Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/cb06c18f-321b-3017-a621-94bd297303bd.roa
File: cb06c18f-321b-3017-a621-94bd297303bd.roa (raw, json)
Hash identifier: klqN/OPHMm2EkOJiqyuqa+taO3r9s4cXINCTNJj7gPI=
Subject key identifier: BB:1B:60:3A:40:10:DE:CF:F3:04:B4:B5:21:26:59:32:C3:47:01:31
Certificate issuer: /CN=ac260f04-d856-4e9f-9dcc-f16d93c3ab56
Certificate serial: 010D0C9F432858486EF5BDD665DC14D1E458BF80
Authority key identifier: EF:21:21:E4:9F:CD:F3:A0:53:A1:8C:0C:1F:BD:01:6B:99:6C:8B:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/cb06c18f-321b-3017-a621-94bd297303bd.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 27644
IP address blocks: 192.124.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:bd:d6:65:dc:14:d1:e4:58:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac260f04-d856-4e9f-9dcc-f16d93c3ab56
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=3d074f6d-d9c3-4d79-8a6a-06f95d3590ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7e:30:a7:46:70:49:b0:db:d5:e5:ae:6a:d9:
d2:54:c7:d1:3c:9b:a1:d3:75:56:ee:24:dc:41:87:
f7:e8:28:9a:6c:46:ac:a2:51:8b:a5:92:ff:11:76:
a2:fb:74:40:a1:ae:ad:11:f5:c6:8d:f8:6d:d7:22:
0b:66:0b:55:18:dc:64:06:fa:37:f0:8e:c0:24:97:
e2:16:df:b5:c0:06:cc:43:db:3f:a3:27:d3:f0:e2:
6f:40:b4:0c:b8:8a:01:11:38:1c:7f:26:ac:3a:a1:
0d:94:b5:98:dc:c0:a2:f2:ca:b7:75:70:54:b1:33:
06:0a:f7:5c:73:a6:19:80:a3:a9:fd:60:7e:6a:f5:
09:b3:c6:bf:2f:f8:64:e6:f6:8c:e1:7a:a3:21:72:
06:de:56:0a:a5:28:53:3f:f9:6f:63:c6:2a:7f:b3:
92:b2:c2:40:5b:9d:d9:d4:25:c5:22:cb:b6:80:ea:
30:1a:51:f7:91:8a:51:c9:36:3a:35:83:3e:7b:37:
f2:92:72:60:f9:e6:70:a5:29:d0:97:a1:61:db:47:
9f:dd:f5:ae:f6:84:38:0f:c2:e7:06:62:15:6e:36:
b1:79:d9:2d:e4:a4:64:a7:73:69:cd:6c:14:bc:ac:
59:ff:05:fb:eb:36:43:ef:eb:cb:54:79:65:27:9c:
3b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1B:60:3A:40:10:DE:CF:F3:04:B4:B5:21:26:59:32:C3:47:01:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/cb06c18f-321b-3017-a621-94bd297303bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.crl
X509v3 Authority Key Identifier:
keyid:EF:21:21:E4:9F:CD:F3:A0:53:A1:8C:0C:1F:BD:01:6B:99:6C:8B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.cer
sbgp-ipAddrBlock: critical
IPv4:
192.124.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c0:ec:e2:79:a6:e0:4b:6b:9d:32:a7:66:97:9a:d6:a4:39:fa:
85:78:17:f6:ec:f8:00:55:b4:fd:5c:a8:ef:35:5e:5c:57:a6:
