Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/4646c58c-7f13-3a17-940a-37378358232c.roa
File: 4646c58c-7f13-3a17-940a-37378358232c.roa (raw, json)
Hash identifier: tn0s0yaLWhkShtbVUX7K0kKz7lMNRAVUbG3QKs3sxUA=
Subject key identifier: 31:BD:D4:01:11:3E:6D:4C:F0:C5:0B:5A:7F:73:ED:6F:E9:0F:73:2D
Certificate issuer: /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Certificate serial: 010D0C9F432858487FB5E675415D79EBB7177CC0
Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/4646c58c-7f13-3a17-940a-37378358232c.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 10506
IP address blocks: 168.99.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:e6:75:41:5d:79:eb:b7:17:7c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=6809e4c5-743b-4d95-93d4-0723c56de14a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7a:49:f2:76:b8:c8:e8:3c:35:f1:bc:93:34:
f4:b9:51:a7:42:d4:a4:cb:de:20:06:84:a7:cf:27:
71:2f:82:ad:04:37:9a:6f:50:de:71:2e:28:88:5a:
0e:6e:e0:0b:02:4f:63:ef:d2:76:94:9e:fe:e2:c5:
7f:67:2c:dc:71:0f:bd:d7:6c:45:df:9a:81:00:9d:
a0:14:da:30:cf:bc:2c:2d:55:38:fe:8d:5c:d8:22:
cd:bd:1a:5b:2b:d6:fa:9b:1f:14:fa:ba:a8:d8:24:
91:2c:a1:e4:65:6c:7a:18:dc:ef:0c:2f:af:8a:71:
4b:e2:d7:50:4a:6c:34:d6:09:dd:dc:64:56:83:4a:
1e:7a:8d:de:3c:8f:86:a9:20:98:0f:22:b9:72:6f:
50:50:86:04:5a:9e:73:4c:d9:7a:56:e7:a7:98:f5:
de:9b:a2:c4:12:08:4f:84:b9:5e:03:8f:c3:22:33:
b8:c5:9e:ee:3f:05:9f:9a:62:c3:f9:b3:16:c3:e6:
86:70:41:45:71:7c:9f:c8:3d:3e:f2:1a:5f:1a:4c:
52:18:63:d1:63:da:43:cd:8d:95:f8:af:68:de:56:
cb:da:e1:cb:03:1f:58:22:d5:69:06:a7:0b:d1:19:
bb:33:f2:0a:06:79:5e:78:15:5a:cf:fe:46:b0:25:
f2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BD:D4:01:11:3E:6D:4C:F0:C5:0B:5A:7F:73:ED:6F:E9:0F:73:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/4646c58c-7f13-3a17-940a-37378358232c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl
X509v3 Authority Key Identifier:
keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
sbgp-ipAddrBlock: critical
IPv4:
168.99.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:f9:90:9c:37:f0:0f:f4:7f:3c:04:6f:9d:c2:f5:da:98:f4:
9c:27:ed:e1:07:ea:24:0f:1c:24:2d:9a:ec:b1:47:3c:42:b5:
70:f1:76:81:86:69:8e:9f:bd:aa:88:b6:5e:78:64:14:7b:a3:
f2:20:22:fe:87:95:eb:d0:99:75:44:6b:2a:47:00:4e:09:ae:
76:35:6a:11:6c:6a:17:81:41:ee:ed:72:f5:0a:5a:91:9f:a9:
ff:d3:ad:0e:32:f5:38:15:2e:38:1d:dc:55:9c:bc:07:ec:d3:
a0:3d:d8:cf:ad:25:09:5d:c4:9c:25:c5:a9:e9:37:fa:df:82:
69:cb:1d:30:49:cc:97:28:44:ae:53:32:61:cd:76:0b:6d:62:
14:8b:00:3c:6d:04:1c:a1:d3:7c:eb:6e:fb:8a:ab:73:94:da:
0c:03:bd:63:80:68:5e:37:8e:b1:ac:2f:a4:ff:d0:48:85:02:
35:09:f5:66:08:f4:40:25:f1:77:de:d5:69:b5:84:23:39:93:
76:4b:9a:5f:80:78:7e:55:72:d3:a4:6f:86:62:8a:39:07:fa:
07:d0:f8:b5:16:22:8e:3a:a6:25:3e:f9:90:72:7a:f8:f2:62:
86:39:9d:ed:d1:33:f5:b0:70:33:c2:76:8c:8f:2d:26:d7:a9:
f6:8e:1e:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh/teZ1QV1567cXfMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzMzOTlkOTctNjRmNi00ZTEyLThjYmUtNGQxMTQ5MWFk
ODE2MB4XDTI1MDExMDE0MDA1MVoXDTI1MDQxMDEzMDA1MVowLzEtMCsGA1UEAxMk
NjgwOWU0YzUtNzQzYi00ZDk1LTkzZDQtMDcyM2M1NmRlMTRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3pJ8na4yOg8NfG8kzT0uVGnQtSky94gBoSn
zydxL4KtBDeab1DecS4oiFoObuALAk9j79J2lJ7+4sV/ZyzccQ+912xF35qBAJ2g
FNowz7wsLVU4/o1c2CLNvRpbK9b6mx8U+rqo2CSRLKHkZWx6GNzvDC+vinFL4tdQ
Smw01gnd3GRWg0oeeo3ePI+GqSCYDyK5cm9QUIYEWp5zTNl6VuenmPXem6LEEghP
hLleA4/DIjO4xZ7uPwWfmmLD+bMWw+aGcEFFcXyfyD0+8hpfGkxSGGPRY9pDzY2V
+K9o3lbL2uHLAx9YItVpBqcL0Rm7M/IKBnleeBVaz/5GsCXypwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDG91AERPm1M8MULWn9z7W/pD3MtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5
OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDExNDkxYWQ4MTYvNDY0NmM1OGMtN2YxMy0z
YTE3LTk0MGEtMzczNzgzNTgyMzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzMzOTlkOTctNjRmNi00ZTEyLThj
YmUtNGQxMTQ5MWFkODE2L2MzMzk5ZDk3LTY0ZjYtNGUxMi04Y2JlLTRkMTE0OTFh
ZDgxNi5jcmwwHwYDVR0jBBgwFoAUrp/EGCd8p/rBPxdlxtTMgg4WXiMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDEx
NDkxYWQ4MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqGMgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHr5kJw38A/0fzwEb53C9dqY9Jwn7eEH6iQPHCQtmuyxRzxCtXDxdoGG
aY6fvaqItl54ZBR7o/IgIv6HlevQmXVEaypHAE4JrnY1ahFsaheBQe7tcvUKWpGf
qf/TrQ4y9TgVLjgd3FWcvAfs06A92M+tJQldxJwlxanpN/rfgmnLHTBJzJcoRK5T
MmHNdgttYhSLADxtBByh03zrbvuKq3OU2gwDvWOAaF43jrGsL6T/0EiFAjUJ9WYI
9EAl8Xfe1Wm1hCM5k3ZLml+AeH5VctOkb4ZiijkH+gfQ+LUWIo46piU++ZByevjy
YoY5ne3RM/WwcDPCdoyPLSbXqfaOHnw=
-----END CERTIFICATE-----
Generated at Sat Apr 12 07:52:56 2025 by rpki-client