Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/77839f7b-6c81-3e77-8db3-457cbbf1a46e.roa
File: 77839f7b-6c81-3e77-8db3-457cbbf1a46e.roa (raw, json)
Hash identifier: w+zo2KDGQHHB9vSvQNJl3LhXyTGFjBj+tuVpRZmz3hc=
Subject key identifier: F6:3E:77:37:DC:74:00:B6:1F:90:36:15:58:1A:41:71:D4:DD:4A:46
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285848D6412747DB11EE41C90D2E60
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/77839f7b-6c81-3e77-8db3-457cbbf1a46e.roa
Signing time: Mon 10 Feb 2025 14:00:52 +0000
ROA not before: Mon 10 Feb 2025 14:00:52 +0000
ROA not after: Sun 11 May 2025 13:00:52 +0000
asID: 204957
IP address blocks: 172.120.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:41:27:47:db:11:ee:41:c9:0d:2e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Feb 10 14:00:52 2025 GMT
Not After : May 11 13:00:52 2025 GMT
Subject: CN=49f136d5-6da1-4a1e-add5-c80d295f2ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:98:37:2d:60:38:0a:34:93:8b:fd:b4:f5:71:
42:f5:13:f0:d3:44:43:ae:6a:c9:76:0e:3e:cc:13:
fe:b3:f7:61:3b:06:a5:7f:c5:23:9b:4a:7b:a8:70:
24:b4:bd:59:f1:39:bd:bc:8e:1e:77:f7:ee:34:de:
11:c6:a1:0c:93:10:67:23:e1:0a:46:bd:5e:34:97:
78:0f:ef:d1:c7:0d:f7:b4:53:55:8b:53:8d:41:89:
b4:78:07:bb:79:f2:4a:a6:96:21:60:71:f3:65:c7:
b8:2d:e4:43:69:5a:b1:af:52:2b:ae:6a:1b:9b:6f:
c0:1d:64:0b:86:7c:c5:7c:85:23:31:5a:e2:a9:dc:
79:1c:5e:45:49:c2:f9:70:be:f0:9b:3b:00:44:4a:
65:84:e6:49:b7:f9:cb:42:d8:df:39:16:2b:8c:6f:
27:69:77:e5:b9:fa:c2:3e:34:f1:10:c5:e7:95:37:
b6:aa:6f:39:d3:df:e8:45:a4:f9:df:9a:bd:ac:06:
98:fa:66:7c:19:e4:83:0c:69:52:62:6a:bd:0b:fe:
b7:8f:23:ee:7d:82:63:f7:02:d5:f1:9d:4d:13:bf:
35:88:32:12:3c:59:a9:c2:ba:3d:ea:af:8c:b1:9e:
64:45:1d:ff:5c:43:31:bc:77:0a:2a:3f:d5:84:71:
37:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3E:77:37:DC:74:00:B6:1F:90:36:15:58:1A:41:71:D4:DD:4A:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/77839f7b-6c81-3e77-8db3-457cbbf1a46e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.120.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:cc:38:42:b0:3a:0c:39:4e:c5:63:12:ff:0d:cd:c9:7c:51:
02:b5:6d:5c:da:6c:a7:1a:ef:a8:cf:7a:0d:6f:24:89:b7:24:
b0:9d:35:20:0f:3f:c7:b0:31:d2:69:3d:76:e5:c6:94:c3:04:
0c:38:2f:59:16:18:a8:69:74:8d:a9:54:03:67:4e:98:66:26:
6d:f2:93:73:cc:61:4f:14:50:29:51:97:48:21:ca:a3:5c:ac:
fd:c1:82:c0:3b:14:2d:49:e3:a6:41:63:87:14:d1:46:9d:a0:
80:ef:48:66:2f:a8:80:9f:69:3b:bc:e1:35:32:85:ff:28:7f:
df:d2:ee:1a:de:d8:9e:36:16:03:21:30:17:be:e8:00:6a:5f:
b4:12:2c:22:7d:22:ae:36:09:4a:f6:fc:5d:f2:98:85:8a:fe:
2d:15:5d:07:e2:dd:83:63:2f:df:07:96:a5:2d:56:0d:8c:f6:
46:b2:5c:5c:18:2f:83:64:4f:10:6a:60:13:bc:54:ba:cf:4b:
3f:55:de:c8:11:19:6c:3c:ff:93:53:13:2a:8f:ff:7a:b2:5e:
7d:39:9b:df:25:b8:d5:3a:bf:c2:ba:27:42:1f:70:e2:47:3c:
46:70:0f:d9:d4:0f:19:b4:e9:c5:9f:fb:a8:ca:73:53:b3:3b:
de:a6:6a:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQSdH2xHuQckNLmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NDlmMTM2ZDUtNmRhMS00YTFlLWFkZDUtYzgwZDI5NWYyZmZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZg3LWA4CjSTi/209XFC9RPw00RDrmrJdg4+
zBP+s/dhOwalf8Ujm0p7qHAktL1Z8Tm9vI4ed/fuNN4RxqEMkxBnI+EKRr1eNJd4
D+/Rxw33tFNVi1ONQYm0eAe7efJKppYhYHHzZce4LeRDaVqxr1Irrmobm2/AHWQL
hnzFfIUjMVriqdx5HF5FScL5cL7wmzsAREplhOZJt/nLQtjfORYrjG8naXflufrC
PjTxEMXnlTe2qm8509/oRaT535q9rAaY+mZ8GeSDDGlSYmq9C/63jyPufYJj9wLV
8Z1NE781iDISPFmpwro96q+MsZ5kRR3/XEMxvHcKKj/VhHE3MwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPY+dzfcdAC2H5A2FVgaQXHU3UpGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNzc4MzlmN2ItNmM4MS0z
ZTc3LThkYjMtNDU3Y2JiZjFhNDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHh5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABHMOEKwOgw5TsVjEv8Nzcl8UQK1bVzabKca76jPeg1vJIm3JLCdNSAP
P8ewMdJpPXblxpTDBAw4L1kWGKhpdI2pVANnTphmJm3yk3PMYU8UUClRl0ghyqNc
rP3BgsA7FC1J46ZBY4cU0UadoIDvSGYvqICfaTu84TUyhf8of9/S7hre2J42FgMh
MBe+6ABqX7QSLCJ9Iq42CUr2/F3ymIWK/i0VXQfi3YNjL98HlqUtVg2M9kayXFwY
L4NkTxBqYBO8VLrPSz9V3sgRGWw8/5NTEyqP/3qyXn05m98luNU6v8K6J0IfcOJH
PEZwD9nUDxm06cWf+6jKc1OzO96marc=
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:28:45 2025 by rpki-client