Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/51b66134-34dc-3720-a427-39cdead4ac66.roa
File: 51b66134-34dc-3720-a427-39cdead4ac66.roa (raw, json)
Hash identifier: SxB5Tgrj+KfTuplZAaZAZRcpIoBgslecbu6q07c8K74=
Subject key identifier: D8:2E:69:82:1E:85:E4:9A:5E:D0:C3:11:12:2D:D6:2E:02:B8:4D:9C
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848037AA1BBF6DF9B1637E497A0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/51b66134-34dc-3720-a427-39cdead4ac66.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20115
IP address blocks: 24.197.96.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:a1:bb:f6:df:9b:16:37:e4:97:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=52ae8166-a068-44ea-9856-a9ffea79f0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d9:02:77:fc:ad:8a:53:01:2a:6a:c9:86:21:
5e:d3:d8:03:26:f0:74:b7:db:01:5a:ae:3e:1a:87:
8d:bb:92:6c:cc:fd:c3:7d:82:f7:86:29:9d:6d:c4:
4e:e8:46:01:9c:ad:42:fd:0b:59:c6:ff:76:00:9a:
07:7a:04:bf:6b:5c:f4:de:81:dd:5a:92:ba:a4:39:
ee:2f:b5:8b:bc:62:85:f9:bc:9f:86:26:49:ee:fd:
57:eb:26:f8:26:e8:5d:a9:28:42:a9:9a:7b:19:38:
a1:f5:a5:94:f5:07:05:39:d9:2f:24:d0:8a:c3:60:
63:3f:d2:86:30:f2:dc:8b:ae:de:b8:24:ed:28:78:
a0:94:7e:ec:e4:b8:50:24:0b:47:7d:97:f3:43:e8:
fb:35:4d:8b:a1:b6:b6:83:67:94:5c:0c:54:28:89:
f0:62:e9:45:af:89:81:3e:99:b7:fa:53:01:ff:a0:
e9:d0:bb:8f:1a:d1:b6:e1:01:2c:69:ec:56:23:1e:
cf:c3:16:fc:01:c6:d8:51:fc:84:77:16:e4:ab:40:
39:06:a5:8a:e6:dd:88:bc:b2:1b:a1:64:52:96:25:
c4:c2:73:2e:7b:17:af:a5:28:cc:89:c7:68:c9:5c:
d9:29:ef:3f:22:6c:3a:6f:0e:b2:28:25:8c:20:87:
36:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2E:69:82:1E:85:E4:9A:5E:D0:C3:11:12:2D:D6:2E:02:B8:4D:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/51b66134-34dc-3720-a427-39cdead4ac66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
24.197.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:06:0a:3f:fd:3b:78:fc:9e:a7:e4:f8:52:44:2e:5e:60:ec:
61:1f:2a:ea:46:b0:ed:fa:79:88:e5:eb:dc:17:e7:68:17:f3:
70:06:50:3a:17:62:47:32:bc:7a:4b:2e:ad:8a:05:45:a3:da:
00:c8:45:5e:a8:c8:d4:12:3c:11:0c:bf:47:b1:63:8c:ad:0b:
af:da:f5:95:47:73:31:d0:d7:81:39:50:cf:7f:f8:ed:4f:c6:
28:ab:87:cc:d7:11:aa:97:b7:df:24:78:86:6d:28:db:66:76:
d5:57:c3:d8:05:f4:5b:c7:5c:08:38:89:f6:0d:25:e9:e4:0f:
9e:b1:8b:81:81:d2:1b:0d:89:ef:50:4f:6a:d0:f4:f9:51:2c:
e4:7d:d0:02:04:c4:f7:4b:d1:8e:ff:80:fb:2e:16:60:79:fe:
cf:cd:74:59:24:f9:0e:ac:db:15:41:26:f4:7b:24:79:2b:71:
83:20:51:c5:8d:97:e1:2e:40:08:10:23:42:f3:98:d6:3e:97:
1e:4d:fa:8f:2f:bf:7f:ea:f5:96:d2:97:86:b0:ac:78:b2:8e:
44:39:22:4e:c8:c7:50:51:dc:0d:e6:72:85:ab:41:c3:c5:38:
72:24:64:7f:fa:2f:41:27:45:9e:da:b4:15:a2:bc:9b:59:1c:
b6:7e:68:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDeqG79t+bFjfkl6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
NTJhZTgxNjYtYTA2OC00NGVhLTk4NTYtYTlmZmVhNzlmMGZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtkCd/ytilMBKmrJhiFe09gDJvB0t9sBWq4+
GoeNu5JszP3DfYL3himdbcRO6EYBnK1C/QtZxv92AJoHegS/a1z03oHdWpK6pDnu
L7WLvGKF+byfhiZJ7v1X6yb4JuhdqShCqZp7GTih9aWU9QcFOdkvJNCKw2BjP9KG
MPLci67euCTtKHiglH7s5LhQJAtHfZfzQ+j7NU2Loba2g2eUXAxUKInwYulFr4mB
Ppm3+lMB/6Dp0LuPGtG24QEsaexWIx7Pwxb8AcbYUfyEdxbkq0A5BqWK5t2IvLIb
oWRSliXEwnMuexevpSjMicdoyVzZKe8/Imw6bw6yKCWMIIc28wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNguaYIeheSaXtDDERIt1i4CuE2cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNTFiNjYxMzQtMzRkYy0z
NzIwLWE0MjctMzljZGVhZDRhYzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGMVgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALwGCj/9O3j8nqfk+FJELl5g7GEfKupGsO36eYjl69wX52gX83AGUDoX
YkcyvHpLLq2KBUWj2gDIRV6oyNQSPBEMv0exY4ytC6/a9ZVHczHQ14E5UM9/+O1P
xiirh8zXEaqXt98keIZtKNtmdtVXw9gF9FvHXAg4ifYNJenkD56xi4GB0hsNie9Q
T2rQ9PlRLOR90AIExPdL0Y7/gPsuFmB5/s/NdFkk+Q6s2xVBJvR7JHkrcYMgUcWN
l+EuQAgQI0LzmNY+lx5N+o8vv3/q9ZbSl4awrHiyjkQ5Ik7Ix1BR3A3mcoWrQcPF
OHIkZH/6L0EnRZ7atBWivJtZHLZ+aAg=
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:40:45 2025 by rpki-client