Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/4837e983-3e46-392e-8d0b-3ac874b7ca1f.roa
File: 4837e983-3e46-392e-8d0b-3ac874b7ca1f.roa (raw, json)
Hash identifier: NgfmJFMZ7vCILf1Sx52QWdv45mGw7kKCVVAWigSHyWs=
Subject key identifier: D3:C3:AC:79:04:C3:A9:94:E8:5F:2D:A4:FA:2C:F8:4D:0E:24:A6:77
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F4328584878BB08EB67B48ED1DE73E300
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/4837e983-3e46-392e-8d0b-3ac874b7ca1f.roa
Signing time: Wed 08 Jan 2025 02:00:39 +0000
ROA not before: Wed 08 Jan 2025 02:00:39 +0000
ROA not after: Tue 08 Apr 2025 01:00:39 +0000
asID: 11232
IP address blocks: 24.56.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:78:bb:08:eb:67:b4:8e:d1:de:73:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Jan 8 02:00:39 2025 GMT
Not After : Apr 8 01:00:39 2025 GMT
Subject: CN=9cb445a6-c245-49e4-b685-dc6dc6a22cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c4:9f:43:b5:de:d8:f7:02:40:20:18:82:83:
60:0f:fd:73:d0:34:a6:6a:2c:32:cf:f5:c5:4d:ce:
e6:59:44:88:10:30:69:7f:61:82:e0:b0:4c:55:46:
b2:3e:c3:bc:50:93:9b:5a:2d:fa:fd:62:89:fb:c5:
49:5a:13:84:a0:83:1b:4a:af:44:71:a3:f6:64:c2:
5d:b9:c4:b8:6c:e1:50:fb:2b:cf:25:5f:79:96:bd:
56:fa:11:92:47:73:3e:1f:10:38:c4:7a:58:73:6a:
7e:46:6c:e8:c8:7f:6c:e2:66:90:24:67:31:bc:f0:
a4:2f:c1:d8:32:00:52:a8:33:86:52:12:69:c6:e1:
dd:e5:7a:25:43:71:ec:38:85:d4:95:7f:83:ee:49:
e2:c2:27:ef:99:90:8f:11:d1:ef:ab:aa:f7:4b:c5:
43:34:83:85:80:e4:84:b8:d6:48:e1:dc:92:31:8b:
3d:d8:5c:68:c6:6f:21:5e:12:24:09:f4:fb:d5:a5:
5c:aa:d3:ae:a4:fe:4e:bb:fd:a5:a3:bd:ca:75:01:
8e:00:b8:01:b3:b1:d4:a8:e6:07:04:c7:40:92:34:
ac:55:8f:3c:92:c3:4f:13:8c:d7:6d:c1:d9:2a:4c:
09:1b:01:da:84:1f:95:51:ac:18:89:4f:d3:a5:0f:
1f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C3:AC:79:04:C3:A9:94:E8:5F:2D:A4:FA:2C:F8:4D:0E:24:A6:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/4837e983-3e46-392e-8d0b-3ac874b7ca1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
24.56.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:04:06:08:62:56:df:c0:e3:f8:3a:74:f0:ea:99:fe:f2:a3:
7b:66:62:f0:e1:bd:a7:09:ef:ca:7d:d0:64:8b:a9:2c:b9:16:
df:9b:f3:42:e0:10:fa:cf:e2:30:91:80:8d:40:48:fa:ee:77:
0d:6b:06:7c:15:2f:92:3f:13:a5:22:e3:3d:fc:23:0b:e1:a5:
e0:f5:03:70:ba:c0:24:be:76:e2:c5:cd:83:1d:3d:c2:fc:31:
82:50:48:90:04:d0:9b:d1:bc:3a:21:f3:8d:26:9a:77:f2:86:
f8:29:86:4d:c2:6a:aa:f2:75:b5:d8:a0:8d:30:c0:12:d7:25:
89:6e:cb:6a:2b:d6:b7:43:c6:19:b9:05:42:35:47:40:64:cf:
15:0c:50:fb:8f:0a:97:95:71:96:b4:59:87:2f:e6:93:1d:d2:
d3:35:da:8b:39:0c:1c:2d:2a:98:ce:d9:52:6a:cc:5b:a4:b3:
59:2d:15:5b:09:27:27:68:b1:7f:e5:00:74:1c:97:36:01:d9:
e7:cf:fd:82:9f:0e:52:e9:95:7f:49:ab:d8:a8:ba:1d:82:cb:
ce:23:fe:31:cf:9b:ed:10:b2:6f:3d:49:88:2a:62:5f:31:7b:
b0:47:65:d3:91:3c:50:25:0a:cf:dd:c2:1f:17:f3:ec:73:c9:
01:7f:a6:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh4uwjrZ7SO0d5z4wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3
MDg1MB4XDTI1MDEwODAyMDAzOVoXDTI1MDQwODAxMDAzOVowLzEtMCsGA1UEAxMk
OWNiNDQ1YTYtYzI0NS00OWU0LWI2ODUtZGM2ZGM2YTIyY2M4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcSfQ7Xe2PcCQCAYgoNgD/1z0DSmaiwyz/XF
Tc7mWUSIEDBpf2GC4LBMVUayPsO8UJObWi36/WKJ+8VJWhOEoIMbSq9EcaP2ZMJd
ucS4bOFQ+yvPJV95lr1W+hGSR3M+HxA4xHpYc2p+RmzoyH9s4maQJGcxvPCkL8HY
MgBSqDOGUhJpxuHd5XolQ3HsOIXUlX+D7kniwifvmZCPEdHvq6r3S8VDNIOFgOSE
uNZI4dySMYs92Fxoxm8hXhIkCfT71aVcqtOupP5Ou/2lo73KdQGOALgBs7HUqOYH
BMdAkjSsVY88ksNPE4zXbcHZKkwJGwHahB+VUawYiU/TpQ8fOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNPDrHkEw6mU6F8tpPos+E0OJKZ3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2
M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvNDgzN2U5ODMtM2U0Ni0z
OTJlLThkMGItM2FjODc0YjdjYTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm
YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3
NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2
NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGDiUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH0EBghiVt/A4/g6dPDqmf7yo3tmYvDhvacJ78p90GSLqSy5Ft+b80Lg
EPrP4jCRgI1ASPrudw1rBnwVL5I/E6Ui4z38IwvhpeD1A3C6wCS+duLFzYMdPcL8
MYJQSJAE0JvRvDoh840mmnfyhvgphk3CaqrydbXYoI0wwBLXJYluy2or1rdDxhm5
BUI1R0BkzxUMUPuPCpeVcZa0WYcv5pMd0tM12os5DBwtKpjO2VJqzFuks1ktFVsJ
JydosX/lAHQclzYB2efP/YKfDlLplX9Jq9iouh2Cy84j/jHPm+0Qsm89SYgqYl8x
e7BHZdORPFAlCs/dwh8X8+xzyQF/poU=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:38 2025 by rpki-client