Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/b5f0e06a-af60-38fc-9dee-3312e7c2b8e5.roa
File: b5f0e06a-af60-38fc-9dee-3312e7c2b8e5.roa (raw, json)
Hash identifier: CMbp5iWH3TbnvHfIAexZDt8ihfYbOKZFU2Iny48Ke3I=
Subject key identifier: 84:46:6A:C9:B7:DE:28:E0:AE:7C:06:E4:BB:6E:82:60:9D:DA:85:08
Certificate issuer: /CN=10aa04f0-7421-4813-bfda-269303d05d1d
Certificate serial: 010D0C9F43285848222FE853057766881B120A00
Authority key identifier: 4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/b5f0e06a-af60-38fc-9dee-3312e7c2b8e5.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 77
IP address blocks: 204.9.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:e8:53:05:77:66:88:1b:12:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10aa04f0-7421-4813-bfda-269303d05d1d
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=834c1628-3ba9-45bb-aaa8-c639a87f7cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:34:b6:25:7a:d3:b3:85:49:34:40:c9:95:d6:
46:ea:ca:67:69:09:98:4a:bc:ab:ee:2b:22:46:91:
e6:1d:48:d8:cd:7b:88:fc:79:ad:1b:75:d4:7d:05:
07:04:85:c4:61:ee:ad:76:38:25:fa:48:cd:ef:ff:
ee:8f:a7:a1:ef:1a:57:44:8f:33:1d:ef:c4:6e:07:
4f:03:53:50:df:2d:e6:a6:74:ae:1c:4d:99:27:47:
b3:31:83:4d:9a:73:08:92:4c:38:48:5a:57:2e:a1:
ce:57:f4:96:9f:d2:3a:88:4e:04:dd:9d:3d:76:8d:
85:2e:1e:7a:db:11:a4:96:93:47:35:5d:e4:9b:1d:
78:0b:9c:d8:5f:27:ed:57:ec:d6:21:28:c8:cf:4e:
8b:ea:58:10:d7:b0:de:cd:95:e9:48:94:e1:00:90:
30:1e:5e:ea:fd:39:df:c3:ff:11:e4:6d:c7:f0:ce:
00:c4:62:76:d3:34:76:09:56:f6:72:87:cb:54:bd:
96:92:5e:53:6a:dc:28:36:79:c7:cb:0a:89:89:17:
38:a2:93:74:4f:3e:b2:3c:1f:47:fa:b8:28:c3:c1:
db:b7:51:1e:be:35:49:97:ef:f6:9d:13:7f:92:29:
46:fa:4e:34:42:fe:b2:84:0f:b3:2f:4a:b5:89:68:
ea:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:46:6A:C9:B7:DE:28:E0:AE:7C:06:E4:BB:6E:82:60:9D:DA:85:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/b5f0e06a-af60-38fc-9dee-3312e7c2b8e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl
X509v3 Authority Key Identifier:
keyid:4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer
sbgp-ipAddrBlock: critical
IPv4:
204.9.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:bc:b6:d1:ff:1f:65:6c:01:69:0b:e2:e5:1d:cd:c5:02:e2:
17:b5:3a:6d:6c:55:3d:39:8e:e7:8e:99:7b:d1:e5:c3:cf:fb:
74:f5:6d:43:18:d7:67:3b:ac:56:97:cc:73:5b:78:49:d9:4f:
fe:a5:3d:37:5a:f8:5a:30:1a:e2:5b:56:fe:df:95:b8:64:66:
9b:cc:e6:e0:80:22:17:ad:5c:52:53:50:9f:21:77:20:43:4f:
d6:7a:f9:92:23:d0:03:33:28:05:f2:c8:45:13:da:9a:ea:03:
d7:8f:3a:7a:32:c8:6b:d7:4e:7e:96:4e:aa:03:e5:d5:c6:24:
76:19:25:b9:70:86:b6:6c:e7:42:09:79:ae:31:1f:89:75:ea:
c0:13:a1:d1:f8:84:af:a0:cf:d4:45:94:15:e6:dc:c6:4b:c8:
8f:85:85:89:05:32:80:4e:dc:21:3d:e0:6e:8c:c3:d7:07:b4:
05:e7:5a:4c:95:10:51:1d:aa:72:a4:d2:b5:06:c4:bf:0a:09:
21:a2:74:8a:ad:c6:91:d6:d5:76:7d:19:cb:b2:01:52:0a:4d:
5d:86:d0:56:d3:e2:19:91:5f:10:84:a8:33:19:fd:43:d5:7f:
5d:f1:52:6a:62:c3:58:52:a4:e9:76:00:c1:b4:b3:3f:29:66:
a3:ce:28:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgiL+hTBXdmiBsSCgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTBhYTA0ZjAtNzQyMS00ODEzLWJmZGEtMjY5MzAzZDA1
ZDFkMB4XDTI0MTIwODAyMDAzOVoXDTI1MDMwODAyMDAzOVowLzEtMCsGA1UEAxMk
ODM0YzE2MjgtM2JhOS00NWJiLWFhYTgtYzYzOWE4N2Y3Y2RkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTS2JXrTs4VJNEDJldZG6spnaQmYSryr7isi
RpHmHUjYzXuI/HmtG3XUfQUHBIXEYe6tdjgl+kjN7//uj6eh7xpXRI8zHe/EbgdP
A1NQ3y3mpnSuHE2ZJ0ezMYNNmnMIkkw4SFpXLqHOV/SWn9I6iE4E3Z09do2FLh56
2xGklpNHNV3kmx14C5zYXyftV+zWISjIz06L6lgQ17DezZXpSJThAJAwHl7q/Tnf
w/8R5G3H8M4AxGJ20zR2CVb2cofLVL2Wkl5TatwoNnnHywqJiRc4opN0Tz6yPB9H
+rgow8Hbt1EevjVJl+/2nRN/kilG+k40Qv6yhA+zL0q1iWjqFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIRGasm33ijgrnwG5LtugmCd2oUIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMGFh
MDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkzMDNkMDVkMWQvYjVmMGUwNmEtYWY2MC0z
OGZjLTlkZWUtMzMxMmU3YzJiOGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTBhYTA0ZjAtNzQyMS00ODEzLWJm
ZGEtMjY5MzAzZDA1ZDFkLzEwYWEwNGYwLTc0MjEtNDgxMy1iZmRhLTI2OTMwM2Qw
NWQxZC5jcmwwHwYDVR0jBBgwFoAUTGfGK5MkpuRq99aLqn2ln2oTfgIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8xMGFhMDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkz
MDNkMDVkMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAmBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABO8ttH/H2VsAWkL4uUdzcUC4he1Om1sVT05jueOmXvR5cPP+3T1bUMY
12c7rFaXzHNbeEnZT/6lPTda+FowGuJbVv7flbhkZpvM5uCAIhetXFJTUJ8hdyBD
T9Z6+ZIj0AMzKAXyyEUT2prqA9ePOnoyyGvXTn6WTqoD5dXGJHYZJblwhrZs50IJ
ea4xH4l16sATodH4hK+gz9RFlBXm3MZLyI+FhYkFMoBO3CE94G6Mw9cHtAXnWkyV
EFEdqnKk0rUGxL8KCSGidIqtxpHW1XZ9GcuyAVIKTV2G0FbT4hmRXxCEqDMZ/UPV
f13xUmpiw1hSpOl2AMG0sz8pZqPOKBk=
-----END CERTIFICATE-----
Generated at Tue Apr 29 20:11:21 2025 by rpki-client