Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/10b807b1-e711-3d18-8639-ef43944d7fd6.roa
File: 10b807b1-e711-3d18-8639-ef43944d7fd6.roa (raw, json)
Hash identifier: RUevl3netBgWv40lBqdrC3U7u8PzFsPH2yfek4B0QeA=
Subject key identifier: 2B:3A:DB:ED:C8:0C:25:86:1A:A1:82:56:78:D0:27:AF:17:F1:3F:94
Certificate issuer: /CN=8f6663be-0957-45cd-86d6-e3d6354f6b9b
Certificate serial: 010D0C9F4328584838854A891ACD015E4AB52380
Authority key identifier: 95:35:DC:88:C9:4E:85:61:93:6A:C8:A6:BD:08:11:D0:A0:AE:7E:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/10b807b1-e711-3d18-8639-ef43944d7fd6.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 396982
IP address blocks: 168.100.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:4a:89:1a:cd:01:5e:4a:b5:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6663be-0957-45cd-86d6-e3d6354f6b9b
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=39d79ea5-b772-4678-a6e9-246aaec41477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:48:33:d3:38:51:1a:7e:8a:55:72:06:8f:a0:
a2:38:f3:b1:ed:16:56:0e:d9:e0:f0:10:8f:15:8f:
e9:ea:3a:79:29:c6:cb:a6:f8:96:37:05:b4:d7:de:
6f:8e:6b:8a:5b:30:41:e6:80:38:6f:47:c4:89:49:
86:3a:8c:65:d3:72:e6:2a:13:b1:d1:05:a4:61:5c:
fc:29:dd:1f:32:7b:02:d6:55:e3:20:57:34:ab:e4:
1f:82:f0:11:7f:a3:b6:63:cc:95:dd:68:66:19:ed:
3b:27:75:e4:72:0f:fe:4d:87:06:3a:43:2d:85:4b:
ff:86:07:b2:9c:95:c3:de:78:29:17:94:05:e6:4a:
c0:5b:cd:80:6e:92:2e:b7:ad:f7:58:36:5f:32:6f:
a3:de:0e:87:62:5a:a5:cf:d5:08:59:31:ed:22:4c:
23:73:37:13:15:a2:d8:64:11:d6:58:a5:2f:0e:63:
33:e1:47:e4:38:3f:ce:7f:2a:44:ca:79:b5:6b:70:
55:37:e1:d2:5d:08:f0:b7:03:35:94:a0:50:8f:6a:
21:17:81:0e:de:16:38:91:8c:7f:9b:33:16:01:49:
e3:b4:cd:9a:2f:b1:7f:8e:2f:7e:56:bd:fa:af:33:
6b:93:c8:8d:2f:88:05:c4:ea:21:f8:d6:9c:c9:8f:
0d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3A:DB:ED:C8:0C:25:86:1A:A1:82:56:78:D0:27:AF:17:F1:3F:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/10b807b1-e711-3d18-8639-ef43944d7fd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/8f6663be-0957-45cd-86d6-e3d6354f6b9b.crl
X509v3 Authority Key Identifier:
keyid:95:35:DC:88:C9:4E:85:61:93:6A:C8:A6:BD:08:11:D0:A0:AE:7E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b.cer
sbgp-ipAddrBlock: critical
IPv4:
168.100.24.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:f4:2c:26:62:b2:2e:50:74:ba:7e:46:f6:d0:c3:36:78:8b:
31:40:e1:70:46:3f:ca:c7:73:a5:bb:8e:6e:1e:2d:64:47:e9:
66:0c:ac:c0:8f:f5:5a:0e:ac:e1:07:43:ce:50:32:9f:4e:b0:
01:d2:dc:bf:a0:d1:01:da:59:ab:f8:c5:da:5c:33:62:ed:f2:
66:0a:ed:5b:3e:55:f2:79:5f:a8:32:dc:a9:fe:3e:64:69:4e:
79:07:84:69:70:ee:94:91:89:88:2a:37:03:32:28:11:dd:10:
3f:4b:db:56:d5:80:0c:fc:fc:d8:6c:70:32:c2:42:04:36:ba:
16:43:8a:b4:ce:1c:88:7e:9f:f3:c7:77:fc:95:2b:14:5f:23:
00:31:3b:d2:8b:56:72:0e:86:df:be:0b:ef:6c:8e:f7:a3:a3:
bb:ac:e3:f1:35:e6:2b:21:c6:fb:27:aa:d5:bb:0b:6a:26:dc:
6a:9d:6f:41:b9:d4:46:9b:3f:9c:fc:e6:d5:8a:e2:f1:05:37:
bc:d7:1b:05:38:8b:c4:be:2e:b6:2f:bd:6b:e3:3c:f2:97:93:
41:86:70:67:54:e0:39:fd:bb:89:38:08:d5:7c:77:73:f1:e2:
90:97:95:1a:98:4e:49:e2:34:b0:c8:e3:9a:54:13:ed:f8:0d:
97:92:ee:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg4hUqJGs0BXkq1I4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY2NjYzYmUtMDk1Ny00NWNkLTg2ZDYtZTNkNjM1NGY2
YjliMB4XDTI0MTIxNjAyMDAzOVoXDTI1MDMxNjAxMDAzOVowLzEtMCsGA1UEAxMk
MzlkNzllYTUtYjc3Mi00Njc4LWE2ZTktMjQ2YWFlYzQxNDc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kgz0zhRGn6KVXIGj6CiOPOx7RZWDtng8BCP
FY/p6jp5KcbLpviWNwW0195vjmuKWzBB5oA4b0fEiUmGOoxl03LmKhOx0QWkYVz8
Kd0fMnsC1lXjIFc0q+QfgvARf6O2Y8yV3WhmGe07J3Xkcg/+TYcGOkMthUv/hgey
nJXD3ngpF5QF5krAW82AbpIut633WDZfMm+j3g6HYlqlz9UIWTHtIkwjczcTFaLY
ZBHWWKUvDmMz4UfkOD/OfypEynm1a3BVN+HSXQjwtwM1lKBQj2ohF4EO3hY4kYx/
mzMWAUnjtM2aL7F/ji9+Vr36rzNrk8iNL4gFxOoh+NacyY8NrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCs62+3IDCWGGqGCVnjQJ68X8T+UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84ZjY2
NjNiZS0wOTU3LTQ1Y2QtODZkNi1lM2Q2MzU0ZjZiOWIvMTBiODA3YjEtZTcxMS0z
ZDE4LTg2MzktZWY0Mzk0NGQ3ZmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGY2NjYzYmUtMDk1Ny00NWNkLTg2
ZDYtZTNkNjM1NGY2YjliLzhmNjY2M2JlLTA5NTctNDVjZC04NmQ2LWUzZDYzNTRm
NmI5Yi5jcmwwHwYDVR0jBBgwFoAUlTXciMlOhWGTasimvQgR0KCufsYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84ZjY2NjNiZS0wOTU3LTQ1Y2QtODZkNi1lM2Q2
MzU0ZjZiOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqGQYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGr0LCZisi5QdLp+RvbQwzZ4izFA4XBGP8rHc6W7jm4eLWRH6WYMrMCP
9VoOrOEHQ85QMp9OsAHS3L+g0QHaWav4xdpcM2Lt8mYK7Vs+VfJ5X6gy3Kn+PmRp
TnkHhGlw7pSRiYgqNwMyKBHdED9L21bVgAz8/NhscDLCQgQ2uhZDirTOHIh+n/PH
d/yVKxRfIwAxO9KLVnIOht++C+9sjvejo7us4/E15ishxvsnqtW7C2om3Gqdb0G5
1EabP5z85tWK4vEFN7zXGwU4i8S+LrYvvWvjPPKXk0GGcGdU4Dn9u4k4CNV8d3Px
4pCXlRqYTkniNLDI45pUE+34DZeS7i4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:48:51 2025 by rpki-client