Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/942b68f9-477e-3db3-bd4c-c8e7374bb7dd.roa
File: 942b68f9-477e-3db3-bd4c-c8e7374bb7dd.roa (raw, json)
Hash identifier: CNuE+r0HwezmIof7tzoedriMQrN95/QoN3FrxnZG9a8=
Subject key identifier: 09:CB:ED:42:D5:EC:FE:86:C2:1E:7E:8E:EE:E5:FD:D2:AD:8E:13:A6
Certificate issuer: /CN=0d51e326-4804-4f59-a629-20153f71b7fe
Certificate serial: 010D0C9F432858486D904A8D32BF46CB3F6C5700
Authority key identifier: 4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/942b68f9-477e-3db3-bd4c-c8e7374bb7dd.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 14618
IP address blocks: 204.239.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:4a:8d:32:bf:46:cb:3f:6c:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d51e326-4804-4f59-a629-20153f71b7fe
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=b3645e22-ef71-430e-8cfc-ecf4ad834807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:de:a7:a1:55:d8:6f:95:1f:9d:db:76:6e:f8:
2f:44:1a:7a:39:4f:6b:39:30:5a:62:6d:e3:98:cc:
3c:5c:b6:61:b8:13:21:40:8a:2b:c9:51:73:22:e8:
08:0e:d1:65:75:29:8e:1b:12:06:e6:53:e8:3e:30:
c5:76:ca:b6:dd:d0:57:f2:15:c5:1b:e2:f6:04:07:
ce:a4:12:31:77:8b:35:5d:81:aa:b9:3b:97:83:79:
94:e1:1b:84:bf:f3:b8:f0:32:13:b7:bf:ea:56:0e:
85:51:33:2a:6f:98:bf:9b:b9:fb:9d:81:93:75:72:
90:53:1a:b2:9c:75:7d:3c:c1:e5:a3:61:d6:5a:e0:
02:0a:54:7b:12:8e:6e:3f:8a:56:27:ab:7e:36:79:
ee:14:e9:da:8a:4e:23:af:05:74:1b:07:ae:04:53:
b9:bd:68:e2:f1:c7:ea:d6:29:95:d0:16:29:f6:eb:
57:2a:eb:db:87:b2:d6:f3:28:af:4d:c3:c2:50:c8:
72:65:9a:7c:27:68:7b:68:29:d7:d0:53:5f:b5:4a:
b8:47:34:65:96:6b:c5:dd:83:9e:ef:05:6f:49:2d:
32:c7:c8:91:b4:6e:9c:68:14:9f:2c:81:18:b6:c8:
61:b7:a5:f1:15:d9:a0:63:a1:2d:ae:d8:19:6e:1b:
4c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CB:ED:42:D5:EC:FE:86:C2:1E:7E:8E:EE:E5:FD:D2:AD:8E:13:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/942b68f9-477e-3db3-bd4c-c8e7374bb7dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.crl
X509v3 Authority Key Identifier:
keyid:4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer
sbgp-ipAddrBlock: critical
IPv4:
204.239.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:b2:2e:a0:87:8b:5d:37:4f:af:7a:f6:0d:2a:b7:ac:0d:49:
92:b2:49:73:11:06:40:ab:f7:54:54:1d:61:97:bf:4f:14:58:
8c:a2:24:5c:11:0b:aa:04:b0:f4:07:42:a5:ac:83:4a:e3:b8:
24:d3:b0:b3:98:74:7e:5f:52:b1:06:63:87:f9:6e:d0:45:1b:
e5:bf:0d:a5:c5:f9:25:7b:36:3d:af:76:2e:ff:79:10:17:7d:
98:b4:ec:45:04:5b:96:ee:10:7a:39:c4:42:ea:73:76:d1:3e:
62:ec:82:aa:57:10:06:86:0d:e0:d6:50:ee:1c:38:af:34:20:
37:8a:65:36:47:93:71:23:c2:98:61:a8:28:0e:a7:7f:4e:69:
08:3b:d3:35:d2:e1:d2:ed:87:11:cc:b9:2c:fb:eb:6a:43:54:
36:79:7c:c8:44:2e:0b:eb:a3:86:2b:00:91:39:08:1b:df:5a:
24:c0:bd:fe:be:d4:3b:70:7d:fc:5d:8b:83:2e:b9:44:72:53:
7b:7e:86:f3:29:e8:e8:1c:66:69:11:01:d7:24:b1:24:f0:d1:
3f:85:4d:7a:ed:7e:e2:02:60:63:ba:eb:27:17:27:33:ef:55:
76:84:34:63:03:ed:9a:dd:f0:5c:2b:ea:73:e5:30:5e:e2:b6:
78:50:2b:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtkEqNMr9Gyz9sVwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ1MWUzMjYtNDgwNC00ZjU5LWE2MjktMjAxNTNmNzFi
N2ZlMB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk
YjM2NDVlMjItZWY3MS00MzBlLThjZmMtZWNmNGFkODM0ODA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkN6noVXYb5Ufndt2bvgvRBp6OU9rOTBaYm3j
mMw8XLZhuBMhQIoryVFzIugIDtFldSmOGxIG5lPoPjDFdsq23dBX8hXFG+L2BAfO
pBIxd4s1XYGquTuXg3mU4RuEv/O48DITt7/qVg6FUTMqb5i/m7n7nYGTdXKQUxqy
nHV9PMHlo2HWWuACClR7Eo5uP4pWJ6t+NnnuFOnaik4jrwV0GweuBFO5vWji8cfq
1imV0BYp9utXKuvbh7LW8yivTcPCUMhyZZp8J2h7aCnX0FNftUq4RzRllmvF3YOe
7wVvSS0yx8iRtG6caBSfLIEYtshht6XxFdmgY6EtrtgZbhtMoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAnL7ULV7P6Gwh5+ju7l/dKtjhOmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDUx
ZTMyNi00ODA0LTRmNTktYTYyOS0yMDE1M2Y3MWI3ZmUvOTQyYjY4ZjktNDc3ZS0z
ZGIzLWJkNGMtYzhlNzM3NGJiN2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGQ1MWUzMjYtNDgwNC00ZjU5LWE2
MjktMjAxNTNmNzFiN2ZlLzBkNTFlMzI2LTQ4MDQtNGY1OS1hNjI5LTIwMTUzZjcx
YjdmZS5jcmwwHwYDVR0jBBgwFoAUT2EwmFSHFXGDXF5KpgiIJWQjOKAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDUxZTMyNi00ODA0LTRmNTktYTYyOS0yMDE1
M2Y3MWI3ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzO8AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABmyLqCHi103T6969g0qt6wNSZKySXMRBkCr91RUHWGXv08UWIyiJFwR
C6oEsPQHQqWsg0rjuCTTsLOYdH5fUrEGY4f5btBFG+W/DaXF+SV7Nj2vdi7/eRAX
fZi07EUEW5buEHo5xELqc3bRPmLsgqpXEAaGDeDWUO4cOK80IDeKZTZHk3Ejwphh
qCgOp39OaQg70zXS4dLthxHMuSz762pDVDZ5fMhELgvro4YrAJE5CBvfWiTAvf6+
1Dtwffxdi4MuuURyU3t+hvMp6OgcZmkRAdcksSTw0T+FTXrtfuICYGO66ycXJzPv
VXaENGMD7Zrd8Fwr6nPlMF7itnhQK/I=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:41:09 2025 by rpki-client