Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/1bb690cd-2388-3eaf-881d-f9de6ab12a96.roa
File: 1bb690cd-2388-3eaf-881d-f9de6ab12a96.roa (raw, json)
Hash identifier: YT/7vvt/xCQ+oeTpZRt5pvpGiNBZZ9Ig7duseLFkHJA=
Subject key identifier: C1:20:39:55:E7:04:FF:F8:DE:BE:9E:53:8F:BA:BC:15:F4:6E:F1:89
Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
Certificate serial: 010D0C9F43285848573AD3768AB83857776AF000
Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/1bb690cd-2388-3eaf-881d-f9de6ab12a96.roa
Signing time: Fri 27 Dec 2024 02:00:40 +0000
ROA not before: Fri 27 Dec 2024 02:00:40 +0000
ROA not after: Thu 27 Mar 2025 01:00:40 +0000
asID: 23467
IP address blocks: 162.247.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:57:3a:d3:76:8a:b8:38:57:77:6a:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
Validity
Not Before: Dec 27 02:00:40 2024 GMT
Not After : Mar 27 01:00:40 2025 GMT
Subject: CN=5e3d21ee-a8f4-462e-b25e-19df5442a628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:2d:fb:46:7b:eb:e7:5a:90:f9:f5:9f:b1:
a8:aa:13:c2:50:bb:4b:1e:0e:b8:7b:0f:61:6c:49:
2a:6b:eb:59:ef:3e:ca:6d:60:2f:5f:3c:04:c4:21:
d0:63:77:dd:da:84:3e:2c:3f:44:5f:dc:55:d8:b7:
25:ee:cc:36:e6:c0:cf:f0:93:f8:81:e0:7c:6c:09:
31:8b:7c:00:c5:7c:3f:be:9f:86:ac:09:94:34:ec:
ca:f9:3e:35:1d:c6:11:25:ed:e0:09:25:63:8e:78:
68:3a:60:95:40:0e:5e:8c:35:b6:c3:23:1d:fe:bc:
58:5c:d4:e3:d9:1e:6a:b3:a5:38:a1:fe:ae:67:db:
bf:e6:ca:d4:3b:ae:9e:4c:fb:fb:68:92:26:42:c7:
bc:95:a6:93:9a:92:c6:94:e5:54:db:3d:f8:74:80:
5b:4a:02:41:ed:6e:95:a4:05:16:42:49:47:0a:10:
d5:ec:54:bf:fe:0a:51:bb:a6:59:9c:25:c2:45:08:
fc:4e:20:40:33:e6:f1:46:de:ce:78:13:db:35:be:
25:eb:09:0e:2c:05:26:62:5d:5a:1a:eb:a9:ad:12:
45:81:c1:79:ba:fb:a9:6f:b6:2a:d4:79:a7:c9:96:
96:0d:48:7e:9f:e6:60:db:fe:9c:db:7f:69:85:44:
01:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:20:39:55:E7:04:FF:F8:DE:BE:9E:53:8F:BA:BC:15:F4:6E:F1:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/1bb690cd-2388-3eaf-881d-f9de6ab12a96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl
X509v3 Authority Key Identifier:
keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
sbgp-ipAddrBlock: critical
IPv4:
162.247.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:82:7c:cb:50:45:43:58:33:eb:4c:56:dc:7c:4e:4f:65:09:
60:6a:2e:63:c4:db:8f:f6:73:25:78:f4:bf:1e:99:45:da:11:
f0:bf:af:a7:43:b5:80:bf:c2:a8:2b:50:4f:a0:41:ae:c4:27:
23:c5:c0:3f:bd:2f:09:cb:26:2c:89:dc:13:96:b4:8e:f9:55:
fe:b7:e5:3a:97:e9:a9:14:ce:98:c3:6f:da:d5:4b:0e:ce:4c:
af:fc:56:6f:9a:ff:71:b9:f6:d0:c9:b9:3b:70:f9:a9:c4:dd:
86:30:54:ca:6a:3e:98:c4:71:15:9e:ac:63:ee:a4:b7:ca:8e:
d3:f3:e2:8b:95:e5:44:5a:1f:9c:df:c0:78:31:e6:29:55:84:
f7:e8:17:18:7a:39:2b:e7:06:7b:e3:04:6c:df:4f:f4:90:aa:
79:cb:6e:88:55:43:6e:78:69:ad:8e:9d:27:a6:8c:49:a0:2d:
61:03:b1:64:92:59:79:51:46:7f:d1:c7:f7:e7:6a:8a:a6:8b:
f1:77:28:0b:aa:5f:fd:3e:da:33:ee:f3:71:c5:38:88:80:e7:
df:30:f7:5b:2a:84:5f:28:19:65:c4:b4:35:66:90:5b:ed:f2:
9e:47:0c:e7:dd:f9:b7:ad:a0:2e:ae:ae:b3:04:58:0d:2f:e9:
0b:17:4b:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhXOtN2irg4V3dq8AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2
ZjIyMB4XDTI0MTIyNzAyMDA0MFoXDTI1MDMyNzAxMDA0MFowLzEtMCsGA1UEAxMk
NWUzZDIxZWUtYThmNC00NjJlLWIyNWUtMTlkZjU0NDJhNjI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9kt+0Z76+dakPn1n7GoqhPCULtLHg64ew9h
bEkqa+tZ7z7KbWAvXzwExCHQY3fd2oQ+LD9EX9xV2Lcl7sw25sDP8JP4geB8bAkx
i3wAxXw/vp+GrAmUNOzK+T41HcYRJe3gCSVjjnhoOmCVQA5ejDW2wyMd/rxYXNTj
2R5qs6U4of6uZ9u/5srUO66eTPv7aJImQse8laaTmpLGlOVU2z34dIBbSgJB7W6V
pAUWQklHChDV7FS//gpRu6ZZnCXCRQj8TiBAM+bxRt7OeBPbNb4l6wkOLAUmYl1a
GuuprRJFgcF5uvupb7Yq1HmnyZaWDUh+n+Zg2/6c239phUQB0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMEgOVXnBP/43r6eU4+6vBX0bvGJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx
NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvMWJiNjkwY2QtMjM4OC0z
ZWFmLTg4MWQtZjlkZTZhYjEyYTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk
YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi
NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl
NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovfyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAqCfMtQRUNYM+tMVtx8Tk9lCWBqLmPE24/2cyV49L8emUXaEfC/r6dD
tYC/wqgrUE+gQa7EJyPFwD+9LwnLJiyJ3BOWtI75Vf635TqX6akUzpjDb9rVSw7O
TK/8Vm+a/3G59tDJuTtw+anE3YYwVMpqPpjEcRWerGPupLfKjtPz4ouV5URaH5zf
wHgx5ilVhPfoFxh6OSvnBnvjBGzfT/SQqnnLbohVQ254aa2OnSemjEmgLWEDsWSS
WXlRRn/Rx/fnaoqmi/F3KAuqX/0+2jPu83HFOIiA598w91sqhF8oGWXEtDVmkFvt
8p5HDOfd+betoC6urrMEWA0v6QsXS1E=
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:00:03 2025 by rpki-client