Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/098e061a-4038-3670-91a7-ce4b93406fe3.roa
File: 098e061a-4038-3670-91a7-ce4b93406fe3.roa (raw, json)
Hash identifier: 47Z1uzmDW7wFIGQu7ngrzpKxvbrX9rxFb5zIlwrBBt4=
Subject key identifier: 6B:F8:5E:77:DD:C3:54:5C:C0:DE:F4:60:0A:13:59:EC:5A:6B:28:FA
Certificate issuer: /CN=418526d5-2aa2-4d2f-8cb1-5c417728a97d
Certificate serial: 010D0C9F4328584925B3A95CA57905AB49A1D500
Authority key identifier: 8A:23:7F:AE:7E:77:C0:02:5D:F9:30:F1:FC:46:FC:5E:1E:84:09:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/098e061a-4038-3670-91a7-ce4b93406fe3.roa
Signing time: Tue 11 Mar 2025 01:00:40 +0000
ROA not before: Tue 11 Mar 2025 01:00:40 +0000
ROA not after: Mon 09 Jun 2025 01:00:40 +0000
asID: 14618
IP address blocks: 212.32.32.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:25:b3:a9:5c:a5:79:05:ab:49:a1:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=418526d5-2aa2-4d2f-8cb1-5c417728a97d
Validity
Not Before: Mar 11 01:00:40 2025 GMT
Not After : Jun 9 01:00:40 2025 GMT
Subject: CN=e070c1ef-ea64-46a1-8fea-f289e9a42d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:29:16:eb:ae:62:8a:4c:bd:ea:b0:fa:52:ae:
14:9a:b6:da:4c:75:4a:2e:a2:c9:40:b8:2c:1c:e2:
8e:60:32:3d:77:88:5c:fc:43:9c:02:f5:51:0d:a6:
0b:38:1d:b9:08:1d:9c:21:01:fe:e5:90:2d:7e:74:
0e:e7:4d:eb:c2:78:2d:37:b0:5c:03:b8:66:88:51:
5c:cb:26:2a:8b:79:00:65:c2:ff:e4:49:d8:e0:e0:
fa:7b:fd:1b:7b:53:2c:b8:e7:67:c4:cd:26:7a:97:
e4:23:60:ca:7a:a3:8f:ab:00:60:89:cb:7c:1f:96:
b4:bd:ba:c7:9a:5d:cd:c4:b1:b9:a6:f3:68:31:e1:
c4:5f:90:84:2a:e2:5f:6f:a5:dc:e8:64:cf:5b:c5:
02:cf:55:17:0f:3b:65:1b:55:df:ca:6b:84:ff:37:
98:0e:19:c8:77:a4:88:97:e2:6a:5b:17:34:f2:a9:
34:a1:cc:ee:9f:82:2b:20:a4:2d:6e:4d:af:28:89:
be:a3:9d:83:f5:d0:ad:a3:c4:99:cb:ad:a7:4a:ec:
a4:17:f4:b4:4b:2c:dc:aa:e7:ba:a9:43:92:5e:cf:
ce:45:bb:6a:bc:9c:57:65:b8:6e:bc:65:b3:ce:92:
7e:82:a5:6c:7f:3f:a0:eb:30:8d:da:ff:af:68:d9:
a8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F8:5E:77:DD:C3:54:5C:C0:DE:F4:60:0A:13:59:EC:5A:6B:28:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/098e061a-4038-3670-91a7-ce4b93406fe3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.crl
X509v3 Authority Key Identifier:
keyid:8A:23:7F:AE:7E:77:C0:02:5D:F9:30:F1:FC:46:FC:5E:1E:84:09:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.cer
sbgp-ipAddrBlock: critical
IPv4:
212.32.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:61:61:2c:fe:49:16:09:1a:4e:f1:88:18:c0:3e:15:61:a3:
79:87:0c:2d:ae:0d:e7:80:43:0e:ea:13:20:a6:85:31:cd:0c:
bc:02:66:03:06:d5:13:95:86:b6:ef:d6:7b:7c:7f:fc:c8:4d:
c2:13:00:a9:21:d4:51:aa:d6:6c:7c:e9:c3:6d:ba:65:45:85:
b3:ee:17:14:dd:a0:08:28:c8:1a:b8:a5:f6:53:7b:8b:3a:43:
02:06:e0:fa:7a:47:b8:8a:32:73:41:19:7d:ad:22:3e:41:d8:
50:29:9d:98:db:74:7d:9d:22:2f:7b:17:f5:d5:ba:f6:ea:ff:
34:37:24:fe:bf:cc:af:fb:00:7f:62:02:d5:9e:92:99:b8:37:
af:7b:99:61:91:82:c8:c4:f5:8b:a0:2b:ac:5a:26:fc:92:a8:
83:74:dd:7b:eb:0b:02:23:a2:0b:87:23:02:98:49:d8:85:7a:
d5:f4:90:44:2e:40:8a:fe:4e:e8:f9:a4:1e:b9:5f:ee:b2:71:
cb:6f:a0:02:9a:47:99:98:1f:f6:2b:c8:ea:92:6d:86:88:db:
7a:46:4a:43:c2:b2:51:33:e7:04:ee:6f:88:17:0c:7a:1f:48:
56:a4:02:0d:99:4d:d1:a4:ac:d4:d8:a4:11:69:92:d4:b1:90:
e2:61:01:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkls6lcpXkFq0mh1QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDE4NTI2ZDUtMmFhMi00ZDJmLThjYjEtNWM0MTc3Mjhh
OTdkMB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk
ZTA3MGMxZWYtZWE2NC00NmExLThmZWEtZjI4OWU5YTQyZDM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoykW665iiky96rD6Uq4UmrbaTHVKLqLJQLgs
HOKOYDI9d4hc/EOcAvVRDaYLOB25CB2cIQH+5ZAtfnQO503rwngtN7BcA7hmiFFc
yyYqi3kAZcL/5EnY4OD6e/0be1MsuOdnxM0mepfkI2DKeqOPqwBgict8H5a0vbrH
ml3NxLG5pvNoMeHEX5CEKuJfb6Xc6GTPW8UCz1UXDztlG1XfymuE/zeYDhnId6SI
l+JqWxc08qk0oczun4IrIKQtbk2vKIm+o52D9dCto8SZy62nSuykF/S0Syzcque6
qUOSXs/ORbtqvJxXZbhuvGWzzpJ+gqVsfz+g6zCN2v+vaNmodQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGv4Xnfdw1RcwN70YAoTWexaayj6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MTg1
MjZkNS0yYWEyLTRkMmYtOGNiMS01YzQxNzcyOGE5N2QvMDk4ZTA2MWEtNDAzOC0z
NjcwLTkxYTctY2U0YjkzNDA2ZmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDE4NTI2ZDUtMmFhMi00ZDJmLThj
YjEtNWM0MTc3MjhhOTdkLzQxODUyNmQ1LTJhYTItNGQyZi04Y2IxLTVjNDE3NzI4
YTk3ZC5jcmwwHwYDVR0jBBgwFoAUiiN/rn53wAJd+TDx/Eb8Xh6ECRIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80MTg1MjZkNS0yYWEyLTRkMmYtOGNiMS01YzQx
NzcyOGE5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD1CAgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI5hYSz+SRYJGk7xiBjAPhVho3mHDC2uDeeAQw7qEyCmhTHNDLwCZgMG
1ROVhrbv1nt8f/zITcITAKkh1FGq1mx86cNtumVFhbPuFxTdoAgoyBq4pfZTe4s6
QwIG4Pp6R7iKMnNBGX2tIj5B2FApnZjbdH2dIi97F/XVuvbq/zQ3JP6/zK/7AH9i
AtWekpm4N697mWGRgsjE9YugK6xaJvySqIN03XvrCwIjoguHIwKYSdiFetX0kEQu
QIr+Tuj5pB65X+6ycctvoAKaR5mYH/YryOqSbYaI23pGSkPCslEz5wTub4gXDHof
SFakAg2ZTdGkrNTYpBFpktSxkOJhAYI=
-----END CERTIFICATE-----
Generated at Wed Apr 9 07:50:29 2025 by rpki-client