Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa
File: a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa (raw, json)
Hash identifier: IToyvLHx4S+/vlRBYbojpTi1131fHUWH9XBHOtIiL+o=
Subject key identifier: 23:08:D0:AF:73:30:58:C9:65:0F:D2:EA:69:C5:59:CE:8E:83:26:B8
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F432858492CAE93A33B4882DB47E60A80
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 3356
IP address blocks: 20.132.0.0/20 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:93:a3:3b:48:82:db:47:e6:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=4b371875-dfff-4ed6-b69b-7978c223f297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0f:6f:59:82:21:09:9f:43:a3:c2:ef:88:97:
1f:43:b8:16:26:72:ae:33:6a:2f:e4:a3:26:33:e0:
c9:b7:5b:f2:4a:6f:a4:ae:b2:98:93:29:e6:af:ae:
4e:16:a6:03:e3:b3:73:41:c9:23:e7:9f:bf:18:d2:
bd:0e:63:9f:6c:9c:ab:a7:d0:aa:80:1d:64:07:ab:
b0:0c:ea:8b:65:6c:47:ae:01:6f:ee:89:23:d9:3a:
fa:89:37:cf:b6:fe:f9:81:aa:06:ee:60:ff:9f:e6:
61:6e:fe:d8:c5:cb:9f:5a:9a:c8:0d:fe:a4:12:52:
be:54:a0:6d:84:c6:0e:31:1f:fd:55:7e:de:7c:b6:
b7:ef:6b:1d:18:d4:00:22:79:c4:3c:35:4a:c2:80:
3a:9f:b1:87:73:dd:db:8d:2a:a9:34:9a:c4:d3:7d:
57:c6:0a:bf:8d:7d:5f:9c:1e:0e:63:ab:76:d6:73:
f5:38:e1:4c:27:df:02:92:78:22:ea:e7:5f:d1:5d:
07:59:ec:be:b1:50:fe:38:a9:63:80:92:fd:3d:4d:
2f:ac:a2:c4:51:56:4f:45:c7:03:c5:33:58:66:93:
44:31:46:b1:b9:a4:7b:12:d6:39:f6:cb:b9:26:c6:
20:9d:53:6c:90:f5:12:58:74:74:1f:32:9e:d6:3a:
f6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:08:D0:AF:73:30:58:C9:65:0F:D2:EA:69:C5:59:CE:8E:83:26:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/a10a0646-d0dc-30dc-b9b4-33235f6c8046.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.132.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:7c:b3:6d:d1:b0:85:1c:ed:7a:8b:00:37:44:18:a8:8a:8a:
a8:21:0f:c3:89:37:a7:b2:62:a8:01:c0:34:d0:47:f5:30:87:
f7:00:e7:f7:34:5a:2a:53:9e:10:4c:94:34:af:76:a4:5e:42:
13:ef:db:0c:cd:ad:53:80:e4:ad:44:94:df:53:75:b0:98:dc:
9d:29:10:85:55:28:6e:17:3a:6d:c8:9c:5a:ec:4c:74:cb:51:
7e:d6:a9:29:43:8f:0d:e7:d0:b1:df:1b:3f:a0:29:df:de:d8:
e9:bf:e8:8b:f3:48:39:6a:d1:a9:9a:ba:3d:b6:ab:08:ac:0c:
23:38:43:62:05:85:a8:a9:f9:90:1e:94:34:00:e5:46:63:b9:
4a:39:74:57:41:25:eb:b7:64:94:de:7d:57:ff:99:64:83:70:
9f:f1:7c:f0:0f:44:91:3c:32:3d:ab:04:9e:ab:02:76:d9:12:
4a:f0:3b:5d:70:c9:ce:c4:e6:5b:52:4f:cc:18:b3:74:41:ff:
66:a8:f4:a8:63:f3:3d:0d:3e:f5:d7:c9:32:73:03:13:17:89:
00:92:74:a6:a3:c1:b8:33:30:72:da:1b:c4:df:f4:d2:95:af:
76:18:cc:7f:cf:1c:57:0d:b8:63:a3:aa:e9:24:24:fc:08:90:
bb:c7:ab:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrpOjO0iC20fmCoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NGIzNzE4NzUtZGZmZi00ZWQ2LWI2OWItNzk3OGMyMjNmMjk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvg9vWYIhCZ9Do8LviJcfQ7gWJnKuM2ov5KMm
M+DJt1vySm+krrKYkynmr65OFqYD47NzQckj55+/GNK9DmOfbJyrp9CqgB1kB6uw
DOqLZWxHrgFv7okj2Tr6iTfPtv75gaoG7mD/n+Zhbv7YxcufWprIDf6kElK+VKBt
hMYOMR/9VX7efLa372sdGNQAInnEPDVKwoA6n7GHc93bjSqpNJrE031Xxgq/jX1f
nB4OY6t21nP1OOFMJ98Ckngi6udf0V0HWey+sVD+OKljgJL9PU0vrKLEUVZPRccD
xTNYZpNEMUaxuaR7EtY59su5JsYgnVNskPUSWHR0HzKe1jr2vwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCMI0K9zMFjJZQ/S6mnFWc6Ogya4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYTEwYTA2NDYtZDBkYy0z
MGRjLWI5YjQtMzMyMzVmNmM4MDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFIQAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA18s23RsIUc7XqLADdEGKiKiqghD8OJN6eyYqgBwDTQR/Uwh/cA5/c0
WipTnhBMlDSvdqReQhPv2wzNrVOA5K1ElN9TdbCY3J0pEIVVKG4XOm3InFrsTHTL
UX7WqSlDjw3n0LHfGz+gKd/e2Om/6IvzSDlq0amauj22qwisDCM4Q2IFhaip+ZAe
lDQA5UZjuUo5dFdBJeu3ZJTefVf/mWSDcJ/xfPAPRJE8Mj2rBJ6rAnbZEkrwO11w
yc7E5ltST8wYs3RB/2ao9Khj8z0NPvXXyTJzAxMXiQCSdKajwbgzMHLaG8Tf9NKV
r3YYzH/PHFcNuGOjqukkJPwIkLvHq2Y=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:13:27 2025 by rpki-client