Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/935f237f-3e08-33d2-af1f-4b1efe61d4f3.roa
File: 935f237f-3e08-33d2-af1f-4b1efe61d4f3.roa (raw, json)
Hash identifier: A4IXXByomWFZA3VonGFxMuCJfB4f5G0Ijcf6QJ3logU=
Subject key identifier: 42:83:EA:54:7C:30:79:CF:DC:FA:1A:43:5A:FF:2B:D9:7E:C1:F7:5F
Certificate issuer: /CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113
Certificate serial: 010D0C9F43285848F4F6A0F748B071D94DFE7100
Authority key identifier: A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/935f237f-3e08-33d2-af1f-4b1efe61d4f3.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 22504
IP address blocks: 162.118.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:a0:f7:48:b0:71:d9:4d:fe:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=38d7f2ce-f3da-4954-8c18-f3a65ca7d711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5c:1d:92:bb:4f:c6:7d:76:ad:d0:91:95:ce:
87:ba:72:e8:cf:51:b2:8e:31:62:5b:67:21:50:de:
58:cf:85:11:cd:33:e8:04:16:9a:38:a5:51:97:c5:
04:b4:9c:14:e9:13:b3:e9:82:84:a3:81:a3:4c:b3:
69:bc:16:a2:95:9c:49:25:7b:16:2b:61:e9:b5:c3:
24:82:3d:57:11:61:61:1e:54:b1:3e:b3:d0:e6:23:
87:83:4c:fe:7b:db:7c:c3:ce:6a:1e:2e:df:34:a8:
4e:6f:63:47:9f:b1:46:24:25:2a:47:b4:96:ed:6d:
6d:ce:90:f9:d8:15:8b:ee:1b:ca:ed:6e:14:4a:ee:
79:18:c2:cf:64:d2:c8:2a:91:ed:86:4a:97:95:6c:
51:38:a1:5b:ab:50:47:40:a0:70:56:62:4b:dd:c2:
ff:11:ec:92:45:10:b7:cb:89:c4:b2:6f:6d:54:76:
ae:08:8d:0d:09:36:a0:f2:56:b3:b7:f1:9d:1e:1f:
f9:ed:5f:26:dd:80:9c:5a:64:5b:c5:d0:96:20:16:
f0:f1:87:7a:65:5e:73:8d:6f:42:48:91:c2:19:57:
13:e0:2f:8c:df:a0:fd:8b:db:12:dc:93:b0:7d:97:
bc:70:df:38:b0:5f:48:03:18:34:7a:48:c5:1a:4a:
e7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:83:EA:54:7C:30:79:CF:DC:FA:1A:43:5A:FF:2B:D9:7E:C1:F7:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/935f237f-3e08-33d2-af1f-4b1efe61d4f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl
X509v3 Authority Key Identifier:
keyid:A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer
sbgp-ipAddrBlock: critical
IPv4:
162.118.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:59:28:be:b8:52:91:6d:c9:62:ba:b8:9c:63:f1:9d:4b:76:
c1:20:1e:6d:59:be:a4:10:78:c3:68:0d:69:69:9f:5a:5c:17:
02:f7:7a:6b:d2:a2:a9:95:9e:fc:03:3a:61:df:45:38:02:b6:
32:1b:b3:56:fa:06:22:7f:21:21:88:bc:08:b0:57:06:c8:35:
17:9d:0f:02:70:c8:7d:73:7a:e8:e6:fe:0c:dd:a4:dd:29:3e:
a5:cf:67:42:da:18:b7:80:43:5b:fe:cb:4d:7c:a5:18:db:72:
6f:e0:18:aa:46:a0:bc:98:0c:57:87:a0:03:3d:e0:68:41:47:
0f:4e:4b:2f:e1:1b:b3:b7:92:38:fd:0b:f6:1e:be:19:b3:eb:
66:de:32:f2:d3:4f:26:ea:36:8e:b8:4e:07:cc:4d:cc:6e:78:
1d:1f:11:72:a1:00:0a:18:5e:f0:15:08:67:86:6f:33:a8:b0:
fd:09:26:01:ce:24:4e:8c:58:93:c4:5e:ce:2b:ef:f8:bf:94:
00:52:1e:2d:a9:9a:cd:8e:ae:4c:d6:b4:9e:e9:62:30:51:ad:
da:22:ab:11:f2:56:ae:b6:17:b4:62:39:22:03:45:00:0d:44:
b3:81:d3:91:7c:3b:ea:2f:9c:52:07:d2:4b:2b:75:18:c5:21:
8e:82:cc:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09qD3SLBx2U3+cQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWEzZmUzYTktZDlmNy00YjhlLWEwMzctODc3MzYzYzUz
MTEzMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
MzhkN2YyY2UtZjNkYS00OTU0LThjMTgtZjNhNjVjYTdkNzExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlwdkrtPxn12rdCRlc6HunLoz1GyjjFiW2ch
UN5Yz4URzTPoBBaaOKVRl8UEtJwU6ROz6YKEo4GjTLNpvBailZxJJXsWK2HptcMk
gj1XEWFhHlSxPrPQ5iOHg0z+e9t8w85qHi7fNKhOb2NHn7FGJCUqR7SW7W1tzpD5
2BWL7hvK7W4USu55GMLPZNLIKpHthkqXlWxROKFbq1BHQKBwVmJL3cL/EeySRRC3
y4nEsm9tVHauCI0NCTag8lazt/GdHh/57V8m3YCcWmRbxdCWIBbw8Yd6ZV5zjW9C
SJHCGVcT4C+M36D9i9sS3JOwfZe8cN84sF9IAxg0ekjFGkrnQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEKD6lR8MHnP3PoaQ1r/K9l+wfdfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YTNm
ZTNhOS1kOWY3LTRiOGUtYTAzNy04NzczNjNjNTMxMTMvOTM1ZjIzN2YtM2UwOC0z
M2QyLWFmMWYtNGIxZWZlNjFkNGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWEzZmUzYTktZDlmNy00YjhlLWEw
MzctODc3MzYzYzUzMTEzLzVhM2ZlM2E5LWQ5ZjctNGI4ZS1hMDM3LTg3NzM2M2M1
MzExMy5jcmwwHwYDVR0jBBgwFoAUqMFLPdFSbDWZZINgLfzwTAq87N4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy81YTNmZTNhOS1kOWY3LTRiOGUtYTAzNy04Nzcz
NjNjNTMxMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAonYhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFtZKL64UpFtyWK6uJxj8Z1LdsEgHm1ZvqQQeMNoDWlpn1pcFwL3emvS
oqmVnvwDOmHfRTgCtjIbs1b6BiJ/ISGIvAiwVwbINRedDwJwyH1zeujm/gzdpN0p
PqXPZ0LaGLeAQ1v+y018pRjbcm/gGKpGoLyYDFeHoAM94GhBRw9OSy/hG7O3kjj9
C/Yevhmz62beMvLTTybqNo64TgfMTcxueB0fEXKhAAoYXvAVCGeGbzOosP0JJgHO
JE6MWJPEXs4r7/i/lABSHi2pms2OrkzWtJ7pYjBRrdoiqxHyVq62F7RiOSIDRQAN
RLOB05F8O+ovnFIH0ksrdRjFIY6CzKw=
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:00:44 2025 by rpki-client