Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/ebc74e11-a225-3c40-a976-f2047dc2fdea.roa
File: ebc74e11-a225-3c40-a976-f2047dc2fdea.roa (raw, json)
Hash identifier: nFIKZ7nFvEm4EUR7O50W8sfbuhQpWBSOhg1d0gZgGaQ=
Subject key identifier: FF:2F:18:CD:E2:A1:E6:00:55:0F:CD:47:EB:50:BF:20:24:47:2E:FF
Certificate issuer: /CN=b414afc1-d8ed-4d3f-8f5b-ff72e57f699c
Certificate serial: 010D0C9F432858489075F589DB250A27C1925200
Authority key identifier: 84:18:2E:63:63:C3:F9:7A:FD:FC:D9:56:B9:F2:6A:9E:82:CB:58:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/ebc74e11-a225-3c40-a976-f2047dc2fdea.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 14041
IP address blocks: 192.43.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:75:f5:89:db:25:0a:27:c1:92:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b414afc1-d8ed-4d3f-8f5b-ff72e57f699c
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=3625349d-b11c-4064-8b50-3ff3f465e282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7e:9f:b7:ec:7e:2f:36:24:65:b7:58:46:02:
63:3f:ed:95:b9:73:79:6b:50:c5:87:6a:a7:30:cf:
0a:1b:f2:c5:ec:48:ca:cb:0c:09:ce:74:88:95:48:
00:89:a2:1e:a3:4d:b8:2e:7a:c0:71:54:f7:b6:02:
30:7c:e7:4f:97:9c:01:c3:ab:01:a2:62:15:0b:fe:
2f:69:e9:a2:22:e5:51:e8:2a:01:b3:9f:45:02:86:
54:55:66:98:3e:bb:8c:d6:cf:5e:6c:a1:41:7f:66:
09:90:85:0d:97:c8:4c:09:82:da:a3:a4:38:7d:02:
9a:49:ee:7f:0a:b3:54:24:93:9d:22:1b:5e:ef:b2:
60:10:c5:48:b1:26:3a:4e:6a:d6:6f:08:27:54:f5:
2b:22:7e:b5:79:04:c6:66:fd:23:23:b5:fd:49:0f:
9e:7c:d5:c2:1a:f1:eb:c2:7f:24:d3:12:47:6e:dc:
40:2a:e6:c5:11:60:1d:8e:1d:04:4a:fc:fa:e5:a0:
0b:9b:39:b3:a7:54:4b:4c:7a:82:17:32:7a:17:10:
02:90:44:a0:76:7f:94:77:1f:a9:61:97:88:46:20:
cc:64:0b:d2:19:3f:6f:e1:29:3f:95:10:c8:f8:29:
76:e8:d2:09:27:c6:bc:6a:6b:93:2d:f7:ab:f8:55:
9c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2F:18:CD:E2:A1:E6:00:55:0F:CD:47:EB:50:BF:20:24:47:2E:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/ebc74e11-a225-3c40-a976-f2047dc2fdea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.crl
X509v3 Authority Key Identifier:
keyid:84:18:2E:63:63:C3:F9:7A:FD:FC:D9:56:B9:F2:6A:9E:82:CB:58:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.cer
sbgp-ipAddrBlock: critical
IPv4:
192.43.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:2d:b2:08:06:f4:1d:36:68:8d:6e:e0:c3:3c:17:06:c0:bb:
a2:ea:3b:ee:8f:da:0b:e1:45:3e:90:05:ef:a6:1d:93:d0:27:
