Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/0f216025-08f0-3ed8-84c5-9f7904503c8e.roa
File: 0f216025-08f0-3ed8-84c5-9f7904503c8e.roa (raw, json)
Hash identifier: hn9LO5WVlRNYr4Py/dYS5cCeeVWegaSUC/1/KEtIcLY=
Subject key identifier: B1:24:E3:11:7E:1E:71:25:C8:69:F6:68:37:48:33:F8:63:71:2B:31
Certificate issuer: /CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05
Certificate serial: 010D0C9F43285848090FAC73C1F9E4994B86BB00
Authority key identifier: 46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/0f216025-08f0-3ed8-84c5-9f7904503c8e.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 14717
IP address blocks: 72.21.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:ac:73:c1:f9:e4:99:4b:86:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=a97e278f-7414-4071-96a6-20d4f9e6966e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a2:48:42:1d:c3:fd:2d:da:86:01:48:1e:89:
07:a4:86:91:a2:68:63:ca:41:7c:79:c8:2c:f7:8a:
7b:2d:2b:b3:dd:3e:39:10:b7:1d:a0:64:bf:33:50:
d7:0d:c0:e1:90:bf:25:87:b2:8f:bb:d1:e0:d3:53:
b5:82:0a:15:9f:70:fb:4e:00:4c:d7:e5:d2:ca:93:
91:94:f8:bd:2a:eb:ec:d9:07:e7:09:b1:7e:bc:81:
67:61:5e:97:90:8d:73:4b:9c:2a:92:dc:e5:80:bc:
bd:a9:f7:7a:f3:0f:42:1b:69:ab:b6:00:24:58:fc:
82:8d:98:48:ac:e4:a5:c0:f1:cc:d7:ee:39:b9:ff:
b3:26:1f:71:be:e0:d1:87:8c:c1:13:59:29:01:64:
0b:d4:11:bf:66:f5:b8:c4:28:64:55:a8:59:6a:97:
b4:98:73:14:a9:b4:f5:6d:66:13:f1:6d:c7:a2:31:
8a:97:22:ef:a4:5a:36:d2:1e:1a:39:b3:43:f9:0e:
a5:97:43:a7:b1:ae:d7:c0:37:ff:22:f4:00:94:f8:
ed:85:4e:3e:4e:a7:a7:dc:95:30:20:43:28:1e:71:
0a:29:fd:4d:1f:ca:46:98:38:2f:92:15:da:a8:a1:
44:d8:74:8c:53:bd:8c:29:0f:bb:05:2e:0c:37:c7:
78:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:24:E3:11:7E:1E:71:25:C8:69:F6:68:37:48:33:F8:63:71:2B:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/0f216025-08f0-3ed8-84c5-9f7904503c8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl
X509v3 Authority Key Identifier:
keyid:46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer
sbgp-ipAddrBlock: critical
IPv4:
72.21.160.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:8b:a7:46:88:a0:9f:24:bc:65:2e:f3:a2:99:bf:87:a9:b8:
ca:47:d9:cf:23:92:d9:d6:11:6d:e8:d0:25:50:21:05:64:59:
8c:97:ce:e4:ca:1b:05:ad:5b:c6:81:d2:b9:6d:7a:0a:5a:3c:
85:3d:d1:89:e5:7e:e5:ec:90:d7:93:67:13:8a:55:0b:8d:ab:
0e:83:3d:e2:f8:a1:aa:74:48:d1:38:e9:6e:a3:6b:0b:1c:f2:
40:d1:38:e0:99:0c:f9:86:4c:4d:8e:22:13:9c:cf:ce:2a:3e:
ae:ff:ac:ff:ad:81:bb:a7:c6:c2:06:f9:46:21:8b:c0:c9:c8:
d2:a2:f4:fe:23:30:67:ef:39:97:16:14:e8:e5:72:1c:db:79:
1f:5a:f8:45:63:3f:65:47:4b:28:c5:72:f0:3f:aa:8c:6b:94:
62:fe:31:fc:41:ee:b9:6c:65:90:98:a5:b6:ea:21:d8:32:2c:
e3:57:9c:ed:a3:3c:da:40:37:9a:c6:3e:db:48:97:27:cb:fc:
c7:4d:f4:50:7a:99:c1:fa:f2:9c:60:49:00:54:b3:4c:9f:06:
80:e4:1a:f9:09:b1:84:3e:94:87:31:e4:5f:9b:87:c3:fe:a6:
e8:02:a8:bf:23:af:2b:8f:fd:5a:2c:91:7e:b6:da:42:de:13:
72:52:9e:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgJD6xzwfnkmUuGuwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFkNWJkMjUtOGFmYS00ZTUwLWJiMDItZjYzMTdlYWM3
ZTA1MB4XDTI0MTEyOTAyMDAzOVoXDTI1MDIyNzAyMDAzOVowLzEtMCsGA1UEAxMk
YTk3ZTI3OGYtNzQxNC00MDcxLTk2YTYtMjBkNGY5ZTY5NjZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaJIQh3D/S3ahgFIHokHpIaRomhjykF8ecgs
94p7LSuz3T45ELcdoGS/M1DXDcDhkL8lh7KPu9Hg01O1ggoVn3D7TgBM1+XSypOR
lPi9Kuvs2QfnCbF+vIFnYV6XkI1zS5wqktzlgLy9qfd68w9CG2mrtgAkWPyCjZhI
rOSlwPHM1+45uf+zJh9xvuDRh4zBE1kpAWQL1BG/ZvW4xChkVahZape0mHMUqbT1
bWYT8W3HojGKlyLvpFo20h4aObND+Q6ll0Onsa7XwDf/IvQAlPjthU4+Tqen3JUw
IEMoHnEKKf1NH8pGmDgvkhXaqKFE2HSMU72MKQ+7BS4MN8d4hwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLEk4xF+HnElyGn2aDdIM/hjcSsxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1
YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMxN2VhYzdlMDUvMGYyMTYwMjUtMDhmMC0z
ZWQ4LTg0YzUtOWY3OTA0NTAzYzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGFkNWJkMjUtOGFmYS00ZTUwLWJi
MDItZjYzMTdlYWM3ZTA1LzRhZDViZDI1LThhZmEtNGU1MC1iYjAyLWY2MzE3ZWFj
N2UwNS5jcmwwHwYDVR0jBBgwFoAURruHeu2z6puPCZYhgAjpLO1NwtAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMx
N2VhYzdlMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSBWgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGmLp0aIoJ8kvGUu86KZv4epuMpH2c8jktnWEW3o0CVQIQVkWYyXzuTK
GwWtW8aB0rltegpaPIU90YnlfuXskNeTZxOKVQuNqw6DPeL4oap0SNE46W6jawsc
8kDROOCZDPmGTE2OIhOcz84qPq7/rP+tgbunxsIG+UYhi8DJyNKi9P4jMGfvOZcW
FOjlchzbeR9a+EVjP2VHSyjFcvA/qoxrlGL+MfxB7rlsZZCYpbbqIdgyLONXnO2j
PNpAN5rGPttIlyfL/MdN9FB6mcH68pxgSQBUs0yfBoDkGvkJsYQ+lIcx5F+bh8P+
pugCqL8jryuP/VoskX622kLeE3JSnjM=
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:41:43 2025 by rpki-client