Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/af0f5bba-c2d7-39aa-aee6-c7b0e39be7c6.roa
File: af0f5bba-c2d7-39aa-aee6-c7b0e39be7c6.roa (raw, json)
Hash identifier: azc5Qmqf+aUK/l/GYu5WgPhkzL0cr9/NgbaGzXLEIA4=
Subject key identifier: F7:2A:BC:92:B8:A0:86:88:1B:32:3D:D6:E9:CE:4B:6C:EB:5C:06:DD
Certificate issuer: /CN=d92cf10a-b836-4dce-a8f5-f920d630995e
Certificate serial: 010D0C9F43285848239544BBE19206355147208E
Authority key identifier: 08:2A:2C:8C:F2:11:B3:A0:A4:59:C9:14:F5:8A:A8:BB:AF:DF:EF:A4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/af0f5bba-c2d7-39aa-aee6-c7b0e39be7c6.roa
Signing time: Sun 08 Dec 2024 14:00:51 +0000
ROA not before: Sun 08 Dec 2024 14:00:51 +0000
ROA not after: Sat 08 Mar 2025 14:00:51 +0000
asID: 14618
IP address blocks: 146.71.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:95:44:bb:e1:92:06:35:51:47:20:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92cf10a-b836-4dce-a8f5-f920d630995e
Validity
Not Before: Dec 8 14:00:51 2024 GMT
Not After : Mar 8 14:00:51 2025 GMT
Subject: CN=d897b9d9-8114-41ab-a44d-1ebac1cc278d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:82:52:6f:84:4c:b8:49:df:b1:ca:8b:91:89:
90:f8:f4:35:48:fc:f1:8d:10:51:51:62:ce:9a:60:
56:89:8b:de:82:83:2a:3d:68:58:9d:3b:5b:cf:85:
9e:5f:cf:7e:5a:c1:37:70:b9:d6:96:1d:40:f4:07:
e2:c6:72:82:b8:6a:98:d2:20:f2:e8:c5:6c:14:90:
21:7a:44:23:85:62:ca:65:4f:4c:2f:af:59:e3:13:
fc:ca:1e:c5:9f:06:51:80:af:76:34:60:59:5f:ed:
98:a3:12:36:52:5b:ba:03:46:8d:60:7f:95:05:62:
ca:ea:ac:a2:92:14:03:25:c5:74:c4:eb:64:cd:65:
a7:77:61:af:e4:59:26:1b:ea:1b:d8:5f:3c:73:cf:
af:58:4f:e4:54:8f:73:cb:24:6b:e9:c9:67:a3:e1:
1c:6b:76:15:82:7f:94:83:4b:84:f6:53:ff:95:91:
98:b3:03:25:e4:16:03:75:20:67:82:1d:b4:1f:f2:
08:90:67:a7:71:97:dc:ac:f6:65:0d:a1:af:f7:bd:
b1:1d:c7:8a:c1:bb:5d:df:68:4e:67:3d:b6:21:4b:
32:5a:13:83:a6:34:1c:9b:21:99:cb:19:79:d0:88:
1f:1d:49:5e:bd:c3:42:9a:8c:37:2d:70:27:cf:a1:
15:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2A:BC:92:B8:A0:86:88:1B:32:3D:D6:E9:CE:4B:6C:EB:5C:06:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/af0f5bba-c2d7-39aa-aee6-c7b0e39be7c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/d92cf10a-b836-4dce-a8f5-f920d630995e.crl
X509v3 Authority Key Identifier:
keyid:08:2A:2C:8C:F2:11:B3:A0:A4:59:C9:14:F5:8A:A8:BB:AF:DF:EF:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e.cer
sbgp-ipAddrBlock: critical
IPv4:
146.71.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:12:ea:8b:a4:35:0e:b7:d4:a5:9f:d9:32:cc:bb:cd:88:68:
