Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/6585300d-48a8-316a-ad84-2d98521d3915.roa
File: 6585300d-48a8-316a-ad84-2d98521d3915.roa (raw, json)
Hash identifier: u+RQb8PowldNpsPQ96PmOyoBiFszE4F54tM7Hg1oBCk=
Subject key identifier: DD:89:53:66:07:27:C7:1D:C1:0A:C9:C6:AD:C8:D8:D4:D9:0F:25:19
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848143A7C2F3855EF60FE513C00
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/6585300d-48a8-316a-ad84-2d98521d3915.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33531
IP address blocks: 207.176.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:7c:2f:38:55:ef:60:fe:51:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=cce611e1-6df7-4448-851e-96b8c68a0540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f4:77:bc:b0:d2:76:84:4c:8e:f1:5e:fd:60:
09:66:18:f5:00:5e:78:19:d5:e4:55:78:36:80:40:
e2:f4:95:3c:14:69:f5:cf:87:50:9c:fe:51:65:b8:
8e:cb:b4:8d:78:49:3d:cc:f2:d2:b4:ad:9d:7d:2a:
b7:45:de:90:b1:c7:ef:f2:0f:f8:c4:e6:59:29:e6:
c8:17:a3:2c:4c:e7:72:d9:94:f0:c1:a7:3a:05:d1:
7d:24:37:a0:4b:18:33:c2:ca:e9:b5:c2:c1:68:77:
2a:9b:d7:ad:07:44:9f:6c:44:31:9c:eb:ca:13:a7:
e5:54:09:32:f0:ad:f9:70:29:2b:9b:8c:14:bb:b9:
39:7f:7c:cc:cf:c2:a1:dc:0b:8b:a2:92:5d:4e:ae:
84:e3:dd:29:d9:c1:cd:32:30:3a:09:dc:39:0a:04:
0d:90:33:d6:0b:13:e6:58:77:03:35:eb:35:88:cf:
ae:c7:41:a6:11:69:56:a5:41:3e:90:76:58:1f:bd:
d1:53:7d:84:56:6b:7d:34:11:8e:bf:4f:47:95:a9:
8f:95:e4:15:9e:c7:71:b8:21:8d:e0:ce:f2:b8:52:
57:ef:15:d2:07:1f:fa:f8:4f:06:e8:b0:82:89:c5:
96:e3:33:6f:65:d2:1c:0f:13:a5:da:7f:b2:7c:da:
16:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:89:53:66:07:27:C7:1D:C1:0A:C9:C6:AD:C8:D8:D4:D9:0F:25:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/6585300d-48a8-316a-ad84-2d98521d3915.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
207.176.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:97:88:ff:77:aa:f7:b3:ca:e3:fa:09:61:7e:c0:c6:c0:eb:
c4:35:d4:0f:94:bf:4a:06:9a:3c:63:5e:ee:7e:41:c1:b4:76:
0a:94:87:3c:5a:5c:8a:73:15:65:82:f8:f9:1b:04:25:f5:ec:
b3:ed:92:0d:d6:49:59:a2:2c:66:10:ba:09:af:1b:e0:60:42:
fd:5b:97:64:8f:09:6a:32:db:3f:69:23:1c:88:5f:36:7e:94:
1b:23:2d:d4:ec:19:b2:22:6d:0a:e1:d8:3a:d0:f8:7f:f9:9e:
9c:9c:18:c9:c9:f2:76:cd:6d:37:68:fc:f8:12:fd:69:91:eb:
2d:5b:64:3e:c9:6f:c5:00:81:74:93:68:f9:1f:13:78:36:70:
f2:6f:b2:bc:20:ae:4e:47:70:70:5d:d8:7e:3e:74:a6:fc:78:
c4:1b:a3:03:c1:76:b3:fc:87:fb:75:ce:48:13:83:03:32:6c:
88:28:0d:36:20:8a:30:8f:75:14:1f:b9:0b:1a:48:8e:b0:fe:
76:f4:c0:c4:01:45:39:c3:3d:95:82:3f:da:81:e2:04:ce:ff:
ab:47:5e:ca:4a:bb:3a:3b:6c:15:a6:fd:ca:63:76:ae:c8:c9:
1d:53:ac:b0:6e:78:5d:54:08:52:5c:82:1c:18:1f:d4:44:a1:
d8:6b:52:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOnwvOFXvYP5RPAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw
YzQ4MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
Y2NlNjExZTEtNmRmNy00NDQ4LTg1MWUtOTZiOGM2OGEwNTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/R3vLDSdoRMjvFe/WAJZhj1AF54GdXkVXg2
gEDi9JU8FGn1z4dQnP5RZbiOy7SNeEk9zPLStK2dfSq3Rd6Qscfv8g/4xOZZKebI
F6MsTOdy2ZTwwac6BdF9JDegSxgzwsrptcLBaHcqm9etB0SfbEQxnOvKE6flVAky
8K35cCkrm4wUu7k5f3zMz8Kh3AuLopJdTq6E490p2cHNMjA6Cdw5CgQNkDPWCxPm
WHcDNes1iM+ux0GmEWlWpUE+kHZYH73RU32EVmt9NBGOv09HlamPleQVnsdxuCGN
4M7yuFJX7xXSBx/6+E8G6LCCicWW4zNvZdIcDxOl2n+yfNoWzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN2JU2YHJ8cdwQrJxq3I2NTZDyUZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5
ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvNjU4NTMwMGQtNDhhOC0z
MTZhLWFkODQtMmQ5ODUyMWQzOTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm
MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy
MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl
ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz7AgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABWXiP93qvezyuP6CWF+wMbA68Q11A+Uv0oGmjxjXu5+QcG0dgqUhzxa
XIpzFWWC+PkbBCX17LPtkg3WSVmiLGYQugmvG+BgQv1bl2SPCWoy2z9pIxyIXzZ+
lBsjLdTsGbIibQrh2DrQ+H/5npycGMnJ8nbNbTdo/PgS/WmR6y1bZD7Jb8UAgXST
aPkfE3g2cPJvsrwgrk5HcHBd2H4+dKb8eMQbowPBdrP8h/t1zkgTgwMybIgoDTYg
ijCPdRQfuQsaSI6w/nb0wMQBRTnDPZWCP9qB4gTO/6tHXspKuzo7bBWm/cpjdq7I
yR1TrLBueF1UCFJcghwYH9REodhrUuc=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:04:46 2025 by rpki-client