Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/0d3a9201-b626-32e3-8ba2-32af8872019c.roa
File: 0d3a9201-b626-32e3-8ba2-32af8872019c.roa (raw, json)
Hash identifier: Sb03E3UTmNa/iC08WiP2ZymCsQm93IaiDQMN6r1wphE=
Subject key identifier: A6:CC:DF:9E:FA:70:C8:C9:6F:44:9F:F4:BC:3D:5B:49:E9:CD:C2:02
Certificate issuer: /CN=e407c8fd-b808-41d1-af5e-a88d2dd556f9
Certificate serial: 010D0C9F43285848B1F625C5E6AFD06322E7FC00
Authority key identifier: 39:88:56:13:51:28:01:35:37:02:BA:15:76:26:0A:52:03:98:3E:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/0d3a9201-b626-32e3-8ba2-32af8872019c.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 396982
IP address blocks: 168.235.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:25:c5:e6:af:d0:63:22:e7:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e407c8fd-b808-41d1-af5e-a88d2dd556f9
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=6339dd30-db5c-443d-88f0-b2b1cbe3fa2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7d:6a:a3:86:8f:ee:29:f4:16:ec:c2:68:d1:
39:52:98:f0:22:33:fd:07:d0:ef:01:39:e5:77:23:
52:65:c1:17:06:09:5d:5f:fb:f2:d3:f5:28:4e:2b:
6b:55:1d:82:c0:a7:86:07:61:ca:24:86:9f:4f:81:
76:ac:60:05:dc:19:ad:d6:b4:c4:63:69:39:5c:ff:
a7:03:b1:88:dd:ea:9d:6f:c0:c4:d6:ee:04:17:bd:
4b:05:94:1d:22:cd:4a:0a:04:af:23:73:b2:f9:6f:
2d:97:97:dc:9c:20:31:6d:18:1f:1c:64:16:b5:71:
79:c3:1e:34:d1:f5:32:0f:66:f2:15:3b:bb:00:ab:
f1:2c:38:08:ce:3b:b0:dd:45:e9:2e:04:d4:85:09:
f3:5b:c3:59:8e:e8:00:e3:39:ab:d2:6d:e8:36:0d:
a4:54:60:f3:cc:f1:8d:6b:07:83:09:71:e0:0e:93:
f6:26:8e:ef:be:26:f6:2e:31:d6:1e:16:2c:21:99:
49:75:4c:e1:cd:17:e3:98:e1:7d:9c:4e:12:c0:20:
6a:13:0a:c9:35:78:04:03:56:f2:59:d5:56:fe:9f:
55:04:c4:1d:3b:81:bd:b2:5a:6e:70:39:b5:ff:42:
30:29:61:61:1d:b2:fa:4f:f4:82:09:7a:16:bc:21:
c8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CC:DF:9E:FA:70:C8:C9:6F:44:9F:F4:BC:3D:5B:49:E9:CD:C2:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/0d3a9201-b626-32e3-8ba2-32af8872019c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.crl
X509v3 Authority Key Identifier:
keyid:39:88:56:13:51:28:01:35:37:02:BA:15:76:26:0A:52:03:98:3E:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer
sbgp-ipAddrBlock: critical
IPv4:
168.235.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:af:07:ef:77:34:26:14:61:2f:48:0f:65:fa:83:b9:b5:45:
c3:05:72:94:81:69:1e:04:ae:b0:0c:de:ca:ed:6c:61:71:fc:
ab:89:2a:33:f2:b9:50:fd:5c:57:bf:61:f0:88:78:e6:15:f3:
a3:14:a6:6d:50:e5:89:c4:72:9c:d7:c3:fb:47:ca:5f:7a:f9:
3b:2c:10:57:c4:85:ba:24:74:f3:27:9c:77:fe:c0:69:25:6d:
54:43:7e:58:dd:76:bd:c8:60:03:51:2c:75:84:42:7a:d6:bf:
64:1f:7a:c6:4c:bc:7f:9a:a0:32:67:d8:4d:fe:62:b3:46:20:
97:43:7d:d3:9e:7a:25:7d:60:b4:88:d5:5b:7a:d9:e5:08:74:
eb:b8:4d:e2:d8:61:ec:58:a4:81:fc:1b:3b:40:9f:7f:e6:7d:
db:76:27:e2:25:e3:8c:b1:fb:f0:38:ee:30:55:0c:69:a8:9e:
a7:74:e5:e6:aa:f3:bc:4b:f3:85:b5:3b:73:0f:b9:89:42:3f:
21:00:83:32:2e:c7:4f:9f:72:8c:fa:39:b5:a2:26:e2:90:88:
10:fa:ef:39:6e:c1:3d:32:b4:b2:9b:f3:b0:40:74:ad:38:a2:
97:b9:10:a7:5d:96:63:de:80:98:46:38:84:d1:3c:dd:90:ff:
35:e8:bf:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9iXF5q/QYyLn/AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTQwN2M4ZmQtYjgwOC00MWQxLWFmNWUtYTg4ZDJkZDU1
NmY5MB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk
NjMzOWRkMzAtZGI1Yy00NDNkLTg4ZjAtYjJiMWNiZTNmYTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH1qo4aP7in0FuzCaNE5UpjwIjP9B9DvATnl
dyNSZcEXBgldX/vy0/UoTitrVR2CwKeGB2HKJIafT4F2rGAF3Bmt1rTEY2k5XP+n
A7GI3eqdb8DE1u4EF71LBZQdIs1KCgSvI3Oy+W8tl5fcnCAxbRgfHGQWtXF5wx40
0fUyD2byFTu7AKvxLDgIzjuw3UXpLgTUhQnzW8NZjugA4zmr0m3oNg2kVGDzzPGN
aweDCXHgDpP2Jo7vvib2LjHWHhYsIZlJdUzhzRfjmOF9nE4SwCBqEwrJNXgEA1by
WdVW/p9VBMQdO4G9slpucDm1/0IwKWFhHbL6T/SCCXoWvCHIKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKbM3576cMjJb0Sf9Lw9W0npzcICMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNDA3
YzhmZC1iODA4LTQxZDEtYWY1ZS1hODhkMmRkNTU2ZjkvMGQzYTkyMDEtYjYyNi0z
MmUzLThiYTItMzJhZjg4NzIwMTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTQwN2M4ZmQtYjgwOC00MWQxLWFm
NWUtYTg4ZDJkZDU1NmY5L2U0MDdjOGZkLWI4MDgtNDFkMS1hZjVlLWE4OGQyZGQ1
NTZmOS5jcmwwHwYDVR0jBBgwFoAUOYhWE1EoATU3AroVdiYKUgOYPgIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNDA3YzhmZC1iODA4LTQxZDEtYWY1ZS1hODhk
MmRkNTU2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOvgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH6vB+93NCYUYS9ID2X6g7m1RcMFcpSBaR4ErrAM3srtbGFx/KuJKjPy
uVD9XFe/YfCIeOYV86MUpm1Q5YnEcpzXw/tHyl96+TssEFfEhbokdPMnnHf+wGkl
bVRDfljddr3IYANRLHWEQnrWv2QfesZMvH+aoDJn2E3+YrNGIJdDfdOeeiV9YLSI
1Vt62eUIdOu4TeLYYexYpIH8GztAn3/mfdt2J+Il44yx+/A47jBVDGmonqd05eaq
87xL84W1O3MPuYlCPyEAgzIux0+fcoz6ObWiJuKQiBD67zluwT0ytLKb87BAdK04
ope5EKddlmPegJhGOITRPN2Q/zXov9I=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:22 2025 by rpki-client