Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/52bbdc2f-bbde-3036-8aca-e24454a54d90.roa
File: 52bbdc2f-bbde-3036-8aca-e24454a54d90.roa (raw, json)
Hash identifier: yl7eIKVq5Um9854riC4aWIBwfn0803Db4JTF8losuOU=
Subject key identifier: 4E:0A:FA:C5:0D:CA:3A:F4:65:37:43:0B:65:C2:91:F6:AD:3A:D5:4A
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F43285848CB1659593BC0B0565E67B400
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/52bbdc2f-bbde-3036-8aca-e24454a54d90.roa
Signing time: Thu 06 Feb 2025 14:00:52 +0000
ROA not before: Thu 06 Feb 2025 14:00:52 +0000
ROA not after: Wed 07 May 2025 13:00:52 +0000
asID: 2000
IP address blocks: 192.41.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:16:59:59:3b:c0:b0:56:5e:67:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Feb 6 14:00:52 2025 GMT
Not After : May 7 13:00:52 2025 GMT
Subject: CN=d83ca052-176f-4bf5-95ff-2042ed310607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bd:e1:ae:b8:e1:0a:1f:54:ed:d5:7c:f2:4e:
e7:fa:e4:83:e9:9d:59:e8:1b:4f:a7:00:c0:06:d4:
e9:88:bc:47:35:81:fc:e8:5e:ee:0f:60:8c:ec:1d:
06:09:57:91:f1:79:89:87:bb:66:c0:21:0c:28:b5:
89:e7:9f:90:bd:8f:5b:ee:9e:fb:d9:3b:41:5e:38:
b5:54:c2:c0:dd:90:1c:c7:9d:63:cf:00:18:9e:f0:
12:76:59:bd:7f:fb:cb:f6:ee:f9:f8:42:5e:26:d4:
48:99:62:47:04:fb:4b:52:7a:84:6a:3e:25:fe:e7:
85:e2:0a:2a:d2:a0:3d:bb:6c:5e:17:40:67:7a:98:
4d:15:0d:2a:e7:47:43:14:6f:8e:08:8a:e4:2a:05:
03:7a:f0:4a:db:b7:8c:d6:67:37:b2:12:e4:65:7a:
44:51:13:51:e6:9b:94:92:de:fa:e4:23:1e:7b:e1:
bf:24:bf:35:22:a2:4c:73:bd:8e:27:b1:2c:99:ad:
ab:5a:52:e7:cf:ec:4f:dc:12:c5:0b:49:09:05:38:
27:57:00:e4:bd:a1:14:e9:0e:4e:dd:0a:6d:db:b0:
ea:64:4f:9a:f2:af:e1:c1:d4:9f:84:c8:20:77:b8:
d0:22:0f:b6:fe:3c:e4:41:70:28:fd:9b:3e:79:9a:
bc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0A:FA:C5:0D:CA:3A:F4:65:37:43:0B:65:C2:91:F6:AD:3A:D5:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/52bbdc2f-bbde-3036-8aca-e24454a54d90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
192.41.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:8c:8c:f5:c1:24:40:ce:73:1c:5d:5e:4d:01:51:3b:6c:99:
a2:75:3e:dc:eb:46:d1:c5:5c:fe:47:9d:ba:2b:45:35:9b:f7:
33:7a:c9:3a:c8:b3:b3:1a:0f:aa:db:b2:e5:b9:86:65:cf:45:
8e:b0:e6:26:26:48:0b:51:b8:31:4b:ce:c7:44:38:b5:b3:4a:
c6:95:b9:92:d5:c8:12:84:c7:5b:0c:09:71:13:a5:6c:1a:51:
12:18:47:6f:7b:6c:da:ef:2d:48:65:1c:b4:87:09:03:2a:a6:
9e:db:81:7f:02:d3:fc:5a:33:4b:f3:02:6b:b9:7b:27:3d:10:
8a:28:1c:51:3a:30:2a:31:20:64:02:04:d4:e8:83:63:b1:58:
cd:ad:fe:86:c0:63:41:e0:f1:7a:7c:67:33:f8:04:9a:7e:e2:
e2:37:12:b7:0d:8d:b3:8d:4f:6c:6a:52:b3:1d:c5:53:1e:46:
82:05:6e:b1:d0:93:15:d0:df:59:9e:04:8d:b8:06:71:a0:28:
16:02:32:0f:15:9d:3e:71:7d:4f:66:e8:f8:08:6e:0e:07:c0:
38:af:90:4f:63:27:ec:ee:7c:7d:12:7c:36:74:3a:6f:c5:78:
8b:b6:59:31:1f:1d:b4:22:b1:ef:62:b1:3a:19:84:99:e5:de:
b7:7e:6a:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLFllZO8CwVl5ntAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk
ZDgzY2EwNTItMTc2Zi00YmY1LTk1ZmYtMjA0MmVkMzEwNjA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1r3hrrjhCh9U7dV88k7n+uSD6Z1Z6BtPpwDA
BtTpiLxHNYH86F7uD2CM7B0GCVeR8XmJh7tmwCEMKLWJ55+QvY9b7p772TtBXji1
VMLA3ZAcx51jzwAYnvASdlm9f/vL9u75+EJeJtRImWJHBPtLUnqEaj4l/ueF4goq
0qA9u2xeF0BnephNFQ0q50dDFG+OCIrkKgUDevBK27eM1mc3shLkZXpEURNR5puU
kt765CMee+G/JL81IqJMc72OJ7Esma2rWlLnz+xP3BLFC0kJBTgnVwDkvaEU6Q5O
3Qpt27DqZE+a8q/hwdSfhMggd7jQIg+2/jzkQXAo/Zs+eZq8hwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE4K+sUNyjr0ZTdDC2XCkfatOtVKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNTJiYmRjMmYtYmJkZS0z
MDM2LThhY2EtZTI0NDU0YTU0ZDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCmrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIWMjPXBJEDOcxxdXk0BUTtsmaJ1PtzrRtHFXP5HnborRTWb9zN6yTrI
s7MaD6rbsuW5hmXPRY6w5iYmSAtRuDFLzsdEOLWzSsaVuZLVyBKEx1sMCXETpWwa
URIYR297bNrvLUhlHLSHCQMqpp7bgX8C0/xaM0vzAmu5eyc9EIooHFE6MCoxIGQC
BNTog2OxWM2t/obAY0Hg8Xp8ZzP4BJp+4uI3ErcNjbONT2xqUrMdxVMeRoIFbrHQ
kxXQ31meBI24BnGgKBYCMg8VnT5xfU9m6PgIbg4HwDivkE9jJ+zufH0SfDZ0Om/F
eIu2WTEfHbQise9isToZhJnl3rd+at4=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:34:09 2025 by rpki-client