Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3a1ce35c-70ec-3c00-ae79-f40ddd59ab0f.roa
File: 3a1ce35c-70ec-3c00-ae79-f40ddd59ab0f.roa (raw, json)
Hash identifier: i6I2owWV9hmbnMnxv4I8ac96uIK0vsU3wAMrCPn8MEg=
Subject key identifier: 97:C0:8F:43:5D:F4:FD:62:4D:76:A0:85:25:D5:84:EA:28:9D:4B:B7
Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial: 010D0C9F432858488280903EA0D9342482000200
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3a1ce35c-70ec-3c00-ae79-f40ddd59ab0f.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 12083
IP address blocks: 24.96.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:90:3e:a0:d9:34:24:82:00:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=ab40f73f-37a0-4a45-a09d-6651678acc2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:14:19:76:e5:41:be:3c:6c:85:db:f2:99:66:
f7:da:88:20:0a:3b:98:70:51:03:e8:06:0e:e7:c3:
9a:15:6d:53:5f:be:c3:c7:a9:bb:28:c1:f0:66:07:
95:12:de:8b:c3:32:19:35:ed:43:db:21:39:19:f8:
74:ed:5d:35:56:2b:15:f2:2d:f8:e6:30:8d:e4:6d:
00:dc:9e:2e:17:90:a6:d9:6b:3d:b4:60:af:35:1e:
4b:f0:7f:8c:c7:20:2d:c0:b4:16:3a:ae:02:e7:81:
7f:8f:af:71:51:de:71:08:35:ad:b8:0b:a6:4b:6a:
b0:d1:d7:75:45:85:f6:09:ba:98:e4:e5:af:03:f3:
f7:d7:fd:ee:73:49:be:c3:87:27:dd:94:b9:2e:f2:
23:58:a4:80:cf:a5:ed:98:00:37:8c:2c:81:59:de:
22:f7:e4:77:9f:3e:60:fa:d6:cd:24:24:36:f6:9c:
0a:ce:a4:cf:58:8f:38:72:70:f9:91:49:12:c6:f4:
4b:da:62:37:9d:a9:15:d7:71:3b:e3:6f:ad:47:8b:
fb:a0:ed:98:91:77:40:24:f3:4e:9e:4a:a8:94:61:
b2:9f:20:77:07:ae:88:56:1a:b3:70:31:56:2a:44:
8f:38:81:13:1c:20:0f:a3:89:a9:28:79:75:a7:8e:
ba:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C0:8F:43:5D:F4:FD:62:4D:76:A0:85:25:D5:84:EA:28:9D:4B:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3a1ce35c-70ec-3c00-ae79-f40ddd59ab0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
X509v3 Authority Key Identifier:
keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
sbgp-ipAddrBlock: critical
IPv4:
24.96.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:9f:1f:67:d4:0a:99:a0:b6:66:97:2a:87:68:56:7f:ad:b5:
ac:00:cc:a0:dd:14:04:9e:07:b0:04:97:a4:2b:58:ff:5d:e2:
06:e0:70:83:e6:4b:0c:9c:86:09:ce:99:4c:83:a7:cf:9b:d3:
ae:84:09:5f:4a:2f:28:ba:dc:72:10:ad:53:12:3d:4a:41:88:
ab:a2:ce:29:52:a9:a8:88:dd:29:76:fe:8e:77:34:f4:19:71:
8e:fa:2d:47:16:d9:1c:a6:4a:3d:3a:49:62:92:a9:bf:7c:4b:
74:4b:54:28:cc:be:3d:6f:2b:f2:b6:d3:1d:ba:a0:f6:f5:c6:
0f:b1:8c:ff:af:c2:b5:e2:7d:f3:ca:c0:d8:61:60:eb:9f:7d:
36:b1:b1:b1:65:7c:eb:57:9d:fe:ea:3b:66:92:b8:42:97:f2:
ec:2e:b2:d3:1e:cd:00:53:08:fc:0c:68:86:73:8f:05:3c:cc:
8c:60:3b:04:25:65:f4:3a:44:2c:48:1b:c6:b5:ac:13:94:99:
9b:97:92:1b:72:0e:c2:0a:0a:a1:5a:2e:d5:3a:c6:f0:d7:ec:
d5:0b:80:75:be:c7:4d:03:4f:1d:b2:87:9a:d4:ef:2c:31:d9:
3e:12:de:2a:e7:f2:6c:00:0e:92:f3:a6:da:42:a0:9d:43:bf:
be:6b:96:b6
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEiCgJA+oNk0JIIAAgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm
NWZlMB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk
YWI0MGY3M2YtMzdhMC00YTQ1LWEwOWQtNjY1MTY3OGFjYzJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBQZduVBvjxshdvymWb32oggCjuYcFED6AYO
58OaFW1TX77Dx6m7KMHwZgeVEt6LwzIZNe1D2yE5Gfh07V01VisV8i345jCN5G0A
3J4uF5Cm2Ws9tGCvNR5L8H+MxyAtwLQWOq4C54F/j69xUd5xCDWtuAumS2qw0dd1
RYX2CbqY5OWvA/P31/3uc0m+w4cn3ZS5LvIjWKSAz6XtmAA3jCyBWd4i9+R3nz5g
+tbNJCQ29pwKzqTPWI84cnD5kUkSxvRL2mI3nakV13E742+tR4v7oO2YkXdAJPNO
nkqolGGynyB3B66IVhqzcDFWKkSPOIETHCAPo4mpKHl1p466TQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJfAj0Nd9P1iTXaghSXVhOoonUu3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl
MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvM2ExY2UzNWMtNzBlYy0z
YzAwLWFlNzktZjQwZGRkNTlhYjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2
ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl
ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2
N2I3ZWY1ZmUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAGGAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEACJ8fZ9QKmaC2Zpcqh2hWf621rADMoN0UBJ4HsASXpCtY/13iBuBwg+ZL
DJyGCc6ZTIOnz5vTroQJX0ovKLrcchCtUxI9SkGIq6LOKVKpqIjdKXb+jnc09Blx
jvotRxbZHKZKPTpJYpKpv3xLdEtUKMy+PW8r8rbTHbqg9vXGD7GM/6/CteJ988rA
2GFg6599NrGxsWV861ed/uo7ZpK4Qpfy7C6y0x7NAFMI/AxohnOPBTzMjGA7BCVl
9DpELEgbxrWsE5SZm5eSG3IOwgoKoVou1TrG8Nfs1QuAdb7HTQNPHbKHmtTvLDHZ
PhLeKufybAAOkvOm2kKgnUO/vmuWtg==
-----END CERTIFICATE-----
Generated at Mon May 12 11:29:03 2025 by rpki-client