Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770/f30ef273-670a-357c-befa-96b7cb779888.roa
File: f30ef273-670a-357c-befa-96b7cb779888.roa (raw, json)
Hash identifier: jzs877u+ml5sfqHSgnvKjy0mg+HCurkuP89SHDCF7hs=
Subject key identifier: 0B:82:02:74:25:82:B9:5D:EA:B0:54:AB:53:B9:A8:E4:77:18:A1:0B
Certificate issuer: /CN=4df6cec2-94eb-4439-960f-00719026d770
Certificate serial: 010D0C9F43285848ADC60C2B41BB876355008D80
Authority key identifier: C7:9D:2C:21:76:B9:05:0E:59:35:17:2F:C8:71:FA:C9:EA:01:B4:34
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770/f30ef273-670a-357c-befa-96b7cb779888.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 16509
IP address blocks: 64.28.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:0c:2b:41:bb:87:63:55:00:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df6cec2-94eb-4439-960f-00719026d770
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=6f0255aa-21f5-4857-8434-de89e46063cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:69:57:fb:4f:0c:30:28:8f:4c:85:f6:f0:ec:
49:db:c2:74:9b:b8:14:77:03:57:d3:2c:de:33:be:
e2:c4:b7:f9:71:39:63:4e:cc:6a:7a:d3:2c:43:73:
e4:3d:72:32:2a:0a:6b:0c:ef:10:bf:d7:ec:8f:26:
48:a6:a5:b8:c6:27:f3:38:fe:f5:30:4e:1e:c2:92:
9f:be:f8:72:fa:a3:ca:45:9b:b2:21:a0:68:09:15:
d3:fa:fe:bf:6c:a5:d5:19:e9:58:48:20:5a:6a:79:
17:a7:3d:98:e3:d7:77:32:8f:62:20:f7:4d:db:ca:
c2:8c:eb:24:18:c1:80:ee:74:65:4b:93:99:c3:6b:
2d:15:87:60:0a:ff:ac:49:cb:27:a3:8d:09:f5:b2:
81:5f:f7:88:0a:78:0b:55:f1:87:ec:9e:cc:9a:40:
c9:14:ba:be:33:17:db:50:6d:d1:3e:39:26:4c:5a:
7a:2f:2d:db:25:44:2c:cc:8e:18:38:0a:6c:9b:3a:
ea:e2:42:f3:74:11:84:c6:e1:34:31:53:22:4f:c0:
55:c3:2e:a7:c5:cc:ea:43:16:ce:05:6e:fe:ca:f0:
46:32:4c:38:fd:4d:97:bb:91:46:df:59:a2:d2:2f:
ad:aa:e7:43:89:90:82:be:b3:86:c1:3c:bf:91:38:
49:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:82:02:74:25:82:B9:5D:EA:B0:54:AB:53:B9:A8:E4:77:18:A1:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770/f30ef273-670a-357c-befa-96b7cb779888.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770/4df6cec2-94eb-4439-960f-00719026d770.crl
X509v3 Authority Key Identifier:
keyid:C7:9D:2C:21:76:B9:05:0E:59:35:17:2F:C8:71:FA:C9:EA:01:B4:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4df6cec2-94eb-4439-960f-00719026d770.cer
sbgp-ipAddrBlock: critical
IPv4:
64.28.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:17:ed:66:c8:55:b7:e0:fa:4b:c9:f1:f7:b4:b1:cd:48:75:
35:e2:af:f7:f1:5a:74:b5:78:69:e8:aa:ac:ec:0e:4b:f2:47:
aa:04:35:29:38:41:d6:fa:e7:9d:fb:46:67:17:49:92:8d:fd:
14:f8:ff:5d:e4:b8:14:ab:8a:ce:cb:7e:82:a8:92:b9:f4:43:
61:a0:38:ca:8a:fc:48:9f:ef:81:a5:11:ee:71:80:c4:7a:2f:
cb:ea:a5:93:c6:c5:76:78:f8:1b:cc:50:b1:bd:38:41:b8:78:
0f:7b:c7:86:9d:ab:cb:d3:4a:db:bc:bb:53:6d:1d:75:8c:35:
ee:55:9f:73:2f:85:a8:ad:81:a5:e8:4c:bc:08:98:ed:4c:b0:
a6:dd:f9:67:2e:19:f8:98:ea:b3:3f:60:45:1b:1e:27:09:e9:
12:0d:a2:1c:a8:d1:f8:93:57:22:c9:05:5f:b4:38:ab:8e:7f:
aa:7b:e0:85:ff:6c:d1:73:38:08:2a:10:08:6f:56:78:e4:41:
85:f3:ad:39:c3:a1:90:7d:64:1a:d3:65:72:a1:90:65:fa:c3:
51:6b:25:ab:d4:35:0a:0c:51:2b:da:2a:ae:fc:bd:0e:fa:18:
f5:fd:c1:d5:2b:00:63:26:ed:41:d4:12:2f:0c:d1:72:86:2d:
00:67:0c:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxgwrQbuHY1UAjYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGRmNmNlYzItOTRlYi00NDM5LTk2MGYtMDA3MTkwMjZk
NzcwMB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk
NmYwMjU1YWEtMjFmNS00ODU3LTg0MzQtZGU4OWU0NjA2M2NjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2lX+08MMCiPTIX28OxJ28J0m7gUdwNX0yze
M77ixLf5cTljTsxqetMsQ3PkPXIyKgprDO8Qv9fsjyZIpqW4xifzOP71ME4ewpKf
vvhy+qPKRZuyIaBoCRXT+v6/bKXVGelYSCBaankXpz2Y49d3Mo9iIPdN28rCjOsk
GMGA7nRlS5OZw2stFYdgCv+sScsno40J9bKBX/eICngLVfGH7J7MmkDJFLq+Mxfb
UG3RPjkmTFp6Ly3bJUQszI4YOApsmzrq4kLzdBGExuE0MVMiT8BVwy6nxczqQxbO
BW7+yvBGMkw4/U2Xu5FG31mi0i+tqudDiZCCvrOGwTy/kThJcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAuCAnQlgrld6rBUq1O5qOR3GKELMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZGY2
Y2VjMi05NGViLTQ0MzktOTYwZi0wMDcxOTAyNmQ3NzAvZjMwZWYyNzMtNjcwYS0z
NTdjLWJlZmEtOTZiN2NiNzc5ODg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGRmNmNlYzItOTRlYi00NDM5LTk2
MGYtMDA3MTkwMjZkNzcwLzRkZjZjZWMyLTk0ZWItNDQzOS05NjBmLTAwNzE5MDI2
ZDc3MC5jcmwwHwYDVR0jBBgwFoAUx50sIXa5BQ5ZNRcvyHH6yeoBtDQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZGY2Y2VjMi05NGViLTQ0MzktOTYwZi0wMDcx
OTAyNmQ3NzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBwrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADUX7WbIVbfg+kvJ8fe0sc1IdTXir/fxWnS1eGnoqqzsDkvyR6oENSk4
Qdb65537RmcXSZKN/RT4/13kuBSris7LfoKokrn0Q2GgOMqK/Eif74GlEe5xgMR6
L8vqpZPGxXZ4+BvMULG9OEG4eA97x4adq8vTStu8u1NtHXWMNe5Vn3MvhaitgaXo
TLwImO1MsKbd+WcuGfiY6rM/YEUbHicJ6RINohyo0fiTVyLJBV+0OKuOf6p74IX/
bNFzOAgqEAhvVnjkQYXzrTnDoZB9ZBrTZXKhkGX6w1FrJavUNQoMUSvaKq78vQ76
GPX9wdUrAGMm7UHUEi8M0XKGLQBnDCQ=
-----END CERTIFICATE-----
Generated at Fri Apr 11 06:47:03 2025 by rpki-client