbDfIVl+nFUaZ2GnnLtguEhBAIwyfjMnqxlaIHWvE0xi/zJzZgI4uj58
M+QVYy91xEgv/19NiIv8UGmh/2Op5Xo395dIs4aGwpT+NcTViOx7PchJormTlWsM
QkcP9Fe0YMbm0RNSIV80IWOp5pNjagA=
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:18:07 2025 by rpki-client