Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7391e80e-1609-311c-b39c-9832fb7cfa4f.roa
File: 7391e80e-1609-311c-b39c-9832fb7cfa4f.roa (raw, json)
Hash identifier: fEFrgiHTbZtUxFVAYLiHVqG2uM11cFZaaSaChmlwn/k=
Subject key identifier: A9:F5:D3:32:17:36:01:89:99:C0:3E:70:94:7F:87:4A:A0:D4:DB:5A
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848D944974D2B48724C4B35B280
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7391e80e-1609-311c-b39c-9832fb7cfa4f.roa
Signing time: Tue 11 Feb 2025 15:55:30 +0000
ROA not before: Tue 11 Feb 2025 15:55:30 +0000
ROA not after: Mon 12 May 2025 14:55:30 +0000
asID: 3360
IP address blocks: 20.138.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d9:44:97:4d:2b:48:72:4c:4b:35:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Feb 11 15:55:30 2025 GMT
Not After : May 12 14:55:30 2025 GMT
Subject: CN=e44da22e-d5a3-453f-93d9-d9d580ac92d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1d:9c:25:01:e3:8e:a3:a8:a5:44:a0:71:c7:
a7:01:86:41:16:e8:96:15:03:eb:2a:8e:ea:31:87:
1c:bc:03:7b:fb:c7:71:d1:3c:43:be:4f:72:49:25:
5d:0b:4f:09:91:c8:d9:55:50:5e:fe:58:54:8f:cb:
1f:40:af:3f:67:04:96:c8:00:9d:b0:76:5e:c6:3f:
c7:83:b9:36:34:93:ad:5f:11:39:91:4c:c1:e3:77:
b2:14:63:11:dc:d8:b3:47:bb:19:0d:85:4b:14:36:
d1:c7:c8:b7:7f:b0:56:a6:ab:b9:ee:72:28:41:fb:
6d:ae:ef:78:31:42:a7:88:0e:9f:82:09:95:96:86:
21:6f:55:ed:c3:8c:2d:97:2d:1f:8c:9c:e7:0c:d9:
75:7a:17:ca:79:45:4f:69:cf:87:3b:37:03:45:88:
f7:50:3a:05:3d:c8:8e:1d:3f:03:d2:10:5d:05:e2:
46:96:dd:32:a7:eb:73:c0:bf:fd:55:16:0d:e4:d3:
e6:fa:66:dd:7a:51:65:95:11:7c:b6:ae:12:73:23:
9b:5d:15:8e:82:81:c7:fa:6b:35:ca:5b:08:c2:90:
0e:ed:89:c6:46:70:e4:a0:23:eb:83:74:7d:03:fc:
8b:78:25:c9:fa:aa:f4:f6:10:e6:ff:d3:7c:44:1a:
5e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F5:D3:32:17:36:01:89:99:C0:3E:70:94:7F:87:4A:A0:D4:DB:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/7391e80e-1609-311c-b39c-9832fb7cfa4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.138.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:b1:44:d5:c9:2d:bf:4e:99:ce:5f:b5:55:2b:dd:be:c6:25:
18:66:bb:3d:fc:f9:1a:da:90:38:86:89:48:b4:2c:d2:6f:dc:
7f:8b:e1:59:42:58:99:b4:6e:01:c3:8f:ca:aa:f1:b3:f9:d4:
62:f2:c9:9c:97:bf:aa:bd:13:fe:02:1e:7b:74:9a:8b:b3:d1:
c6:bf:65:da:3e:30:78:e3:08:39:09:4a:bf:9b:31:aa:87:52:
9c:79:a5:33:38:e8:37:88:35:8d:06:b8:e9:99:c1:d9:bb:84:
70:e9:1a:76:f7:0d:1d:fc:4c:84:49:b2:a0:49:81:12:e0:07:
4c:db:49:79:3e:e2:c1:9a:97:10:92:e2:0f:3d:d1:1a:05:a7:
83:f6:0d:a0:60:b0:1f:72:28:8b:84:b6:75:66:96:f2:8e:9e:
97:2c:24:3e:2f:39:84:64:bd:b6:22:4d:08:c4:1f:53:02:98:
1a:16:2f:62:f1:8a:cc:a0:b0:56:fd:1d:27:88:c0:82:9a:c5:
14:d4:e0:cd:57:ec:9c:d5:5b:6b:8d:c9:2c:10:66:cf:ab:13:
e5:c4:9c:f0:38:6f:41:1d:d5:0c:18:16:93:ab:c3:4d:c0:e7:
13:80:d6:4a:c6:c1:9d:68:69:48:b6:b6:e2:f2:c0:97:63:5d:
85:43:fe:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjZRJdNK0hyTEs1soAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI1MDIxMTE1NTUzMFoXDTI1MDUxMjE0NTUzMFowLzEtMCsGA1UEAxMk
ZTQ0ZGEyMmUtZDVhMy00NTNmLTkzZDktZDlkNTgwYWM5MmQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAih2cJQHjjqOopUSgccenAYZBFuiWFQPrKo7q
MYccvAN7+8dx0TxDvk9ySSVdC08JkcjZVVBe/lhUj8sfQK8/ZwSWyACdsHZexj/H
g7k2NJOtXxE5kUzB43eyFGMR3NizR7sZDYVLFDbRx8i3f7BWpqu57nIoQfttru94
MUKniA6fggmVloYhb1Xtw4wtly0fjJznDNl1ehfKeUVPac+HOzcDRYj3UDoFPciO
HT8D0hBdBeJGlt0yp+tzwL/9VRYN5NPm+mbdelFllRF8tq4ScyObXRWOgoHH+ms1
ylsIwpAO7YnGRnDkoCPrg3R9A/yLeCXJ+qr09hDm/9N8RBpe7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKn10zIXNgGJmcA+cJR/h0qg1NtaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNzM5MWU4MGUtMTYwOS0z
MTFjLWIzOWMtOTgzMmZiN2NmYTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFIrgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAASxRNXJLb9Omc5ftVUr3b7GJRhmuz38+RrakDiGiUi0LNJv3H+L4VlC
WJm0bgHDj8qq8bP51GLyyZyXv6q9E/4CHnt0mouz0ca/Zdo+MHjjCDkJSr+bMaqH
Upx5pTM46DeINY0GuOmZwdm7hHDpGnb3DR38TIRJsqBJgRLgB0zbSXk+4sGalxCS
4g890RoFp4P2DaBgsB9yKIuEtnVmlvKOnpcsJD4vOYRkvbYiTQjEH1MCmBoWL2Lx
isygsFb9HSeIwIKaxRTU4M1X7JzVW2uNySwQZs+rE+XEnPA4b0Ed1QwYFpOrw03A
5xOA1krGwZ1oaUi2tuLywJdjXYVD/vE=
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:46:27 2025 by rpki-client