Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/414e1823-8393-39d5-9f92-e77736cd54ac.roa
File: 414e1823-8393-39d5-9f92-e77736cd54ac.roa (raw, json)
Hash identifier: iQo499BXDVYo+bJDCbFhPNuFAVp+GLy77D5xjnJ2NQI=
Subject key identifier: 81:6C:9D:60:EE:B8:ED:09:68:BA:24:8F:A7:A8:6E:7A:D0:A3:A3:38
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848B6261C5CE5C09DFE82B42200
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/414e1823-8393-39d5-9f92-e77736cd54ac.roa
Signing time: Thu 30 Jan 2025 02:00:40 +0000
ROA not before: Thu 30 Jan 2025 02:00:40 +0000
ROA not after: Wed 30 Apr 2025 01:00:40 +0000
asID: 17916
IP address blocks: 20.133.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b6:26:1c:5c:e5:c0:9d:fe:82:b4:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Jan 30 02:00:40 2025 GMT
Not After : Apr 30 01:00:40 2025 GMT
Subject: CN=18f615ee-d48d-4c14-863d-2ae00f9c95a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e1:ab:40:8a:ba:fb:05:1c:62:01:24:26:60:
29:fe:7c:4f:43:0b:a9:6c:95:a1:b5:70:1a:b9:bf:
79:bc:ed:cf:90:b2:d6:1b:70:85:b3:df:fa:2a:75:
02:b0:e1:41:70:2b:88:92:96:05:6e:ad:c9:04:02:
10:cf:7a:82:cb:f8:e1:a9:e2:d6:09:bb:4d:c7:5e:
6e:9c:4b:ba:bb:e8:6d:5d:8c:52:29:c6:e2:2b:b6:
61:5f:62:dc:62:91:24:05:ec:a3:ea:13:9c:95:2d:
00:32:55:46:d7:61:67:de:e5:9b:a8:b5:af:f2:cf:
cf:d7:fa:44:66:06:42:d6:bf:69:88:0c:c4:ed:9b:
ff:8a:29:7b:33:97:6c:cf:18:b8:75:5d:52:84:5a:
c2:f4:ad:6f:8d:41:ed:97:61:92:8c:ce:90:2c:1d:
a0:27:de:13:d3:32:a9:2a:ae:d9:98:64:75:a4:5d:
69:d4:c9:70:91:8d:9f:c9:58:98:27:9d:a9:36:b4:
67:3b:92:f4:e7:99:20:77:56:90:0a:66:66:e6:e1:
e6:94:7a:8f:61:25:6a:ef:e4:15:3d:d4:ec:ea:54:
14:f0:2a:5e:82:34:b4:9d:7c:8a:43:6f:af:1e:fb:
37:22:d8:65:93:37:53:02:2c:21:10:41:9f:b9:39:
4b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6C:9D:60:EE:B8:ED:09:68:BA:24:8F:A7:A8:6E:7A:D0:A3:A3:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/414e1823-8393-39d5-9f92-e77736cd54ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.133.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:27:f2:8f:90:ee:a2:c9:99:f9:82:bd:4d:c0:95:b2:6d:f3:
9f:6f:83:7a:62:1f:1a:0e:4f:e3:46:66:d7:72:09:b1:36:95:
73:20:8c:d9:48:9b:d3:30:e6:51:bb:72:fb:58:e3:00:e2:9d:
de:51:ff:5f:29:42:c4:a2:ff:68:28:cb:8b:be:0f:c4:d4:dd:
3f:48:b1:da:35:03:a3:79:dc:c1:34:14:7a:3d:84:eb:e5:ef:
d8:f4:a7:9e:e7:90:31:77:b5:9e:a2:21:b2:04:2b:bc:8d:21:
8e:0d:bc:64:b4:ac:78:20:7b:24:92:45:11:9d:62:c8:2f:ac:
dd:9c:55:24:48:94:10:da:2e:de:4f:ef:61:25:bc:3d:a2:79:
4d:49:0a:2b:95:1c:3c:e1:dd:1c:cc:b9:bc:ae:15:e1:70:be:
c8:6f:f1:b1:a7:d7:f8:fd:20:8a:ff:7b:2c:6b:46:a7:d3:17:
7e:5f:74:f0:e5:85:6c:2f:7b:fa:fb:ac:d9:11:2f:d8:d5:80:
45:6a:8e:f0:c8:a9:5d:c5:8f:10:69:2c:86:4b:92:cc:19:13:
72:77:e9:09:c4:23:b8:95:83:51:25:2a:e0:73:67:14:c9:0a:
45:db:8f:6d:34:65:2b:d2:8b:73:ce:69:b6:88:d3:1e:0b:03:
b2:56:e8:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi2Jhxc5cCd/oK0IgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI1MDEzMDAyMDA0MFoXDTI1MDQzMDAxMDA0MFowLzEtMCsGA1UEAxMk
MThmNjE1ZWUtZDQ4ZC00YzE0LTg2M2QtMmFlMDBmOWM5NWE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuGrQIq6+wUcYgEkJmAp/nxPQwupbJWhtXAa
ub95vO3PkLLWG3CFs9/6KnUCsOFBcCuIkpYFbq3JBAIQz3qCy/jhqeLWCbtNx15u
nEu6u+htXYxSKcbiK7ZhX2LcYpEkBeyj6hOclS0AMlVG12Fn3uWbqLWv8s/P1/pE
ZgZC1r9piAzE7Zv/iil7M5dszxi4dV1ShFrC9K1vjUHtl2GSjM6QLB2gJ94T0zKp
Kq7ZmGR1pF1p1MlwkY2fyViYJ52pNrRnO5L055kgd1aQCmZm5uHmlHqPYSVq7+QV
PdTs6lQU8CpegjS0nXyKQ2+vHvs3IthlkzdTAiwhEEGfuTlLWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIFsnWDuuO0JaLokj6eobnrQo6M4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNDE0ZTE4MjMtODM5My0z
OWQ1LTlmOTItZTc3NzM2Y2Q1NGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFIUoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHcn8o+Q7qLJmfmCvU3AlbJt859vg3piHxoOT+NGZtdyCbE2lXMgjNlI
m9Mw5lG7cvtY4wDind5R/18pQsSi/2goy4u+D8TU3T9Isdo1A6N53ME0FHo9hOvl
79j0p57nkDF3tZ6iIbIEK7yNIY4NvGS0rHggeySSRRGdYsgvrN2cVSRIlBDaLt5P
72ElvD2ieU1JCiuVHDzh3RzMubyuFeFwvshv8bGn1/j9IIr/eyxrRqfTF35fdPDl
hWwve/r7rNkRL9jVgEVqjvDIqV3FjxBpLIZLkswZE3J36QnEI7iVg1ElKuBzZxTJ
CkXbj200ZSvSi3POabaI0x4LA7JW6Ho=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:39 2025 by rpki-client