Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0f21b7e8-8347-3600-bf55-b802708f450e.roa
File: 0f21b7e8-8347-3600-bf55-b802708f450e.roa (raw, json)
Hash identifier: br3/YxhPh3Rew07vzxsaKgs7AI0khpGoyb9VJXzO2KU=
Subject key identifier: 32:15:D5:12:0D:97:80:23:1E:CD:8C:76:02:B3:05:82:15:EF:C8:58
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848037B34B9666634A237FB4B80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0f21b7e8-8347-3600-bf55-b802708f450e.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20115
IP address blocks: 24.159.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:34:b9:66:66:34:a2:37:fb:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=477e9314-a07c-4033-87e2-a896e0d13c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:44:7f:83:ed:0f:36:fc:e9:2e:eb:89:80:6a:
ed:41:03:89:5a:4a:d4:00:9e:b5:59:f5:9e:9e:f6:
c6:ee:a2:08:58:70:99:77:ff:ab:93:fb:49:71:5a:
30:d8:37:6c:46:cb:6e:b3:70:07:86:5e:54:b7:02:
c4:48:d6:93:ad:ec:41:e3:e7:e1:e7:47:48:55:e7:
9c:15:38:04:d8:67:9b:93:c2:9a:7b:7c:76:21:12:
c9:ac:2e:c5:4c:08:1f:ab:90:05:c4:f2:a5:10:88:
59:14:fe:4d:49:a2:f8:cf:5a:5d:2d:71:6b:2d:e2:
01:61:6d:68:5a:0e:ad:a5:be:10:f9:1d:ca:08:11:
3e:f5:c5:a5:47:74:dd:7c:10:03:53:f2:bb:d4:11:
7c:94:68:8d:ab:09:6b:61:8d:bd:a3:78:20:ac:5a:
24:a1:bc:9d:53:3c:d2:6d:3e:a8:f1:1b:33:25:50:
73:4b:65:ab:cb:f7:3f:61:25:d7:eb:09:00:72:09:
e2:6e:d5:99:60:e7:6a:ad:1d:ff:0a:1e:c0:86:84:
63:c9:80:c5:07:12:a1:79:55:b6:0a:67:2b:0f:b2:
2d:5d:d6:8d:50:8e:7c:27:6b:b5:5b:9c:ba:bd:ea:
79:7d:9f:62:dd:2b:93:76:4b:27:4a:32:22:9d:19:
e1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:15:D5:12:0D:97:80:23:1E:CD:8C:76:02:B3:05:82:15:EF:C8:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0f21b7e8-8347-3600-bf55-b802708f450e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
24.159.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:57:2e:4d:09:df:be:04:45:c3:d3:76:0b:cb:e3:dc:2f:eb:
03:e1:28:14:be:a4:ba:99:8a:e4:a2:01:71:1f:b2:d4:75:91:
04:a7:63:d7:45:15:9c:b9:64:c6:b1:56:3f:1d:e3:93:92:8e:
19:73:5f:ec:98:4c:b1:5c:09:a1:4b:d5:de:3c:39:40:6d:9d:
42:43:27:a7:4d:79:82:d8:bf:25:04:79:93:2b:60:d8:a9:36:
d3:68:88:4b:dc:92:6a:07:3a:aa:b6:cb:d2:f4:28:2d:bb:95:
f9:5d:a5:e8:cb:c5:e8:56:9d:9b:7b:cb:70:4f:78:8a:9a:f1:
2e:15:aa:7f:c0:f2:b8:2c:96:12:94:95:a0:51:d5:bc:6f:77:
a9:09:1e:89:7d:e5:92:f2:91:d6:37:76:a0:9a:3f:15:2c:f2:
48:3d:bc:40:c3:c4:22:c2:02:22:2b:04:1f:f6:11:79:9f:34:
56:47:4b:45:5a:49:01:50:9a:31:c2:7f:15:79:e5:38:45:da:
fc:b2:21:f7:f0:40:5e:c3:f4:05:b1:23:fe:a6:07:58:26:33:
d7:98:fb:d2:9d:5f:bb:23:2c:ac:b3:b7:f0:f9:b4:93:44:4a:
cd:05:c1:88:cb:85:c4:37:b9:47:bd:23:4b:ef:bf:13:fa:73:
06:73:2c:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDezS5ZmY0ojf7S4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
NDc3ZTkzMTQtYTA3Yy00MDMzLTg3ZTItYTg5NmUwZDEzYzgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkR/g+0PNvzpLuuJgGrtQQOJWkrUAJ61WfWe
nvbG7qIIWHCZd/+rk/tJcVow2DdsRstus3AHhl5UtwLESNaTrexB4+fh50dIVeec
FTgE2Gebk8Kae3x2IRLJrC7FTAgfq5AFxPKlEIhZFP5NSaL4z1pdLXFrLeIBYW1o
Wg6tpb4Q+R3KCBE+9cWlR3TdfBADU/K71BF8lGiNqwlrYY29o3ggrFokobydUzzS
bT6o8RszJVBzS2Wry/c/YSXX6wkAcgnibtWZYOdqrR3/Ch7AhoRjyYDFBxKheVW2
CmcrD7ItXdaNUI58J2u1W5y6vep5fZ9i3SuTdksnSjIinRnhawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDIV1RINl4AjHs2MdgKzBYIV78hYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMGYyMWI3ZTgtODM0Ny0z
NjAwLWJmNTUtYjgwMjcwOGY0NTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGJ+wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA9XLk0J374ERcPTdgvL49wv6wPhKBS+pLqZiuSiAXEfstR1kQSnY9dF
FZy5ZMaxVj8d45OSjhlzX+yYTLFcCaFL1d48OUBtnUJDJ6dNeYLYvyUEeZMrYNip
NtNoiEvckmoHOqq2y9L0KC27lfldpejLxehWnZt7y3BPeIqa8S4Vqn/A8rgslhKU
laBR1bxvd6kJHol95ZLykdY3dqCaPxUs8kg9vEDDxCLCAiIrBB/2EXmfNFZHS0Va
SQFQmjHCfxV55ThF2vyyIffwQF7D9AWxI/6mB1gmM9eY+9KdX7sjLKyzt/D5tJNE
Ss0FwYjLhcQ3uUe9I0vvvxP6cwZzLPA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 23:45:59 2025 by rpki-client