Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/aff56b7a-142a-35b1-91a1-56bc81fb55c7.roa
File: aff56b7a-142a-35b1-91a1-56bc81fb55c7.roa (raw, json)
Hash identifier: AX5gJc/GmDAID3sR3GodlTq1stgAVqhBgdgEPRAIJCU=
Subject key identifier: B8:52:E2:65:39:37:D9:13:DC:23:CE:BE:8F:97:26:B8:13:1B:A6:F8
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285846D5DA8E6C6DF39081A3CE7B00
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/aff56b7a-142a-35b1-91a1-56bc81fb55c7.roa
Signing time: Sun 11 Aug 2024 01:00:28 +0000
ROA not before: Sun 11 Aug 2024 01:00:28 +0000
ROA not after: Sat 09 Nov 2024 02:00:28 +0000
asID: 5624
IP address blocks: 20.133.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:d5:da:8e:6c:6d:f3:90:81:a3:ce:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Aug 11 01:00:28 2024 GMT
Not After : Nov 9 02:00:28 2024 GMT
Subject: CN=c980d960-177c-46cc-abcc-1f67e086f226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:af:57:a4:94:4f:24:40:de:63:6b:ec:9f:17:
d7:7b:eb:1d:fd:f3:2d:2c:e5:fc:62:1d:5c:23:91:
e5:1b:4c:7f:f9:81:99:94:b9:fb:24:46:a4:56:1d:
2d:cc:4b:77:95:bf:83:e4:f2:a1:f3:a3:39:2a:06:
85:43:80:a2:7c:e9:0c:32:93:c4:8a:db:05:96:f7:
59:8b:3c:a5:21:35:53:02:be:81:d8:81:e6:aa:01:
2f:d0:3f:1f:ec:83:c3:02:3c:f4:dc:bf:75:43:d4:
a5:6f:87:49:4a:f0:24:31:d9:34:e3:92:43:8b:09:
95:7e:ff:74:fc:2c:97:5b:7b:b0:d1:c1:81:f9:8b:
96:37:b4:66:1e:b4:20:62:ce:1b:9d:3c:87:c3:04:
4a:5d:d7:fe:c0:cd:c2:57:5a:f5:af:e5:69:4b:17:
3a:ce:75:55:97:62:8e:66:0e:e3:da:5f:d8:18:01:
14:77:40:1e:51:8c:18:68:cb:4e:b9:5f:e8:e9:4a:
21:81:31:70:a4:c0:7c:5f:86:1b:82:00:bb:dd:7a:
be:4f:d7:bb:95:97:06:ff:9a:e9:9d:fa:64:8d:1e:
81:99:3b:07:19:d5:45:9a:ac:6b:ac:b4:15:3a:e1:
f3:db:95:1d:c0:55:5d:f5:13:74:98:18:f8:9d:0f:
7b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:52:E2:65:39:37:D9:13:DC:23:CE:BE:8F:97:26:B8:13:1B:A6:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/aff56b7a-142a-35b1-91a1-56bc81fb55c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.133.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:a0:a2:9b:ba:1d:ee:87:17:8d:94:a7:e2:de:0e:66:c8:6d:
ce:41:75:46:8f:5f:d0:84:89:4a:11:62:f0:3a:03:4d:f2:68:
1a:b2:7c:5d:08:42:83:9e:62:73:92:f4:e8:af:d5:fd:c4:57:
6b:c3:13:ca:52:d4:6c:11:1a:4c:9b:25:5d:fe:a7:48:7c:87:
62:9d:65:5f:0e:10:c2:19:02:1a:f3:08:53:42:c2:77:e2:de:
57:39:b2:b8:3d:e1:81:62:d6:98:25:96:d0:0e:c6:63:56:e3:
90:d5:f0:74:a9:ff:81:7c:77:9d:56:45:f2:e3:85:c5:c9:7b:
4e:97:31:ca:3b:7b:46:4d:0a:9e:c6:86:55:cf:66:e4:fa:6b:
b1:31:9c:04:c5:b3:8d:a6:4e:43:64:cb:7f:73:80:67:fa:3b:
67:fb:c5:ad:ae:ca:34:41:c5:c4:2b:94:72:f8:cf:b8:4f:89:
bd:c6:1f:f6:ea:7f:a1:17:e8:12:75:52:79:80:98:48:40:ca:
dc:76:e9:9c:98:64:87:1c:ad:f0:4c:de:41:a4:d5:d0:aa:f7:
75:0b:e3:6f:7c:dd:47:54:a8:c9:e7:59:64:e5:b3:0b:e1:07:
b7:fc:43:eb:f3:d5:65:8b:45:a5:89:bf:5f:43:4f:85:10:c2:
ea:67:8d:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbV2o5sbfOQgaPOewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI0MDgxMTAxMDAyOFoXDTI0MTEwOTAyMDAyOFowLzEtMCsGA1UEAxMk
Yzk4MGQ5NjAtMTc3Yy00NmNjLWFiY2MtMWY2N2UwODZmMjI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa9XpJRPJEDeY2vsnxfXe+sd/fMtLOX8Yh1c
I5HlG0x/+YGZlLn7JEakVh0tzEt3lb+D5PKh86M5KgaFQ4CifOkMMpPEitsFlvdZ
izylITVTAr6B2IHmqgEv0D8f7IPDAjz03L91Q9Slb4dJSvAkMdk045JDiwmVfv90
/CyXW3uw0cGB+YuWN7RmHrQgYs4bnTyHwwRKXdf+wM3CV1r1r+VpSxc6znVVl2KO
Zg7j2l/YGAEUd0AeUYwYaMtOuV/o6UohgTFwpMB8X4YbggC73Xq+T9e7lZcG/5rp
nfpkjR6BmTsHGdVFmqxrrLQVOuHz25UdwFVd9RN0mBj4nQ973wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLhS4mU5N9kT3CPOvo+XJrgTG6b4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYWZmNTZiN2EtMTQyYS0z
NWIxLTkxYTEtNTZiYzgxZmI1NWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIXoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAACgopu6He6HF42Up+LeDmbIbc5BdUaPX9CEiUoRYvA6A03yaBqyfF0I
QoOeYnOS9Oiv1f3EV2vDE8pS1GwRGkybJV3+p0h8h2KdZV8OEMIZAhrzCFNCwnfi
3lc5srg94YFi1pglltAOxmNW45DV8HSp/4F8d51WRfLjhcXJe06XMco7e0ZNCp7G
hlXPZuT6a7ExnATFs42mTkNky39zgGf6O2f7xa2uyjRBxcQrlHL4z7hPib3GH/bq
f6EX6BJ1UnmAmEhAytx26ZyYZIccrfBM3kGk1dCq93UL42983UdUqMnnWWTlswvh
B7f8Q+vz1WWLRaWJv19DT4UQwupnjU8=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:35 2025 by rpki-client