Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/7ecb8e5d-b8f3-3922-a526-de371ecf4eea.roa
File: 7ecb8e5d-b8f3-3922-a526-de371ecf4eea.roa (raw, json)
Hash identifier: Ns7mZmtGrvJ4DyetJrUyKYUOwROiL7wUJdbWFxBSYyw=
Subject key identifier: 47:A5:2B:B5:02:EC:5B:89:22:0C:AA:15:63:1C:7B:35:32:AD:2C:FE
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F43285847DC0075522113B5F900B33B00
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/7ecb8e5d-b8f3-3922-a526-de371ecf4eea.roa
Signing time: Tue 12 Nov 2024 22:38:43 +0000
ROA not before: Tue 12 Nov 2024 22:38:43 +0000
ROA not after: Mon 10 Feb 2025 22:38:43 +0000
asID: 394437
IP address blocks: 72.20.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:dc:00:75:52:21:13:b5:f9:00:b3:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Nov 12 22:38:43 2024 GMT
Not After : Feb 10 22:38:43 2025 GMT
Subject: CN=e62c20cd-414a-417a-973d-06a4e8e62bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:e6:10:48:24:11:3f:4b:8f:6f:65:9c:3b:
9a:06:b7:b1:63:db:78:6c:c9:a9:2d:3a:d3:62:7b:
8f:3f:38:f8:03:86:7d:ce:ab:8c:0c:30:0a:25:c6:
71:a2:df:b6:1d:df:d9:98:a6:21:37:d4:39:fc:7b:
a6:6a:eb:82:b9:b1:53:b4:9b:c2:d6:bb:aa:84:1e:
d8:7b:f3:54:47:1f:7c:84:8b:be:1d:f1:c2:80:27:
68:4d:c7:23:aa:41:28:58:cc:79:95:09:30:6d:19:
09:ac:3e:30:b3:a0:de:62:df:41:e1:4e:c6:fc:df:
b1:f0:90:08:5c:57:a2:88:ba:49:ac:ff:19:16:f6:
73:9e:03:75:14:49:74:68:a9:f5:88:5f:e8:bd:70:
1c:b1:21:a8:8b:71:34:86:73:35:62:ec:71:ec:6d:
1f:45:b2:7f:20:96:49:d2:d1:35:13:1e:d4:48:81:
24:c1:ad:b3:4f:eb:44:13:98:cf:ce:a3:c5:51:9e:
af:59:89:d2:74:4b:b7:be:af:9e:9b:da:48:97:72:
20:a8:bc:69:d8:b1:4d:37:ee:b2:b0:8d:3b:3e:49:
e3:05:89:56:c3:51:82:7f:2b:3e:3d:e6:2a:86:50:
30:79:14:6a:ec:64:7c:b5:41:55:41:bb:67:f9:7e:
57:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A5:2B:B5:02:EC:5B:89:22:0C:AA:15:63:1C:7B:35:32:AD:2C:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/7ecb8e5d-b8f3-3922-a526-de371ecf4eea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.20.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:61:d7:cc:d3:14:68:53:9c:cd:ed:9b:b9:2b:c0:23:5f:25:
82:ea:9e:d7:2e:a7:d3:94:a3:2a:bf:01:70:15:d5:06:41:c0:
ea:c4:c2:40:8f:a6:32:36:50:d4:78:27:7b:25:73:b8:c8:c5:
b6:3e:5d:f4:5a:7e:c3:88:f1:80:bf:0d:a1:4e:f0:65:69:99:
78:c9:ac:3f:09:cf:31:e2:80:da:40:e7:d9:10:84:37:cc:a4:
2e:39:d0:ca:75:4e:d6:e9:89:ee:12:f4:ba:6b:1a:c8:75:fe:
68:00:da:33:69:b4:e7:df:2b:bd:9b:a6:d5:b2:42:08:ef:4f:
bc:86:4e:fa:b3:68:f8:00:ff:83:6b:10:46:c8:87:4d:5b:81:
f1:63:dd:e9:10:47:79:90:6d:19:b1:cc:ae:e4:f5:42:06:be:
8e:49:d0:60:e4:4b:80:b0:a7:3b:90:5a:4d:e5:6b:6f:a2:2f:
5b:7f:2a:10:f0:97:68:7b:22:72:e8:d7:58:dc:39:4f:30:98:
db:89:1f:f9:80:45:f5:2a:b7:2d:c8:12:b8:c6:cf:a0:f2:e1:
d8:7c:60:46:03:27:37:a9:e7:5a:a7:61:5f:2f:05:df:23:59:
cf:fd:40:ce:30:d5:cf:a3:7b:e0:e4:f3:30:c6:87:79:0c:9b:
af:a5:07:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfcAHVSIRO1+QCzOwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi
MjRmMB4XDTI0MTExMjIyMzg0M1oXDTI1MDIxMDIyMzg0M1owLzEtMCsGA1UEAxMk
ZTYyYzIwY2QtNDE0YS00MTdhLTk3M2QtMDZhNGU4ZTYyYmYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWjmEEgkET9Lj29lnDuaBrexY9t4bMmpLTrT
YnuPPzj4A4Z9zquMDDAKJcZxot+2Hd/ZmKYhN9Q5/HumauuCubFTtJvC1ruqhB7Y
e/NURx98hIu+HfHCgCdoTccjqkEoWMx5lQkwbRkJrD4ws6DeYt9B4U7G/N+x8JAI
XFeiiLpJrP8ZFvZzngN1FEl0aKn1iF/ovXAcsSGoi3E0hnM1Yuxx7G0fRbJ/IJZJ
0tE1Ex7USIEkwa2zT+tEE5jPzqPFUZ6vWYnSdEu3vq+em9pIl3IgqLxp2LFNN+6y
sI07PknjBYlWw1GCfys+PeYqhlAweRRq7GR8tUFVQbtn+X5X6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEelK7UC7FuJIgyqFWMcezUyrSz+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh
MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvN2VjYjhlNWQtYjhmMy0z
OTIyLWE1MjYtZGUzNzFlY2Y0ZWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk
NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj
YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx
ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFdh18zTFGhTnM3tm7krwCNfJYLqntcup9OUoyq/AXAV1QZBwOrEwkCP
pjI2UNR4J3slc7jIxbY+XfRafsOI8YC/DaFO8GVpmXjJrD8JzzHigNpA59kQhDfM
pC450Mp1Ttbpie4S9LprGsh1/mgA2jNptOffK72bptWyQgjvT7yGTvqzaPgA/4Nr
EEbIh01bgfFj3ekQR3mQbRmxzK7k9UIGvo5J0GDkS4CwpzuQWk3la2+iL1t/KhDw
l2h7InLo11jcOU8wmNuJH/mARfUqty3IErjGz6Dy4dh8YEYDJzep51qnYV8vBd8j
Wc/9QM4w1c+je+Dk8zDGh3kMm6+lB7Q=
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:38:25 2025 by rpki-client