Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/41e5e78e-29dc-30ab-a421-1b08e53300cb.roa
File: 41e5e78e-29dc-30ab-a421-1b08e53300cb.roa (raw, json)
Hash identifier: /2n+N3Ll5FKMT9PDAE0g5EaKjxU7xM4O8d/o7KAyYKk=
Subject key identifier: 2D:E3:CE:28:C8:43:DD:26:0B:87:37:86:9D:E7:EB:6B:2A:7B:5A:28
Certificate issuer: /CN=a2ff7ccf-c138-4e25-b3bb-dc206512af3a
Certificate serial: 010D0C9F43285844A63A2DD0315E51C0AD014140
Authority key identifier: DC:0F:FB:CA:DD:AE:2F:35:60:29:BF:BC:FD:B6:6F:2D:03:9F:E4:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/41e5e78e-29dc-30ab-a421-1b08e53300cb.roa
Signing time: Tue 23 Jan 2024 14:00:30 +0000
ROA not before: Tue 23 Jan 2024 14:00:30 +0000
ROA not after: Mon 22 Apr 2024 13:00:30 +0000
asID: 396982
IP address blocks: 144.49.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:a6:3a:2d:d0:31:5e:51:c0:ad:01:41:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ff7ccf-c138-4e25-b3bb-dc206512af3a
Validity
Not Before: Jan 23 14:00:30 2024 GMT
Not After : Apr 22 13:00:30 2024 GMT
Subject: CN=eafa8bb2-3e0b-46c3-9548-5fa649b95b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:13:d5:63:62:b1:d4:15:69:9b:27:b1:76:fe:
83:91:30:53:41:fe:36:97:fa:99:db:db:7e:d2:3b:
ef:bd:4f:12:1a:5d:25:2c:0c:07:4f:de:af:e1:79:
79:f7:2f:d3:78:01:18:80:e7:36:b2:d6:9b:fe:fe:
80:cb:9b:93:3b:b1:b0:31:4f:99:e6:a5:af:8f:06:
c4:66:64:e5:de:ea:6e:1a:94:5c:e4:9e:e5:aa:48:
c8:06:5f:43:62:f7:c1:e9:f4:15:05:63:ed:5f:3c:
ec:04:da:45:a6:99:00:61:c8:9f:79:40:3f:dc:17:
17:04:fd:e7:67:b3:85:41:4a:e4:6b:fb:34:66:11:
9f:8a:48:84:e8:d0:7b:2f:65:15:ed:2c:21:cc:aa:
36:3a:af:94:9b:e9:94:d1:7a:6e:05:13:55:2e:e6:
cf:d2:a6:df:f7:c3:49:1a:93:2b:7f:8d:96:bd:00:
c7:67:49:51:db:ae:e3:56:05:10:fd:23:2e:51:6b:
ef:da:7e:2d:85:6a:53:36:4e:49:e4:bf:2c:87:2b:
1a:d7:07:80:cb:ed:31:79:15:cc:31:22:06:dc:f7:
cf:41:1f:d6:a7:aa:4c:cc:48:7c:19:98:2f:95:b8:
67:1b:f7:bd:9b:72:9d:0c:46:f5:57:90:4c:60:0a:
ab:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E3:CE:28:C8:43:DD:26:0B:87:37:86:9D:E7:EB:6B:2A:7B:5A:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/41e5e78e-29dc-30ab-a421-1b08e53300cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a/a2ff7ccf-c138-4e25-b3bb-dc206512af3a.crl
X509v3 Authority Key Identifier:
keyid:DC:0F:FB:CA:DD:AE:2F:35:60:29:BF:BC:FD:B6:6F:2D:03:9F:E4:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2ff7ccf-c138-4e25-b3bb-dc206512af3a.cer
sbgp-ipAddrBlock: critical
IPv4:
144.49.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:58:10:06:f3:e9:99:85:37:08:e1:c3:bc:94:a3:e7:2a:96:
