Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/a6c46de6-44a0-300d-bf19-e635e93471d5.roa
File: a6c46de6-44a0-300d-bf19-e635e93471d5.roa (raw, json)
Hash identifier: t7al7HXXYFI6JgeStH1ngT3Uu2TV0OS8G4g9xBSbFc0=
Subject key identifier: 2A:E3:82:CF:4D:30:B7:1D:FF:A3:75:E2:B9:F7:F2:DE:A1:D6:20:52
Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
Certificate serial: 010D0C9F4328584919418931AB6457CECA38CB00
Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/a6c46de6-44a0-300d-bf19-e635e93471d5.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 16509
IP address blocks: 68.71.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:89:31:ab:64:57:ce:ca:38:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=b4acf9d3-5d94-4cbe-81e1-c5e33a5f88a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c2:2f:c7:a0:75:b8:d9:dc:42:3f:7a:cc:09:
c0:f8:79:b4:63:cf:bb:83:f1:25:2e:95:5e:17:c1:
dc:c6:68:d8:7a:5f:94:39:3d:a8:1a:ea:03:59:79:
cd:92:db:2d:41:a2:f8:e4:17:c7:a9:1d:e0:fb:ef:
33:00:b9:0e:6c:be:fe:67:00:00:8d:8a:57:7e:2a:
ab:a1:8d:94:21:fa:9c:c4:34:3b:2a:49:64:c6:42:
07:66:86:be:ad:8f:cd:4c:50:e6:68:c8:2d:fa:96:
d5:02:47:be:a8:7a:22:f7:9d:bc:13:c8:92:7d:fd:
95:61:17:8a:02:19:4d:65:5e:91:0c:2c:79:70:6e:
fe:77:4a:88:7f:13:51:de:1e:35:b5:17:67:00:f3:
00:56:b8:03:1a:00:df:76:22:16:56:f4:a2:3a:b4:
ff:89:2c:08:e9:62:41:d2:37:13:d5:9b:4c:59:87:
cf:7b:20:53:be:6c:32:bb:f9:dd:11:e3:59:c7:ee:
fc:27:03:03:c1:34:2c:63:50:77:ca:d3:63:d3:32:
67:2b:ed:f0:30:e6:25:74:f0:80:b3:05:91:30:ca:
cd:f4:b7:f9:c8:32:5e:22:32:03:6a:ff:70:9f:5f:
46:7e:34:ac:38:0f:07:8d:47:1d:1a:49:a5:9f:0d:
82:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E3:82:CF:4D:30:B7:1D:FF:A3:75:E2:B9:F7:F2:DE:A1:D6:20:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/a6c46de6-44a0-300d-bf19-e635e93471d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl
X509v3 Authority Key Identifier:
keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
sbgp-ipAddrBlock: critical
IPv4:
68.71.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:f7:66:42:a9:08:08:45:20:cd:81:df:e6:a9:ac:08:90:8f:
e3:04:ab:a3:9b:a3:a5:02:53:5c:44:cb:37:92:89:84:18:4e:
6f:96:65:76:5d:36:6a:28:32:79:06:11:8e:ff:32:a0:79:7d:
3c:72:c8:bb:0f:ca:e5:f9:18:93:0f:46:c9:f6:6b:19:be:42:
ec:06:a3:0c:0a:c4:5f:0e:67:c2:fc:e5:10:ee:23:53:26:dc:
0d:aa:7a:9b:d2:3b:c6:94:83:f8:12:63:c4:46:e8:16:e6:90:
1e:7d:ec:e7:1b:eb:59:79:81:b5:0a:3b:14:7c:c4:bf:a9:60:
f2:b7:1d:2d:ff:d3:23:4a:81:4e:f9:b8:08:90:a3:5a:2e:7b:
ca:d3:12:35:a1:1c:5e:47:f9:1e:29:7f:63:9d:af:92:46:df:
dd:6a:96:5e:3c:cd:b8:e7:92:b0:a2:ed:70:c4:ff:f0:05:e2:
8d:a1:a5:4c:28:d2:c9:4b:14:bb:d5:0d:31:2b:3e:5c:df:23:
2b:6b:86:18:71:aa:32:9d:5f:03:a4:5e:88:60:44:fc:68:5d:
a8:1a:e9:87:14:ab:72:38:19:31:85:6a:31:ac:bb:02:9a:94:
bd:94:b8:d6:91:3d:e5:cd:7a:8b:8a:36:d7:76:59:43:4d:e8:
16:8a:0d:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZQYkxq2RXzso4ywAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh
YmRlMB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk
YjRhY2Y5ZDMtNWQ5NC00Y2JlLTgxZTEtYzVlMzNhNWY4OGE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcIvx6B1uNncQj96zAnA+Hm0Y8+7g/ElLpVe
F8HcxmjYel+UOT2oGuoDWXnNktstQaL45BfHqR3g++8zALkObL7+ZwAAjYpXfiqr
oY2UIfqcxDQ7KklkxkIHZoa+rY/NTFDmaMgt+pbVAke+qHoi9528E8iSff2VYReK
AhlNZV6RDCx5cG7+d0qIfxNR3h41tRdnAPMAVrgDGgDfdiIWVvSiOrT/iSwI6WJB
0jcT1ZtMWYfPeyBTvmwyu/ndEeNZx+78JwMDwTQsY1B3ytNj0zJnK+3wMOYldPCA
swWRMMrN9Lf5yDJeIjIDav9wn19GfjSsOA8HjUcdGkmlnw2CXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCrjgs9NMLcd/6N14rn38t6h1iBSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk
YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvYTZjNDZkZTYtNDRhMC0z
MDBkLWJmMTktZTYzNWU5MzQ3MWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0
YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4
YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl
NjVlOGFiZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREfvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJf3ZkKpCAhFIM2B3+aprAiQj+MEq6Obo6UCU1xEyzeSiYQYTm+WZXZd
NmooMnkGEY7/MqB5fTxyyLsPyuX5GJMPRsn2axm+QuwGowwKxF8OZ8L85RDuI1Mm
3A2qepvSO8aUg/gSY8RG6BbmkB597Ocb61l5gbUKOxR8xL+pYPK3HS3/0yNKgU75
uAiQo1oue8rTEjWhHF5H+R4pf2Odr5JG391qll48zbjnkrCi7XDE//AF4o2hpUwo
0slLFLvVDTErPlzfIytrhhhxqjKdXwOkXohgRPxoXaga6YcUq3I4GTGFajGsuwKa
lL2UuNaRPeXNeouKNtd2WUNN6BaKDUI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:24 2025 by rpki-client