Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/4789457a-e489-338a-acab-d987ad29a7a6.roa
File: 4789457a-e489-338a-acab-d987ad29a7a6.roa (raw, json)
Hash identifier: jJwe6k7Ombo/QTFuCf8f+ThD0gjjmVI2AkDUSy45RTM=
Subject key identifier: 81:1C:10:6A:FE:B4:97:4D:14:BF:E1:36:3A:16:3F:48:3E:4F:AC:AD
Certificate issuer: /CN=d6d41513-869c-41f2-9319-11d1e8b95e2b
Certificate serial: 010D0C9F43285847FB1A2EC49F1E9E675FB14E40
Authority key identifier: B4:29:02:33:DF:93:BC:99:FE:07:E1:A7:D2:13:FA:C2:B9:A8:40:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/4789457a-e489-338a-acab-d987ad29a7a6.roa
Signing time: Sun 24 Nov 2024 02:00:27 +0000
ROA not before: Sun 24 Nov 2024 02:00:27 +0000
ROA not after: Sat 22 Feb 2025 02:00:27 +0000
asID: 32146
IP address blocks: 208.94.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fb:1a:2e:c4:9f:1e:9e:67:5f:b1:4e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d41513-869c-41f2-9319-11d1e8b95e2b
Validity
Not Before: Nov 24 02:00:27 2024 GMT
Not After : Feb 22 02:00:27 2025 GMT
Subject: CN=3957acae-a1f4-4857-bcbd-b29b3fab8767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b8:cb:9d:a3:5d:14:6e:52:59:5d:59:66:3a:
33:19:55:83:9e:78:8c:e5:cc:74:5e:fc:f0:51:e7:
4f:38:86:4e:7b:1d:fb:c2:73:ad:60:e9:fa:80:2b:
72:c9:06:24:4b:f8:98:e5:01:fe:72:75:9c:14:9f:
78:4b:b1:42:16:a6:af:66:95:4e:97:05:42:17:9a:
44:48:d5:ff:9f:f7:b9:67:7a:07:15:09:46:56:74:
e5:15:7a:47:33:65:92:70:ea:8e:f9:6f:de:c5:3b:
b9:cd:f0:ee:57:2f:53:8b:f2:0b:99:b9:01:83:4d:
f5:23:7f:d1:c8:33:4d:f9:8b:e3:14:42:84:65:67:
46:e1:f9:c5:32:83:df:43:d7:7a:bf:0b:ef:43:66:
e5:c7:1e:39:6c:72:ec:88:e1:cb:da:92:19:76:cf:
ae:47:35:0c:c1:cb:6a:2d:7a:d3:8d:f6:57:c3:3f:
5e:5a:38:32:70:a3:d1:a8:2b:6e:89:f8:ea:d1:43:
5d:db:65:84:82:8f:0a:74:e6:0e:fc:01:bf:29:db:
81:6d:6e:20:fb:4d:4f:3e:3b:5a:4d:39:96:f0:87:
7a:ed:1e:0d:f2:97:a1:02:6a:31:b5:c0:0d:66:ba:
22:22:9e:7c:08:5c:14:61:fe:1f:ca:97:24:ae:7c:
8b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1C:10:6A:FE:B4:97:4D:14:BF:E1:36:3A:16:3F:48:3E:4F:AC:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/4789457a-e489-338a-acab-d987ad29a7a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/d6d41513-869c-41f2-9319-11d1e8b95e2b.crl
X509v3 Authority Key Identifier:
keyid:B4:29:02:33:DF:93:BC:99:FE:07:E1:A7:D2:13:FA:C2:B9:A8:40:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b.cer
sbgp-ipAddrBlock: critical
IPv4:
208.94.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:26:d5:0a:cb:fd:cd:a1:db:f6:a6:2c:c4:f8:64:fe:27:cc:
