Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/ec1ddf1c-ca8c-3475-a09c-368212c2e735.roa
File: ec1ddf1c-ca8c-3475-a09c-368212c2e735.roa (raw, json)
Hash identifier: xA8xk/Ka3Cy0fBc4U0kcWwbSJDuA8tYtx+m9bkzfFT8=
Subject key identifier: 43:EA:9A:0C:CA:5B:1A:D2:00:00:48:D9:8B:5D:33:49:9B:A8:4F:0C
Certificate issuer: /CN=b031f288-aa10-4c6d-b640-6749f212c6b7
Certificate serial: 010D0C9F432858484C1030B78580357AADAD9180
Authority key identifier: A7:28:DE:7B:DB:D3:74:3B:97:C7:D9:08:68:12:83:7C:A7:31:E7:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/ec1ddf1c-ca8c-3475-a09c-368212c2e735.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 19905
IP address blocks: 24.225.112.0/20 maxlen: 24
216.172.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:30:b7:85:80:35:7a:ad:ad:91:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b031f288-aa10-4c6d-b640-6749f212c6b7
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=73ee08be-7f46-47d0-a5b6-5583435b0c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6f:f2:78:1a:35:0c:73:41:5d:06:53:39:ab:
09:5f:6d:d6:d6:68:4d:51:9b:d4:b0:2c:47:5b:06:
c1:87:7d:fa:1d:84:d0:aa:c8:4c:0a:c3:cb:44:23:
80:ab:50:d4:12:83:47:82:c9:04:3b:8f:3e:63:07:
4c:6c:6d:a2:33:46:0e:86:7a:88:36:b7:e1:5c:37:
40:d8:f7:9c:4b:7f:b6:24:3d:9f:ba:aa:0d:c8:35:
bb:57:4b:00:10:e8:4b:56:c4:6d:85:bd:15:a8:8e:
0a:57:26:d5:b4:59:34:ef:81:0a:49:fc:9e:4b:1d:
99:5b:42:f9:5b:fb:45:cf:e4:a8:fc:c2:a8:e6:38:
15:6b:65:73:4b:f9:0f:7b:92:76:4b:e0:04:d5:c2:
88:8e:38:6c:30:56:be:87:56:52:e8:7c:41:f2:00:
34:29:13:00:0e:09:cf:82:b9:52:86:58:fc:bf:09:
d4:ce:f4:dd:52:83:f6:01:b2:68:80:ff:a6:22:18:
74:59:a2:37:c7:7b:92:28:7a:2e:84:41:9c:98:1a:
53:ea:20:cb:11:04:00:93:e5:fb:65:fe:f7:c7:e7:
9b:a6:a7:71:98:ac:89:a4:c4:28:7e:82:c6:b4:87:
3a:c8:b1:7b:3f:21:35:41:8c:2c:33:46:70:32:62:
8c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EA:9A:0C:CA:5B:1A:D2:00:00:48:D9:8B:5D:33:49:9B:A8:4F:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/ec1ddf1c-ca8c-3475-a09c-368212c2e735.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.crl
X509v3 Authority Key Identifier:
keyid:A7:28:DE:7B:DB:D3:74:3B:97:C7:D9:08:68:12:83:7C:A7:31:E7:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer
sbgp-ipAddrBlock: critical
IPv4:
24.225.112.0/20
216.172.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:f0:c6:b7:41:60:a5:f9:58:c7:13:1e:e8:5a:cf:d9:a6:99:
d6:8e:df:3c:42:83:d0:b4:b5:32:2f:a7:77:48:8a:4e:31:46:
b7:a0:4f:d1:1f:95:d9:dc:a8:7e:56:85:c8:a7:44:4c:49:60:
4d:a4:63:a5:f0:d2:db:73:ec:d0:a8:c4:98:da:37:7b:ae:80:
54:2d:59:6c:13:ed:a6:7c:e9:24:d5:91:0b:9a:29:dd:47:ba:
fa:6b:55:e2:c3:a4:e7:03:8a:c0:02:e3:41:12:40:57:9a:e1:
19:c8:c7:00:1c:b3:d5:21:86:15:9a:aa:2e:1d:01:de:1e:c2:
10:9f:37:74:ff:f8:60:6a:91:fe:19:ec:4b:a6:c2:06:db:d9:
94:34:90:47:c5:96:a9:80:99:81:eb:8f:c0:b5:ac:ef:90:ed:
cd:ab:6f:d3:bc:38:1e:b1:5d:d6:c9:b5:1c:a9:63:87:2d:21:
10:7b:ba:d0:b3:5c:03:da:db:70:ea:d4:46:42:e5:40:16:e9:
69:96:80:3a:7f:46:ec:fb:0a:db:c8:25:75:af:7d:33:5b:d3:
86:f4:f6:5d:76:f7:b2:43:79:cb:e3:63:da:c0:0c:fd:8c:74:
da:1c:2b:e4:10:fe:a8:aa:0e:e1:4d:ec:aa:c6:bc:ae:cc:c8:
17:83:77:b3
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEhMEDC3hYA1eq2tkYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjAzMWYyODgtYWExMC00YzZkLWI2NDAtNjc0OWYyMTJj
NmI3MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
NzNlZTA4YmUtN2Y0Ni00N2QwLWE1YjYtNTU4MzQzNWIwYzQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiG/yeBo1DHNBXQZTOasJX23W1mhNUZvUsCxH
WwbBh336HYTQqshMCsPLRCOAq1DUEoNHgskEO48+YwdMbG2iM0YOhnqINrfhXDdA
2PecS3+2JD2fuqoNyDW7V0sAEOhLVsRthb0VqI4KVybVtFk074EKSfyeSx2ZW0L5
W/tFz+So/MKo5jgVa2VzS/kPe5J2S+AE1cKIjjhsMFa+h1ZS6HxB8gA0KRMADgnP
grlShlj8vwnUzvTdUoP2AbJogP+mIhh0WaI3x3uSKHouhEGcmBpT6iDLEQQAk+X7
Zf73x+ebpqdxmKyJpMQofoLGtIc6yLF7PyE1QYwsM0ZwMmKMvQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFEPqmgzKWxrSAABI2YtdM0mbqE8MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iMDMx
ZjI4OC1hYTEwLTRjNmQtYjY0MC02NzQ5ZjIxMmM2YjcvZWMxZGRmMWMtY2E4Yy0z
NDc1LWEwOWMtMzY4MjEyYzJlNzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjAzMWYyODgtYWExMC00YzZkLWI2
NDAtNjc0OWYyMTJjNmI3L2IwMzFmMjg4LWFhMTAtNGM2ZC1iNjQwLTY3NDlmMjEy
YzZiNy5jcmwwHwYDVR0jBBgwFoAUpyjee9vTdDuXx9kIaBKDfKcx5w0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iMDMxZjI4OC1hYTEwLTRjNmQtYjY0MC02NzQ5
ZjIxMmM2YjcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEGOFwAwQE
2KxwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBADjwxrdBYKX5WMcTHuhaz9mmmdaO3zxCg9C0tTIvp3dIik4x
RregT9EfldncqH5WhcinRExJYE2kY6Xw0ttz7NCoxJjaN3uugFQtWWwT7aZ86STV
kQuaKd1HuvprVeLDpOcDisAC40ESQFea4RnIxwAcs9UhhhWaqi4dAd4ewhCfN3T/
+GBqkf4Z7Eumwgbb2ZQ0kEfFlqmAmYHrj8C1rO+Q7c2rb9O8OB6xXdbJtRypY4ct
IRB7utCzXAPa23Dq1EZC5UAW6WmWgDp/Ruz7CtvIJXWvfTNb04b09l1297JDecvj
Y9rADP2MdNocK+QQ/qiqDuFN7KrGvK7MyBeDd7M=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:13:23 2025 by rpki-client