Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/f3df7ee1-e88a-32d0-9f46-73ddedc546a6.roa
File: f3df7ee1-e88a-32d0-9f46-73ddedc546a6.roa (raw, json)
Hash identifier: dr0y3eE8V4ps1/hM5V/rtTE86DZ+NbmTRJrP36ynyx8=
Subject key identifier: F4:1B:A8:4A:13:D4:D9:14:DE:D6:1D:DB:37:22:E1:BE:FB:B0:22:DC
Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial: 010D0C9F4328584865304107C21F46CFBBE04780
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/f3df7ee1-e88a-32d0-9f46-73ddedc546a6.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 4922
IP address blocks: 24.56.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:41:07:c2:1f:46:cf:bb:e0:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=69b751c6-62c2-47ac-a723-8652f4f5661f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:29:bb:cb:2f:47:0c:af:4f:b9:5b:bb:c8:b2:
7f:88:3c:aa:1b:c5:5b:da:f2:8b:96:6f:81:ac:67:
22:76:29:61:1c:5a:b0:ca:d1:cb:c3:65:21:47:16:
3a:f4:a1:ea:4e:78:51:e1:1e:22:8f:03:1f:90:6d:
eb:5c:b4:98:4b:3d:92:a3:25:4c:b0:7d:54:b4:9a:
64:56:2d:b6:c4:b5:dd:6e:65:43:08:1c:dd:95:7d:
ca:34:fc:26:0d:fb:6d:ae:80:15:88:64:d4:09:9c:
25:d9:b9:9d:e8:72:9b:c9:a7:b3:d3:70:eb:93:c7:
76:de:d1:26:88:0c:7c:a1:3c:ef:13:07:ac:02:e3:
c2:df:1a:58:ea:99:28:24:03:19:24:7c:f9:bd:c3:
f2:52:9a:ad:9a:cc:b2:da:d5:53:34:a7:dd:40:02:
92:86:92:38:02:e5:11:8d:b3:ca:09:7f:11:83:aa:
c3:f9:33:85:1f:18:2d:4f:05:5f:f8:66:61:97:0a:
86:e4:24:e7:23:65:94:98:fe:dc:25:97:e9:c2:0f:
81:d9:86:30:9b:1d:b0:e4:d4:f5:25:94:77:dd:55:
67:c1:22:f2:85:2f:46:79:2e:7b:4a:ba:04:be:58:
e8:48:c7:d3:e1:d1:21:89:f7:f0:1d:94:a7:bb:ed:
53:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1B:A8:4A:13:D4:D9:14:DE:D6:1D:DB:37:22:E1:BE:FB:B0:22:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/f3df7ee1-e88a-32d0-9f46-73ddedc546a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
X509v3 Authority Key Identifier:
keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
sbgp-ipAddrBlock: critical
IPv4:
24.56.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:24:7c:85:41:83:31:95:5b:01:4c:25:ec:0e:b2:8b:7c:52:
ed:5a:d3:7c:c7:d3:94:58:87:f4:3b:47:98:0b:31:df:15:f1:
c2:0c:e0:65:e4:97:b0:e7:70:db:cc:3b:dd:51:20:47:d4:0f:
a6:66:b0:e8:75:b7:34:20:25:7d:48:f4:3a:2d:63:aa:f5:c3:
c4:f9:8a:ad:15:91:d8:a3:b8:11:73:c3:48:d5:79:a5:fa:d8:
95:8b:45:e5:0c:0c:b7:8d:b3:71:a9:79:b4:b2:e9:38:21:25:
c4:ad:52:77:ea:09:12:d9:39:35:5e:e8:fb:76:e0:e9:32:bb:
13:d4:5d:60:3c:71:ee:2a:56:93:dd:60:bf:a9:c0:49:a7:b9:
21:66:8e:63:04:b1:0b:2a:1a:a0:f1:92:2b:ca:b5:56:b3:41:
2b:f5:98:96:25:c2:42:30:88:77:da:cf:19:6f:8a:4d:2e:fa:
40:f2:96:21:b2:d0:62:26:f5:71:6e:14:44:54:c8:7b:df:be:
8c:96:3a:1d:7c:b6:2e:75:2a:47:d4:53:61:9f:5f:9d:13:45:
6d:72:4f:7c:02:c1:0b:5a:37:59:71:8b:42:ba:fd:b7:ee:9f:
63:88:66:41:81:17:f9:26:1f:fe:df:be:45:e2:a9:fd:c7:44:
96:e2:e1:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhlMEEHwh9Gz7vgR4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz
MTA5MB4XDTI1MDEwMTAyMDA0MFoXDTI1MDQwMTAxMDA0MFowLzEtMCsGA1UEAxMk
NjliNzUxYzYtNjJjMi00N2FjLWE3MjMtODY1MmY0ZjU2NjFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtim7yy9HDK9PuVu7yLJ/iDyqG8Vb2vKLlm+B
rGcidilhHFqwytHLw2UhRxY69KHqTnhR4R4ijwMfkG3rXLSYSz2SoyVMsH1UtJpk
Vi22xLXdbmVDCBzdlX3KNPwmDfttroAViGTUCZwl2bmd6HKbyaez03Drk8d23tEm
iAx8oTzvEwesAuPC3xpY6pkoJAMZJHz5vcPyUpqtmsyy2tVTNKfdQAKShpI4AuUR
jbPKCX8Rg6rD+TOFHxgtTwVf+GZhlwqG5CTnI2WUmP7cJZfpwg+B2YYwmx2w5NT1
JZR33VVnwSLyhS9GeS57SroEvljoSMfT4dEhiffwHZSnu+1TxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPQbqEoT1NkU3tYd2zci4b77sCLcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm
MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvZjNkZjdlZTEtZTg4YS0z
MmQwLTlmNDYtNzNkZGVkYzU0NmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm
NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh
MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3
MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGDh4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAEkfIVBgzGVWwFMJewOsot8Uu1a03zH05RYh/Q7R5gLMd8V8cIM4GXk
l7DncNvMO91RIEfUD6ZmsOh1tzQgJX1I9DotY6r1w8T5iq0VkdijuBFzw0jVeaX6
2JWLReUMDLeNs3GpebSy6TghJcStUnfqCRLZOTVe6Pt24OkyuxPUXWA8ce4qVpPd
YL+pwEmnuSFmjmMEsQsqGqDxkivKtVazQSv1mJYlwkIwiHfazxlvik0u+kDyliGy
0GIm9XFuFERUyHvfvoyWOh18ti51KkfUU2GfX50TRW1yT3wCwQtaN1lxi0K6/bfu
n2OIZkGBF/kmH/7fvkXiqf3HRJbi4eA=
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:30 2025 by rpki-client