Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/ce68f14b-f6b1-3348-aee4-1ebc43a45a15.roa
File: ce68f14b-f6b1-3348-aee4-1ebc43a45a15.roa (raw, json)
Hash identifier: K5/rRWlhIOpomt86hq6FZA8qyOlxvFz1z5QRnVZYYu0=
Subject key identifier: EE:A5:9C:3C:E5:55:F2:5F:9E:4E:3A:B8:69:41:23:67:68:DC:A8:54
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F43285848159FD737269F41B13328E4C0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/ce68f14b-f6b1-3348-aee4-1ebc43a45a15.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 6233
IP address blocks: 172.96.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:d7:37:26:9f:41:b1:33:28:e4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=57ee2282-7732-4ab4-9c1c-dad3f749a641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:50:aa:3e:28:b3:c7:84:f3:14:28:78:51:33:
aa:98:1c:d2:c8:34:50:5e:de:b1:51:e5:a7:f3:e0:
93:af:09:32:3d:de:68:65:7d:09:35:aa:5e:63:d2:
07:28:d9:7a:7e:b1:c6:bb:0f:5a:30:4f:b4:8d:9d:
ec:e2:39:86:fc:9a:49:09:74:3e:bd:b5:55:b1:ff:
00:59:1a:d2:36:c9:99:1d:f3:af:b8:27:35:36:8a:
57:06:3e:2a:d0:4e:ea:b2:56:e0:0a:e0:36:40:22:
74:7d:29:1e:a9:78:ba:b9:38:26:e6:a3:e1:b6:e8:
23:75:97:3c:c8:8c:fb:a3:4c:85:2b:54:3c:b7:57:
b5:46:85:3a:ca:d7:f4:4c:03:4a:6e:71:68:fb:02:
0b:45:c9:92:70:4f:91:fe:d1:34:8d:a1:9b:b2:52:
78:9e:e2:23:51:a6:8f:26:5b:08:8f:27:65:13:3c:
7a:5a:b3:e8:a8:22:66:09:8a:b5:1c:bd:20:87:94:
2c:1b:85:9e:fb:d6:e1:12:2a:59:bf:26:55:47:f7:
5d:8c:fa:d1:25:e2:21:78:35:5f:d5:5d:62:78:f8:
c3:1c:1c:fa:89:de:60:c1:0d:9d:6a:07:77:2f:ed:
42:ca:12:d6:ed:09:80:35:33:58:92:37:d9:18:30:
4a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A5:9C:3C:E5:55:F2:5F:9E:4E:3A:B8:69:41:23:67:68:DC:A8:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/ce68f14b-f6b1-3348-aee4-1ebc43a45a15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
172.96.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:bd:d2:11:a7:36:50:93:df:a2:67:5b:0f:b3:e1:5d:3a:60:
02:36:3a:45:a6:81:b3:9a:b0:e3:41:0b:a6:f0:ca:07:9a:44:
1f:25:0b:48:26:29:82:04:da:f8:b8:c4:41:64:9f:01:0e:7e:
f9:d7:2e:35:15:19:fb:be:f1:8b:80:20:3a:83:09:6c:b8:54:
67:44:7c:5a:57:94:21:d1:0b:b0:63:17:fc:c1:b0:ec:32:16:
3e:ba:1b:53:fc:c6:40:c7:20:14:d9:ac:08:14:69:8d:8d:68:
c0:17:8c:72:da:43:23:61:ae:d3:9e:88:54:0e:9e:b9:10:e0:
58:fa:0e:26:62:57:e0:c6:3f:23:b6:3b:b2:da:a7:28:1e:38:
33:8d:40:5d:e8:37:51:e3:99:ca:87:6a:d3:10:15:58:6d:74:
62:de:62:23:84:d8:7f:7b:08:f9:39:d1:42:22:b1:61:8d:a3:
2c:cd:a5:70:9e:ee:c4:92:b7:ba:49:a8:ed:a9:ef:c1:3c:a4:
a4:a6:7b:d0:a2:69:55:5c:5f:41:24:ed:93:ba:0b:20:1c:04:
d6:59:d6:a3:a9:78:ed:6c:fa:41:2b:fd:27:ee:8b:28:ff:4d:
1e:db:d4:e3:ff:0a:6a:a5:bb:79:60:61:6d:40:77:cb:09:08:
cc:85:64:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgVn9c3Jp9BsTMo5MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI0MTIwMzE0MDA1MloXDTI1MDMwMzE0MDA1MlowLzEtMCsGA1UEAxMk
NTdlZTIyODItNzczMi00YWI0LTljMWMtZGFkM2Y3NDlhNjQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVCqPiizx4TzFCh4UTOqmBzSyDRQXt6xUeWn
8+CTrwkyPd5oZX0JNapeY9IHKNl6frHGuw9aME+0jZ3s4jmG/JpJCXQ+vbVVsf8A
WRrSNsmZHfOvuCc1NopXBj4q0E7qslbgCuA2QCJ0fSkeqXi6uTgm5qPhtugjdZc8
yIz7o0yFK1Q8t1e1RoU6ytf0TANKbnFo+wILRcmScE+R/tE0jaGbslJ4nuIjUaaP
JlsIjydlEzx6WrPoqCJmCYq1HL0gh5QsG4We+9bhEipZvyZVR/ddjPrRJeIheDVf
1V1iePjDHBz6id5gwQ2dagd3L+1CyhLW7QmANTNYkjfZGDBK8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO6lnDzlVfJfnk46uGlBI2do3KhUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvY2U2OGYxNGItZjZiMS0z
MzQ4LWFlZTQtMWViYzQzYTQ1YTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGB+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJa90hGnNlCT36JnWw+z4V06YAI2OkWmgbOasONBC6bwygeaRB8lC0gm
KYIE2vi4xEFknwEOfvnXLjUVGfu+8YuAIDqDCWy4VGdEfFpXlCHRC7BjF/zBsOwy
Fj66G1P8xkDHIBTZrAgUaY2NaMAXjHLaQyNhrtOeiFQOnrkQ4Fj6DiZiV+DGPyO2
O7LapygeODONQF3oN1HjmcqHatMQFVhtdGLeYiOE2H97CPk50UIisWGNoyzNpXCe
7sSSt7pJqO2p78E8pKSme9CiaVVcX0Ek7ZO6CyAcBNZZ1qOpeO1s+kEr/Sfuiyj/
TR7b1OP/Cmqlu3lgYW1Ad8sJCMyFZBE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:05:20 2025 by rpki-client