12:55:a1:de:60:f5:a9:75:c2:dc:1e:37:49:b5:de:1f:bc:92:
a2:9c:52:b0:29:c5:0f:41:7d:e8:a9:44:2f:d5:3c:2e:16:55:
61:85:c1:50:2e:d9:b4:ee:37:23:4a:60:34:6b:d8:85:9a:f5:
87:e6:17:03:a7:00:c2:4c:92:06:93:94:26:58:3f:6e:00:c2:
d3:8c:a7:78:dc:81:99:04:1b:7a:3f:9c:17:dc:67:49:0b:2d:
44:c2:59:8a:61:8d:1d:93:55:27:90:c3:61:30:46:d3:02:d3:
34:05:57:f0:a6:25:1f:78:84:14:af:4d:11:6f:6e:38:75:2d:
67:a9:07:2a:0b:9f:86:44:e6:07:f8:67:7e:a6:04:d4:d2:e1:
17:51:7a:1d:2c:c3:f2:3c:d6:46:b2:3a:f0:2a:7e:ce:e2:e0:
b2:1e:03:7b:5a:5c:50:f8:36:37:b0:6a:05:41:0a:9f:f6:0c:
73:18:4d:68:86:02:26:e5:e7:68:5a:74:8d:43:24:e8:32:86:
d6:a3:d1:93:8a:a9:1c:03:1e:5c:57:a0:f0:c4:05:63:03:a5:
6a:6c:78:aa:18:92:94:03:a5:67:88:04:cd:36:b9:4d:93:a9:
29:a6:aa:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf7Gi7Enx6eZ1+xTkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDZkNDE1MTMtODY5Yy00MWYyLTkzMTktMTFkMWU4Yjk1
ZTJiMB4XDTI0MTEyNDAyMDAyN1oXDTI1MDIyMjAyMDAyN1owLzEtMCsGA1UEAxMk
Mzk1N2FjYWUtYTFmNC00ODU3LWJjYmQtYjI5YjNmYWI4NzY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrjLnaNdFG5SWV1ZZjozGVWDnniM5cx0Xvzw
UedPOIZOex37wnOtYOn6gCtyyQYkS/iY5QH+cnWcFJ94S7FCFqavZpVOlwVCF5pE
SNX/n/e5Z3oHFQlGVnTlFXpHM2WScOqO+W/exTu5zfDuVy9Ti/ILmbkBg031I3/R
yDNN+YvjFEKEZWdG4fnFMoPfQ9d6vwvvQ2blxx45bHLsiOHL2pIZds+uRzUMwctq
LXrTjfZXwz9eWjgycKPRqCtuifjq0UNd22WEgo8KdOYO/AG/KduBbW4g+01PPjta
TTmW8Id67R4N8pehAmoxtcANZroiIp58CFwUYf4fypckrnyLlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIEcEGr+tJdNFL/hNjoWP0g+T6ytMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNmQ0
MTUxMy04NjljLTQxZjItOTMxOS0xMWQxZThiOTVlMmIvNDc4OTQ1N2EtZTQ4OS0z
MzhhLWFjYWItZDk4N2FkMjlhN2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDZkNDE1MTMtODY5Yy00MWYyLTkz
MTktMTFkMWU4Yjk1ZTJiL2Q2ZDQxNTEzLTg2OWMtNDFmMi05MzE5LTExZDFlOGI5
NWUyYi5jcmwwHwYDVR0jBBgwFoAUtCkCM9+TvJn+B+Gn0hP6wrmoQE4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9kNmQ0MTUxMy04NjljLTQxZjItOTMxOS0xMWQx
ZThiOTVlMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F7sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEom1QrL/c2h2/amLMT4ZP4nzBJVod5g9al1wtweN0m13h+8kqKcUrAp
xQ9BfeipRC/VPC4WVWGFwVAu2bTuNyNKYDRr2IWa9YfmFwOnAMJMkgaTlCZYP24A
wtOMp3jcgZkEG3o/nBfcZ0kLLUTCWYphjR2TVSeQw2EwRtMC0zQFV/CmJR94hBSv
TRFvbjh1LWepByoLn4ZE5gf4Z36mBNTS4RdReh0sw/I81kayOvAqfs7i4LIeA3ta
XFD4NjewagVBCp/2DHMYTWiGAibl52hadI1DJOgyhtaj0ZOKqRwDHlxXoPDEBWMD
pWpseKoYkpQDpWeIBM02uU2TqSmmqgU=
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:18:34 2025 by rpki-client