Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/2f4d68a2-02ee-3b78-97bd-f8cdbd0f6232.roa
File: 2f4d68a2-02ee-3b78-97bd-f8cdbd0f6232.roa (raw, json)
Hash identifier: CYNuE0LV13UD553uLvkBIk5ttUw2goQ//8bXyj84I1M=
Subject key identifier: 3B:1D:FA:04:E9:08:CE:A7:5F:B1:40:7D:BF:D9:94:B4:8C:22:2C:E1
Certificate issuer: /CN=397724ba-b516-4bac-893a-fcaae9e60f35
Certificate serial: 010D0C9F4328584845158A5CC635AF359BCF16A0
Authority key identifier: 1D:42:77:C5:31:A9:37:CC:E7:05:AD:CF:2B:3B:6B:3F:B7:EA:2C:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/2f4d68a2-02ee-3b78-97bd-f8cdbd0f6232.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 11686
IP address blocks: 96.4.0.0/15 maxlen: 32
207.191.176.0/20 maxlen: 32
2610:128::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:8a:5c:c6:35:af:35:9b:cf:16:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397724ba-b516-4bac-893a-fcaae9e60f35
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=7dff7642-d51a-420d-b8e5-d9ff1d71181f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c3:cc:91:7e:9b:f3:a1:29:02:ce:4e:12:ec:
89:50:df:6a:46:57:b2:c3:23:e4:a2:fc:30:e8:bb:
96:c2:e8:1e:77:8e:a2:7c:e2:15:27:d3:72:35:86:
1e:6f:53:5d:66:dd:e3:a2:e0:43:f7:68:39:38:38:
d8:e9:88:05:fc:ae:e8:a2:c6:41:5e:2e:f0:d4:1b:
b9:0d:02:57:9e:08:d2:9c:10:bd:9c:fa:39:de:22:
d8:d3:e7:55:53:98:7a:19:23:ef:04:be:3b:10:8a:
73:17:55:4f:5f:e7:6d:7a:7f:1a:8d:e7:0a:d8:83:
a8:71:0a:b2:be:7a:c2:d2:07:d9:e4:d2:7e:6a:dd:
44:0f:f7:e1:aa:06:5a:c0:2d:2c:bb:74:a6:0d:48:
ba:6c:ef:1c:4c:84:31:4b:f1:fc:10:f8:5f:7b:68:
e3:81:9f:cc:f4:da:37:14:a8:bb:17:71:c6:7b:f9:
75:0a:1c:53:67:04:d6:c5:73:6e:d9:52:d3:90:25:
4f:99:59:ac:ca:81:f0:08:8a:be:12:7b:0b:c5:18:
ed:00:3e:a5:6c:75:92:ef:aa:a5:80:7c:4d:2e:04:
c9:b5:8d:ef:6c:7a:cf:05:2d:1e:dc:58:d0:f8:c8:
ee:1e:55:d2:ad:92:e1:e5:2a:d0:14:73:ed:ed:f1:
92:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1D:FA:04:E9:08:CE:A7:5F:B1:40:7D:BF:D9:94:B4:8C:22:2C:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/2f4d68a2-02ee-3b78-97bd-f8cdbd0f6232.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/397724ba-b516-4bac-893a-fcaae9e60f35.crl
X509v3 Authority Key Identifier:
keyid:1D:42:77:C5:31:A9:37:CC:E7:05:AD:CF:2B:3B:6B:3F:B7:EA:2C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35.cer
sbgp-ipAddrBlock: critical
IPv4:
96.4.0.0/15
207.191.176.0/20
IPv6:
2610:128::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:fa:99:7d:30:72:93:9e:01:2f:46:03:23:0c:80:04:35:80:
