Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b2c87d24-3fb6-3b6a-8371-fb75dc5b63cd.roa
File: b2c87d24-3fb6-3b6a-8371-fb75dc5b63cd.roa (raw, json)
Hash identifier: EcDvjUixUcX0qB1e/OqgZqAbElvXfpmE33QW0/HfofA=
Subject key identifier: 9C:AD:5F:66:51:F2:36:39:0F:47:5C:9C:37:A2:43:85:DA:C4:38:F0
Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial: 010D0C9F43285847DF2F4CE5CCBCCAEC30CF4780
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b2c87d24-3fb6-3b6a-8371-fb75dc5b63cd.roa
Signing time: Thu 14 Nov 2024 02:00:27 +0000
ROA not before: Thu 14 Nov 2024 02:00:27 +0000
ROA not after: Wed 12 Feb 2025 02:00:27 +0000
asID: 13445
IP address blocks: 144.196.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:df:2f:4c:e5:cc:bc:ca:ec:30:cf:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Validity
Not Before: Nov 14 02:00:27 2024 GMT
Not After : Feb 12 02:00:27 2025 GMT
Subject: CN=ccc7e5fe-d891-4d86-b326-bc14c857588e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f1:86:ba:46:33:50:14:51:b6:1d:a5:84:a1:
97:97:c3:92:80:f5:39:ab:47:c2:00:68:cf:91:25:
f1:36:25:5d:44:83:6d:06:cb:c7:e0:1e:ba:c5:4c:
03:09:05:08:7d:90:f3:80:e8:b2:b4:e3:88:dd:f3:
39:dd:13:65:d9:8a:c7:7f:09:bc:b2:df:92:60:be:
13:d6:b9:09:b3:7b:2a:14:13:22:62:c3:39:1a:09:
15:e8:4d:dd:32:3a:bd:f5:cb:b4:0a:fc:43:a7:20:
ab:c2:ce:3d:9a:24:09:b2:65:a4:e2:95:41:45:36:
3b:95:38:20:b6:91:a9:a2:24:e8:31:c4:22:e2:6c:
ff:6a:9d:43:2b:bd:cd:16:77:85:cb:43:12:78:b0:
4a:37:07:35:69:49:cd:14:2d:42:cf:1f:41:a3:89:
ff:92:19:6b:68:91:f7:dd:9c:47:50:66:1b:da:a8:
db:d5:12:33:a7:1b:67:87:e8:85:0f:17:44:90:ba:
98:f1:d3:b3:73:2f:08:ff:14:44:61:64:08:1a:f2:
88:ae:69:95:71:77:6d:95:2d:f2:f3:aa:61:d0:3e:
ef:95:80:51:15:15:a8:71:15:48:9f:a4:b5:af:59:
99:6c:a4:25:71:9f:4e:9e:1a:18:10:4b:e4:e3:14:
17:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AD:5F:66:51:F2:36:39:0F:47:5C:9C:37:A2:43:85:DA:C4:38:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/b2c87d24-3fb6-3b6a-8371-fb75dc5b63cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
X509v3 Authority Key Identifier:
keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
sbgp-ipAddrBlock: critical
IPv4:
144.196.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:3d:77:a8:d6:52:0b:89:3b:3e:c7:92:46:92:b5:52:4d:57:
97:96:95:17:13:6c:d9:98:dc:f6:1b:27:b4:e7:d5:f0:9a:53:
f2:a1:81:d6:68:8a:93:1a:4d:63:7a:43:f3:b2:ec:2a:75:76:
37:4c:36:bf:a3:10:b6:ec:48:b7:3b:da:1a:ab:55:3b:39:ab:
42:f6:93:db:55:04:d3:7f:85:aa:2e:e6:d8:f1:ab:e7:45:09:
eb:b6:f2:0e:3e:fe:bb:0d:fe:89:db:e1:e5:26:56:24:37:b5:
1e:e2:08:fe:89:e0:b8:ff:4c:08:a7:4f:24:f0:56:26:b2:f2:
0c:89:a7:f4:16:d9:1e:a9:b6:15:59:80:da:36:11:75:59:d7:
ae:4c:57:69:cd:e7:fa:d7:47:b2:d6:1e:c8:74:77:9f:a3:3a:
b2:84:91:48:0e:ca:6d:e5:77:f7:46:a0:11:f6:f4:c0:40:b1:
3a:ff:51:e5:92:28:52:8c:3e:46:1f:89:4f:91:db:bd:22:61:
75:88:67:8b:38:4c:b0:e3:a3:66:9c:73:61:36:66:11:e3:90:
c2:58:4b:f6:1d:a4:48:d0:9f:b1:99:f4:25:99:a3:04:39:7a:
61:fa:16:59:f8:da:f9:62:1d:cf:6f:12:41:51:fc:54:ab:1d:
6b:0a:fe:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEffL0zlzLzK7DDPR4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5
ZGRmMB4XDTI0MTExNDAyMDAyN1oXDTI1MDIxMjAyMDAyN1owLzEtMCsGA1UEAxMk
Y2NjN2U1ZmUtZDg5MS00ZDg2LWIzMjYtYmMxNGM4NTc1ODhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfGGukYzUBRRth2lhKGXl8OSgPU5q0fCAGjP
kSXxNiVdRINtBsvH4B66xUwDCQUIfZDzgOiytOOI3fM53RNl2YrHfwm8st+SYL4T
1rkJs3sqFBMiYsM5GgkV6E3dMjq99cu0CvxDpyCrws49miQJsmWk4pVBRTY7lTgg
tpGpoiToMcQi4mz/ap1DK73NFneFy0MSeLBKNwc1aUnNFC1Czx9Bo4n/khlraJH3
3ZxHUGYb2qjb1RIzpxtnh+iFDxdEkLqY8dOzcy8I/xREYWQIGvKIrmmVcXdtlS3y
86ph0D7vlYBRFRWocRVIn6S1r1mZbKQlcZ9OnhoYEEvk4xQX0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJytX2ZR8jY5D0dcnDeiQ4XaxDjwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk
MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvYjJjODdkMjQtM2ZiNi0z
YjZhLTgzNzEtZmI3NWRjNWI2M2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy
NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3
OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3
MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkMRgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJk9d6jWUguJOz7HkkaStVJNV5eWlRcTbNmY3PYbJ7Tn1fCaU/KhgdZo
ipMaTWN6Q/Oy7Cp1djdMNr+jELbsSLc72hqrVTs5q0L2k9tVBNN/haou5tjxq+dF
Ceu28g4+/rsN/onb4eUmViQ3tR7iCP6J4Lj/TAinTyTwViay8gyJp/QW2R6pthVZ
gNo2EXVZ165MV2nN5/rXR7LWHsh0d5+jOrKEkUgOym3ld/dGoBH29MBAsTr/UeWS
KFKMPkYfiU+R270iYXWIZ4s4TLDjo2acc2E2ZhHjkMJYS/YdpEjQn7GZ9CWZowQ5
emH6Fln42vliHc9vEkFR/FSrHWsK/t0=
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:39 2025 by rpki-client