a5:42:1c:b4:29:b9:f3:7f:e7:a7:44:2e:49:b1:6d:65:d0:18:
42:6a:21:d3:b0:16:dd:2c:b7:3b:3c:1e:cd:19:f7:94:3f:7a:
91:4e:26:2c:b9:08:2d:3d:0c:1b:03:55:36:e1:d4:02:d0:be:
c5:e8:08:fd:74:a3:d0:c5:e1:11:9c:12:30:a1:05:1d:2f:57:
6c:7f:eb:05:d6:13:e7:48:7d:9a:f2:9e:e7:14:ae:1c:88:5e:
fa:71:59:b3:e7:74:da:44:42:84:a8:a1:33:c6:2f:03:4b:cd:
6e:96:79:a9:fd:8d:7e:2f:01:44:79:65:3a:66:1a:ce:7d:75:
ec:75:7f:fc:cb:26:19:82:29:bc:f8:92:88:fe:5e:1d:6a:4d:
ac:99:55:e5:bd:b1:39:09:04:d7:fb:db:a2:8e:ec:2a:27:20:
4c:eb:1c:55:dd:da:95:ee:94:74:44:af:fd:b6:3a:3e:21:d5:
4b:18:03:e4:44:f5:ee:ba:97:cf:f3:11:4a:0a:8d:78:8e:86:
a4:a2:64:64:21:dc:df:5f:5d:68:dd:c0:f0:40:d3:9b:80:dc:
ec:9c:28:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdfWJ2yUKJ8GSUgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQxNGFmYzEtZDhlZC00ZDNmLThmNWItZmY3MmU1N2Y2
OTljMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk
MzYyNTM0OWQtYjExYy00MDY0LThiNTAtM2ZmM2Y0NjVlMjgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgn6ft+x+LzYkZbdYRgJjP+2VuXN5a1DFh2qn
MM8KG/LF7EjKywwJznSIlUgAiaIeo024LnrAcVT3tgIwfOdPl5wBw6sBomIVC/4v
aemiIuVR6CoBs59FAoZUVWaYPruM1s9ebKFBf2YJkIUNl8hMCYLao6Q4fQKaSe5/
CrNUJJOdIhte77JgEMVIsSY6TmrWbwgnVPUrIn61eQTGZv0jI7X9SQ+efNXCGvHr
wn8k0xJHbtxAKubFEWAdjh0ESvz65aALmzmzp1RLTHqCFzJ6FxACkESgdn+Udx+p
YZeIRiDMZAvSGT9v4Sk/lRDI+Cl26NIJJ8a8amuTLfer+FWcFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP8vGM3ioeYAVQ/NR+tQvyAkRy7/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNDE0
YWZjMS1kOGVkLTRkM2YtOGY1Yi1mZjcyZTU3ZjY5OWMvZWJjNzRlMTEtYTIyNS0z
YzQwLWE5NzYtZjIwNDdkYzJmZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjQxNGFmYzEtZDhlZC00ZDNmLThm
NWItZmY3MmU1N2Y2OTljL2I0MTRhZmMxLWQ4ZWQtNGQzZi04ZjViLWZmNzJlNTdm
Njk5Yy5jcmwwHwYDVR0jBBgwFoAUhBguY2PD+Xr9/NlWufJqnoLLWNcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9iNDE0YWZjMS1kOGVkLTRkM2YtOGY1Yi1mZjcy
ZTU3ZjY5OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCvZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACItsggG9B02aI1u4MM8FwbAu6LqO+6P2gvhRT6QBe+mHZPQJ6VCHLQp
ufN/56dELkmxbWXQGEJqIdOwFt0stzs8Hs0Z95Q/epFOJiy5CC09DBsDVTbh1ALQ
vsXoCP10o9DF4RGcEjChBR0vV2x/6wXWE+dIfZrynucUrhyIXvpxWbPndNpEQoSo
oTPGLwNLzW6Wean9jX4vAUR5ZTpmGs59dex1f/zLJhmCKbz4koj+Xh1qTayZVeW9
sTkJBNf726KO7ConIEzrHFXd2pXulHREr/22Oj4h1UsYA+RE9e66l8/zEUoKjXiO
hqSiZGQh3N9fXWjdwPBA05uA3OycKOI=
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:38:04 2025 by rpki-client