Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/20e1bdbe-6cd6-3abd-bf9c-c3c30d632928.roa
File: 20e1bdbe-6cd6-3abd-bf9c-c3c30d632928.roa (raw, json)
Hash identifier: 4H89tX9Mflj92MedpJU+43nj9g7LE2HEGZ7lx7114CY=
Subject key identifier: B8:34:02:C0:DF:0A:51:94:86:7B:E3:5F:0C:22:FE:D5:1F:AD:A2:A7
Certificate issuer: /CN=1eceffa4-1513-452e-91b8-8d0a0b51f920
Certificate serial: 010D0C9F432858484C10241FA4CC814E1745B880
Authority key identifier: CE:4F:2D:49:31:F6:60:51:61:7F:25:7F:31:32:1C:1E:96:CB:7C:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/20e1bdbe-6cd6-3abd-bf9c-c3c30d632928.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 18780
IP address blocks: 69.55.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:24:1f:a4:cc:81:4e:17:45:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eceffa4-1513-452e-91b8-8d0a0b51f920
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=22675453-ecf8-4735-b567-f0fc5d538d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2a:94:2c:3b:56:87:98:87:1b:4f:e1:95:47:
17:2d:1e:c5:7f:2a:fd:9a:31:84:75:51:53:8e:4f:
dc:52:66:d3:44:84:2c:38:71:9e:ff:f9:eb:eb:5f:
fc:15:6e:3b:e3:d0:ac:35:3e:6f:ea:59:1b:5a:43:
50:c7:9d:4e:a0:0e:87:13:13:42:32:8a:79:2e:da:
8c:d8:f2:43:fe:3a:26:cf:00:e3:9a:c5:46:74:34:
cd:de:fc:18:73:ea:0b:e3:9c:09:c5:f7:f3:2c:58:
d2:77:35:e0:71:62:3e:5a:16:83:89:b9:21:f3:8a:
bc:3a:16:f2:7a:dc:34:8f:82:cb:52:17:83:e0:d1:
59:35:05:e0:65:1b:70:58:3f:65:54:95:4b:aa:a1:
c9:53:2a:d6:12:e2:3c:c0:9e:fa:eb:b1:2c:e6:78:
b1:cd:50:bd:06:a8:13:46:87:c8:b7:2c:2f:35:92:
94:e3:bc:6e:84:21:fb:f3:a9:c1:ce:ea:72:fc:e1:
bd:c8:dd:05:d3:c6:d5:4a:84:89:93:93:dc:c6:89:
f4:42:8a:b8:6d:f8:03:16:71:b0:a6:e4:89:04:db:
15:82:ac:e0:cb:12:39:d2:f4:fd:68:56:78:ae:0a:
e5:75:d9:ea:17:90:95:bc:6e:3b:ec:e6:4b:65:bd:
61:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:34:02:C0:DF:0A:51:94:86:7B:E3:5F:0C:22:FE:D5:1F:AD:A2:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/20e1bdbe-6cd6-3abd-bf9c-c3c30d632928.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/1eceffa4-1513-452e-91b8-8d0a0b51f920.crl
X509v3 Authority Key Identifier:
keyid:CE:4F:2D:49:31:F6:60:51:61:7F:25:7F:31:32:1C:1E:96:CB:7C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920.cer
sbgp-ipAddrBlock: critical
IPv4:
69.55.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:bf:c2:6f:30:8c:c6:96:cc:32:5c:52:af:8a:42:15:70:57:
34:f9:ba:06:44:cf:e0:e3:32:13:ac:24:19:60:81:74:e9:1c:
