Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/d24e1119-5be2-3190-a36f-e8056d9c96aa.roa
File: d24e1119-5be2-3190-a36f-e8056d9c96aa.roa (raw, json)
Hash identifier: a8239oiEhId2BqbN5HFkiZZZ4fs+Cskn/kHViRDUEfo=
Subject key identifier: B0:E6:99:9F:23:67:36:F7:80:7D:20:DC:62:A4:3F:FD:6A:34:27:D3
Certificate issuer: /CN=e8344a1b-565c-4cdf-b2ee-9556f276e3b6
Certificate serial: 010D0C9F4328584858A05882DFE29E536BAAFF00
Authority key identifier: 26:7C:FE:57:A0:4A:CC:73:CA:2A:1C:0B:3E:7C:C5:1E:7F:AF:95:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/d24e1119-5be2-3190-a36f-e8056d9c96aa.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 16509
IP address blocks: 192.172.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:58:82:df:e2:9e:53:6b:aa:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8344a1b-565c-4cdf-b2ee-9556f276e3b6
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=27a6c145-3c3c-4993-9943-a36a96455e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3a:08:d4:b6:c1:44:26:ab:0d:1b:a0:5f:9b:
41:a0:52:17:92:75:f0:8c:8d:9e:d8:4e:79:db:e5:
06:f0:49:3a:07:13:a1:fa:9d:a7:91:68:fb:82:b6:
e9:34:64:64:ab:55:eb:b5:ea:f3:7d:17:b1:fa:8c:
16:ee:88:65:d1:d6:5d:c6:43:64:e3:23:bf:09:5c:
1f:61:39:45:c9:85:d9:29:1a:f1:92:15:d9:86:6b:
bf:41:e7:aa:b9:cc:e5:38:39:4d:9b:48:76:34:73:
99:81:1c:0e:be:76:82:53:bd:c1:2d:d5:6e:3f:22:
65:76:ee:a0:40:73:c1:89:3b:64:a1:0c:15:1e:8d:
c6:51:73:ac:5d:15:9e:16:2e:80:d9:b6:d3:11:4f:
f7:32:ca:86:e8:dc:31:ad:19:92:0f:0f:3a:6c:65:
c6:1f:8c:59:e3:cb:76:80:f0:46:1e:c7:c7:ff:8f:
59:1f:38:a7:6c:ed:e0:94:b6:2e:a9:2c:4b:b5:15:
b1:cf:74:f4:e0:3e:73:a7:36:bb:5d:60:fa:ee:41:
75:cd:e7:81:e1:81:59:b1:7c:8f:d2:50:90:27:d7:
4e:3a:92:b0:e0:e3:6c:dd:54:dc:5d:73:a7:e6:59:
5c:c9:01:4c:96:03:de:5e:ee:b7:79:27:12:ab:8d:
ff:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E6:99:9F:23:67:36:F7:80:7D:20:DC:62:A4:3F:FD:6A:34:27:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/d24e1119-5be2-3190-a36f-e8056d9c96aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.crl
X509v3 Authority Key Identifier:
keyid:26:7C:FE:57:A0:4A:CC:73:CA:2A:1C:0B:3E:7C:C5:1E:7F:AF:95:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.cer
sbgp-ipAddrBlock: critical
IPv4:
192.172.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:63:1a:aa:50:8a:be:30:08:36:e3:da:69:c6:be:43:58:e7:
dc:12:19:f1:5e:8c:4d:f9:b3:90:2f:71:67:e6:28:8a:ac:84:
09:e3:05:86:fe:00:c9:17:a0:ea:51:4f:44:7b:08:a7:26:3e:
16:12:f2:c3:4d:4b:66:9a:ed:2d:27:b5:33:a6:9a:60:9d:19:
94:48:95:e9:83:eb:8a:e2:b9:ab:6b:f3:3e:c5:1b:8a:81:9e:
ec:50:6e:57:1e:fd:9c:f9:09:8a:2c:29:2a:1c:46:11:2e:81:
2d:48:10:6c:96:87:72:07:13:91:ac:c1:4a:11:66:58:20:7e:
81:c0:e3:87:78:2c:da:5f:f3:b1:9f:95:09:a4:9b:95:25:ab:
1e:2c:b7:7d:b0:ea:3e:aa:47:a4:a9:0f:9a:ec:58:6a:fc:ad:
2e:80:96:21:4d:6b:cd:db:9c:70:1e:55:3d:55:46:0c:8d:93:
18:51:aa:f4:b0:8c:59:0e:e6:9e:b5:a6:ea:f9:8c:eb:01:75:
01:c5:df:a4:bc:3e:0e:fc:54:25:14:e6:ba:f1:35:56:30:78:
eb:13:ac:3a:8b:5f:01:d4:32:c7:30:61:ed:35:8f:82:01:3a:
22:e1:63:57:3a:67:ed:78:db:9c:80:c5:6a:85:e4:a3:dd:40:
4f:9b:17:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhYoFiC3+KeU2uq/wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTgzNDRhMWItNTY1Yy00Y2RmLWIyZWUtOTU1NmYyNzZl
M2I2MB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk
MjdhNmMxNDUtM2MzYy00OTkzLTk5NDMtYTM2YTk2NDU1ZTFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0joI1LbBRCarDRugX5tBoFIXknXwjI2e2E55
2+UG8Ek6BxOh+p2nkWj7grbpNGRkq1XrterzfRex+owW7ohl0dZdxkNk4yO/CVwf
YTlFyYXZKRrxkhXZhmu/QeequczlODlNm0h2NHOZgRwOvnaCU73BLdVuPyJldu6g
QHPBiTtkoQwVHo3GUXOsXRWeFi6A2bbTEU/3MsqG6NwxrRmSDw86bGXGH4xZ48t2
gPBGHsfH/49ZHzinbO3glLYuqSxLtRWxz3T04D5zpza7XWD67kF1zeeB4YFZsXyP
0lCQJ9dOOpKw4ONs3VTcXXOn5llcyQFMlgPeXu63eScSq43/ZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLDmmZ8jZzb3gH0g3GKkP/1qNCfTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lODM0
NGExYi01NjVjLTRjZGYtYjJlZS05NTU2ZjI3NmUzYjYvZDI0ZTExMTktNWJlMi0z
MTkwLWEzNmYtZTgwNTZkOWM5NmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTgzNDRhMWItNTY1Yy00Y2RmLWIy
ZWUtOTU1NmYyNzZlM2I2L2U4MzQ0YTFiLTU2NWMtNGNkZi1iMmVlLTk1NTZmMjc2
ZTNiNi5jcmwwHwYDVR0jBBgwFoAUJnz+V6BKzHPKKhwLPnzFHn+vlUEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lODM0NGExYi01NjVjLTRjZGYtYjJlZS05NTU2
ZjI3NmUzYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKzdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFVjGqpQir4wCDbj2mnGvkNY59wSGfFejE35s5AvcWfmKIqshAnjBYb+
AMkXoOpRT0R7CKcmPhYS8sNNS2aa7S0ntTOmmmCdGZRIlemD64riuatr8z7FG4qB
nuxQblce/Zz5CYosKSocRhEugS1IEGyWh3IHE5GswUoRZlggfoHA44d4LNpf87Gf
lQmkm5Ulqx4st32w6j6qR6SpD5rsWGr8rS6AliFNa83bnHAeVT1VRgyNkxhRqvSw
jFkO5p61pur5jOsBdQHF36S8Pg78VCUU5rrxNVYweOsTrDqLXwHUMscwYe01j4IB
OiLhY1c6Z+1425yAxWqF5KPdQE+bF2U=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:25:10 2025 by rpki-client