Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/c2186dfa-3aa6-379a-ac86-2c332db54c79.roa
File: c2186dfa-3aa6-379a-ac86-2c332db54c79.roa (raw, json)
Hash identifier: 8xmO69xXoiZWbXzO+oUoydmyNGbgxKuJ+QAZd2JA3gA=
Subject key identifier: 84:94:62:0D:47:05:91:9D:9A:BC:4D:00:B1:05:ED:D4:36:DD:A4:38
Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial: 010D0C9F432858486530404498007410E65FF880
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/c2186dfa-3aa6-379a-ac86-2c332db54c79.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 4922
IP address blocks: 24.49.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:40:44:98:00:74:10:e6:5f:f8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=a3361d07-f744-430e-8c1f-774777ea5512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:99:42:d9:fb:a9:7b:a6:52:55:ec:55:29:14:
bd:4b:86:6d:d4:29:15:95:77:5e:bc:8a:ab:a3:c7:
27:18:f4:10:7d:5e:b9:a3:bd:6e:74:01:6e:7b:60:
c3:87:63:65:7a:23:0e:57:44:cb:6c:9a:05:34:f2:
a2:98:b6:ff:dc:72:aa:f7:ac:7f:e3:35:6a:0a:8b:
8c:10:65:1a:bb:23:c7:fb:70:24:4e:44:c0:9c:4b:
83:a9:f8:76:c8:b5:95:74:a2:16:70:50:8a:cc:8b:
89:a3:25:a7:c5:9c:27:9b:99:0d:36:e6:1a:b1:46:
18:e9:ce:b2:50:6d:ee:b2:3f:64:fc:7a:d8:75:d2:
92:a1:ef:36:8a:93:f9:74:79:26:89:85:17:1a:9a:
26:6c:ad:d8:51:25:c4:44:ca:67:4a:dc:2b:11:35:
e6:71:f4:6a:05:74:0c:f8:78:ae:bd:97:0e:c3:c0:
72:79:9b:f7:2e:e0:1d:ba:56:d5:e2:26:86:b0:c4:
16:e0:c2:a4:69:6f:cd:71:43:78:83:9d:36:6a:08:
e3:e0:46:cb:5c:c5:ff:ad:30:3c:87:0f:ed:bc:79:
a1:fb:81:2a:ab:fa:79:ab:d9:77:ba:58:cd:de:1b:
ac:47:58:fa:9e:b3:de:57:b4:bb:8e:a3:a3:7f:8b:
16:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:94:62:0D:47:05:91:9D:9A:BC:4D:00:B1:05:ED:D4:36:DD:A4:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/c2186dfa-3aa6-379a-ac86-2c332db54c79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
X509v3 Authority Key Identifier:
keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
sbgp-ipAddrBlock: critical
IPv4:
24.49.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:34:1d:ee:5b:a6:c8:a8:03:21:74:f8:ef:b4:8f:92:ac:04:
6a:c6:fe:d1:bd:e3:2e:2d:09:0e:7d:3b:35:ab:44:a0:c8:f5:
8c:7d:2e:1b:aa:c2:b9:38:55:67:5e:d7:ec:51:f8:f7:5e:4b:
9c:2a:25:90:f6:b8:65:af:95:4e:1c:fc:ba:3b:5c:ef:9b:bd:
3b:51:ba:1b:e0:b1:95:80:e2:81:e6:79:e9:56:ce:e4:8c:0f:
ff:88:3c:0f:3f:ad:82:4e:c1:13:87:1f:71:73:47:1a:e3:07:
e8:5d:87:36:eb:df:6f:2b:79:b8:8f:71:b4:aa:4e:b8:00:1f:
3d:6d:81:08:e7:d8:24:27:b2:04:f9:72:a1:59:0a:b0:65:46:
3d:cf:0b:c8:74:60:96:05:98:0e:95:23:2c:ed:70:a9:6d:a4:
a5:46:e5:55:e2:f3:42:f2:42:c1:c1:97:2d:b5:8a:19:d8:4d:
d3:7e:fe:c1:92:1f:e6:2a:62:2b:92:93:10:74:93:e4:14:fc:
6a:29:bb:55:a9:6e:fb:63:e7:d2:90:20:70:3e:8b:6d:33:fa:
eb:ed:e9:58:48:00:43:be:a5:23:de:7e:68:14:11:28:9f:1d:
3c:8b:fe:ea:78:d3:9c:39:91:24:66:33:df:a7:33:01:be:82:
35:ae:5e:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhlMEBEmAB0EOZf+IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz
MTA5MB4XDTI1MDEwMTAyMDA0MFoXDTI1MDQwMTAxMDA0MFowLzEtMCsGA1UEAxMk
YTMzNjFkMDctZjc0NC00MzBlLThjMWYtNzc0Nzc3ZWE1NTEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZlC2fupe6ZSVexVKRS9S4Zt1CkVlXdevIqr
o8cnGPQQfV65o71udAFue2DDh2NleiMOV0TLbJoFNPKimLb/3HKq96x/4zVqCouM
EGUauyPH+3AkTkTAnEuDqfh2yLWVdKIWcFCKzIuJoyWnxZwnm5kNNuYasUYY6c6y
UG3usj9k/HrYddKSoe82ipP5dHkmiYUXGpombK3YUSXERMpnStwrETXmcfRqBXQM
+HiuvZcOw8ByeZv3LuAdulbV4iaGsMQW4MKkaW/NcUN4g502agjj4EbLXMX/rTA8
hw/tvHmh+4Eqq/p5q9l3uljN3husR1j6nrPeV7S7jqOjf4sWZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFISUYg1HBZGdmrxNALEF7dQ23aQ4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm
MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvYzIxODZkZmEtM2FhNi0z
NzlhLWFjODYtMmMzMzJkYjU0Yzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm
NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh
MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3
MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGDEQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHs0He5bpsioAyF0+O+0j5KsBGrG/tG94y4tCQ59OzWrRKDI9Yx9Lhuq
wrk4VWde1+xR+PdeS5wqJZD2uGWvlU4c/Lo7XO+bvTtRuhvgsZWA4oHmeelWzuSM
D/+IPA8/rYJOwROHH3FzRxrjB+hdhzbr328rebiPcbSqTrgAHz1tgQjn2CQnsgT5
cqFZCrBlRj3PC8h0YJYFmA6VIyztcKltpKVG5VXi80LyQsHBly21ihnYTdN+/sGS
H+YqYiuSkxB0k+QU/Gopu1Wpbvtj59KQIHA+i20z+uvt6VhIAEO+pSPefmgUESif
HTyL/up405w5kSRmM9+nMwG+gjWuXko=
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:27 2025 by rpki-client