Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa
File: aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa (raw, json)
Hash identifier: EYkXua0rNCxOgX+ZadvkiMPM174AcnbquYNYYO3uErk=
Subject key identifier: C7:50:70:DB:76:F9:5B:3D:28:70:E5:FA:AA:1A:1A:5F:A0:BA:E5:A0
Certificate issuer: /CN=4a06d1f9-0d04-482f-a665-8c270260e2c1
Certificate serial: 010D0C9F432858489E6B65389D4740FF266F83C0
Authority key identifier: 7B:44:2C:34:6A:A0:F4:F0:11:B5:27:93:C3:37:45:6B:6A:A6:43:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 399103
IP address blocks: 192.240.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:65:38:9d:47:40:ff:26:6f:83:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a06d1f9-0d04-482f-a665-8c270260e2c1
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=ed5a57e9-5da0-4587-9627-2e3f5da64c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:de:ee:33:a8:c7:72:d3:ee:ff:eb:38:76:49:
d4:a8:71:85:82:68:b9:f3:3f:f2:40:e4:0a:f4:2d:
64:98:cd:97:e9:81:b5:ce:4a:45:ff:7a:e4:73:92:
e9:93:3d:79:c3:6a:21:81:1b:79:2a:2f:60:34:d2:
9c:66:bc:c0:f5:66:da:58:d2:72:60:ec:9e:16:a4:
c7:6e:22:64:3c:1f:34:36:d2:0a:47:17:d5:3e:a9:
f2:59:7e:fb:81:05:d2:61:01:15:ab:14:3d:a3:72:
00:ca:c3:e6:84:ba:57:f2:1e:be:98:ce:f4:5f:2f:
6f:5c:e9:a2:91:5d:8f:ec:fa:2b:b9:f7:c2:b6:5c:
69:ea:35:72:82:db:ab:dd:16:94:d6:ff:3e:81:af:
9b:5e:d1:b7:79:03:45:14:a1:25:fa:85:e4:ae:3a:
15:6e:06:fc:f5:e1:75:60:9f:2f:ed:b6:a4:9b:94:
fe:43:7c:a4:a0:ad:26:46:c5:9e:8d:49:88:77:d2:
7c:28:f7:d3:00:06:66:2b:18:65:43:4b:66:a3:4e:
8c:63:64:cf:6f:6c:e7:0c:12:b9:1b:0b:71:f9:55:
43:de:af:a3:ff:95:03:c9:23:bb:43:fc:f0:8e:d6:
e0:52:7b:a1:22:b8:63:90:81:e5:15:53:26:25:9b:
2a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:50:70:DB:76:F9:5B:3D:28:70:E5:FA:AA:1A:1A:5F:A0:BA:E5:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.crl
X509v3 Authority Key Identifier:
keyid:7B:44:2C:34:6A:A0:F4:F0:11:B5:27:93:C3:37:45:6B:6A:A6:43:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer
sbgp-ipAddrBlock: critical
IPv4:
192.240.47.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:a4:d6:eb:23:db:3c:c0:dc:62:5c:95:42:78:f3:60:5d:74:
f4:32:3f:1d:83:b3:74:2f:bf:0c:8a:a0:fd:54:0b:17:15:94:
d3:08:c1:c2:97:74:f5:fa:57:cc:f4:65:8f:04:e2:b0:c0:eb:
f2:9c:d4:a8:b0:e2:9d:2a:dc:d9:00:c9:0d:ab:2b:52:fb:f1:
26:0a:dc:a0:af:77:be:62:3d:8a:35:8d:34:34:e8:91:59:50:
60:35:e2:08:83:42:c4:47:4d:21:e2:49:ba:8d:96:72:df:38:
e2:53:7e:dc:10:20:fc:b7:85:9a:e4:9b:3d:98:1d:f3:10:51:
0a:6b:1d:d1:bb:1c:b4:dd:6a:89:f3:47:d6:32:56:da:8b:1a:
82:f3:da:83:9e:e8:da:84:fc:c6:dd:f3:8b:a5:62:59:78:97:
15:48:c0:54:f9:d8:cf:1b:b7:93:6b:b6:3d:36:ac:0f:4a:29:
53:f6:31:2b:c4:c8:7d:64:f0:a1:2e:b9:b3:61:75:cc:9c:eb:
1b:63:c0:3c:2a:11:09:17:f3:9e:fb:54:75:5d:43:93:b9:34:
22:4f:db:24:8c:61:80:12:21:d1:82:e1:dc:5e:4d:83:ce:32:
57:d5:84:5d:9f:9a:53:48:a3:ac:a3:9c:6e:8f:68:f9:4e:67:
20:fb:68:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea2U4nUdA/yZvg8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwNmQxZjktMGQwNC00ODJmLWE2NjUtOGMyNzAyNjBl
MmMxMB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
ZWQ1YTU3ZTktNWRhMC00NTg3LTk2MjctMmUzZjVkYTY0YzNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi97uM6jHctPu/+s4dknUqHGFgmi58z/yQOQK
9C1kmM2X6YG1zkpF/3rkc5Lpkz15w2ohgRt5Ki9gNNKcZrzA9WbaWNJyYOyeFqTH
biJkPB80NtIKRxfVPqnyWX77gQXSYQEVqxQ9o3IAysPmhLpX8h6+mM70Xy9vXOmi
kV2P7PoruffCtlxp6jVygtur3RaU1v8+ga+bXtG3eQNFFKEl+oXkrjoVbgb89eF1
YJ8v7bakm5T+Q3ykoK0mRsWejUmId9J8KPfTAAZmKxhlQ0tmo06MY2TPb2znDBK5
Gwtx+VVD3q+j/5UDySO7Q/zwjtbgUnuhIrhjkIHlFVMmJZsq6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMdQcNt2+Vs9KHDl+qoaGl+guuWgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80YTA2
ZDFmOS0wZDA0LTQ4MmYtYTY2NS04YzI3MDI2MGUyYzEvYWE1ZGJhZjctOWYzNC0z
YTVhLWFiZmItMzQ0NzExYzY2ZWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGEwNmQxZjktMGQwNC00ODJmLWE2
NjUtOGMyNzAyNjBlMmMxLzRhMDZkMWY5LTBkMDQtNDgyZi1hNjY1LThjMjcwMjYw
ZTJjMS5jcmwwHwYDVR0jBBgwFoAUe0QsNGqg9PARtSeTwzdFa2qmQ+swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80YTA2ZDFmOS0wZDA0LTQ4MmYtYTY2NS04YzI3
MDI2MGUyYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPAvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF6k1usj2zzA3GJclUJ482BddPQyPx2Ds3QvvwyKoP1UCxcVlNMIwcKX
dPX6V8z0ZY8E4rDA6/Kc1Kiw4p0q3NkAyQ2rK1L78SYK3KCvd75iPYo1jTQ06JFZ
UGA14giDQsRHTSHiSbqNlnLfOOJTftwQIPy3hZrkmz2YHfMQUQprHdG7HLTdaonz
R9YyVtqLGoLz2oOe6NqE/Mbd84ulYll4lxVIwFT52M8bt5Nrtj02rA9KKVP2MSvE
yH1k8KEuubNhdcyc6xtjwDwqEQkX8577VHVdQ5O5NCJP2ySMYYASIdGC4dxeTYPO
MlfVhF2fmlNIo6yjnG6PaPlOZyD7aGo=
-----END CERTIFICATE-----
Generated at Wed Apr 30 03:50:21 2025 by rpki-client