Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d/439be47f-ad79-3de0-a5e7-1bb882c73b27.roa
File: 439be47f-ad79-3de0-a5e7-1bb882c73b27.roa (raw, json)
Hash identifier: j2fmOz+4ir5ECzGXb1w2u1qljBskWPDojXUMujT12Pc=
Subject key identifier: B8:48:D3:83:80:C1:2C:74:25:EE:07:7A:4B:B4:01:39:D8:9D:FA:C5
Certificate issuer: /CN=3d270043-5069-4b58-b6cb-4496aa37669d
Certificate serial: 010D0C9F4328584845158C487DF2986F569D3080
Authority key identifier: CB:5F:F4:1A:A0:2D:FA:1E:A1:99:B6:29:37:09:17:3A:0E:CC:4F:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d/439be47f-ad79-3de0-a5e7-1bb882c73b27.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 14079
IP address blocks: 207.2.112.0/22 maxlen: 22
2602:fbd4::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:8c:48:7d:f2:98:6f:56:9d:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d270043-5069-4b58-b6cb-4496aa37669d
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=47a3c78f-ea2f-4345-8353-376e22e5ffc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:31:ee:64:2a:4c:13:18:90:3d:20:32:91:1c:
ff:74:4d:6c:a8:50:67:30:34:1c:aa:02:2f:9b:06:
e1:33:bc:49:0c:d2:17:85:9c:29:56:ed:5f:24:03:
40:c5:b0:70:d0:6a:89:38:6e:71:22:7d:b9:37:44:
cb:cb:95:04:f7:f0:93:a9:19:cc:6d:b5:d2:b9:2d:
ca:28:fc:12:42:f4:75:05:d8:5b:63:55:39:66:3e:
ec:f6:58:c6:57:75:b7:d6:e8:47:7d:e8:10:92:a4:
3b:ac:63:32:c7:82:25:40:f6:02:1e:a9:f7:50:63:
92:22:74:7e:22:e2:d7:e5:0d:d0:f4:49:7b:70:05:
b1:36:41:8e:e3:f8:2f:26:a6:47:66:44:e6:26:e3:
e6:29:5d:f4:7c:90:58:c8:d2:71:7a:26:0e:63:55:
6f:3f:59:7a:1e:5f:2c:ce:0e:70:81:94:59:3c:29:
1c:c1:96:1a:57:e7:81:b8:4b:05:5c:12:b1:9e:41:
eb:1a:15:e5:e0:02:5e:6a:61:17:18:02:73:1f:a6:
8e:ad:d1:24:7d:57:a0:01:f4:dd:63:27:08:53:6a:
37:66:da:0e:a4:ed:26:71:b2:13:82:84:3a:e3:c3:
23:9d:40:8a:8c:a6:c1:70:de:c8:f3:43:eb:25:bd:
32:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:48:D3:83:80:C1:2C:74:25:EE:07:7A:4B:B4:01:39:D8:9D:FA:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d/439be47f-ad79-3de0-a5e7-1bb882c73b27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d/3d270043-5069-4b58-b6cb-4496aa37669d.crl
X509v3 Authority Key Identifier:
keyid:CB:5F:F4:1A:A0:2D:FA:1E:A1:99:B6:29:37:09:17:3A:0E:CC:4F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d.cer
sbgp-ipAddrBlock: critical
IPv4:
207.2.112.0/22
IPv6:
2602:fbd4::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:b8:f5:3d:cf:af:f0:79:8b:34:1c:9b:30:47:83:21:06:93:
1a:24:f3:2a:e8:3b:15:b1:c1:8f:52:51:b5:c2:1c:6a:f7:0b:
f7:ab:d3:44:b8:30:78:3e:be:8c:a8:93:62:7d:7f:b8:e1:db:
5c:45:e7:a6:4c:f3:a6:fd:a2:2b:76:96:8a:31:d9:df:82:64:
4a:07:45:cb:f5:71:e1:39:a9:13:af:86:0d:4d:16:27:32:34:
df:29:38:56:8e:5f:35:03:c0:c8:34:6f:38:82:46:56:40:6c:
90:17:9e:1b:95:60:8c:df:f9:35:62:c2:79:70:1c:73:55:c3:
ce:7a:83:02:31:06:b4:46:a9:3f:9f:2a:a0:55:ac:7d:02:5b:
0f:8f:6d:1d:65:2f:a8:ce:95:c3:b2:a2:87:d7:b9:1c:72:85:
18:53:23:ab:b1:05:0f:4d:85:9d:ed:1c:b1:6a:74:19:29:5c:
89:35:0f:26:9e:06:06:cf:42:a8:53:d0:2c:97:a4:fb:ca:83:
6a:c7:98:2c:bb:c2:fc:3a:78:79:d6:9d:6d:f5:ac:64:e3:0c:
6f:a8:77:5d:c0:6c:ac:19:c3:c5:c2:ef:6d:28:a5:d2:63:cb:
46:13:a8:8b:2d:5f:a1:7f:05:0f:83:b3:4d:e3:39:d6:40:27:
f7:40:98:05
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEhFFYxIffKYb1adMIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2QyNzAwNDMtNTA2OS00YjU4LWI2Y2ItNDQ5NmFhMzc2
NjlkMB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk
NDdhM2M3OGYtZWEyZi00MzQ1LTgzNTMtMzc2ZTIyZTVmZmM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDHuZCpMExiQPSAykRz/dE1sqFBnMDQcqgIv
mwbhM7xJDNIXhZwpVu1fJANAxbBw0GqJOG5xIn25N0TLy5UE9/CTqRnMbbXSuS3K
KPwSQvR1BdhbY1U5Zj7s9ljGV3W31uhHfegQkqQ7rGMyx4IlQPYCHqn3UGOSInR+
IuLX5Q3Q9El7cAWxNkGO4/gvJqZHZkTmJuPmKV30fJBYyNJxeiYOY1VvP1l6Hl8s
zg5wgZRZPCkcwZYaV+eBuEsFXBKxnkHrGhXl4AJeamEXGAJzH6aOrdEkfVegAfTd
YycIU2o3ZtoOpO0mcbITgoQ648MjnUCKjKbBcN7I80PrJb0ymwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFLhI04OAwSx0Je4Heku0ATnYnfrFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDI3
MDA0My01MDY5LTRiNTgtYjZjYi00NDk2YWEzNzY2OWQvNDM5YmU0N2YtYWQ3OS0z
ZGUwLWE1ZTctMWJiODgyYzczYjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2QyNzAwNDMtNTA2OS00YjU4LWI2
Y2ItNDQ5NmFhMzc2NjlkLzNkMjcwMDQzLTUwNjktNGI1OC1iNmNiLTQ0OTZhYTM3
NjY5ZC5jcmwwHwYDVR0jBBgwFoAUy1/0GqAt+h6hmbYpNwkXOg7MT8kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDI3MDA0My01MDY5LTRiNTgtYjZjYi00NDk2
YWEzNzY2OWQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCzwJwMA4E
AgACMAgDBgQmAvvUADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjuPU9z6/weYs0HJswR4MhBpMaJPMq6DsV
scGPUlG1whxq9wv3q9NEuDB4Pr6MqJNifX+44dtcReemTPOm/aIrdpaKMdnfgmRK
B0XL9XHhOakTr4YNTRYnMjTfKThWjl81A8DING84gkZWQGyQF54blWCM3/k1YsJ5
cBxzVcPOeoMCMQa0Rqk/nyqgVax9AlsPj20dZS+ozpXDsqKH17kccoUYUyOrsQUP
TYWd7RyxanQZKVyJNQ8mngYGz0KoU9Asl6T7yoNqx5gsu8L8Onh51p1t9axk4wxv
qHddwGysGcPFwu9tKKXSY8tGE6iLLV+hfwUPg7NN4znWQCf3QJgF
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:04:16 2025 by rpki-client