Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/5c002f4a-61ef-3631-95d2-b04d307b2916.roa
File: 5c002f4a-61ef-3631-95d2-b04d307b2916.roa (raw, json)
Hash identifier: iFL5WaZZhNEWOzf4ctUfcek04cUyOQ0xh6LI2aulCRc=
Subject key identifier: 71:DD:BE:B6:CA:38:AC:FA:83:92:AD:21:97:31:1D:5B:93:5F:CB:CD
Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial: 010D0C9F43285848833481928EEE5C173F3FAA80
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/5c002f4a-61ef-3631-95d2-b04d307b2916.roa
Signing time: Sat 11 Jan 2025 20:03:34 +0000
ROA not before: Sat 11 Jan 2025 20:03:34 +0000
ROA not after: Fri 11 Apr 2025 19:03:34 +0000
asID: 23470
IP address blocks: 216.224.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:83:34:81:92:8e:ee:5c:17:3f:3f:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Validity
Not Before: Jan 11 20:03:34 2025 GMT
Not After : Apr 11 19:03:34 2025 GMT
Subject: CN=b7ea4560-a255-4add-875b-6e5a14cde851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:53:c0:a6:65:a4:cb:c7:d3:df:23:2d:f7:33:
0d:1b:db:60:8a:bd:8e:f2:d5:50:88:5c:f9:60:44:
3e:5a:2f:a8:4c:57:aa:f3:93:7c:21:18:e7:c2:e8:
9c:61:44:ff:a5:2c:84:fe:a5:f9:58:e5:82:4b:21:
96:f7:ca:80:60:c9:32:d8:dd:d0:90:39:41:be:54:
a1:4a:f9:eb:bc:db:a4:bc:3d:b1:49:8e:f1:ac:24:
d2:c5:ea:63:dc:7a:33:30:5f:93:05:a0:b2:7e:b3:
61:6c:27:ee:ab:fe:ec:9a:96:a2:5f:28:fb:ed:34:
44:1f:51:46:8e:a7:23:7a:4a:ed:3e:e9:81:ad:38:
6d:2e:fe:9a:21:12:3d:8d:64:b6:cc:9a:9b:f8:07:
c0:e6:a1:57:61:6c:0c:62:bd:37:ef:3e:60:0e:83:
4a:dd:96:cc:bc:28:21:73:68:5e:7e:c6:75:c6:5a:
7d:77:d0:35:6d:00:e9:e4:6c:3a:e4:4a:93:d9:18:
c1:ef:99:06:28:e2:12:14:64:7b:e4:e3:e0:84:5c:
09:13:57:2b:72:da:f0:0e:ad:71:a5:91:c5:41:c5:
35:02:b7:82:38:6d:3f:7c:22:af:14:15:e1:a2:05:
d8:1d:33:99:3d:81:de:18:d5:1a:31:51:f1:14:7b:
24:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DD:BE:B6:CA:38:AC:FA:83:92:AD:21:97:31:1D:5B:93:5F:CB:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/5c002f4a-61ef-3631-95d2-b04d307b2916.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
X509v3 Authority Key Identifier:
keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
sbgp-ipAddrBlock: critical
IPv4:
216.224.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:9d:d4:61:6b:6d:e3:23:15:53:49:f9:88:97:b8:c2:bd:95:
a3:d6:6b:ec:1a:9b:59:96:fc:36:b8:d5:9e:c3:86:62:37:b0:
8a:d3:a5:ee:b5:aa:8b:e8:55:90:1e:69:82:d3:20:0e:aa:3a:
d7:81:e9:af:c6:06:db:29:97:5b:3d:f8:d9:85:a7:b2:10:d0:
e6:f3:a1:f6:92:4f:ee:32:19:dd:c0:2f:70:97:52:d1:9e:4d:
2f:ab:ac:16:21:18:98:68:ae:4e:62:06:83:70:a3:72:ba:9a:
25:69:73:0f:9d:0a:72:1b:e1:cc:f1:d1:a7:15:da:1c:2a:df:
9f:33:e6:81:dd:df:85:75:89:58:08:75:08:a8:3c:4c:32:8f:
d4:0f:d4:dd:42:42:4f:a3:fa:36:bf:b3:31:b5:c8:51:d6:f6:
af:9f:67:f6:01:99:76:48:8c:92:52:78:1c:59:49:5e:53:2f:
5e:af:12:40:78:18:58:48:1b:28:11:06:fa:84:ca:7d:d5:e4:
e2:93:99:93:6c:cf:f1:c8:75:89:c6:e6:23:4a:63:81:75:08:
1c:b4:2d:ed:76:52:36:58:a4:57:65:38:e5:68:c7:e0:5d:c9:
b3:98:c1:94:90:4a:45:29:78:fc:f7:d1:61:69:b6:eb:41:73:
ea:2a:d5:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiDNIGSju5cFz8/qoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1
MGU4MB4XDTI1MDExMTIwMDMzNFoXDTI1MDQxMTE5MDMzNFowLzEtMCsGA1UEAxMk
YjdlYTQ1NjAtYTI1NS00YWRkLTg3NWItNmU1YTE0Y2RlODUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVPApmWky8fT3yMt9zMNG9tgir2O8tVQiFz5
YEQ+Wi+oTFeq85N8IRjnwuicYUT/pSyE/qX5WOWCSyGW98qAYMky2N3QkDlBvlSh
SvnrvNukvD2xSY7xrCTSxepj3HozMF+TBaCyfrNhbCfuq/7smpaiXyj77TREH1FG
jqcjekrtPumBrThtLv6aIRI9jWS2zJqb+AfA5qFXYWwMYr037z5gDoNK3ZbMvCgh
c2hefsZ1xlp9d9A1bQDp5Gw65EqT2RjB75kGKOISFGR75OPghFwJE1crctrwDq1x
pZHFQcU1AreCOG0/fCKvFBXhogXYHTOZPYHeGNUaMVHxFHskZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHHdvrbKOKz6g5KtIZcxHVuTX8vNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0
NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvNWMwMDJmNGEtNjFlZi0z
NjMxLTk1ZDItYjA0ZDMwN2IyOTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk
MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz
NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3
NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGed1GFrbeMjFVNJ+YiXuMK9laPWa+wam1mW/Da41Z7DhmI3sIrTpe61
qovoVZAeaYLTIA6qOteB6a/GBtspl1s9+NmFp7IQ0ObzofaST+4yGd3AL3CXUtGe
TS+rrBYhGJhork5iBoNwo3K6miVpcw+dCnIb4czx0acV2hwq358z5oHd34V1iVgI
dQioPEwyj9QP1N1CQk+j+ja/szG1yFHW9q+fZ/YBmXZIjJJSeBxZSV5TL16vEkB4
GFhIGygRBvqEyn3V5OKTmZNsz/HIdYnG5iNKY4F1CBy0Le12UjZYpFdlOOVox+Bd
ybOYwZSQSkUpePz30WFptutBc+oq1dg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:15:40 2025 by rpki-client