Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e374af94-4bcd-3d5d-bdbb-5fb9eff9f929.roa
File: e374af94-4bcd-3d5d-bdbb-5fb9eff9f929.roa (raw, json)
Hash identifier: /QbL3SV4T3TErEso8+vFcHlyD4ozf9lzMAd5amaxoJQ=
Subject key identifier: 4E:11:84:46:01:5A:55:65:77:80:A4:40:B9:50:7F:B1:0C:A7:D3:41
Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial: 010D0C9F43285848F9267DBE9232496CBFC02980
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e374af94-4bcd-3d5d-bdbb-5fb9eff9f929.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 8987
IP address blocks: 170.85.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:7d:be:92:32:49:6c:bf:c0:29:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=42b69fef-3d0e-474e-8070-56d889125f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:aa:b0:9a:85:43:f1:94:9a:76:e8:86:e4:99:
0c:1e:83:dd:e6:e5:c9:c5:d7:bb:ba:e1:40:28:70:
23:3e:89:23:24:a1:1a:c5:64:71:b5:f4:3e:63:71:
1a:63:a4:47:db:71:bc:14:24:f1:c2:dc:8f:29:b1:
0c:6e:90:9b:80:26:1a:e1:d8:41:04:2c:d7:a5:e7:
a3:ab:12:55:4f:bd:55:46:c9:a0:06:37:db:49:fe:
dd:b9:9e:74:91:45:79:a6:3b:c9:5f:cf:b4:83:1d:
10:3f:9a:e3:01:49:73:ba:74:5a:4c:d8:fe:25:b7:
39:21:f3:b1:21:25:91:9c:a3:b5:93:ca:b3:83:33:
93:7c:e5:38:46:1e:ac:82:f3:aa:66:f3:df:15:02:
27:b0:38:f8:8f:16:42:f2:5e:fb:8a:dd:67:af:72:
e1:ef:29:7d:39:ff:4c:fb:4d:af:0c:19:2d:5f:4c:
19:32:c9:44:2e:75:c6:4c:10:e9:97:1f:9c:a3:dc:
1f:67:70:ca:ea:02:6c:f9:99:99:ed:3f:eb:01:48:
a8:b0:f7:16:52:c7:79:01:80:e0:65:28:5a:4c:b2:
2b:d0:95:61:fe:77:f3:6d:ab:d9:95:db:29:8f:5f:
2d:61:40:5c:cb:ab:18:cb:96:8e:78:40:86:8a:0b:
6d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:11:84:46:01:5A:55:65:77:80:A4:40:B9:50:7F:B1:0C:A7:D3:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e374af94-4bcd-3d5d-bdbb-5fb9eff9f929.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
X509v3 Authority Key Identifier:
keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
sbgp-ipAddrBlock: critical
IPv4:
170.85.83.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:d3:91:7e:6e:3d:4d:1c:3e:c7:5c:24:46:91:da:7f:f5:84:
e3:65:a1:47:26:8a:92:1d:4f:c6:83:d9:3a:ad:b0:1c:09:26:
2f:2c:8f:07:42:c9:40:10:84:24:02:a9:c2:a5:a4:05:69:b3:
28:bc:38:18:a0:6a:cb:71:3d:76:a4:87:ab:65:65:d6:6a:6d:
0c:58:15:a2:0e:4a:b8:1f:57:ca:53:38:76:7c:de:74:97:f6:
9f:79:88:a0:6e:20:a3:8d:c5:e0:9a:e3:5b:06:27:0e:18:55:
c2:33:f6:d1:aa:1b:be:2e:09:ef:e8:cd:0f:79:53:1b:94:72:
61:cc:cf:c2:87:3b:95:02:7a:77:2d:f9:e8:81:ff:45:d9:45:
7b:a8:42:2e:e2:b7:c5:6f:fe:ad:33:21:ef:ee:d4:02:d2:71:
53:72:dd:40:c5:5b:8e:0c:88:6b:6e:08:cf:79:0f:d3:a5:bf:
e0:80:c0:92:7f:f3:f2:dc:b9:3f:02:55:06:53:3e:88:f4:4c:
06:14:85:61:18:e2:7f:ed:bd:af:3b:de:9c:f4:b6:37:69:98:
14:f2:c8:29:72:6f:f4:79:46:3f:27:04:b3:14:03:2c:e2:59:
75:b3:16:1b:b3:d2:bf:33:b8:55:67:2f:ba:41:22:22:33:f5:
67:10:ac:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5Jn2+kjJJbL/AKYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
NDJiNjlmZWYtM2QwZS00NzRlLTgwNzAtNTZkODg5MTI1ZjA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqqwmoVD8ZSaduiG5JkMHoPd5uXJxde7uuFA
KHAjPokjJKEaxWRxtfQ+Y3EaY6RH23G8FCTxwtyPKbEMbpCbgCYa4dhBBCzXpeej
qxJVT71VRsmgBjfbSf7duZ50kUV5pjvJX8+0gx0QP5rjAUlzunRaTNj+Jbc5IfOx
ISWRnKO1k8qzgzOTfOU4Rh6sgvOqZvPfFQInsDj4jxZC8l77it1nr3Lh7yl9Of9M
+02vDBktX0wZMslELnXGTBDplx+co9wfZ3DK6gJs+ZmZ7T/rAUiosPcWUsd5AYDg
ZShaTLIr0JVh/nfzbavZldspj18tYUBcy6sYy5aOeECGigttowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE4RhEYBWlVld4CkQLlQf7EMp9NBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZTM3NGFmOTQtNGJjZC0z
ZDVkLWJkYmItNWZiOWVmZjlmOTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlVTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI7TkX5uPU0cPsdcJEaR2n/1hONloUcmipIdT8aD2TqtsBwJJi8sjwdC
yUAQhCQCqcKlpAVpsyi8OBigastxPXakh6tlZdZqbQxYFaIOSrgfV8pTOHZ83nSX
9p95iKBuIKONxeCa41sGJw4YVcIz9tGqG74uCe/ozQ95UxuUcmHMz8KHO5UCenct
+eiB/0XZRXuoQi7it8Vv/q0zIe/u1ALScVNy3UDFW44MiGtuCM95D9Olv+CAwJJ/
8/LcuT8CVQZTPoj0TAYUhWEY4n/tva873pz0tjdpmBTyyClyb/R5Rj8nBLMUAyzi
WXWzFhuz0r8zuFVnL7pBIiIz9WcQrPs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:29:02 2025 by rpki-client