Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/24f0832c-135e-30d8-934a-392b9947dce4.roa
File: 24f0832c-135e-30d8-934a-392b9947dce4.roa (raw, json)
Hash identifier: IzoRc+jqu+aBl7EVOPSZiYOmhFgLj/9GvmubZzvFnEY=
Subject key identifier: 0F:C0:6F:2F:FB:4A:F1:8E:48:31:1A:2A:95:3F:58:9E:60:B8:D4:26
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848B35B6CA6AA3D57B18CCC33D0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/24f0832c-135e-30d8-934a-392b9947dce4.roa
Signing time: Wed 29 Jan 2025 02:00:39 +0000
ROA not before: Wed 29 Jan 2025 02:00:39 +0000
ROA not after: Tue 29 Apr 2025 01:00:39 +0000
asID: 3360
IP address blocks: 20.138.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:5b:6c:a6:aa:3d:57:b1:8c:cc:33:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jan 29 02:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=937557d3-356f-483e-8346-9cea13d60071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:aa:b1:ce:02:9f:25:b3:d4:f7:2f:71:cf:f6:
ca:10:c5:36:c2:4b:84:e1:b6:d9:4a:9c:55:33:63:
65:72:08:a7:d7:c2:6b:1d:08:2c:9f:f9:30:ec:3b:
c9:46:f1:0f:0e:1a:74:44:f0:dc:eb:cb:8c:81:41:
50:f1:6d:d9:81:46:12:0a:75:0b:26:66:ac:a4:e2:
95:5f:7e:ee:23:bb:c7:69:18:39:05:45:d5:53:90:
03:11:94:aa:39:25:50:e6:c6:02:b9:da:ce:93:6c:
9c:fb:8c:02:0a:99:01:75:02:0a:a1:07:5a:6f:76:
b2:da:bb:ce:1e:17:4f:64:48:c6:88:3e:28:05:56:
22:de:b0:e6:cc:13:7b:7f:54:7f:d1:63:61:bf:16:
40:df:15:42:27:19:3a:c7:12:94:91:4c:7d:70:81:
71:14:84:13:3e:f9:17:22:b5:fe:6a:8e:3e:e3:ed:
68:d5:ac:c7:29:d4:41:30:93:f2:2c:5c:b5:61:8c:
70:92:94:02:b9:03:94:fc:ba:c6:d1:b1:ff:0b:97:
24:12:f0:fd:ea:9e:07:22:40:bf:d7:bb:c4:64:29:
77:d0:a1:90:f6:8f:5f:ea:e4:e6:04:74:ab:be:d6:
12:08:9f:48:b3:a1:01:5f:b3:96:0e:9f:f2:85:91:
fb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C0:6F:2F:FB:4A:F1:8E:48:31:1A:2A:95:3F:58:9E:60:B8:D4:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/24f0832c-135e-30d8-934a-392b9947dce4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.138.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:04:bd:bb:2d:63:4d:de:23:95:34:50:6f:50:97:db:e2:71:
81:02:1d:d8:6e:19:c6:14:91:fa:cf:79:32:8a:76:20:b5:43:
6b:ed:7a:ca:95:e0:cd:30:c2:59:66:20:9d:85:66:79:93:f1:
19:b3:0d:ab:66:e2:43:e5:de:61:54:07:da:e1:ca:e3:0b:dd:
20:31:34:56:cf:0e:93:0d:50:28:51:37:75:fa:57:71:03:cc:
6f:07:94:77:e6:8c:d6:9d:40:98:70:f6:46:ad:2e:46:dc:a6:
03:34:50:4b:1c:af:71:23:1b:b0:d4:94:77:e4:3f:1b:7e:b6:
e4:b9:3d:c5:b4:dc:b3:7b:e9:98:ce:fd:06:71:a6:25:fc:77:
8b:ab:9f:7d:92:73:a3:09:b0:14:cd:9c:85:97:69:e6:cb:3b:
01:ff:94:be:20:84:b3:4a:85:b8:d6:27:d6:46:26:ed:51:09:
5e:72:a5:2e:82:c2:3a:6a:fa:da:20:66:a0:eb:fe:51:6e:21:
ea:55:58:0e:68:7b:38:7e:a1:77:80:40:c5:a2:e8:55:81:6c:
23:5e:33:4c:c0:d9:87:7c:82:c0:c1:ee:97:e7:32:77:e3:c5:
ea:aa:ab:f0:cd:66:03:3d:76:1a:71:3e:74:06:c9:5f:ee:e2:
e0:7a:44:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW2ymqj1XsYzMM9AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk
OTM3NTU3ZDMtMzU2Zi00ODNlLTgzNDYtOWNlYTEzZDYwMDcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqqxzgKfJbPU9y9xz/bKEMU2wkuE4bbZSpxV
M2Nlcgin18JrHQgsn/kw7DvJRvEPDhp0RPDc68uMgUFQ8W3ZgUYSCnULJmaspOKV
X37uI7vHaRg5BUXVU5ADEZSqOSVQ5sYCudrOk2yc+4wCCpkBdQIKoQdab3ay2rvO
HhdPZEjGiD4oBVYi3rDmzBN7f1R/0WNhvxZA3xVCJxk6xxKUkUx9cIFxFIQTPvkX
IrX+ao4+4+1o1azHKdRBMJPyLFy1YYxwkpQCuQOU/LrG0bH/C5ckEvD96p4HIkC/
17vEZCl30KGQ9o9f6uTmBHSrvtYSCJ9Is6EBX7OWDp/yhZH7LwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA/Aby/7SvGOSDEaKpU/WJ5guNQmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMjRmMDgzMmMtMTM1ZS0z
MGQ4LTkzNGEtMzkyYjk5NDdkY2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIoQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIQEvbstY03eI5U0UG9Ql9vicYECHdhuGcYUkfrPeTKKdiC1Q2vtesqV
4M0wwllmIJ2FZnmT8RmzDatm4kPl3mFUB9rhyuML3SAxNFbPDpMNUChRN3X6V3ED
zG8HlHfmjNadQJhw9katLkbcpgM0UEscr3EjG7DUlHfkPxt+tuS5PcW03LN76ZjO
/QZxpiX8d4urn32Sc6MJsBTNnIWXaebLOwH/lL4ghLNKhbjWJ9ZGJu1RCV5ypS6C
wjpq+togZqDr/lFuIepVWA5oezh+oXeAQMWi6FWBbCNeM0zA2Yd8gsDB7pfnMnfj
xeqqq/DNZgM9dhpxPnQGyV/u4uB6RAI=
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:28:22 2025 by rpki-client