bf:ff:79:04:cf:f7:0f:2e:d9:42:d9:2a:b3:2d:5b:f0:06:24:
b5:fb:be:32:55:0f:3e:0c:55:c1:57:9a:1e:a1:5b:4d:5b:97:
c1:e2:1e:9e:48:f9:f3:bf:7e:a3:38:b2:80:5c:8c:01:68:89:
08:c2:8b:96:2f:1d:d5:e5:55:e9:81:51:33:1a:67:e8:6e:43:
57:b1:b5:bd:b1:fe:21:21:de:54:22:3c:c8:4c:79:7c:fe:ac:
c1:be:7a:8d:84:2e:35:47:79:cf:fc:42:71:99:91:32:7d:c9:
25:9a:7f:33:62:9b:d8:62:13:0c:c2:5b:95:77:c3:55:92:a3:
15:ed:fc:c4:62:38:c8:1c:75:78:fb:29:8a:d2:bd:fd:c7:16:
67:a6:ac:27:b5:24:16:32:6b:d9:28:f6:0b:98:f6:9c:ba:cd:
91:98:9e:c4:62:cd:15:42:44:d1:53:07:53:c7:d4:fb:4f:30:
23:44:57:fb:d1:60:76:38:fa:24:33:62:d0:a0:22:75:16:fe:
bf:cd:fa:0f:62:32:56:3b:b3:d2:5c:ae:d9:b9:ae:74:f7:68:
12:88:d2:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMECQfpMyBThdFuIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWVjZWZmYTQtMTUxMy00NTJlLTkxYjgtOGQwYTBiNTFm
OTIwMB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
MjI2NzU0NTMtZWNmOC00NzM1LWI1NjctZjBmYzVkNTM4ZDdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCqULDtWh5iHG0/hlUcXLR7Ffyr9mjGEdVFT
jk/cUmbTRIQsOHGe//nr61/8FW4749CsNT5v6lkbWkNQx51OoA6HExNCMop5LtqM
2PJD/jomzwDjmsVGdDTN3vwYc+oL45wJxffzLFjSdzXgcWI+WhaDibkh84q8Ohby
etw0j4LLUheD4NFZNQXgZRtwWD9lVJVLqqHJUyrWEuI8wJ7667Es5nixzVC9BqgT
RofItywvNZKU47xuhCH786nBzupy/OG9yN0F08bVSoSJk5Pcxon0Qoq4bfgDFnGw
puSJBNsVgqzgyxI50vT9aFZ4rgrlddnqF5CVvG477OZLZb1hyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLg0AsDfClGUhnvjXwwi/tUfraKnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xZWNl
ZmZhNC0xNTEzLTQ1MmUtOTFiOC04ZDBhMGI1MWY5MjAvMjBlMWJkYmUtNmNkNi0z
YWJkLWJmOWMtYzNjMzBkNjMyOTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWVjZWZmYTQtMTUxMy00NTJlLTkx
YjgtOGQwYTBiNTFmOTIwLzFlY2VmZmE0LTE1MTMtNDUyZS05MWI4LThkMGEwYjUx
ZjkyMC5jcmwwHwYDVR0jBBgwFoAUzk8tSTH2YFFhfyV/MTIcHpbLfA0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xZWNlZmZhNC0xNTEzLTQ1MmUtOTFiOC04ZDBh
MGI1MWY5MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERTcgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACm/wm8wjMaWzDJcUq+KQhVwVzT5ugZEz+DjMhOsJBlggXTpHL//eQTP
9w8u2ULZKrMtW/AGJLX7vjJVDz4MVcFXmh6hW01bl8HiHp5I+fO/fqM4soBcjAFo
iQjCi5YvHdXlVemBUTMaZ+huQ1extb2x/iEh3lQiPMhMeXz+rMG+eo2ELjVHec/8
QnGZkTJ9ySWafzNim9hiEwzCW5V3w1WSoxXt/MRiOMgcdXj7KYrSvf3HFmemrCe1
JBYya9ko9guY9py6zZGYnsRizRVCRNFTB1PH1PtPMCNEV/vRYHY4+iQzYtCgInUW
/r/N+g9iMlY7s9Jcrtm5rnT3aBKI0kg=
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:01:18 2025 by rpki-client