Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/31f871c3-d292-44dc-a398-39a538f65afd/2618474f-8fa7-3936-83fc-a4afb0b33377.roa
File: 2618474f-8fa7-3936-83fc-a4afb0b33377.roa (raw, json)
Hash identifier: p0EYixpCvGFm6yALUrudFaFcUfsMUJA9lc2LlcjHQ1A=
Subject key identifier: CB:24:A9:15:C6:CA:5E:09:E4:56:55:7A:2B:D1:0F:C3:15:AA:23:1C
Certificate issuer: /CN=31f871c3-d292-44dc-a398-39a538f65afd
Certificate serial: 010D0C9F432858457BE3638650117FB17B234500
Authority key identifier: 17:1F:3B:20:AE:89:30:C4:1C:EC:01:7D:54:DF:C6:41:99:95:CB:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/31f871c3-d292-44dc-a398-39a538f65afd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/31f871c3-d292-44dc-a398-39a538f65afd/2618474f-8fa7-3936-83fc-a4afb0b33377.roa
Signing time: Tue 09 Apr 2024 02:48:40 +0000
ROA not before: Tue 09 Apr 2024 02:48:40 +0000
ROA not after: Mon 08 Jul 2024 02:48:40 +0000
asID: 394081
IP address blocks: 216.38.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:7b:e3:63:86:50:11:7f:b1:7b:23:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31f871c3-d292-44dc-a398-39a538f65afd
Validity
Not Before: Apr 9 02:48:40 2024 GMT
Not After : Jul 8 02:48:40 2024 GMT
Subject: CN=4ecbf49b-7503-4579-a474-116d00714a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2f:3d:40:6e:49:2d:75:5d:08:21:17:29:b9:
cd:82:cc:0c:07:13:3a:b4:30:99:30:34:ad:e7:60:
d7:21:01:45:5b:0a:2b:bf:8f:61:f1:38:bb:75:7e:
97:92:25:2f:9e:59:9e:7f:c1:6f:63:87:8c:a0:ce:
be:91:1a:ce:60:47:0b:16:00:6f:1e:7f:4e:1e:f2:
22:db:06:c3:45:d1:aa:3e:23:42:ae:29:e2:29:f4:
09:74:49:66:f4:85:ca:e6:b0:b4:c5:fb:71:48:6c:
28:e8:c5:a4:1d:1f:af:76:2a:ff:fa:f6:70:9c:95:
88:51:1a:8b:3e:7e:4f:75:0f:a3:4d:9e:ad:e3:5b:
f4:da:1b:74:6e:7b:4b:6d:7b:a6:42:15:c9:a7:f4:
41:73:74:a8:b1:04:df:13:3d:c1:a5:c9:32:55:9f:
58:6c:b2:89:50:4d:aa:4a:1c:be:39:63:a8:c4:a6:
46:f7:7f:98:f8:99:27:fe:45:06:71:bb:56:33:56:
73:44:e9:53:81:c9:77:48:92:bb:dc:30:c9:26:c8:
74:75:58:5e:ee:90:7b:f8:b1:5e:0b:00:f7:1e:c2:
97:40:9b:1a:75:e8:19:24:d3:3b:63:e6:16:85:cb:
29:cf:b7:b6:1f:c5:fb:68:bb:4d:8f:61:06:34:81:
74:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:24:A9:15:C6:CA:5E:09:E4:56:55:7A:2B:D1:0F:C3:15:AA:23:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/31f871c3-d292-44dc-a398-39a538f65afd/2618474f-8fa7-3936-83fc-a4afb0b33377.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/31f871c3-d292-44dc-a398-39a538f65afd/31f871c3-d292-44dc-a398-39a538f65afd.crl
X509v3 Authority Key Identifier:
keyid:17:1F:3B:20:AE:89:30:C4:1C:EC:01:7D:54:DF:C6:41:99:95:CB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/31f871c3-d292-44dc-a398-39a538f65afd.cer
