Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ae3340b6-cbcc-303e-9541-8e0411b269e1.roa
File: ae3340b6-cbcc-303e-9541-8e0411b269e1.roa (raw, json)
Hash identifier: QLpOrr33ctBqWmRN4YijOSeYsvj7IYqvCbmPThcoI+g=
Subject key identifier: 02:FC:95:EA:79:0C:8C:33:D7:FB:AA:13:D9:FA:0C:05:16:31:B1:E9
Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial: 010D0C9F4328584863CB03B600519A71E7B3C6C0
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ae3340b6-cbcc-303e-9541-8e0411b269e1.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 13807
IP address blocks: 24.51.56.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:03:b6:00:51:9a:71:e7:b3:c6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=72b677d0-dece-41c6-ba8c-a8366dbddf47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c1:f5:82:fa:f2:89:7c:50:8c:82:51:af:54:
a1:b3:37:ad:da:f2:f6:bc:e9:f9:9d:7b:81:3f:79:
61:78:c9:de:db:a6:51:26:48:65:d0:f2:86:ec:0b:
1f:ba:e7:cd:f5:43:fe:c3:59:04:86:00:27:fd:34:
ff:be:ce:d6:f8:ba:85:36:22:31:d0:b8:15:21:db:
a7:62:5a:c3:8c:90:c6:83:13:c7:dd:c1:cf:24:39:
c8:0f:2a:48:a6:6e:35:59:f6:85:8a:0c:8a:e9:02:
98:3a:2a:ac:e4:f7:ba:da:b0:ac:6d:b0:68:36:61:
8b:82:4e:db:3c:62:eb:ce:ac:27:2d:57:67:da:9c:
c4:ea:8f:de:e8:f0:b9:55:e7:e1:b8:30:77:6a:b0:
8f:d1:b4:87:cd:36:04:bb:d1:fc:a1:e4:91:84:2a:
c5:f7:a3:d4:f4:7f:a1:3f:4c:04:c7:fd:33:9c:5b:
6f:1c:66:0b:1a:46:56:3a:b9:a1:1b:a8:bb:7d:81:
a6:cd:19:a8:ad:90:11:b6:7e:8e:d1:39:5d:83:f4:
08:15:8b:83:ca:ca:0f:d3:c6:25:25:4e:9c:f5:fe:
d7:66:24:ce:46:fe:5a:56:94:a0:6f:8c:a7:53:7a:
93:bc:57:0b:55:1c:fc:0e:d3:8f:ad:b1:78:77:80:
02:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FC:95:EA:79:0C:8C:33:D7:FB:AA:13:D9:FA:0C:05:16:31:B1:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ae3340b6-cbcc-303e-9541-8e0411b269e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
X509v3 Authority Key Identifier:
keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
sbgp-ipAddrBlock: critical
IPv4:
24.51.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:c6:e6:53:6e:e2:f2:7a:4a:74:7d:cb:90:5c:36:85:cf:15:
eb:28:77:23:91:05:b7:cc:ba:4b:6b:91:9b:d4:56:ec:11:c3:
36:c1:07:9b:65:96:1b:73:59:b4:3d:0e:05:a9:8c:fd:70:97:
81:c3:93:c6:94:64:d7:9c:fd:75:f0:d1:57:29:90:cb:05:7c:
29:97:9d:d3:a7:5b:4e:3f:55:84:5e:d7:5b:95:8d:7c:8d:f9:
ba:e9:34:dd:be:b5:41:ee:9d:35:d2:58:5f:3e:8b:4b:25:ef:
50:ef:27:ec:b7:24:67:9d:a6:57:3f:4a:14:01:4b:b9:41:c4:
80:b7:cc:97:d5:1a:a9:17:60:21:5e:ef:d5:99:25:b8:49:b0:
f3:f7:f6:36:aa:a9:ed:3a:69:93:d6:96:72:d6:4b:24:c9:e4:
5c:5a:65:a0:8f:88:6d:ce:a5:1b:95:ff:09:56:5b:de:b0:02:
a5:6f:0e:58:77:2d:ef:a0:0a:77:66:4b:93:b0:66:dd:8a:5c:
37:e2:1b:5e:51:d9:e4:65:0f:47:2c:9b:7e:a1:72:ee:78:fa:
d0:02:55:d0:60:6b:5d:d2:cc:8c:01:f4:cf:b9:6a:38:cd:32:
ff:0c:d9:6a:39:37:fa:f2:aa:42:c7:07:ce:f7:67:40:37:96:
47:d4:0d:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhjywO2AFGaceezxsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw
NTM2MB4XDTI0MTIzMTE0MDA1M1oXDTI1MDMzMTEzMDA1M1owLzEtMCsGA1UEAxMk
NzJiNjc3ZDAtZGVjZS00MWM2LWJhOGMtYTgzNjZkYmRkZjQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8H1gvryiXxQjIJRr1Shszet2vL2vOn5nXuB
P3lheMne26ZRJkhl0PKG7AsfuufN9UP+w1kEhgAn/TT/vs7W+LqFNiIx0LgVIdun
YlrDjJDGgxPH3cHPJDnIDypIpm41WfaFigyK6QKYOiqs5Pe62rCsbbBoNmGLgk7b
PGLrzqwnLVdn2pzE6o/e6PC5VefhuDB3arCP0bSHzTYEu9H8oeSRhCrF96PU9H+h
P0wEx/0znFtvHGYLGkZWOrmhG6i7fYGmzRmorZARtn6O0Tldg/QIFYuDysoP08Yl
JU6c9f7XZiTORv5aVpSgb4ynU3qTvFcLVRz8DtOPrbF4d4ACNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAL8lep5DIwz1/uqE9n6DAUWMbHpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm
MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvYWUzMzQwYjYtY2JjYy0z
MDNlLTk1NDEtOGUwNDExYjI2OWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3
OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj
MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh
ZWUwYzA1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGDM4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHzG5lNu4vJ6SnR9y5BcNoXPFesodyORBbfMuktrkZvUVuwRwzbBB5tl
lhtzWbQ9DgWpjP1wl4HDk8aUZNec/XXw0VcpkMsFfCmXndOnW04/VYRe11uVjXyN
+brpNN2+tUHunTXSWF8+i0sl71DvJ+y3JGedplc/ShQBS7lBxIC3zJfVGqkXYCFe
79WZJbhJsPP39jaqqe06aZPWlnLWSyTJ5FxaZaCPiG3OpRuV/wlWW96wAqVvDlh3
Le+gCndmS5OwZt2KXDfiG15R2eRlD0csm36hcu54+tACVdBga13SzIwB9M+5ajjN
Mv8M2Wo5N/ryqkLHB873Z0A3lkfUDe0=
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:45:19 2025 by rpki-client