Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9e074f36-9568-3cd5-9e3e-cf9e825b82f4.roa
File: 9e074f36-9568-3cd5-9e3e-cf9e825b82f4.roa (raw, json)
Hash identifier: l0XCcNvl0dq2JjzLQ+dGLyA0sRAIsnZb0Li0Il5gKNc=
Subject key identifier: A1:E8:04:16:EF:99:C9:D4:D0:22:26:18:B1:EB:89:00:42:12:39:D0
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285848AA0736E4374ACAE3D6710D40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9e074f36-9568-3cd5-9e3e-cf9e825b82f4.roa
Signing time: Sat 25 Jan 2025 17:48:51 +0000
ROA not before: Sat 25 Jan 2025 17:48:51 +0000
ROA not after: Fri 25 Apr 2025 16:48:51 +0000
asID: 18779
IP address blocks: 172.121.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:aa:07:36:e4:37:4a:ca:e3:d6:71:0d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Jan 25 17:48:51 2025 GMT
Not After : Apr 25 16:48:51 2025 GMT
Subject: CN=bc9c238b-76c0-4d5f-bca6-e77124d603a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:85:b5:3e:fb:83:72:78:3e:38:96:7a:f7:bd:
6c:c5:0f:5b:a9:17:f9:96:6b:2c:d4:f8:1d:f1:ef:
6a:09:4c:9a:67:1d:fa:7b:2c:0d:af:26:29:f2:55:
46:47:cf:df:15:39:20:e3:d5:6c:2f:86:4b:15:ef:
0d:71:ab:2f:e9:35:aa:28:37:ad:45:7b:51:ef:a3:
e1:43:21:92:d5:d1:c5:9e:72:d5:6d:5d:02:da:a5:
9d:44:d5:03:54:0c:75:21:3e:b1:f8:67:41:4a:f9:
af:10:b1:89:1a:4c:fe:f2:b9:8b:5a:ff:8b:28:da:
3e:b2:f6:fc:de:e3:d4:f1:47:41:13:3d:26:05:c5:
1f:76:03:b0:c2:2a:e0:df:20:6a:04:bc:b7:79:1d:
ca:55:d5:80:9c:ff:f4:27:b5:e3:f1:82:cd:5c:6d:
28:68:0b:8f:20:83:61:45:68:10:1e:55:f5:01:f7:
20:e3:e6:fc:11:f0:37:d3:ab:87:9a:0c:9b:4d:be:
e3:93:70:ca:e3:9e:12:3a:93:4a:4b:5f:66:e8:17:
a7:1a:14:ae:f9:6a:1b:63:8d:71:10:b1:0d:0a:76:
54:08:69:8e:2f:d6:be:e5:68:05:55:4d:2a:24:c5:
d1:c8:83:6a:80:97:b7:ea:62:7f:34:27:35:69:f0:
34:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E8:04:16:EF:99:C9:D4:D0:22:26:18:B1:EB:89:00:42:12:39:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9e074f36-9568-3cd5-9e3e-cf9e825b82f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.121.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:b2:72:d6:bb:49:47:8d:ed:31:cc:dc:c8:97:4a:5a:2b:ac:
d3:a2:e1:ad:47:c0:3e:eb:69:7d:fb:66:fa:d1:5c:25:40:20:
38:c0:83:7e:2d:79:da:f7:a3:ee:6d:30:cf:a6:3d:e9:3b:11:
9d:7a:cd:aa:7b:3e:f1:af:62:23:e6:c0:a0:43:a0:dd:89:55:
6a:1e:bc:28:da:fd:6d:e4:22:d1:d5:d8:da:be:a7:13:a0:6f:
98:76:a2:06:0c:ad:d5:8a:7e:37:74:67:cc:05:2e:53:74:22:
30:63:b7:5f:ff:2d:cc:92:c1:0b:d7:20:76:cd:7d:c8:d8:8f:
c1:68:5f:26:da:32:98:23:03:e8:71:05:ca:2b:b2:68:a3:12:
16:48:fb:15:84:72:c1:a0:b6:20:67:e9:6d:9b:42:76:7a:75:
f9:44:be:62:d6:16:db:36:77:91:31:84:c7:54:2e:fa:88:7a:
c5:22:30:7e:61:dc:1d:60:e2:35:fe:03:1c:d7:c1:ca:d0:04:
b5:02:42:3b:17:fc:38:81:99:f9:43:96:41:a0:66:1f:96:a8:
f3:f6:4f:12:a0:26:20:e2:ff:cb:c8:2c:f7:8b:69:eb:d3:bb:
ba:ab:74:9c:e6:72:e9:59:16:62:e1:df:1c:12:85:83:c4:77:
a8:b4:a4:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiqBzbkN0rK49ZxDUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDEyNTE3NDg1MVoXDTI1MDQyNTE2NDg1MVowLzEtMCsGA1UEAxMk
YmM5YzIzOGItNzZjMC00ZDVmLWJjYTYtZTc3MTI0ZDYwM2E3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooW1PvuDcng+OJZ6971sxQ9bqRf5lmss1Pgd
8e9qCUyaZx36eywNryYp8lVGR8/fFTkg49VsL4ZLFe8Ncasv6TWqKDetRXtR76Ph
QyGS1dHFnnLVbV0C2qWdRNUDVAx1IT6x+GdBSvmvELGJGkz+8rmLWv+LKNo+svb8
3uPU8UdBEz0mBcUfdgOwwirg3yBqBLy3eR3KVdWAnP/0J7Xj8YLNXG0oaAuPIINh
RWgQHlX1Afcg4+b8EfA306uHmgybTb7jk3DK454SOpNKS19m6BenGhSu+WobY41x
ELENCnZUCGmOL9a+5WgFVU0qJMXRyINqgJe36mJ/NCc1afA0CwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKHoBBbvmcnU0CImGLHriQBCEjnQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOWUwNzRmMzYtOTU2OC0z
Y2Q1LTllM2UtY2Y5ZTgyNWI4MmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHkEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGaycta7SUeN7THM3MiXSlorrNOi4a1HwD7raX37ZvrRXCVAIDjAg34t
edr3o+5tMM+mPek7EZ16zap7PvGvYiPmwKBDoN2JVWoevCja/W3kItHV2Nq+pxOg
b5h2ogYMrdWKfjd0Z8wFLlN0IjBjt1//LcySwQvXIHbNfcjYj8FoXybaMpgjA+hx
BcorsmijEhZI+xWEcsGgtiBn6W2bQnZ6dflEvmLWFts2d5ExhMdULvqIesUiMH5h
3B1g4jX+AxzXwcrQBLUCQjsX/DiBmflDlkGgZh+WqPP2TxKgJiDi/8vILPeLaevT
u7qrdJzmculZFmLh3xwShYPEd6i0pKY=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:43:16 2025 by rpki-client