Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/d24e1119-5be2-3190-a36f-e8056d9c96aa.roa
File: d24e1119-5be2-3190-a36f-e8056d9c96aa.roa (raw, json)
Hash identifier: 4wSt2x1m4z3tNA4HNwWtrIUtw/6NKj/xpUU9PYEq1do=
Subject key identifier: 4C:80:45:50:B8:E3:79:90:51:4E:7C:BF:08:62:2D:A8:C5:43:88:B6
Certificate issuer: /CN=e8344a1b-565c-4cdf-b2ee-9556f276e3b6
Certificate serial: 010D0C9F43285849393E77330A9D8CA07D59FE40
Authority key identifier: 26:7C:FE:57:A0:4A:CC:73:CA:2A:1C:0B:3E:7C:C5:1E:7F:AF:95:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/d24e1119-5be2-3190-a36f-e8056d9c96aa.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 16509
IP address blocks: 192.172.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:77:33:0a:9d:8c:a0:7d:59:fe:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8344a1b-565c-4cdf-b2ee-9556f276e3b6
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=db193b80-3a99-48ce-baf4-6bc23a4279c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b0:29:56:46:f2:84:d3:99:3b:44:14:96:b4:
03:98:3f:5e:a4:46:92:ea:a4:ec:84:91:00:27:a1:
e9:88:82:58:a5:17:a4:38:23:d2:9c:e0:1f:bd:0d:
3b:40:26:e1:d3:87:fd:4a:7f:0a:64:20:a7:89:c2:
29:40:59:50:73:46:65:cb:48:a0:ff:82:8f:35:08:
60:31:3b:a2:d2:a9:52:c9:99:93:04:57:fb:f6:72:
b7:7c:1e:2c:f9:a6:9f:3e:86:bf:ba:a7:ff:7b:b5:
9d:b5:3b:a4:db:cc:47:9e:71:5a:93:8e:07:da:0b:
a0:37:77:4e:16:1b:2d:d4:90:da:a9:ce:c9:66:40:
a5:4a:23:9f:5c:3e:df:44:af:5c:4b:e3:e0:c8:f2:
73:d7:8e:5d:86:9a:5d:91:67:dc:5a:77:71:e9:78:
b5:f0:15:73:e3:38:31:63:b2:24:95:eb:6c:d6:f3:
c4:44:d1:31:e2:cf:4d:b8:a2:63:bb:d3:0c:86:36:
6f:c0:52:fc:d7:fc:8a:85:d1:1e:17:29:f0:5e:e8:
dc:d9:06:b1:62:9a:5e:6a:ed:42:bc:4f:55:d6:2a:
a7:a2:dd:0c:7a:9e:7b:50:96:cd:89:9f:9d:69:e1:
2f:63:7e:23:e8:9c:15:f0:f2:ff:3d:bf:94:24:cc:
a8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:80:45:50:B8:E3:79:90:51:4E:7C:BF:08:62:2D:A8:C5:43:88:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/d24e1119-5be2-3190-a36f-e8056d9c96aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.crl
X509v3 Authority Key Identifier:
keyid:26:7C:FE:57:A0:4A:CC:73:CA:2A:1C:0B:3E:7C:C5:1E:7F:AF:95:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.cer
sbgp-ipAddrBlock: critical
IPv4:
192.172.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:2e:88:48:a8:66:cc:18:05:da:b9:57:9c:47:12:58:52:ab:
95:87:a4:46:36:93:e1:11:5f:02:f7:a2:48:66:ed:e5:8b:e5:
44:34:f7:0c:00:d8:86:b8:ca:be:a6:27:92:37:40:93:cd:e8:
09:72:e8:59:94:e6:44:13:1c:1d:e8:a8:be:77:25:24:85:1d:
02:b1:46:48:88:60:0d:48:ee:a8:1d:46:39:ea:99:84:5a:9f:
7d:f1:af:98:cd:3e:9f:56:e4:3f:75:e8:60:50:f1:ac:c5:45:
bb:e9:da:46:0f:4f:00:36:d1:d9:54:b3:b0:23:9d:eb:47:a4:
57:35:d8:58:b8:e6:01:f6:a5:c0:2a:97:5f:90:ef:5e:09:aa:
da:5b:0c:30:aa:d0:6f:c6:02:8d:7c:83:22:55:a0:c5:8d:f4:
98:01:71:f5:8f:fc:24:26:95:20:d6:f9:07:2f:72:aa:9d:0d:
5b:c2:c5:f7:56:9f:a4:ae:26:2b:17:67:39:34:80:a3:16:0b:
70:04:36:5b:93:7e:5d:59:98:8e:23:e2:8f:80:c7:b8:77:cd:
03:25:c1:58:5d:cb:c2:6e:65:8d:8d:25:49:c8:d0:c3:b3:a9:
cc:82:48:1c:33:0e:d3:a2:ac:fa:73:f8:1e:dd:52:16:fc:59:
c2:ed:66:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5PnczCp2MoH1Z/kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTgzNDRhMWItNTY1Yy00Y2RmLWIyZWUtOTU1NmYyNzZl
M2I2MB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk
ZGIxOTNiODAtM2E5OS00OGNlLWJhZjQtNmJjMjNhNDI3OWM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLApVkbyhNOZO0QUlrQDmD9epEaS6qTshJEA
J6HpiIJYpRekOCPSnOAfvQ07QCbh04f9Sn8KZCCnicIpQFlQc0Zly0ig/4KPNQhg
MTui0qlSyZmTBFf79nK3fB4s+aafPoa/uqf/e7WdtTuk28xHnnFak44H2gugN3dO
Fhst1JDaqc7JZkClSiOfXD7fRK9cS+PgyPJz145dhppdkWfcWndx6Xi18BVz4zgx
Y7Iklets1vPERNEx4s9NuKJju9MMhjZvwFL81/yKhdEeFynwXujc2QaxYppeau1C
vE9V1iqnot0Mep57UJbNiZ+daeEvY34j6JwV8PL/Pb+UJMyoRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEyARVC443mQUU58vwhiLajFQ4i2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lODM0
NGExYi01NjVjLTRjZGYtYjJlZS05NTU2ZjI3NmUzYjYvZDI0ZTExMTktNWJlMi0z
MTkwLWEzNmYtZTgwNTZkOWM5NmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTgzNDRhMWItNTY1Yy00Y2RmLWIy
ZWUtOTU1NmYyNzZlM2I2L2U4MzQ0YTFiLTU2NWMtNGNkZi1iMmVlLTk1NTZmMjc2
ZTNiNi5jcmwwHwYDVR0jBBgwFoAUJnz+V6BKzHPKKhwLPnzFHn+vlUEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lODM0NGExYi01NjVjLTRjZGYtYjJlZS05NTU2
ZjI3NmUzYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKzdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADAuiEioZswYBdq5V5xHElhSq5WHpEY2k+ERXwL3okhm7eWL5UQ09wwA
2Ia4yr6mJ5I3QJPN6Aly6FmU5kQTHB3oqL53JSSFHQKxRkiIYA1I7qgdRjnqmYRa
n33xr5jNPp9W5D916GBQ8azFRbvp2kYPTwA20dlUs7AjnetHpFc12Fi45gH2pcAq
l1+Q714JqtpbDDCq0G/GAo18gyJVoMWN9JgBcfWP/CQmlSDW+QcvcqqdDVvCxfdW
n6SuJisXZzk0gKMWC3AENluTfl1ZmI4j4o+Ax7h3zQMlwVhdy8JuZY2NJUnI0MOz
qcyCSBwzDtOirPpz+B7dUhb8WcLtZqY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:34 2025 by rpki-client