sbgp-ipAddrBlock: critical
IPv4:
216.38.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:53:ea:8f:2b:29:11:fe:93:62:d0:49:df:b8:20:23:3a:6a:
ae:e5:bb:72:4a:66:a6:0c:9c:dd:bb:9a:41:d7:e7:42:41:33:
a5:f1:6c:88:99:44:f5:6d:a5:c4:9a:68:b5:57:31:7a:17:61:
5d:3e:9d:cb:5b:8a:f6:58:13:89:a8:d7:a3:dc:57:2f:9e:b5:
e0:54:aa:91:19:0b:23:25:dd:b7:4a:14:fc:03:b4:5f:cd:43:
90:c6:fd:70:a4:8b:28:20:00:c5:7f:5f:33:bf:d6:bc:6a:71:
71:ac:78:d5:e7:ad:c6:0f:e1:2e:1f:40:81:5e:af:88:0d:c8:
8e:68:66:69:0d:92:0e:2c:ea:a1:0a:da:a7:40:98:cb:07:b7:
a4:5e:95:4f:72:54:c1:12:b9:66:d7:31:b5:b7:a6:5a:f4:79:
dd:31:b9:d0:d4:a5:ca:c8:a6:d4:a2:61:d9:8c:32:ed:ed:e6:
1f:95:e4:76:a8:bb:0b:d4:6c:e8:e1:45:6d:18:11:1d:0d:6d:
4e:ef:b4:13:26:1e:4d:ad:23:9a:95:70:cc:af:33:c5:f0:35:
c7:c6:e2:d9:3b:e9:28:bf:29:4b:6e:70:72:4d:d0:ac:c7:1b:
4b:55:7e:cc:52:59:2a:d9:41:2f:b4:15:0f:d2:40:e9:f8:42:
e2:cb:a3:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV742OGUBF/sXsjRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzFmODcxYzMtZDI5Mi00NGRjLWEzOTgtMzlhNTM4ZjY1
YWZkMB4XDTI0MDQwOTAyNDg0MFoXDTI0MDcwODAyNDg0MFowLzEtMCsGA1UEAxMk
NGVjYmY0OWItNzUwMy00NTc5LWE0NzQtMTE2ZDAwNzE0YTBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8y89QG5JLXVdCCEXKbnNgswMBxM6tDCZMDSt
52DXIQFFWworv49h8Ti7dX6XkiUvnlmef8FvY4eMoM6+kRrOYEcLFgBvHn9OHvIi
2wbDRdGqPiNCriniKfQJdElm9IXK5rC0xftxSGwo6MWkHR+vdir/+vZwnJWIURqL
Pn5PdQ+jTZ6t41v02ht0bntLbXumQhXJp/RBc3SosQTfEz3BpckyVZ9YbLKJUE2q
Shy+OWOoxKZG93+Y+Jkn/kUGcbtWM1ZzROlTgcl3SJK73DDJJsh0dVhe7pB7+LFe
CwD3HsKXQJsadegZJNM7Y+YWhcspz7e2H8X7aLtNj2EGNIF0SQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMskqRXGyl4J5FZVeivRD8MVqiMcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zMWY4
NzFjMy1kMjkyLTQ0ZGMtYTM5OC0zOWE1MzhmNjVhZmQvMjYxODQ3NGYtOGZhNy0z
OTM2LTgzZmMtYTRhZmIwYjMzMzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzFmODcxYzMtZDI5Mi00NGRjLWEz
OTgtMzlhNTM4ZjY1YWZkLzMxZjg3MWMzLWQyOTItNDRkYy1hMzk4LTM5YTUzOGY2
NWFmZC5jcmwwHwYDVR0jBBgwFoAUFx87IK6JMMQc7AF9VN/GQZmVy2QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zMWY4NzFjMy1kMjkyLTQ0ZGMtYTM5OC0zOWE1
MzhmNjVhZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2CboMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH9T6o8rKRH+k2LQSd+4ICM6aq7lu3JKZqYMnN27mkHX50JBM6XxbIiZ
RPVtpcSaaLVXMXoXYV0+nctbivZYE4mo16PcVy+eteBUqpEZCyMl3bdKFPwDtF/N
Q5DG/XCkiyggAMV/XzO/1rxqcXGseNXnrcYP4S4fQIFer4gNyI5oZmkNkg4s6qEK
2qdAmMsHt6RelU9yVMESuWbXMbW3plr0ed0xudDUpcrIptSiYdmMMu3t5h+V5Hao
uwvUbOjhRW0YER0NbU7vtBMmHk2tI5qVcMyvM8XwNcfG4tk76Si/KUtucHJN0KzH
G0tVfsxSWSrZQS+0FQ/SQOn4QuLLo88=
-----END CERTIFICATE-----
Generated at Wed Jun 12 18:13:00 2024 by rpki-client on console-ams.rpki-client.org