Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6/f984caa1-48ee-3a26-8d40-a1b14e45f110.roa
File: f984caa1-48ee-3a26-8d40-a1b14e45f110.roa (raw, json)
Hash identifier: uJ2TPN7OIyS5nAMFlST1AJmRFAkwICBQp+D29fBrfMo=
Subject key identifier: C2:BF:E0:84:7A:C2:60:94:C3:EC:B4:B7:49:86:A2:EC:FF:BD:F0:51
Certificate issuer: /CN=74a39a1b-8414-451d-8610-7af7342dc8f6
Certificate serial: 010D0C9F4328584855D590860D5BF6051E66CD00
Authority key identifier: 88:75:5D:06:26:22:ED:1A:A5:7A:D7:55:4B:CC:AE:C4:D8:8C:3A:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6/f984caa1-48ee-3a26-8d40-a1b14e45f110.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 21976
IP address blocks: 192.16.204.0/24 maxlen: 24
192.108.106.0/24 maxlen: 24
2620:45:c000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:90:86:0d:5b:f6:05:1e:66:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a39a1b-8414-451d-8610-7af7342dc8f6
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=3f0abe57-33af-4ef9-95e9-61a69cd68ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:90:d9:1b:4c:d0:2f:9b:0f:71:78:c9:48:52:
ae:de:2d:88:39:a4:f5:d6:d0:a1:4e:0b:e0:57:d9:
0d:bc:20:6a:f8:3f:5a:80:9b:02:dd:0e:82:6a:d3:
73:6b:ca:80:60:05:2d:47:55:2d:62:f8:03:66:03:
2b:7f:d9:09:39:c4:c7:45:68:4a:83:65:e1:db:87:
29:ed:d7:db:ed:a9:c0:ed:00:a8:3e:85:76:a5:83:
55:2f:f2:75:06:c0:11:8e:18:82:03:f5:c4:19:d8:
82:b9:14:0d:dd:b8:65:9b:46:aa:f6:2b:37:3e:53:
34:4e:05:48:97:af:25:1c:ab:c0:7d:2c:c0:6e:73:
ce:bb:42:87:bb:ee:a5:71:74:8c:fb:3a:85:66:68:
0b:42:1a:3f:1b:34:35:f4:72:96:08:66:c2:7e:f7:
67:0c:c5:28:1b:7c:7e:bf:ca:51:69:cf:7e:06:0c:
01:bc:0a:19:47:8f:3a:8a:19:5c:a1:3d:9c:f4:01:
19:cf:b6:35:c1:f7:37:72:cc:a6:96:b8:20:06:5c:
c3:37:37:17:04:0c:2d:d5:6e:1c:e2:aa:ea:7c:32:
11:59:01:a8:d0:b2:77:9e:44:c7:5e:fc:19:52:b1:
ae:bf:9f:3a:e5:8a:68:55:29:52:11:8a:8d:b9:05:
e9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BF:E0:84:7A:C2:60:94:C3:EC:B4:B7:49:86:A2:EC:FF:BD:F0:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6/f984caa1-48ee-3a26-8d40-a1b14e45f110.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6/74a39a1b-8414-451d-8610-7af7342dc8f6.crl
X509v3 Authority Key Identifier:
keyid:88:75:5D:06:26:22:ED:1A:A5:7A:D7:55:4B:CC:AE:C4:D8:8C:3A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6.cer
sbgp-ipAddrBlock: critical
IPv4:
192.16.204.0/24
192.108.106.0/24
IPv6:
2620:45:c000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:34:41:83:96:20:60:4c:e7:0f:3d:14:b9:32:5f:54:b8:96:
cc:ea:d4:0a:67:0e:c9:34:c6:9c:4d:73:f9:42:06:15:a8:1e:
bc:da:36:0f:3e:84:44:07:c8:b3:e4:0b:7c:94:c4:03:c3:ee:
aa:6e:fc:31:cb:4d:c8:fc:4b:05:06:dd:f7:46:af:e5:ac:39:
48:01:de:17:46:11:82:21:9a:57:fe:c3:e7:6f:aa:cc:7a:80:
2b:be:8e:34:6b:b4:e7:dc:6b:93:93:61:60:8d:3b:b6:70:39:
a9:7f:29:1b:0a:d6:72:08:e9:d2:93:49:8e:79:3c:d1:de:1e:
61:8d:68:c8:19:af:b5:6d:f8:a8:95:3d:a9:3a:49:c0:a5:27:
21:84:02:3a:07:c4:1b:d2:c4:39:75:fa:f7:0b:1b:ea:f3:bb:
76:05:c0:cc:34:80:c5:82:5b:5a:6c:33:4c:ab:b3:26:18:29:
d7:63:cf:ab:e5:a3:df:5a:56:f7:c8:08:f1:d6:ea:8f:2a:90:
f1:bd:36:55:29:8e:ab:7c:1f:4b:11:e7:1e:29:98:54:61:4b:
c3:e5:68:44:17:04:e5:65:63:04:e2:00:f8:03:67:75:f4:ca:
e1:aa:02:53:12:c2:09:06:c9:4c:67:97:f8:5a:5a:81:0c:be:
e7:d1:55:b4
-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEhV1ZCGDVv2BR5mzQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzRhMzlhMWItODQxNC00NTFkLTg2MTAtN2FmNzM0MmRj
OGY2MB4XDTI0MTIyNjE0MDA1MloXDTI1MDMyNjEzMDA1MlowLzEtMCsGA1UEAxMk
M2YwYWJlNTctMzNhZi00ZWY5LTk1ZTktNjFhNjljZDY4ZWJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpDZG0zQL5sPcXjJSFKu3i2IOaT11tChTgvg
V9kNvCBq+D9agJsC3Q6CatNza8qAYAUtR1UtYvgDZgMrf9kJOcTHRWhKg2Xh24cp
7dfb7anA7QCoPoV2pYNVL/J1BsARjhiCA/XEGdiCuRQN3bhlm0aq9is3PlM0TgVI
l68lHKvAfSzAbnPOu0KHu+6lcXSM+zqFZmgLQho/GzQ19HKWCGbCfvdnDMUoG3x+
v8pRac9+BgwBvAoZR486ihlcoT2c9AEZz7Y1wfc3csymlrggBlzDNzcXBAwt1W4c
4qrqfDIRWQGo0LJ3nkTHXvwZUrGuv5865YpoVSlSEYqNuQXpOQIDAQABo4IDbDCC
A2gwHQYDVR0OBBYEFMK/4IR6wmCUw+y0t0mGouz/vfBRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NGEz
OWExYi04NDE0LTQ1MWQtODYxMC03YWY3MzQyZGM4ZjYvZjk4NGNhYTEtNDhlZS0z
YTI2LThkNDAtYTFiMTRlNDVmMTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzRhMzlhMWItODQxNC00NTFkLTg2
MTAtN2FmNzM0MmRjOGY2Lzc0YTM5YTFiLTg0MTQtNDUxZC04NjEwLTdhZjczNDJk
YzhmNi5jcmwwHwYDVR0jBBgwFoAUiHVdBiYi7RqletdVS8yuxNiMOj0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NGEzOWExYi04NDE0LTQ1MWQtODYxMC03YWY3
MzQyZGM4ZjYuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwBDMAwQA
wGxqMA8EAgACMAkDBwAmIABFwAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAojRBg5YgYEznDz0UuTJfVLiW
zOrUCmcOyTTGnE1z+UIGFagevNo2Dz6ERAfIs+QLfJTEA8Puqm78MctNyPxLBQbd
90av5aw5SAHeF0YRgiGaV/7D52+qzHqAK76ONGu059xrk5NhYI07tnA5qX8pGwrW
cgjp0pNJjnk80d4eYY1oyBmvtW34qJU9qTpJwKUnIYQCOgfEG9LEOXX69wsb6vO7
dgXAzDSAxYJbWmwzTKuzJhgp12PPq+Wj31pW98gI8dbqjyqQ8b02VSmOq3wfSxHn
HimYVGFLw+VoRBcE5WVjBOIA+ANndfTK4aoCUxLCCQbJTGeX+FpagQy+59FVtA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:10 2025 by rpki-client