Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/c1bc0023-1ba0-3167-a2e2-8b9f4c80c012.roa
File: c1bc0023-1ba0-3167-a2e2-8b9f4c80c012.roa (raw, json)
Hash identifier: Rn6+dsj63Gf9T2OxdsVs7VugfIPjV4IO5jtpqFs9/h0=
Subject key identifier: 02:CF:FE:C5:E7:C5:5D:45:BC:C3:C7:1A:7A:1F:EE:13:54:60:F6:74
Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial: 010D0C9F4328584863CB0A0231D55190329B0280
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/c1bc0023-1ba0-3167-a2e2-8b9f4c80c012.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 13807
IP address blocks: 24.72.216.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:0a:02:31:d5:51:90:32:9b:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=465de34f-91fd-4aaa-9ddb-f9997c3951e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3b:51:33:43:f1:8a:cc:d6:08:33:1a:26:f1:
95:e5:99:c2:b9:aa:7f:eb:1d:76:11:5a:11:e1:7f:
06:a5:1a:a4:43:a7:e2:37:22:20:fd:42:62:8d:40:
62:a8:d2:03:49:6d:18:12:80:92:6d:ff:f8:94:7e:
48:b1:94:ab:ac:b9:5b:ac:de:02:fc:10:56:fb:cb:
6e:68:b2:3f:98:c3:e3:24:5b:2b:a8:98:9c:13:22:
70:e1:2a:92:91:b4:34:69:74:cc:8f:8f:28:33:63:
b5:19:4f:4a:2b:6c:e9:a3:de:87:77:48:81:aa:fc:
d6:a2:e0:f4:96:98:bc:c2:e6:20:97:48:31:5c:2a:
bd:d8:79:4a:1a:9d:0c:c4:3c:d1:43:bc:6e:81:a7:
32:5e:d5:5e:5c:8a:b7:55:93:e1:8d:17:4b:80:86:
db:68:c6:a0:16:69:5e:b7:d0:ce:ac:2f:03:89:73:
ea:49:47:4a:78:2b:2e:dd:fb:d8:d7:71:79:86:0d:
eb:d3:11:cd:89:78:f8:30:88:05:3f:87:8c:d1:4d:
44:c5:4f:b2:57:12:71:a7:b5:6f:a2:9e:27:26:ee:
b6:b8:51:cf:83:16:c0:ab:39:0a:92:ca:49:d9:9c:
53:58:3e:88:4e:c1:ea:a4:da:0e:71:cd:16:fb:7a:
f1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CF:FE:C5:E7:C5:5D:45:BC:C3:C7:1A:7A:1F:EE:13:54:60:F6:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/c1bc0023-1ba0-3167-a2e2-8b9f4c80c012.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
X509v3 Authority Key Identifier:
keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
sbgp-ipAddrBlock: critical
IPv4:
24.72.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:d9:e8:b0:c6:07:17:78:ad:52:03:58:63:3b:9e:1b:03:dd:
77:3e:97:da:ca:1d:74:fe:98:a8:ca:f0:9c:40:c4:0b:eb:98:
79:51:52:28:9c:1c:a7:ec:65:94:77:08:c1:8e:a7:a9:9f:eb:
1f:7e:83:d2:a5:d2:1c:1b:c1:56:29:7d:4e:8c:b1:1a:44:2e:
a9:9b:5e:ac:8a:b2:98:b1:c3:42:30:b9:50:c9:b9:64:31:69:
f2:25:74:63:85:20:5d:aa:15:96:57:9b:41:09:ff:9e:6a:b7:
55:17:9a:da:48:92:7a:48:9b:4b:48:20:0f:da:b0:76:30:a8:
77:a8:f9:bc:f1:ba:9a:78:f0:d3:35:79:78:7f:72:ec:cf:89:
1f:25:8b:74:a7:b7:5f:c5:a4:23:71:a4:67:dd:8c:8f:0e:04:
a0:9e:2f:77:36:03:db:f7:dc:60:4c:6f:8d:88:c0:d2:75:15:
3e:f3:b2:19:fb:e6:cc:31:3a:66:49:26:ec:f5:c9:dd:63:20:
1b:a5:ac:50:10:f5:4a:77:8e:ce:ca:ad:93:a8:26:82:04:32:
41:ce:ea:19:53:56:23:12:58:2d:d3:f2:12:ed:51:61:c6:e2:
a5:4c:a8:ff:07:95:70:35:6c:bf:b7:f0:90:5e:da:22:19:34:
67:a3:11:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhjywoCMdVRkDKbAoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw
NTM2MB4XDTI0MTIzMTE0MDA1M1oXDTI1MDMzMTEzMDA1M1owLzEtMCsGA1UEAxMk
NDY1ZGUzNGYtOTFmZC00YWFhLTlkZGItZjk5OTdjMzk1MWUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DtRM0PxiszWCDMaJvGV5ZnCuap/6x12EVoR
4X8GpRqkQ6fiNyIg/UJijUBiqNIDSW0YEoCSbf/4lH5IsZSrrLlbrN4C/BBW+8tu
aLI/mMPjJFsrqJicEyJw4SqSkbQ0aXTMj48oM2O1GU9KK2zpo96Hd0iBqvzWouD0
lpi8wuYgl0gxXCq92HlKGp0MxDzRQ7xugacyXtVeXIq3VZPhjRdLgIbbaMagFmle
t9DOrC8DiXPqSUdKeCsu3fvY13F5hg3r0xHNiXj4MIgFP4eM0U1ExU+yVxJxp7Vv
op4nJu62uFHPgxbAqzkKkspJ2ZxTWD6ITsHqpNoOcc0W+3rxeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFALP/sXnxV1FvMPHGnof7hNUYPZ0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm
MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvYzFiYzAwMjMtMWJhMC0z
MTY3LWEyZTItOGI5ZjRjODBjMDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3
OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj
MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh
ZWUwYzA1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGEjYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJvZ6LDGBxd4rVIDWGM7nhsD3Xc+l9rKHXT+mKjK8JxAxAvrmHlRUiic
HKfsZZR3CMGOp6mf6x9+g9Kl0hwbwVYpfU6MsRpELqmbXqyKspixw0IwuVDJuWQx
afIldGOFIF2qFZZXm0EJ/55qt1UXmtpIknpIm0tIIA/asHYwqHeo+bzxupp48NM1
eXh/cuzPiR8li3Snt1/FpCNxpGfdjI8OBKCeL3c2A9v33GBMb42IwNJ1FT7zshn7
5swxOmZJJuz1yd1jIBulrFAQ9Up3js7KrZOoJoIEMkHO6hlTViMSWC3T8hLtUWHG
4qVMqP8HlXA1bL+38JBe2iIZNGejEUU=
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:37:11 2025 by rpki-client