Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/c38a686c-1237-3b63-8f94-0581beb86b44.roa
File: c38a686c-1237-3b63-8f94-0581beb86b44.roa (raw, json)
Hash identifier: jFLDB5kWeOT8x8QnT/jTNDWNcQZ4oM1wrVWn7Y0m+P8=
Subject key identifier: EC:D9:2C:32:DD:77:F9:16:E7:25:AE:79:01:4A:18:83:D1:FD:3C:35
Certificate issuer: /CN=9281adc0-928e-432b-8a28-e77e9cddfcfe
Certificate serial: 010D0C9F432858480214F47C5E0B0033513B9168
Authority key identifier: B3:77:E6:CF:59:C6:E8:99:D4:E7:EB:1B:5B:A1:4C:8B:14:10:50:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/c38a686c-1237-3b63-8f94-0581beb86b44.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 13543
IP address blocks: 162.253.96.0/22 maxlen: 24
2620:f4:c000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:14:f4:7c:5e:0b:00:33:51:3b:91:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9281adc0-928e-432b-8a28-e77e9cddfcfe
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=825d5428-af80-4962-8aa4-37579b7f54ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:61:43:4c:29:e5:24:c0:35:a7:b7:2a:48:07:
61:ab:cd:71:bf:19:ee:47:2b:66:f0:90:89:ea:56:
d5:e4:db:fd:38:78:f1:97:70:76:fc:14:65:f1:99:
71:8f:6b:cd:7a:51:53:c3:8b:c5:17:f8:af:15:a9:
ae:64:3a:c0:6d:b6:33:5a:65:47:2b:d4:1f:1b:93:
94:4d:7a:40:bb:0c:c0:66:9f:51:2a:fe:7f:ef:ab:
4f:b5:37:bf:1a:07:9b:12:f1:25:0d:82:da:3f:66:
93:eb:a4:b1:99:c1:e1:89:09:72:68:8c:56:b5:93:
58:78:a5:4e:f8:9d:fe:24:6e:84:05:cb:13:40:9b:
c2:70:d5:1c:f9:6d:3a:b1:9b:e4:55:db:34:e3:69:
6b:75:65:b4:de:0b:49:2f:7a:a3:28:45:d4:c6:06:
a8:24:81:78:64:b5:ab:d9:a1:13:bf:d3:f6:4a:ed:
a2:92:f1:3b:3c:44:d1:34:96:a4:c2:2f:f9:f9:9a:
52:4c:b2:e3:2a:9b:ba:71:dc:b4:c4:22:83:ad:39:
74:cf:d6:36:9a:f7:67:3d:bb:07:17:29:61:4b:b5:
9e:24:b8:84:d9:8d:6c:81:d4:ed:6b:e8:39:c6:94:
01:5f:bf:99:3c:9e:1d:2f:a1:ae:3b:7f:2f:b5:60:
fa:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D9:2C:32:DD:77:F9:16:E7:25:AE:79:01:4A:18:83:D1:FD:3C:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/c38a686c-1237-3b63-8f94-0581beb86b44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/9281adc0-928e-432b-8a28-e77e9cddfcfe.crl
X509v3 Authority Key Identifier:
keyid:B3:77:E6:CF:59:C6:E8:99:D4:E7:EB:1B:5B:A1:4C:8B:14:10:50:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe.cer
sbgp-ipAddrBlock: critical
IPv4:
162.253.96.0/22
IPv6:
2620:f4:c000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cc:4b:b4:84:ed:47:9f:5d:fc:1b:1c:34:67:3d:92:3c:64:ca:
e1:26:dc:97:2a:88:5b:9b:85:50:c1:6a:f8:d6:7a:13:26:0e:
a6:d5:1c:50:12:d8:a8:01:34:d7:05:4e:e2:b5:7d:ce:50:8e:
a6:56:a2:91:5c:bc:df:0a:8e:4c:ae:f0:40:c4:9a:5f:d4:64:
c7:3c:99:20:d9:96:de:61:4e:40:63:e9:a6:cf:27:a4:05:13:
c5:98:45:83:28:f2:0e:ca:bf:b6:0d:13:cd:98:92:af:7b:2b:
c8:cf:40:83:ef:44:ce:af:2b:9c:6b:46:d2:29:1e:01:eb:ce:
dd:47:4a:99:a6:d3:14:81:2c:29:81:99:89:a5:3d:59:1d:f9:
4e:49:4a:d6:0b:81:0c:45:db:d8:73:e6:a2:51:33:6a:a5:4e:
5e:bd:2a:a6:01:84:2b:09:f3:5f:12:c6:05:49:76:d4:1e:be:
db:c3:86:c0:e0:18:7e:e3:bc:2a:5a:ec:cc:63:27:9a:4e:c3:
03:33:67:c7:02:e0:ef:fb:36:e1:ba:f5:29:c5:c8:ae:d3:e1:
9b:fa:3c:8e:10:f9:76:c2:68:83:7a:3a:e9:c5:2f:62:43:91:
cf:39:3e:55:01:b8:ca:e2:90:7c:73:7c:32:7c:08:ab:b7:66:
25:72:2f:b2
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEgCFPR8XgsAM1E7kWgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI4MWFkYzAtOTI4ZS00MzJiLThhMjgtZTc3ZTljZGRm
Y2ZlMB4XDTI0MTEyNjE0MDAzOVoXDTI1MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk
ODI1ZDU0MjgtYWY4MC00OTYyLThhYTQtMzc1NzliN2Y1NGVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWFDTCnlJMA1p7cqSAdhq81xvxnuRytm8JCJ
6lbV5Nv9OHjxl3B2/BRl8Zlxj2vNelFTw4vFF/ivFamuZDrAbbYzWmVHK9QfG5OU
TXpAuwzAZp9RKv5/76tPtTe/GgebEvElDYLaP2aT66SxmcHhiQlyaIxWtZNYeKVO
+J3+JG6EBcsTQJvCcNUc+W06sZvkVds042lrdWW03gtJL3qjKEXUxgaoJIF4ZLWr
2aETv9P2Su2ikvE7PETRNJakwi/5+ZpSTLLjKpu6cdy0xCKDrTl0z9Y2mvdnPbsH
FylhS7WeJLiE2Y1sgdTta+g5xpQBX7+ZPJ4dL6GuO38vtWD6hwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFOzZLDLdd/kW5yWueQFKGIPR/Tw1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85Mjgx
YWRjMC05MjhlLTQzMmItOGEyOC1lNzdlOWNkZGZjZmUvYzM4YTY4NmMtMTIzNy0z
YjYzLThmOTQtMDU4MWJlYjg2YjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTI4MWFkYzAtOTI4ZS00MzJiLThh
MjgtZTc3ZTljZGRmY2ZlLzkyODFhZGMwLTkyOGUtNDMyYi04YTI4LWU3N2U5Y2Rk
ZmNmZS5jcmwwHwYDVR0jBBgwFoAUs3fmz1nG6JnU5+sbW6FMixQQUCswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85MjgxYWRjMC05MjhlLTQzMmItOGEyOC1lNzdl
OWNkZGZjZmUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCov1gMA8E
AgACMAkDBwAmIAD0wAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAzEu0hO1Hn138Gxw0Zz2SPGTK4SbclyqI
W5uFUMFq+NZ6EyYOptUcUBLYqAE01wVO4rV9zlCOplaikVy83wqOTK7wQMSaX9Rk
xzyZINmW3mFOQGPpps8npAUTxZhFgyjyDsq/tg0TzZiSr3sryM9Ag+9Ezq8rnGtG
0ikeAevO3UdKmabTFIEsKYGZiaU9WR35TklK1guBDEXb2HPmolEzaqVOXr0qpgGE
KwnzXxLGBUl21B6+28OGwOAYfuO8KlrszGMnmk7DAzNnxwLg7/s24br1KcXIrtPh
m/o8jhD5dsJog3o66cUvYkORzzk+VQG4yuKQfHN8MnwIq7dmJXIvsg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 03:54:16 2025 by rpki-client