Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/d962ee23-e7ff-366e-a190-c9be5f31cba9.roa
File: d962ee23-e7ff-366e-a190-c9be5f31cba9.roa (raw, json)
Hash identifier: XTClx8zIwsPMNsUHsDuIx1tbYNuIE2WOWmnUkVemi74=
Subject key identifier: 87:B4:6F:BC:00:E3:65:A5:DF:37:71:F9:E3:6F:65:26:96:EE:E0:7B
Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial: 010D0C9F432858488280911F0FB79818C18243E0
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/d962ee23-e7ff-366e-a190-c9be5f31cba9.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 12083
IP address blocks: 24.214.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:91:1f:0f:b7:98:18:c1:82:43:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=1f9f445d-52d6-4724-98e3-dc2ff0c653e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f5:87:ad:6d:d2:3b:a0:e6:65:90:8f:6e:7e:
11:c0:9f:ae:2b:33:e8:40:f7:9b:25:e7:f8:dd:d1:
9d:10:c1:f7:d6:0c:96:8c:6e:da:d3:31:51:a2:dc:
38:21:c9:44:68:06:61:ad:44:fe:94:b3:11:0b:9d:
95:9a:d8:4d:07:95:fa:42:07:22:0c:bb:69:70:21:
d1:f4:c9:62:37:ab:54:0e:51:e3:96:98:9d:b3:d5:
e3:71:d2:12:2b:6d:d7:31:4b:9a:bc:ce:58:5a:6e:
ea:30:e9:aa:35:59:7a:93:1f:55:d5:75:d0:ad:9a:
0b:cf:1f:eb:ca:ee:69:97:20:be:43:98:ef:5d:6c:
96:6e:07:f1:3c:7c:61:fb:f3:e1:8a:64:f3:7a:1c:
cd:7e:fb:32:52:b4:c4:f6:37:b0:ab:00:56:40:2b:
c7:34:37:4e:90:66:e7:fc:b0:c9:b0:5b:6a:03:d8:
b4:1c:df:aa:e4:cf:53:25:5d:88:1f:e9:fb:17:c3:
57:73:f9:30:ce:d3:bd:a0:98:00:76:72:bc:fa:2e:
bb:71:8a:2b:a6:45:46:a1:37:da:04:f0:19:44:19:
26:d1:b1:0f:08:47:f1:de:3a:db:f9:4a:d8:df:e5:
9c:65:91:49:bc:01:40:95:26:1f:48:a6:bf:d8:15:
e0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B4:6F:BC:00:E3:65:A5:DF:37:71:F9:E3:6F:65:26:96:EE:E0:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/d962ee23-e7ff-366e-a190-c9be5f31cba9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
X509v3 Authority Key Identifier:
keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
sbgp-ipAddrBlock: critical
IPv4:
24.214.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:40:13:06:63:66:bb:7d:87:36:12:d7:96:a2:f5:8f:a3:ba:
44:d7:a0:57:3f:50:74:d9:bd:c1:ea:17:c0:b2:42:00:d1:1e:
2b:2a:ad:b4:40:bd:60:2a:00:bf:d1:fc:95:5c:c4:0d:38:dd:
fd:72:ff:b8:55:ad:9d:e5:be:07:d3:f4:f2:91:fa:61:05:eb:
c8:50:6b:01:36:38:59:ac:af:ef:b3:2e:27:a8:c2:49:18:2c:
df:eb:d0:b9:6a:99:b0:ad:da:02:c2:11:b3:02:f6:65:5d:f0:
bf:93:36:8a:b8:c6:ae:6b:3a:c1:45:f5:e1:a6:8b:71:6c:06:
29:05:db:16:cf:f3:85:54:6a:e6:1b:a6:9e:28:7e:e5:4b:f0:
76:e9:0d:02:a6:09:70:e0:2d:24:c7:20:cc:07:df:3f:d1:f6:
43:d6:7a:31:e8:b4:1d:c7:3a:ab:30:b1:7f:4c:b5:86:2c:9c:
b0:d2:59:15:e2:ed:c3:b7:10:50:1d:01:7d:dd:3f:48:89:db:
cf:e0:b5:ab:ae:66:1d:98:ed:1b:50:6a:b0:02:e8:60:aa:15:
fe:c6:e4:73:59:be:0e:2c:34:03:a5:3f:37:ee:f5:a0:2a:a2:
12:a2:44:08:a4:f5:98:ca:c3:17:5a:92:0a:2c:c9:e7:09:2f:
05:40:57:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiCgJEfD7eYGMGCQ+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm
NWZlMB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk
MWY5ZjQ0NWQtNTJkNi00NzI0LTk4ZTMtZGMyZmYwYzY1M2U2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfWHrW3SO6DmZZCPbn4RwJ+uKzPoQPebJef4
3dGdEMH31gyWjG7a0zFRotw4IclEaAZhrUT+lLMRC52VmthNB5X6QgciDLtpcCHR
9MliN6tUDlHjlpids9XjcdISK23XMUuavM5YWm7qMOmqNVl6kx9V1XXQrZoLzx/r
yu5plyC+Q5jvXWyWbgfxPHxh+/PhimTzehzNfvsyUrTE9jewqwBWQCvHNDdOkGbn
/LDJsFtqA9i0HN+q5M9TJV2IH+n7F8NXc/kwztO9oJgAdnK8+i67cYorpkVGoTfa
BPAZRBkm0bEPCEfx3jrb+UrY3+WcZZFJvAFAlSYfSKa/2BXgCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIe0b7wA42Wl3zdx+eNvZSaW7uB7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl
MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvZDk2MmVlMjMtZTdmZi0z
NjZlLWExOTAtYzliZTVmMzFjYmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2
ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl
ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2
N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGNbkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADRAEwZjZrt9hzYS15ai9Y+jukTXoFc/UHTZvcHqF8CyQgDRHisqrbRA
vWAqAL/R/JVcxA043f1y/7hVrZ3lvgfT9PKR+mEF68hQawE2OFmsr++zLieowkkY
LN/r0LlqmbCt2gLCEbMC9mVd8L+TNoq4xq5rOsFF9eGmi3FsBikF2xbP84VUauYb
pp4ofuVL8HbpDQKmCXDgLSTHIMwH3z/R9kPWejHotB3HOqswsX9MtYYsnLDSWRXi
7cO3EFAdAX3dP0iJ28/gtauuZh2Y7RtQarAC6GCqFf7G5HNZvg4sNAOlPzfu9aAq
ohKiRAik9ZjKwxdakgosyecJLwVAV3w=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:39 2025 by rpki-client