c8:22:64:b1:1e:9d:b1:7b:0a:30:b7:c6:2a:dc:a1:ad:1a:60:
2e:97:c4:78:7a:8c:4f:2c:11:ed:1d:ab:4a:23:51:24:99:47:
6c:c4:90:b1:e3:d6:b7:7d:99:23:1f:0c:04:ab:c3:cc:4e:bd:
a0:38:a2:cd:36:7c:07:2b:c3:cb:a9:1a:bf:63:c9:b6:4d:73:
ac:0b:97:75:ec:77:f2:c6:e6:6f:37:1e:2f:e6:41:4b:39:cc:
d5:fa:a3:47:c9:b0:a7:b7:3a:a8:ab:bc:06:f4:7d:99:97:0f:
2d:2c:8f:3d:20:71:55:9a:17:05:ca:65:b6:59:e2:70:b5:c8:
45:a3:59:64:00:26:a7:aa:32:f3:fe:18:c4:06:a8:66:ee:7d:
64:29:20:93:a7:ec:2f:23:d3:4d:b9:90:40:53:d7:a4:96:66:
64:2e:5f:f3:25:6e:ab:97:f4:45:9f:c8:dd:ac:0d:d7:01:13:
f5:00:19:85:d4:97:f3:79:50:2c:9c:bb:c9:88:98:ae:58:e3:
f0:38:a8:94:9e:34:d4:78:d2:e3:15:d8:07:2d:e4:99:38:db:
12:fc:be:15:ed:e4:ac:f1:68:23:44:53:0a:6c:f6:2f:57:c1:
b5:e4:1b:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESmOi3QMV5RwK0BQUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTJmZjdjY2YtYzEzOC00ZTI1LWIzYmItZGMyMDY1MTJh
ZjNhMB4XDTI0MDEyMzE0MDAzMFoXDTI0MDQyMjEzMDAzMFowLzEtMCsGA1UEAxMk
ZWFmYThiYjItM2UwYi00NmMzLTk1NDgtNWZhNjQ5Yjk1YjAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRPVY2Kx1BVpmyexdv6DkTBTQf42l/qZ29t+
0jvvvU8SGl0lLAwHT96v4Xl59y/TeAEYgOc2stab/v6Ay5uTO7GwMU+Z5qWvjwbE
ZmTl3upuGpRc5J7lqkjIBl9DYvfB6fQVBWPtXzzsBNpFppkAYcifeUA/3BcXBP3n
Z7OFQUrka/s0ZhGfikiE6NB7L2UV7SwhzKo2Oq+Um+mU0XpuBRNVLubP0qbf98NJ
GpMrf42WvQDHZ0lR267jVgUQ/SMuUWvv2n4thWpTNk5J5L8shysa1weAy+0xeRXM
MSIG3PfPQR/Wp6pMzEh8GZgvlbhnG/e9m3KdDEb1V5BMYAqr3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC3jzijIQ90mC4c3hp3n62sqe1ooMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hMmZm
N2NjZi1jMTM4LTRlMjUtYjNiYi1kYzIwNjUxMmFmM2EvNDFlNWU3OGUtMjlkYy0z
MGFiLWE0MjEtMWIwOGU1MzMwMGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTJmZjdjY2YtYzEzOC00ZTI1LWIz
YmItZGMyMDY1MTJhZjNhL2EyZmY3Y2NmLWMxMzgtNGUyNS1iM2JiLWRjMjA2NTEy
YWYzYS5jcmwwHwYDVR0jBBgwFoAU3A/7yt2uLzVgKb+8/bZvLQOf5OAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hMmZmN2NjZi1jMTM4LTRlMjUtYjNiYi1kYzIw
NjUxMmFmM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkDHMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADVYEAbz6ZmFNwjhw7yUo+cqlsgiZLEenbF7CjC3xircoa0aYC6XxHh6
jE8sEe0dq0ojUSSZR2zEkLHj1rd9mSMfDASrw8xOvaA4os02fAcrw8upGr9jybZN
c6wLl3Xsd/LG5m83Hi/mQUs5zNX6o0fJsKe3OqirvAb0fZmXDy0sjz0gcVWaFwXK
ZbZZ4nC1yEWjWWQAJqeqMvP+GMQGqGbufWQpIJOn7C8j0025kEBT16SWZmQuX/Ml
bquX9EWfyN2sDdcBE/UAGYXUl/N5UCycu8mImK5Y4/A4qJSeNNR40uMV2Act5Jk4
2xL8vhXt5KzxaCNEUwps9i9XwbXkG8k=
-----END CERTIFICATE-----
Generated at Mon Feb 5 20:17:00 2024 by rpki-client on console-fra.rpki-client.org