Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/3ab4ebaf-be80-313b-afba-2d1fcf3d4e54.roa
File: 3ab4ebaf-be80-313b-afba-2d1fcf3d4e54.roa (raw, json)
Hash identifier: Ka93OKS+WAkZwt654ys1j8YpMv9yvmZpnKmGsZ3rlcU=
Subject key identifier: 96:C8:DF:16:34:C8:A1:E6:CC:C0:AB:30:CD:76:9A:E1:4E:03:B1:89
Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial: 010D0C9F4328584827C5330777235EC9315F1100
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/3ab4ebaf-be80-313b-afba-2d1fcf3d4e54.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 14618
IP address blocks: 192.184.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:33:07:77:23:5e:c9:31:5f:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=66724652-3571-420a-8cc4-b4069be3b2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ff:be:3e:32:26:4a:eb:47:f6:52:27:72:59:
fc:20:82:a3:1e:f4:aa:33:db:78:6c:b6:dd:03:74:
b0:b0:ca:fc:44:bf:12:49:ec:34:fd:60:b8:e1:c8:
3c:00:d7:46:02:06:94:8d:8d:d4:4c:d7:21:28:bb:
e5:06:36:4a:74:0d:fc:3b:37:81:c2:e7:62:4b:b0:
f9:50:ff:a0:4f:59:76:53:ad:3e:da:56:b6:06:8d:
97:d5:f6:c0:f3:5d:e5:b4:09:d3:11:63:a2:62:a9:
83:8c:a9:df:52:48:20:92:9e:64:06:cd:b8:97:84:
93:96:04:0b:c6:1e:93:5e:8f:53:c2:f4:f5:bf:0b:
6b:6d:8c:89:dc:98:37:6a:38:94:55:88:af:6d:cb:
b5:ca:e4:b3:d9:36:1b:00:74:b1:0e:49:6c:88:1d:
64:c7:58:b5:fa:8b:b5:3b:35:8e:e7:61:7e:67:46:
f9:dd:5b:64:e0:00:63:ae:86:a3:cc:6b:06:72:13:
7e:67:cf:25:44:0c:82:30:19:e9:6a:94:31:8c:02:
1b:94:c2:d6:40:0f:03:ce:f5:e7:bb:76:2f:57:b4:
5f:d8:8b:aa:86:7c:e8:98:93:f3:4a:51:95:02:9a:
0d:46:2a:1d:e2:95:aa:3c:09:4f:3e:ff:f8:8f:55:
23:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C8:DF:16:34:C8:A1:E6:CC:C0:AB:30:CD:76:9A:E1:4E:03:B1:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/3ab4ebaf-be80-313b-afba-2d1fcf3d4e54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
X509v3 Authority Key Identifier:
keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
sbgp-ipAddrBlock: critical
IPv4:
192.184.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:e5:6d:dc:7f:38:a7:fc:86:df:85:38:de:ed:5d:94:59:4b:
5e:30:d8:e0:5f:00:e7:97:94:62:32:c9:95:14:5c:ad:2b:34:
13:49:f6:7b:79:fa:42:0d:f3:1d:a3:98:d2:8e:23:76:bc:22:
6e:7b:88:cf:8e:8d:95:42:4e:43:78:2b:86:ef:45:fc:4c:03:
f7:c5:52:2a:02:e1:90:e4:9e:fe:18:0a:b8:f5:af:d7:3c:40:
29:05:33:11:af:6f:02:d3:40:99:05:ac:81:c8:1e:63:4c:01:
c3:aa:f6:34:67:58:f8:02:1d:88:0f:7a:4b:a1:02:3c:77:e5:
b7:e3:7b:75:28:e6:ba:d0:da:45:af:3e:ad:b1:50:2b:b2:53:
56:3f:5c:b4:16:0f:9c:e4:38:dc:76:a6:19:47:cd:3f:28:b8:
5d:f8:f5:4c:a3:59:a8:de:58:8b:06:ea:8f:a7:8f:01:67:6d:
39:ac:99:20:81:e8:c3:42:80:49:1c:c0:b6:68:94:9d:31:38:
65:55:66:64:b9:70:17:fa:cc:b1:43:52:c0:b1:9c:cf:49:3f:
37:e4:74:62:52:3e:e1:3a:7d:bf:5f:11:66:eb:b5:08:7e:7e:
54:c4:99:98:e4:55:08:91:f9:24:ad:2c:cb:16:a3:88:37:66:
c1:11:c8:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgnxTMHdyNeyTFfEQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5
Mzc4MB4XDTI0MTIxMDAyMDA0MFoXDTI1MDMxMDAxMDA0MFowLzEtMCsGA1UEAxMk
NjY3MjQ2NTItMzU3MS00MjBhLThjYzQtYjQwNjliZTNiMmJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/++PjImSutH9lIncln8IIKjHvSqM9t4bLbd
A3SwsMr8RL8SSew0/WC44cg8ANdGAgaUjY3UTNchKLvlBjZKdA38OzeBwudiS7D5
UP+gT1l2U60+2la2Bo2X1fbA813ltAnTEWOiYqmDjKnfUkggkp5kBs24l4STlgQL
xh6TXo9TwvT1vwtrbYyJ3Jg3ajiUVYivbcu1yuSz2TYbAHSxDklsiB1kx1i1+ou1
OzWO52F+Z0b53Vtk4ABjroajzGsGchN+Z88lRAyCMBnpapQxjAIblMLWQA8DzvXn
u3YvV7Rf2IuqhnzomJPzSlGVApoNRiod4pWqPAlPPv/4j1Uj9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJbI3xY0yKHmzMCrMM12muFOA7GJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy
MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvM2FiNGViYWYtYmU4MC0z
MTNiLWFmYmEtMmQxZmNmM2Q0ZTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz
MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0
OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi
MjE2NDkzNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLhGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGHlbdx/OKf8ht+FON7tXZRZS14w2OBfAOeXlGIyyZUUXK0rNBNJ9nt5
+kIN8x2jmNKOI3a8Im57iM+OjZVCTkN4K4bvRfxMA/fFUioC4ZDknv4YCrj1r9c8
QCkFMxGvbwLTQJkFrIHIHmNMAcOq9jRnWPgCHYgPekuhAjx35bfje3Uo5rrQ2kWv
Pq2xUCuyU1Y/XLQWD5zkONx2phlHzT8ouF349UyjWajeWIsG6o+njwFnbTmsmSCB
6MNCgEkcwLZolJ0xOGVVZmS5cBf6zLFDUsCxnM9JPzfkdGJSPuE6fb9fEWbrtQh+
flTEmZjkVQiR+SStLMsWo4g3ZsERyF4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:25:40 2025 by rpki-client