Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/20c56f58-bb51-3911-ab57-dcf21b41792f.roa
File: 20c56f58-bb51-3911-ab57-dcf21b41792f.roa (raw, json)
Hash identifier: XT+aeqycWPgXZRb7qhwjiF78isvRpAKFok3SiaAjkAI=
Subject key identifier: BC:F2:4C:92:C1:1E:50:10:66:AC:A1:03:B2:D3:8A:48:7D:C2:E1:94
Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
Certificate serial: 010D0C9F43285848F4F6965A443A0D3877C79A00
Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/20c56f58-bb51-3911-ab57-dcf21b41792f.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 396982
IP address blocks: 147.124.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:96:5a:44:3a:0d:38:77:c7:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=b971a33e-3d10-47bc-bd84-c5aed097244d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:cb:46:4e:88:6c:d8:d0:52:b9:a0:94:8e:
1e:3c:30:40:f4:48:08:02:c1:87:85:74:c9:24:45:
73:a4:37:c7:81:89:4f:d7:60:f0:cb:8b:7a:0b:7f:
ef:16:80:22:17:4e:11:f1:07:ba:ea:08:2a:9e:14:
68:44:b0:71:f6:92:70:01:ad:47:00:93:34:ae:45:
d4:89:7f:9a:3f:cd:ac:50:ad:e6:9e:52:99:c7:07:
3d:3e:6c:e8:b7:79:e1:e2:7b:dc:19:34:91:85:5f:
73:c3:0b:a6:5b:ca:5c:25:73:26:5c:9a:96:c0:86:
3f:04:3b:6c:37:28:9b:3b:35:67:ff:e5:38:d2:d1:
66:10:5a:5a:6e:bd:ee:52:93:d8:35:eb:cd:62:8a:
78:bc:85:77:29:4a:f9:91:6c:18:4b:b7:94:b8:50:
e0:9c:b0:8c:30:f9:eb:c2:1f:a7:35:5d:93:74:15:
14:46:d1:64:d9:fe:47:fd:90:5f:41:d7:8b:c4:21:
b0:ec:64:a9:bf:6e:3a:bc:ac:37:77:f7:58:42:20:
8f:4d:2f:a2:67:1e:60:b6:2a:5f:64:0f:68:fb:7e:
25:04:ef:9e:85:45:77:82:b1:0c:e5:9a:a9:65:ca:
ff:f6:9f:40:2d:95:6c:4e:46:e9:0a:07:a0:22:0a:
c7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F2:4C:92:C1:1E:50:10:66:AC:A1:03:B2:D3:8A:48:7D:C2:E1:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/20c56f58-bb51-3911-ab57-dcf21b41792f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl
X509v3 Authority Key Identifier:
keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
sbgp-ipAddrBlock: critical
IPv4:
147.124.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:b2:33:c3:e9:4b:fc:6d:12:b6:91:87:d4:ee:52:67:20:63:
f2:e2:08:91:4b:8c:77:c3:85:7d:cd:40:9c:37:08:fd:30:b5:
20:77:5b:59:31:4e:b0:05:85:66:b1:3a:6b:c1:bc:53:cc:7f:
5d:fb:89:0a:a4:48:fa:15:08:05:c0:f3:0d:a9:fe:86:c1:f4:
c9:73:1f:ce:82:a3:92:a5:be:ec:b3:8d:fb:1c:a8:25:7c:fb:
eb:4c:84:44:cf:43:11:db:c6:a2:8b:0d:a7:78:c4:a8:8f:67:
51:0f:35:92:38:76:2e:a9:f7:5a:a7:c9:02:87:e8:e2:89:8c:
29:8c:db:24:82:30:a7:3e:6d:a5:f9:40:ca:e8:40:2e:e7:35:
59:a3:fb:3b:87:84:82:5d:af:79:0d:f1:6c:95:6c:21:59:ef:
41:4c:8e:f4:6d:fa:01:40:a1:0d:a8:30:07:4c:31:aa:24:bf:
d5:c9:6e:0a:90:ba:4e:bf:ba:2a:fe:5b:7f:db:e0:a5:45:0c:
a3:61:27:65:94:57:a9:54:de:58:3b:f7:e5:62:9b:73:a9:23:
83:79:f8:a6:b2:08:e9:28:59:d0:65:01:d7:78:02:15:ca:a2:
61:08:c8:a5:b7:21:37:bc:e7:e0:2d:63:8f:95:0d:37:4b:12:
ca:5e:4e:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09pZaRDoNOHfHmgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk
ZjA2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
Yjk3MWEzM2UtM2QxMC00N2JjLWJkODQtYzVhZWQwOTcyNDRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHHLRk6IbNjQUrmglI4ePDBA9EgIAsGHhXTJ
JEVzpDfHgYlP12Dwy4t6C3/vFoAiF04R8Qe66ggqnhRoRLBx9pJwAa1HAJM0rkXU
iX+aP82sUK3mnlKZxwc9Pmzot3nh4nvcGTSRhV9zwwumW8pcJXMmXJqWwIY/BDts
NyibOzVn/+U40tFmEFpabr3uUpPYNevNYop4vIV3KUr5kWwYS7eUuFDgnLCMMPnr
wh+nNV2TdBUURtFk2f5H/ZBfQdeLxCGw7GSpv246vKw3d/dYQiCPTS+iZx5gtipf
ZA9o+34lBO+ehUV3grEM5ZqpZcr/9p9ALZVsTkbpCgegIgrHHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLzyTJLBHlAQZqyhA7LTikh9wuGUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm
ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvMjBjNTZmNTgtYmI1MS0z
OTExLWFiNTctZGNmMjFiNDE3OTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj
MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2
ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4
NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3y/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB6yM8PpS/xtEraRh9TuUmcgY/LiCJFLjHfDhX3NQJw3CP0wtSB3W1kx
TrAFhWaxOmvBvFPMf137iQqkSPoVCAXA8w2p/obB9MlzH86Co5KlvuyzjfscqCV8
++tMhETPQxHbxqKLDad4xKiPZ1EPNZI4di6p91qnyQKH6OKJjCmM2ySCMKc+baX5
QMroQC7nNVmj+zuHhIJdr3kN8WyVbCFZ70FMjvRt+gFAoQ2oMAdMMaokv9XJbgqQ
uk6/uir+W3/b4KVFDKNhJ2WUV6lU3lg79+Vim3OpI4N5+KayCOkoWdBlAdd4AhXK
omEIyKW3ITe85+AtY4+VDTdLEspeTn0=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:36 2025 by rpki-client