Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33cabc23-93b6-354e-8df2-ea780efc8b75.roa
File: 33cabc23-93b6-354e-8df2-ea780efc8b75.roa (raw, json)
Hash identifier: 9L+VWZxtmX9ofvCFDb1Ymua0FqNL+zetQG46kNZ/2uY=
Subject key identifier: DE:0B:2D:99:35:CB:51:B4:16:8A:A4:B2:3A:9E:B4:D1:CD:87:F4:45
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C58200BBF3B5E0599974C800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33cabc23-93b6-354e-8df2-ea780efc8b75.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 396982
IP address blocks: 173.255.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:00:bb:f3:b5:e0:59:99:74:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=2e135633-efe3-4567-ad78-0c4c45e27f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:be:c2:43:b7:7b:b1:8a:05:01:26:b1:71:01:
19:c4:fe:7f:79:77:53:a2:82:a5:06:23:84:51:d2:
7c:78:f6:6a:ff:5d:fb:f5:0f:f6:50:3d:6f:11:74:
87:04:bd:16:7e:10:2a:b1:4f:f3:54:02:2b:4f:f0:
a4:f3:1b:0b:fb:72:d5:03:f3:00:67:47:c3:fa:88:
79:47:2d:c8:1f:b7:ea:64:1b:30:01:f3:d0:5c:1a:
84:0a:83:b3:22:c9:d9:7e:62:85:3a:19:d9:18:fc:
3a:0f:4c:e0:76:bf:87:84:0e:4d:56:33:74:31:9f:
8d:f0:a1:f9:52:f7:71:95:46:fe:c5:2a:75:7b:fa:
17:74:b4:da:fc:ca:19:5f:37:dc:6d:95:d0:fc:ab:
77:82:0f:a3:e9:09:dc:1d:9f:03:0b:2f:03:d9:ee:
8d:fe:6e:ca:2e:d6:c8:34:bb:2a:11:97:26:7e:91:
33:8a:c9:37:f8:05:d1:51:04:e7:03:bb:ee:40:7f:
72:4d:3a:6e:d6:c2:81:af:4c:ac:2d:63:31:04:cc:
9b:86:f7:48:02:7c:3d:d6:76:be:68:da:48:7f:2d:
fe:4b:7a:53:cd:f9:df:4d:cc:48:5b:b1:01:71:fa:
c7:dc:5a:ff:4a:5b:ea:dc:6b:ce:d1:74:a9:3a:5b:
92:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0B:2D:99:35:CB:51:B4:16:8A:A4:B2:3A:9E:B4:D1:CD:87:F4:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33cabc23-93b6-354e-8df2-ea780efc8b75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
173.255.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:9f:4d:69:f1:50:ef:85:c9:c5:36:0a:c0:da:6e:c6:52:43:
4a:f1:85:56:ba:f5:25:3b:3f:bf:63:bc:be:4d:59:cd:6d:97:
1e:74:65:87:73:9c:e0:f7:8b:23:18:31:52:5d:29:67:9f:9a:
87:d4:7b:7d:90:3f:4d:b3:29:7c:50:48:92:b2:8c:0a:1d:aa:
25:08:d2:bb:1e:b3:73:31:c1:df:2b:12:8c:47:42:b3:6a:d6:
09:6a:fc:41:33:56:86:6b:b6:da:42:9b:8e:70:96:71:d4:f1:
a4:87:a9:ea:0f:d7:12:95:bf:12:f0:bd:b9:08:2f:a3:1f:a1:
71:06:72:29:e5:4f:10:fd:42:c2:27:ca:ae:42:4d:01:0e:9c:
2b:cb:fb:de:95:0d:dc:9b:8a:ae:d9:28:8b:9d:75:e2:4c:c8:
08:4e:0a:a1:09:95:9b:0d:47:3d:88:34:b9:9e:1d:1f:6a:b9:
87:07:75:df:7a:dd:f7:d3:98:b3:6e:86:38:31:35:67:a3:9a:
8f:f1:a1:28:86:1f:ce:d8:13:10:94:16:99:fc:d1:dd:2e:f2:
be:58:ca:b8:9f:5a:18:59:4b:a6:6c:dc:0a:f8:45:eb:91:5e:
48:a2:17:54:01:ae:44:da:9c:09:34:de:fd:13:b9:c7:ed:bf:
f6:63:6f:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFggC787XgWZl0yAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
MmUxMzU2MzMtZWZlMy00NTY3LWFkNzgtMGM0YzQ1ZTI3Zjg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr7CQ7d7sYoFASaxcQEZxP5/eXdTooKlBiOE
UdJ8ePZq/1379Q/2UD1vEXSHBL0WfhAqsU/zVAIrT/Ck8xsL+3LVA/MAZ0fD+oh5
Ry3IH7fqZBswAfPQXBqECoOzIsnZfmKFOhnZGPw6D0zgdr+HhA5NVjN0MZ+N8KH5
UvdxlUb+xSp1e/oXdLTa/MoZXzfcbZXQ/Kt3gg+j6QncHZ8DCy8D2e6N/m7KLtbI
NLsqEZcmfpEzisk3+AXRUQTnA7vuQH9yTTpu1sKBr0ysLWMxBMybhvdIAnw91na+
aNpIfy3+S3pTzfnfTcxIW7EBcfrH3Fr/Slvq3GvO0XSpOluSdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN4LLZk1y1G0FoqksjqetNHNh/RFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzNjYWJjMjMtOTNiNi0z
NTRlLThkZjItZWE3ODBlZmM4Yjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArf95MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABqfTWnxUO+FycU2CsDabsZSQ0rxhVa69SU7P79jvL5NWc1tlx50ZYdz
nOD3iyMYMVJdKWefmofUe32QP02zKXxQSJKyjAodqiUI0rses3Mxwd8rEoxHQrNq
1glq/EEzVoZrttpCm45wlnHU8aSHqeoP1xKVvxLwvbkIL6MfoXEGcinlTxD9QsIn
yq5CTQEOnCvL+96VDdybiq7ZKIuddeJMyAhOCqEJlZsNRz2INLmeHR9quYcHdd96
3ffTmLNuhjgxNWejmo/xoSiGH87YExCUFpn80d0u8r5YyrifWhhZS6Zs3Ar4ReuR
XkiiF1QBrkTanAk03v0Tucftv/Zjb4o=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:25 2025 by rpki-client