4b:80:9d:c1:8b:b7:a3:5d:12:dd:ad:05:b9:b6:cb:0a:5e:d1:
86:36:e3:81:5e:65:d1:f4:c1:53:72:c0:3f:40:38:0b:76:18:
0e:1f:00:e1:a5:cd:1f:a4:fc:65:76:62:db:89:05:81:02:1d:
d6:aa:7f:3e:ac:64:f4:ce:a1:f3:36:fd:c6:81:11:67:d5:7c:
86:1a:87:c2:9b:67:6a:2a:5d:13:51:44:f4:5c:36:d1:ad:80:
e4:31:22:11:3c:9b:4a:1b:14:dd:6a:1e:ed:e4:d2:e1:56:ee:
77:e4:43:41:ee:ea:a2:31:de:11:94:3e:5b:a5:b1:a2:67:27:
65:c9:16:54:6d:3c:cb:68:c8:0b:1a:47:f9:d8:07:49:f0:cd:
c6:4c:c7:54:da:68:17:66:9e:24:66:f3:b9:90:df:d7:ca:3f:
a1:e3:98:10:a0:68:b4:ad:80:2d:39:a8:b0:c2:24:83:ce:68:
6a:d6:15:83:a8:c4:fd:cc:92:49:af:39:7e:a9:16:49:7c:d9:
7c:df:7f:44:dd:37:13:d5:9c:99:61:b9:10:23:88:6f:25:2b:
3d:3a:b9:18:80:16:b3:eb:c0:c5:81:3e:04:30:a0:ee:c0:12:
33:ab:e6:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgjlUS74ZIGNVFHII4wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDkyY2YxMGEtYjgzNi00ZGNlLWE4ZjUtZjkyMGQ2MzA5
OTVlMB4XDTI0MTIwODE0MDA1MVoXDTI1MDMwODE0MDA1MVowLzEtMCsGA1UEAxMk
ZDg5N2I5ZDktODExNC00MWFiLWE0NGQtMWViYWMxY2MyNzhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4JSb4RMuEnfscqLkYmQ+PQ1SPzxjRBRUWLO
mmBWiYvegoMqPWhYnTtbz4WeX89+WsE3cLnWlh1A9AfixnKCuGqY0iDy6MVsFJAh
ekQjhWLKZU9ML69Z4xP8yh7FnwZRgK92NGBZX+2YoxI2Ulu6A0aNYH+VBWLK6qyi
khQDJcV0xOtkzWWnd2Gv5FkmG+ob2F88c8+vWE/kVI9zyyRr6clno+Eca3YVgn+U
g0uE9lP/lZGYswMl5BYDdSBngh20H/IIkGencZfcrPZlDaGv972xHceKwbtd32hO
Zz22IUsyWhODpjQcmyGZyxl50IgfHUlevcNCmow3LXAnz6EV/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPcqvJK4oIaIGzI91unOS2zrXAbdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kOTJj
ZjEwYS1iODM2LTRkY2UtYThmNS1mOTIwZDYzMDk5NWUvYWYwZjViYmEtYzJkNy0z
OWFhLWFlZTYtYzdiMGUzOWJlN2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDkyY2YxMGEtYjgzNi00ZGNlLWE4
ZjUtZjkyMGQ2MzA5OTVlL2Q5MmNmMTBhLWI4MzYtNGRjZS1hOGY1LWY5MjBkNjMw
OTk1ZS5jcmwwHwYDVR0jBBgwFoAUCCosjPIRs6CkWckU9Yqou6/f76QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kOTJjZjEwYS1iODM2LTRkY2UtYThmNS1mOTIw
ZDYzMDk5NWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkkcDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEYS6oukNQ631KWf2TLMu82IaEuAncGLt6NdEt2tBbm2ywpe0YY244Fe
ZdH0wVNywD9AOAt2GA4fAOGlzR+k/GV2YtuJBYECHdaqfz6sZPTOofM2/caBEWfV
fIYah8KbZ2oqXRNRRPRcNtGtgOQxIhE8m0obFN1qHu3k0uFW7nfkQ0Hu6qIx3hGU
PlulsaJnJ2XJFlRtPMtoyAsaR/nYB0nwzcZMx1TaaBdmniRm87mQ39fKP6HjmBCg
aLStgC05qLDCJIPOaGrWFYOoxP3MkkmvOX6pFkl82Xzff0TdNxPVnJlhuRAjiG8l
Kz06uRiAFrPrwMWBPgQwoO7AEjOr5hg=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:53 2025 by rpki-client