2b:b5:8a:a6:2f:be:e5:3f:20:3c:ec:89:3a:40:a6:da:2a:fc:
aa:36:3c:a7:b2:85:db:86:b3:b8:2f:a8:3e:fd:42:e3:71:76:
ea:68:a4:cd:14:33:7e:8b:57:02:7e:91:c4:b1:8b:2c:cf:4a:
3f:cc:d0:22:e6:71:b1:ae:63:5c:d9:00:d5:f7:90:bc:33:a1:
be:de:7e:76:ab:2e:6f:4b:95:99:c2:59:bd:23:89:64:db:f8:
7c:5a:27:9c:d8:5d:38:f9:b3:a8:f9:1f:01:a0:3f:f3:93:6b:
32:da:f3:68:cd:7c:d1:55:c7:3c:73:19:06:8d:2f:43:10:c2:
a8:d2:87:97:13:a9:bc:bb:b9:38:4d:be:76:89:61:ed:04:91:
b6:12:1d:69:cf:a4:bc:33:44:d2:cc:7e:04:48:73:29:d0:cc:
c4:10:c0:b2:b8:54:3c:fc:63:ec:c0:8e:3b:98:96:91:9f:81:
83:7e:8c:34:07:25:a3:d3:bd:d9:ed:c0:b9:68:d8:e7:f8:8d:
34:dc:cd:6a:06:bc:7e:f1:72:3d:9b:d8:13:c3:0f:8a:e6:d6:
fb:6a:8c:2a:e5:0c:e2:99:21:d8:3f:c6:f9:8b:52:39:62:be:
c9:ac:8e:eb
-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEhFFYpcxjWvNZvPFqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk3NzI0YmEtYjUxNi00YmFjLTg5M2EtZmNhYWU5ZTYw
ZjM1MB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk
N2RmZjc2NDItZDUxYS00MjBkLWI4ZTUtZDlmZjFkNzExODFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMPMkX6b86EpAs5OEuyJUN9qRleywyPkovww
6LuWwuged46ifOIVJ9NyNYYeb1NdZt3jouBD92g5ODjY6YgF/K7oosZBXi7w1Bu5
DQJXngjSnBC9nPo53iLY0+dVU5h6GSPvBL47EIpzF1VPX+dten8ajecK2IOocQqy
vnrC0gfZ5NJ+at1ED/fhqgZawC0su3SmDUi6bO8cTIQxS/H8EPhfe2jjgZ/M9No3
FKi7F3HGe/l1ChxTZwTWxXNu2VLTkCVPmVmsyoHwCIq+EnsLxRjtAD6lbHWS76ql
gHxNLgTJtY3vbHrPBS0e3FjQ+MjuHlXSrZLh5SrQFHPt7fGS0wIDAQABo4IDaTCC
A2UwHQYDVR0OBBYEFDsd+gTpCM6nX7FAfb/ZlLSMIizhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTc3
MjRiYS1iNTE2LTRiYWMtODkzYS1mY2FhZTllNjBmMzUvMmY0ZDY4YTItMDJlZS0z
Yjc4LTk3YmQtZjhjZGJkMGY2MjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk3NzI0YmEtYjUxNi00YmFjLTg5
M2EtZmNhYWU5ZTYwZjM1LzM5NzcyNGJhLWI1MTYtNGJhYy04OTNhLWZjYWFlOWU2
MGYzNS5jcmwwHwYDVR0jBBgwFoAUHUJ3xTGpN8znBa3PKztrP7fqLJowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTc3MjRiYS1iNTE2LTRiYWMtODkzYS1mY2Fh
ZTllNjBmMzUuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjARBAIAATALAwMBYAQDBATP
v7AwDQQCAAIwBwMFACYQASgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAU/qZfTByk54BL0YDIwyABDWAK7WK
pi++5T8gPOyJOkCm2ir8qjY8p7KF24azuC+oPv1C43F26mikzRQzfotXAn6RxLGL
LM9KP8zQIuZxsa5jXNkA1feQvDOhvt5+dqsub0uVmcJZvSOJZNv4fFonnNhdOPmz
qPkfAaA/85NrMtrzaM180VXHPHMZBo0vQxDCqNKHlxOpvLu5OE2+dolh7QSRthId
ac+kvDNE0sx+BEhzKdDMxBDAsrhUPPxj7MCOO5iWkZ+Bg36MNAclo9O92e3AuWjY
5/iNNNzNaga8fvFyPZvYE8MPiubW+2qMKuUM4pkh2D/G+YtSOWK+yayO6w==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:55:17 2025 by rpki-client