Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/5de5a8df-d8b1-3c64-938c-8e56aae24565.roa
File: 5de5a8df-d8b1-3c64-938c-8e56aae24565.roa (raw, json)
Hash identifier: nhWLjEXTiWoKbYQ66frTQYHsFUj9YVycitYwdmlaSpY=
Subject key identifier: 73:61:F8:FB:41:F9:E1:6A:4B:5B:04:32:A6:F3:07:0D:45:14:61:A0
Certificate issuer: /CN=c003af2f-f626-4f2a-a59d-433951f53b3b
Certificate serial: 010D0C9F43285848897B24BA9359853594578980
Authority key identifier: A1:DB:17:E6:35:CF:2D:CB:AA:53:2F:E8:00:D0:92:F1:94:24:AE:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/5de5a8df-d8b1-3c64-938c-8e56aae24565.roa
Signing time: Tue 14 Jan 2025 02:00:39 +0000
ROA not before: Tue 14 Jan 2025 02:00:39 +0000
ROA not after: Mon 14 Apr 2025 01:00:39 +0000
asID: 400147
IP address blocks: 204.17.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:89:7b:24:ba:93:59:85:35:94:57:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c003af2f-f626-4f2a-a59d-433951f53b3b
Validity
Not Before: Jan 14 02:00:39 2025 GMT
Not After : Apr 14 01:00:39 2025 GMT
Subject: CN=11093835-99da-48c0-865c-472b0e482e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:90:d5:3a:60:a5:05:dd:85:9e:19:50:ff:1c:
c5:3b:56:96:cd:b0:4d:b0:de:72:ea:7d:e8:8b:a6:
e3:e8:d2:34:da:27:5a:55:0c:bd:5c:38:64:2b:9a:
8a:1d:5a:6d:18:a4:72:5f:40:3f:54:bd:c7:68:da:
ec:a2:d1:9b:85:d8:5e:e7:37:0a:11:c5:6a:7f:05:
a1:92:25:6e:5a:e5:1c:54:76:73:4c:22:52:1a:c4:
21:9e:83:5c:0f:86:7b:68:e9:99:71:09:da:1e:77:
bc:7d:d9:01:6d:0a:47:3c:b3:75:e1:aa:cf:51:40:
20:ac:e3:54:35:80:81:60:03:78:63:22:2a:73:35:
9f:de:a9:db:b3:65:27:e7:82:62:54:c7:fa:7d:fc:
49:66:f7:13:cd:0b:93:f9:5b:ba:b0:83:25:17:ce:
dd:fb:9d:71:57:db:50:13:28:1d:d6:ea:60:b9:c4:
49:a9:3c:44:f4:08:05:ff:b4:fe:8c:b2:41:e7:5d:
be:cc:db:c8:5e:b3:54:4f:11:72:e8:32:a6:ea:bc:
c5:b3:bd:f1:48:c4:c0:34:96:9d:d0:d1:35:93:bc:
76:30:49:25:3a:1f:9d:54:e1:44:f7:44:3b:ba:8e:
17:5b:85:e9:78:81:39:c6:5a:04:26:09:cf:0c:41:
44:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:61:F8:FB:41:F9:E1:6A:4B:5B:04:32:A6:F3:07:0D:45:14:61:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/5de5a8df-d8b1-3c64-938c-8e56aae24565.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/c003af2f-f626-4f2a-a59d-433951f53b3b.crl
X509v3 Authority Key Identifier:
keyid:A1:DB:17:E6:35:CF:2D:CB:AA:53:2F:E8:00:D0:92:F1:94:24:AE:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b.cer
sbgp-ipAddrBlock: critical
IPv4:
204.17.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:34:3c:54:e0:b9:7e:bd:d0:e2:b0:d9:3c:e5:51:58:d2:eb:
ef:ed:32:84:95:dc:87:fd:7c:dd:81:b8:6b:c8:79:b1:85:55:
57:06:37:0a:0c:22:d9:a2:d9:97:98:c0:e0:17:14:47:ec:2a:
84:f8:a9:9f:9c:4d:ae:6a:09:1a:a5:90:b1:5b:f9:7e:a2:f7:
88:55:9f:26:f5:6c:4c:d4:8d:b2:d1:44:58:8c:c7:e4:a3:54:
02:1d:75:63:82:c1:2e:b0:26:61:05:ce:37:bb:9c:be:ff:2d:
9e:0e:b7:1f:17:b5:b2:7f:9b:bf:85:fc:10:2a:79:91:5f:f3:
e1:5e:03:3b:ae:87:2a:79:19:a6:4e:d5:6a:56:4b:42:fe:a0:
49:88:13:b7:2b:89:a0:d3:31:94:2c:a8:e1:9c:30:80:1c:6f:
e2:20:bc:f4:6c:21:c6:c7:63:16:28:a9:40:cc:32:28:3d:ec:
02:34:02:ba:d1:fb:03:2e:0b:65:e7:3f:6c:5d:eb:c6:aa:30:
e9:f7:90:96:18:9b:20:92:04:83:ec:b9:67:59:e2:aa:12:a8:
d4:11:36:de:61:23:bf:50:63:39:12:30:87:e6:56:23:8a:ae:
79:ec:7a:0d:80:30:37:13:ad:cc:33:a3:96:c4:3c:97:d9:de:
2b:c7:bd:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiJeyS6k1mFNZRXiYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzAwM2FmMmYtZjYyNi00ZjJhLWE1OWQtNDMzOTUxZjUz
YjNiMB4XDTI1MDExNDAyMDAzOVoXDTI1MDQxNDAxMDAzOVowLzEtMCsGA1UEAxMk
MTEwOTM4MzUtOTlkYS00OGMwLTg2NWMtNDcyYjBlNDgyZTExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJDVOmClBd2FnhlQ/xzFO1aWzbBNsN5y6n3o
i6bj6NI02idaVQy9XDhkK5qKHVptGKRyX0A/VL3HaNrsotGbhdhe5zcKEcVqfwWh
kiVuWuUcVHZzTCJSGsQhnoNcD4Z7aOmZcQnaHne8fdkBbQpHPLN14arPUUAgrONU
NYCBYAN4YyIqczWf3qnbs2Un54JiVMf6ffxJZvcTzQuT+Vu6sIMlF87d+51xV9tQ
Eygd1upgucRJqTxE9AgF/7T+jLJB512+zNvIXrNUTxFy6DKm6rzFs73xSMTANJad
0NE1k7x2MEklOh+dVOFE90Q7uo4XW4XpeIE5xloEJgnPDEFEwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHNh+PtB+eFqS1sEMqbzBw1FFGGgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jMDAz
YWYyZi1mNjI2LTRmMmEtYTU5ZC00MzM5NTFmNTNiM2IvNWRlNWE4ZGYtZDhiMS0z
YzY0LTkzOGMtOGU1NmFhZTI0NTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzAwM2FmMmYtZjYyNi00ZjJhLWE1
OWQtNDMzOTUxZjUzYjNiL2MwMDNhZjJmLWY2MjYtNGYyYS1hNTlkLTQzMzk1MWY1
M2IzYi5jcmwwHwYDVR0jBBgwFoAUodsX5jXPLcuqUy/oANCS8ZQkroIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jMDAzYWYyZi1mNjI2LTRmMmEtYTU5ZC00MzM5
NTFmNTNiM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBHoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACk0PFTguX690OKw2TzlUVjS6+/tMoSV3If9fN2BuGvIebGFVVcGNwoM
Itmi2ZeYwOAXFEfsKoT4qZ+cTa5qCRqlkLFb+X6i94hVnyb1bEzUjbLRRFiMx+Sj
VAIddWOCwS6wJmEFzje7nL7/LZ4Otx8XtbJ/m7+F/BAqeZFf8+FeAzuuhyp5GaZO
1WpWS0L+oEmIE7criaDTMZQsqOGcMIAcb+IgvPRsIcbHYxYoqUDMMig97AI0ArrR
+wMuC2XnP2xd68aqMOn3kJYYmyCSBIPsuWdZ4qoSqNQRNt5hI79QYzkSMIfmViOK
rnnseg2AMDcTrcwzo5bEPJfZ3ivHvbw=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:03:10 2025 by rpki-client