60:34:1b:69:cb:74:05:39:65:90:bc:46:f0:7b:66:ed:6e:c0:
66:77:a7:89:fb:a3:05:2a:9b:99:4e:0e:a5:5d:18:e8:53:f1:
68:2a:ed:15:82:20:90:8a:dc:2c:7f:e1:64:cd:a6:bd:b0:19:
7e:ad:60:4a:38:b0:5e:2c:d5:32:aa:ff:58:25:a9:67:61:4d:
89:a3:a3:f6:58:09:3f:b7:8b:2d:be:7b:41:73:d1:ca:3d:1c:
8e:7a:a5:73:f2:9c:d8:4d:ba:cc:fa:06:0c:45:0a:f1:27:a9:
49:2c:24:2e:f0:56:a1:9e:45:e0:31:c3:81:dd:50:0f:9e:a2:
2c:f1:51:d2:82:43:97:0c:02:1e:9e:c3:29:c1:16:a9:46:94:
66:29:f1:ae:9c:3d:f8:8e:b5:26:73:63:86:a3:8f:70:90:87:
81:bb:a7:ea:81:15:8f:5c:a1:58:5a:39:4d:ff:c5:4e:ac:46:
44:9b:ad:4a:3c:40:26:e3:ca:38:ea:e9:e6:65:9d:8f:fb:cf:
a2:b2:de:c8:ac:02:d9:dc:bb:fd:33:31:76:5b:8d:49:68:7f:
b9:3d:8d:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhu9b3WZdwU0eRYv4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWMyNjBmMDQtZDg1Ni00ZTlmLTlkY2MtZjE2ZDkzYzNh
YjU2MB4XDTI1MDEwNDE0MDA1MVoXDTI1MDQwNDEzMDA1MVowLzEtMCsGA1UEAxMk
M2QwNzRmNmQtZDljMy00ZDc5LThhNmEtMDZmOTVkMzU5MGVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAin4wp0ZwSbDb1eWuatnSVMfRPJuh03VW7iTc
QYf36CiabEasolGLpZL/EXai+3RAoa6tEfXGjfht1yILZgtVGNxkBvo38I7AJJfi
Ft+1wAbMQ9s/oyfT8OJvQLQMuIoBETgcfyasOqENlLWY3MCi8sq3dXBUsTMGCvdc
c6YZgKOp/WB+avUJs8a/L/hk5vaM4XqjIXIG3lYKpShTP/lvY8Yqf7OSssJAW53Z
1CXFIsu2gOowGlH3kYpRyTY6NYM+ezfyknJg+eZwpSnQl6Fh20ef3fWu9oQ4D8Ln
BmIVbjaxedkt5KRkp3NpzWwUvKxZ/wX76zZD7+vLVHllJ5w7DQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLsbYDpAEN7P8wS0tSEmWTLDRwExMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzI2
MGYwNC1kODU2LTRlOWYtOWRjYy1mMTZkOTNjM2FiNTYvY2IwNmMxOGYtMzIxYi0z
MDE3LWE2MjEtOTRiZDI5NzMwM2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWMyNjBmMDQtZDg1Ni00ZTlmLTlk
Y2MtZjE2ZDkzYzNhYjU2L2FjMjYwZjA0LWQ4NTYtNGU5Zi05ZGNjLWYxNmQ5M2Mz
YWI1Ni5jcmwwHwYDVR0jBBgwFoAU7yEh5J/N86BToYwMH70Ba5lsi5swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzI2MGYwNC1kODU2LTRlOWYtOWRjYy1mMTZk
OTNjM2FiNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHyBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMDs4nmm4EtrnTKnZpea1qQ5+oV4F/bs+ABVtP1cqO81XlxXpmA0G2nL
dAU5ZZC8RvB7Zu1uwGZ3p4n7owUqm5lODqVdGOhT8Wgq7RWCIJCK3Cx/4WTNpr2w
GX6tYEo4sF4s1TKq/1glqWdhTYmjo/ZYCT+3iy2+e0Fz0co9HI56pXPynNhNusz6
BgxFCvEnqUksJC7wVqGeReAxw4HdUA+eoizxUdKCQ5cMAh6ewynBFqlGlGYp8a6c
PfiOtSZzY4ajj3CQh4G7p+qBFY9coVhaOU3/xU6sRkSbrUo8QCbjyjjq6eZlnY/7
z6Ky3sisAtncu/0zMXZbjUlof7k9jZM=
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:12:26 2025 by rpki-client