Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/3df8bceb-a2e2-3194-b950-40db68d2b35f.roa
File: 3df8bceb-a2e2-3194-b950-40db68d2b35f.roa (raw, json)
Hash identifier: a2XVJxdKzaqhinBTPOPLpviGaLEDBWg093v0rkJiHzM=
Subject key identifier: 4F:0D:61:19:1B:A7:2C:48:FF:B4:77:62:2B:83:2E:DD:E4:4D:5B:38
Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial: 010D0C9F432858489340B4FCF72A1AD7B4F5B780
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/3df8bceb-a2e2-3194-b950-40db68d2b35f.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 33598
IP address blocks: 138.8.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:b4:fc:f7:2a:1a:d7:b4:f5:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=9380cbfb-41b1-4c4f-9f58-d453db4e7fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ec:3d:11:1f:2e:86:a0:1b:d3:cb:24:43:98:
70:fb:48:0c:93:4e:30:bf:a0:b7:f7:29:69:aa:e0:
ec:cf:b2:50:c1:d9:30:64:ef:15:3b:6b:88:3c:a8:
2b:6b:96:cb:1a:cd:e6:ff:3f:62:57:d3:db:8b:f8:
f6:7c:53:95:70:9c:24:9a:16:ab:4b:85:5d:e6:bc:
ba:84:c5:51:3d:07:de:b1:1d:8d:7d:5e:87:8c:ca:
ab:c3:46:7d:66:e1:55:0e:83:e0:51:99:4a:74:00:
13:f9:af:ab:03:6a:70:28:26:63:8b:14:95:ed:7a:
25:ae:5e:c6:d9:de:d2:2c:52:8e:e8:2c:ca:5c:02:
b4:c4:3c:6a:c0:ea:2f:78:40:3d:b3:ec:14:84:42:
bd:6c:8c:c3:9d:88:a7:ec:1c:b6:8c:12:8e:30:4c:
26:a4:80:c2:fd:b0:17:43:8a:4d:ba:b9:fe:f2:db:
29:bc:bd:1b:0c:60:33:75:36:03:9c:20:67:3f:4f:
a0:24:aa:d6:71:57:8b:0b:cf:8a:e4:71:fa:28:6b:
b8:77:59:28:ab:5a:6b:19:b7:db:17:cb:6d:c2:b6:
15:b9:fe:e3:2f:c5:be:40:ad:e5:a8:4d:f0:d5:42:
94:23:4e:09:93:62:9c:5f:de:e7:d4:90:e3:5e:57:
6f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0D:61:19:1B:A7:2C:48:FF:B4:77:62:2B:83:2E:DD:E4:4D:5B:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/3df8bceb-a2e2-3194-b950-40db68d2b35f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
X509v3 Authority Key Identifier:
keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
sbgp-ipAddrBlock: critical
IPv4:
138.8.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:e9:09:76:dc:62:e7:01:e5:6e:d5:a7:f8:c8:d9:b3:36:33:
b6:9e:30:68:0c:25:75:37:2a:a8:bd:b6:44:aa:1d:8c:14:fc:
c5:f8:97:d3:8a:bb:82:c0:da:3c:8f:f2:a2:59:af:d4:37:9f:
00:4a:62:5c:f7:6e:3e:03:77:4e:9a:3b:0c:1b:84:f8:fd:f1:
82:eb:85:05:24:20:61:11:4a:ee:c0:dd:35:c8:aa:b9:8d:06:
fc:92:2e:bc:45:26:c2:4d:a3:9d:76:29:6d:8d:ad:5d:03:53:
9a:b8:42:f7:03:41:17:ab:8f:cd:f5:24:43:be:41:54:9c:b1:
68:69:2a:8a:74:59:19:2f:4b:cb:24:af:8b:95:75:36:3b:26:
ff:05:ba:da:13:5f:a6:0a:a9:82:f9:c3:cd:ac:79:c6:40:5b:
d1:83:b3:da:fa:2d:65:c8:78:b9:3b:7c:c8:96:ac:e0:b6:4e:
42:ab:4d:c6:5e:a0:8c:69:f1:73:be:24:91:02:2a:32:9f:4a:
b1:1c:f6:44:92:88:50:0d:f8:39:58:dc:aa:92:2d:04:30:23:
58:da:48:20:db:86:b4:a3:95:bc:00:cb:55:ee:70:2c:0b:2a:
b4:04:67:2f:c9:cb:8b:a2:86:e5:f4:44:e9:ad:90:7e:7f:7b:
69:4d:99:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQLT89yoa17T1t4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4
MGJlMB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk
OTM4MGNiZmItNDFiMS00YzRmLTlmNTgtZDQ1M2RiNGU3ZmRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuw9ER8uhqAb08skQ5hw+0gMk04wv6C39ylp
quDsz7JQwdkwZO8VO2uIPKgra5bLGs3m/z9iV9Pbi/j2fFOVcJwkmharS4Vd5ry6
hMVRPQfesR2NfV6HjMqrw0Z9ZuFVDoPgUZlKdAAT+a+rA2pwKCZjixSV7Xolrl7G
2d7SLFKO6CzKXAK0xDxqwOoveEA9s+wUhEK9bIzDnYin7By2jBKOMEwmpIDC/bAX
Q4pNurn+8tspvL0bDGAzdTYDnCBnP0+gJKrWcVeLC8+K5HH6KGu4d1koq1prGbfb
F8ttwrYVuf7jL8W+QK3lqE3w1UKUI04Jk2KcX97n1JDjXldvqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE8NYRkbpyxI/7R3YiuDLt3kTVs4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm
NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvM2RmOGJjZWItYTJlMi0z
MTk0LWI5NTAtNDBkYjY4ZDJiMzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk
ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy
ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2
YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiggMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJHpCXbcYucB5W7Vp/jI2bM2M7aeMGgMJXU3Kqi9tkSqHYwU/MX4l9OK
u4LA2jyP8qJZr9Q3nwBKYlz3bj4Dd06aOwwbhPj98YLrhQUkIGERSu7A3TXIqrmN
BvySLrxFJsJNo512KW2NrV0DU5q4QvcDQRerj831JEO+QVScsWhpKop0WRkvS8sk
r4uVdTY7Jv8FutoTX6YKqYL5w82secZAW9GDs9r6LWXIeLk7fMiWrOC2TkKrTcZe
oIxp8XO+JJECKjKfSrEc9kSSiFAN+DlY3KqSLQQwI1jaSCDbhrSjlbwAy1XucCwL
KrQEZy/Jy4uihuX0ROmtkH5/e2lNmYA=
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:26:48 2025 by rpki-client