Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/9bdb3921-f8c7-39eb-9ac0-d1662f5affba.roa
File: 9bdb3921-f8c7-39eb-9ac0-d1662f5affba.roa (raw, json)
Hash identifier: 9V9fLrE9xXMJhpTB20tPekfJe9NLtI316F9Ez/zlk5Y=
Subject key identifier: 9C:C4:2D:81:C0:1A:62:CD:BE:F6:57:EB:3A:9D:19:33:E5:A7:BC:45
Certificate issuer: /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial: 010D0C9F4328584824FA7C7EA297282508347F80
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/9bdb3921-f8c7-39eb-9ac0-d1662f5affba.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 7018
IP address blocks: 172.96.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:7c:7e:a2:97:28:25:08:34:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=e715add0-9c88-42c7-941b-c38273dabf33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:9d:1b:f3:d4:a2:18:33:ce:9b:dd:56:94:
3a:cf:33:2d:4f:86:59:bb:73:67:b1:2d:8b:14:aa:
60:84:c3:ba:d6:d8:ba:ef:a1:a2:83:e6:2a:40:48:
cc:28:4e:ff:0a:d4:c5:06:c4:19:8c:4c:e6:99:80:
ad:38:61:da:4d:c3:82:f4:6a:e4:e7:f6:b4:19:b9:
10:17:4c:c7:8e:3f:b9:c1:79:e6:a1:9a:5d:47:23:
20:f3:fb:c7:67:54:09:3d:81:b1:94:02:35:6e:a9:
e0:5b:44:6e:1d:7a:59:50:d1:6a:81:12:1e:7c:0c:
01:60:bd:32:eb:ff:26:34:a2:48:6a:f8:d9:68:f7:
7a:c0:2f:e8:bd:66:20:9c:9a:5c:4a:60:bb:62:81:
05:36:9c:17:56:0d:5b:97:6c:12:df:bf:59:24:1e:
39:3a:95:33:ea:05:7c:7b:77:47:06:d2:14:5f:fd:
0a:64:98:1d:89:65:a1:57:4f:30:6b:26:c4:6d:e7:
b2:14:9f:bd:eb:7a:b9:a0:aa:98:24:8b:f8:8d:31:
cb:73:54:01:8d:39:40:5e:41:02:e5:07:62:ee:77:
b1:47:58:45:7a:b0:dc:8a:1c:8a:94:8b:24:c7:1e:
e6:f2:41:41:a3:c7:9c:0f:d9:a3:ae:57:3d:db:ea:
c0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C4:2D:81:C0:1A:62:CD:BE:F6:57:EB:3A:9D:19:33:E5:A7:BC:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/9bdb3921-f8c7-39eb-9ac0-d1662f5affba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl
X509v3 Authority Key Identifier:
keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
sbgp-ipAddrBlock: critical
IPv4:
172.96.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:de:55:fc:02:2a:91:87:8f:c1:e1:92:1f:9b:d7:7a:ae:c0:
4d:f2:e4:a4:ae:ff:6f:7d:91:77:79:9d:c0:bf:dc:ea:1f:4c:
21:ec:36:5d:55:c6:d4:26:76:d3:0a:6b:20:f8:15:cf:58:56:
30:1c:f2:d2:c9:4b:4e:8a:01:94:13:b5:bd:2f:1b:b6:4b:38:
b1:5c:43:67:1c:b8:b6:37:74:df:e0:a1:3d:a0:83:24:e6:16:
aa:31:37:c7:95:a3:3a:ac:b0:c8:a9:e1:df:a5:3f:f0:74:cd:
cf:f9:c3:4b:43:44:09:c1:6a:e2:af:07:70:7d:fe:3c:59:95:
f8:05:ba:10:07:50:a7:57:81:61:9d:97:30:e7:3c:9e:7b:be:
26:8e:a9:5f:c9:11:2c:f4:53:55:f1:ef:9c:ea:4a:5b:0d:36:
41:ef:dd:98:64:76:8e:22:01:87:d8:e3:d3:cf:c0:4a:99:24:
cd:a2:ce:e8:bb:50:84:10:23:93:bc:f6:12:ef:67:ac:31:d1:
1d:00:db:0f:36:83:ac:b2:20:ef:36:05:d0:11:53:17:f8:8d:
51:81:c1:53:45:03:c9:30:84:83:e7:5b:3d:63:27:29:f9:2e:
da:ec:93:46:10:89:f4:4e:49:af:f9:54:cd:f9:44:71:c4:97:
9a:ee:05:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgk+nx+opcoJQg0f4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmE0OGM3NGUtZWQ5ZS00NGU3LWJiZjUtNzZmNDczYTIx
ZDc0MB4XDTI0MTIwOTAyMDA0MFoXDTI1MDMwOTAyMDA0MFowLzEtMCsGA1UEAxMk
ZTcxNWFkZDAtOWM4OC00MmM3LTk0MWItYzM4MjczZGFiZjMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHWdG/PUohgzzpvdVpQ6zzMtT4ZZu3NnsS2L
FKpghMO61ti676Gig+YqQEjMKE7/CtTFBsQZjEzmmYCtOGHaTcOC9Grk5/a0GbkQ
F0zHjj+5wXnmoZpdRyMg8/vHZ1QJPYGxlAI1bqngW0RuHXpZUNFqgRIefAwBYL0y
6/8mNKJIavjZaPd6wC/ovWYgnJpcSmC7YoEFNpwXVg1bl2wS379ZJB45OpUz6gV8
e3dHBtIUX/0KZJgdiWWhV08waybEbeeyFJ+963q5oKqYJIv4jTHLc1QBjTlAXkEC
5Qdi7nexR1hFerDcihyKlIskxx7m8kFBo8ecD9mjrlc92+rA8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJzELYHAGmLNvvZX6zqdGTPlp7xFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4
Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0NzNhMjFkNzQvOWJkYjM5MjEtZjhjNy0z
OWViLTlhYzAtZDE2NjJmNWFmZmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmE0OGM3NGUtZWQ5ZS00NGU3LWJi
ZjUtNzZmNDczYTIxZDc0LzJhNDhjNzRlLWVkOWUtNDRlNy1iYmY1LTc2ZjQ3M2Ey
MWQ3NC5jcmwwHwYDVR0jBBgwFoAUXFrsKTJFCAeytpiC7+CI1WXlPLcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0
NzNhMjFkNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGABMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAELeVfwCKpGHj8Hhkh+b13quwE3y5KSu/299kXd5ncC/3OofTCHsNl1V
xtQmdtMKayD4Fc9YVjAc8tLJS06KAZQTtb0vG7ZLOLFcQ2ccuLY3dN/goT2ggyTm
FqoxN8eVozqssMip4d+lP/B0zc/5w0tDRAnBauKvB3B9/jxZlfgFuhAHUKdXgWGd
lzDnPJ57viaOqV/JESz0U1Xx75zqSlsNNkHv3Zhkdo4iAYfY49PPwEqZJM2izui7
UIQQI5O89hLvZ6wx0R0A2w82g6yyIO82BdARUxf4jVGBwVNFA8kwhIPnWz1jJyn5
Ltrsk0YQifROSa/5VM35RHHEl5ruBQo=
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:15:10 2025 by rpki-client