Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/20d440b2-c2ab-3b80-aaa4-3919c5abc5fa.roa
File: 20d440b2-c2ab-3b80-aaa4-3919c5abc5fa.roa (raw, json)
Hash identifier: 2FSAHCHIRgGXgPCCvj0j/FHUk/LG54Bb5G6rXnKuK5Y=
Subject key identifier: 70:16:1A:F6:CE:74:B3:7A:66:06:18:0D:4B:7C:41:9F:BB:0C:47:8E
Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial: 010D0C9F4328584944692F71850BEE5E00055400
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/20d440b2-c2ab-3b80-aaa4-3919c5abc5fa.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 14061
IP address blocks: 170.64.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:2f:71:85:0b:ee:5e:00:05:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=a3cc6d71-e9b0-4c37-a6b4-5ee62224e842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4a:a7:ec:7c:ec:95:b4:98:85:59:23:e1:d2:
be:ed:0e:07:05:b3:57:52:b8:df:62:e0:64:81:10:
5c:65:73:4e:0e:91:6a:23:ad:be:18:f0:70:f7:1e:
c6:d5:ef:f2:53:07:93:fe:a2:eb:aa:1b:db:7a:84:
47:5e:67:ad:9a:38:c8:06:08:b0:cf:d3:2c:0c:d3:
d2:25:93:ec:84:8d:9a:88:2d:26:ce:3d:79:1a:99:
65:a3:07:f3:16:8b:ea:b2:b4:08:eb:3b:07:41:9c:
b3:29:81:61:28:96:1b:37:7d:f4:08:ae:9a:62:11:
4a:18:27:3a:bc:6a:25:07:79:42:21:63:89:7d:13:
81:f1:1c:5f:69:7a:de:80:46:fe:a5:e2:c7:c7:e5:
82:94:4b:88:51:49:39:22:0f:73:aa:89:57:49:31:
3b:61:c2:e6:7b:7e:72:9d:3e:5e:57:a5:ea:b7:e4:
08:37:ab:96:44:6b:af:a9:cf:85:86:23:5c:ad:65:
aa:92:7f:37:f3:9e:f7:99:51:15:9b:6a:61:cd:83:
f8:e2:1d:67:9d:42:83:7c:12:c6:39:96:26:a2:99:
02:23:19:cf:93:4d:04:38:19:ec:d2:da:b2:91:e4:
85:42:b4:ea:d5:03:8a:cd:b8:e1:d1:23:1b:fe:e4:
74:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:16:1A:F6:CE:74:B3:7A:66:06:18:0D:4B:7C:41:9F:BB:0C:47:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/20d440b2-c2ab-3b80-aaa4-3919c5abc5fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
X509v3 Authority Key Identifier:
keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
sbgp-ipAddrBlock: critical
IPv4:
170.64.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:c0:e6:4c:2d:47:6d:eb:70:b3:c1:56:67:13:b4:f7:3c:f8:
19:6b:a6:d9:fb:82:20:7a:b3:61:a2:74:b6:98:8a:e5:bf:ed:
3b:e1:c3:72:14:d6:53:47:45:ba:80:67:13:3c:9c:cd:1b:f6:
67:d0:17:9a:81:5f:a7:1d:56:f6:c8:d9:56:ab:42:b6:a3:7e:
5c:fd:23:57:d3:dc:20:44:a3:05:d9:0e:ae:77:2a:5b:68:b8:
c7:47:cc:a9:db:72:28:ef:9e:14:83:0f:fd:c2:48:2a:b9:6b:
b5:11:96:30:6c:7f:b5:94:17:5b:7f:a6:ab:ef:f9:15:ca:16:
3a:d0:7a:de:24:c0:82:a0:56:55:df:bb:a9:a1:da:b8:64:0e:
5a:9a:60:f8:26:bf:80:9d:d0:5f:f5:29:b9:bd:07:37:34:76:
6f:2d:e4:f6:ca:a7:71:fd:2d:42:ca:2e:ba:c9:87:da:1b:62:
41:13:38:fe:8a:4b:77:78:74:f8:c0:04:cc:a0:75:de:9f:b0:
d1:fd:63:92:ba:15:c2:2c:7f:af:98:fa:ce:d7:e1:f7:dc:02:
c9:f3:d7:1a:82:a1:5e:9d:be:61:bc:12:ab:bc:2b:5e:3b:b2:
45:3a:d6:37:22:5a:99:e1:1b:4e:96:55:f1:3c:f6:23:22:97:
47:a7:1b:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaS9xhQvuXgAFVAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy
Njk4MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk
YTNjYzZkNzEtZTliMC00YzM3LWE2YjQtNWVlNjIyMjRlODQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEqn7HzslbSYhVkj4dK+7Q4HBbNXUrjfYuBk
gRBcZXNODpFqI62+GPBw9x7G1e/yUweT/qLrqhvbeoRHXmetmjjIBgiwz9MsDNPS
JZPshI2aiC0mzj15GpllowfzFovqsrQI6zsHQZyzKYFhKJYbN330CK6aYhFKGCc6
vGolB3lCIWOJfROB8RxfaXregEb+peLHx+WClEuIUUk5Ig9zqolXSTE7YcLme35y
nT5eV6Xqt+QIN6uWRGuvqc+FhiNcrWWqkn838573mVEVm2phzYP44h1nnUKDfBLG
OZYmopkCIxnPk00EOBns0tqykeSFQrTq1QOKzbjh0SMb/uR06QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHAWGvbOdLN6ZgYYDUt8QZ+7DEeOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4
ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvMjBkNDQwYjItYzJhYi0z
YjgwLWFhYTQtMzkxOWM1YWJjNWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh
ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl
MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3
ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHqkCAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIjA5kwtR23rcLPBVmcTtPc8+Blrptn7giB6s2GidLaYiuW/7Tvhw3IU
1lNHRbqAZxM8nM0b9mfQF5qBX6cdVvbI2VarQrajflz9I1fT3CBEowXZDq53Klto
uMdHzKnbcijvnhSDD/3CSCq5a7URljBsf7WUF1t/pqvv+RXKFjrQet4kwIKgVlXf
u6mh2rhkDlqaYPgmv4Cd0F/1Kbm9Bzc0dm8t5PbKp3H9LULKLrrJh9obYkETOP6K
S3d4dPjABMygdd6fsNH9Y5K6FcIsf6+Y+s7X4ffcAsnz1xqCoV6dvmG8Equ8K147
skU61jciWpnhG06WVfE89iMil0enG3g=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:36:21 2025 by rpki-client