Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4afd8970-5c57-334b-adc7-2a0eb8ecf1ba.roa
File: 4afd8970-5c57-334b-adc7-2a0eb8ecf1ba.roa (raw, json)
Hash identifier: K3nALYV4+o5k7P7p1zTPQOTHd4fWC6ipXvZjR4xGDXY=
Subject key identifier: 2F:BC:33:FB:85:BF:D5:F6:C4:1F:3F:F2:87:B7:42:72:71:DA:80:B1
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D163EC42DA183E02C4BB00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4afd8970-5c57-334b-adc7-2a0eb8ecf1ba.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 24.107.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:63:ec:42:da:18:3e:02:c4:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=8a7084e4-eb16-447b-b459-7be9eb153663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:55:64:37:b4:1f:48:8a:57:ed:2c:67:ca:
81:03:ad:f8:85:aa:1c:09:0d:fb:46:78:76:19:e0:
e8:03:e6:cf:8d:2f:e5:2e:84:09:1f:5a:b1:a5:ea:
ac:5e:76:88:88:21:68:9d:a5:56:c6:c1:8a:53:ab:
8d:8f:62:a5:fd:ea:30:83:9f:b9:8a:3c:94:53:87:
94:dd:f8:d3:7e:09:bd:2e:0e:8d:28:98:cc:65:15:
b7:2a:07:e0:88:a3:ab:f0:8f:63:c0:f1:75:3c:dd:
cd:77:b2:d4:e7:c0:85:c7:d5:3d:ff:3c:7d:db:74:
0c:1b:d3:15:6a:3b:df:03:e2:eb:62:e4:da:de:4c:
52:05:20:10:15:b4:26:00:08:06:4e:94:c4:ea:e1:
b8:a3:f3:e7:06:2e:ed:6c:34:14:60:06:d4:e5:47:
06:1a:92:e8:90:8e:81:ec:f5:2b:2f:6e:0c:97:92:
e0:09:b5:2d:1c:fe:67:0b:bb:2c:d3:61:23:d0:da:
7e:ac:32:43:76:1c:7c:db:ad:93:18:82:b1:d3:cb:
c6:0d:2b:f2:14:44:d3:fe:68:85:8f:0e:74:be:a5:
a9:9a:2a:4c:17:4f:ab:79:70:8d:63:b6:1f:74:f4:
3f:75:a0:d1:a2:6f:2b:06:5b:06:85:0c:fe:7f:5c:
8b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BC:33:FB:85:BF:D5:F6:C4:1F:3F:F2:87:B7:42:72:71:DA:80:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4afd8970-5c57-334b-adc7-2a0eb8ecf1ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
24.107.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:7f:24:66:df:f6:f0:3b:8c:93:84:eb:a9:68:3b:1c:73:df:
65:54:44:cc:13:e6:48:ed:cf:86:d5:ca:30:a5:f5:57:7e:a6:
8d:5e:3d:3c:aa:d7:a1:cd:6e:16:21:f3:07:fb:39:71:7f:2c:
4d:94:b1:ea:18:94:1a:28:be:77:f5:57:90:b3:80:ab:f7:db:
b8:a0:e4:32:92:08:af:42:0c:5c:73:97:0c:6b:42:ec:9a:a4:
10:cf:58:57:e1:ca:89:f1:6e:70:f3:22:46:9a:a6:fb:5d:7d:
41:1c:94:8b:7d:3d:05:95:15:84:d3:c3:d9:7b:34:d7:b1:e0:
01:81:51:7b:c4:ad:1f:7b:1b:a0:c1:99:ed:97:43:67:04:44:
6e:0e:a0:d6:96:a4:1f:dc:e5:c1:8a:d9:df:dc:05:bd:74:52:
f2:d4:6e:a5:46:9f:69:35:03:3c:0f:1e:54:2a:1f:a8:0e:aa:
6e:7d:b2:87:db:9d:f6:3e:49:76:ac:cb:2f:9a:f8:a8:c7:68:
45:70:fc:63:31:d4:66:ee:d9:db:63:14:77:a0:0d:84:69:f8:
54:51:9b:42:9e:02:62:9e:ab:ee:37:af:d0:25:12:a6:65:a0:
3b:41:ce:52:0c:43:bf:6b:c5:e5:56:46:1c:fd:70:d5:16:5c:
41:1b:17:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0WPsQtoYPgLEuwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
OGE3MDg0ZTQtZWIxNi00NDdiLWI0NTktN2JlOWViMTUzNjYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7JVZDe0H0iKV+0sZ8qBA634haocCQ37Rnh2
GeDoA+bPjS/lLoQJH1qxpeqsXnaIiCFonaVWxsGKU6uNj2Kl/eowg5+5ijyUU4eU
3fjTfgm9Lg6NKJjMZRW3KgfgiKOr8I9jwPF1PN3Nd7LU58CFx9U9/zx923QMG9MV
ajvfA+LrYuTa3kxSBSAQFbQmAAgGTpTE6uG4o/PnBi7tbDQUYAbU5UcGGpLokI6B
7PUrL24Ml5LgCbUtHP5nC7ss02Ej0Np+rDJDdhx8262TGIKx08vGDSvyFETT/miF
jw50vqWpmipMF0+reXCNY7YfdPQ/daDRom8rBlsGhQz+f1yLbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC+8M/uFv9X2xB8/8oe3QnJx2oCxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNGFmZDg5NzAtNWM1Ny0z
MzRiLWFkYzctMmEwZWI4ZWNmMWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGGuwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALt/JGbf9vA7jJOE66loOxxz32VURMwT5kjtz4bVyjCl9Vd+po1ePTyq
16HNbhYh8wf7OXF/LE2UseoYlBoovnf1V5CzgKv327ig5DKSCK9CDFxzlwxrQuya
pBDPWFfhyonxbnDzIkaapvtdfUEclIt9PQWVFYTTw9l7NNex4AGBUXvErR97G6DB
me2XQ2cERG4OoNaWpB/c5cGK2d/cBb10UvLUbqVGn2k1AzwPHlQqH6gOqm59sofb
nfY+SXasyy+a+KjHaEVw/GMx1Gbu2dtjFHegDYRp+FRRm0KeAmKeq+43r9AlEqZl
oDtBzlIMQ79rxeVWRhz9cNUWXEEbFzs=
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:45:12 2025 by rpki-client