Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/a07f8277-ce17-34be-955c-7cc356301d2e.roa
File: a07f8277-ce17-34be-955c-7cc356301d2e.roa (raw, json)
Hash identifier: dXjoqRbDj+efeHmApjEgXVl6QbQXYSM403nJwcDF40w=
Subject key identifier: BA:E0:84:C3:8E:2D:60:C3:71:8F:7C:FC:A6:26:AF:93:6E:CE:27:A8
Certificate issuer: /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73
Certificate serial: 010D0C9F43285848A6133B501CDF7ABF7BDE6D80
Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/a07f8277-ce17-34be-955c-7cc356301d2e.roa
Signing time: Fri 24 Jan 2025 07:49:49 +0000
ROA not before: Fri 24 Jan 2025 07:49:49 +0000
ROA not after: Thu 24 Apr 2025 06:49:49 +0000
asID: 16509
IP address blocks: 74.123.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a6:13:3b:50:1c:df:7a:bf:7b:de:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73
Validity
Not Before: Jan 24 07:49:49 2025 GMT
Not After : Apr 24 06:49:49 2025 GMT
Subject: CN=af9b46cd-8d5d-475c-aafd-b9f82d738b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:35:70:3c:09:1f:24:93:aa:ef:8c:a1:9b:ff:
58:62:69:e7:4b:85:5a:59:df:3e:2b:0b:f5:21:84:
bf:2c:02:c9:85:1a:6e:f7:56:49:cd:8b:a2:8a:a7:
64:20:b7:fb:21:1b:b3:6c:cb:16:f2:2d:0f:68:5c:
83:3f:06:c5:28:c7:42:a4:33:0c:86:6f:20:a9:e1:
3e:8d:9a:ce:a1:9f:d0:bb:7a:bb:db:cf:d7:a9:db:
da:03:f9:12:f8:55:a9:42:bb:b6:21:00:0a:4d:aa:
ee:de:e5:db:c0:a7:36:28:a3:f9:66:e7:f4:4f:fa:
32:fa:5f:44:54:38:09:8c:bb:9e:a1:13:d7:ed:7c:
08:a6:e7:49:e7:98:c8:5f:df:6e:75:75:2f:da:b4:
54:1e:50:6d:3b:9b:b2:d2:fb:5f:1d:56:df:f2:f0:
c8:71:e6:15:a0:ff:0a:93:92:09:c5:d1:3d:bc:a6:
eb:10:ee:18:eb:57:77:ba:35:89:8f:5d:c0:7c:f3:
11:fd:f8:19:4c:42:4d:c9:45:ce:8d:cf:1e:8e:86:
68:8f:e0:21:e8:8c:b4:e1:de:b8:dd:bb:e1:f1:e7:
1f:2d:8c:97:86:27:54:b2:af:53:b8:cf:20:23:7a:
8f:50:6d:2f:c7:12:2c:42:a1:33:ae:f8:5d:9a:cd:
05:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E0:84:C3:8E:2D:60:C3:71:8F:7C:FC:A6:26:AF:93:6E:CE:27:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/a07f8277-ce17-34be-955c-7cc356301d2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl
X509v3 Authority Key Identifier:
keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer
sbgp-ipAddrBlock: critical
IPv4:
74.123.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ce:c2:d1:49:29:74:44:de:ad:e9:71:a0:5e:62:60:17:76:13:
b8:c4:10:f8:8a:b1:8f:b7:c7:03:fc:c3:f4:f2:ae:8b:cc:ad:
97:8f:29:33:ad:da:6f:85:87:ba:1f:b4:e5:2a:21:c1:45:d9:
c9:ea:8c:42:4c:31:7d:50:50:c2:db:66:e1:9f:7f:27:ff:d8:
a0:3c:df:d7:ca:00:79:90:3a:dc:11:17:b7:7c:ff:df:f0:15:
f2:f9:b4:49:63:22:fe:2f:8e:05:72:5c:25:66:9a:94:e4:98:
3b:c1:5f:a3:69:cc:34:53:a0:a3:97:d2:fc:19:7d:f8:8f:96:
61:dc:9c:10:92:9e:69:18:6b:87:d7:1f:ed:21:51:7e:a6:d0:
19:a7:8d:1d:c0:75:9d:7b:e7:f5:fc:0e:68:47:89:aa:48:12:
c1:5a:8a:42:d9:bf:27:8c:43:65:f3:8f:d1:bb:f1:35:ef:8d:
44:ad:24:08:f9:d6:c4:df:ca:1d:71:9e:7f:2a:ef:a6:41:e7:
db:18:12:c1:dc:97:a9:5d:14:60:dd:e0:22:bc:4a:4e:01:e0:
88:6d:39:98:da:2f:cc:80:9f:63:b5:27:48:19:2f:14:b5:fc:
fb:af:85:da:cb:9a:79:e2:ab:f4:4a:44:01:ce:d3:4b:b2:27:
7a:be:34:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEimEztQHN96v3vebYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzNkM2MzMDQtNjE5ZC00ZTZkLWFlZDUtOWUyNTE2NWNi
YzczMB4XDTI1MDEyNDA3NDk0OVoXDTI1MDQyNDA2NDk0OVowLzEtMCsGA1UEAxMk
YWY5YjQ2Y2QtOGQ1ZC00NzVjLWFhZmQtYjlmODJkNzM4YjQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzVwPAkfJJOq74yhm/9YYmnnS4VaWd8+Kwv1
IYS/LALJhRpu91ZJzYuiiqdkILf7IRuzbMsW8i0PaFyDPwbFKMdCpDMMhm8gqeE+
jZrOoZ/Qu3q728/XqdvaA/kS+FWpQru2IQAKTaru3uXbwKc2KKP5Zuf0T/oy+l9E
VDgJjLueoRPX7XwIpudJ55jIX99udXUv2rRUHlBtO5uy0vtfHVbf8vDIceYVoP8K
k5IJxdE9vKbrEO4Y61d3ujWJj13AfPMR/fgZTEJNyUXOjc8ejoZoj+Ah6Iy04d64
3bvh8ecfLYyXhidUsq9TuM8gI3qPUG0vxxIsQqEzrvhdms0FLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLrghMOOLWDDcY98/KYmr5NuzieoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zM2Qz
YzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1MTY1Y2JjNzMvYTA3ZjgyNzctY2UxNy0z
NGJlLTk1NWMtN2NjMzU2MzAxZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzNkM2MzMDQtNjE5ZC00ZTZkLWFl
ZDUtOWUyNTE2NWNiYzczLzMzZDNjMzA0LTYxOWQtNGU2ZC1hZWQ1LTllMjUxNjVj
YmM3My5jcmwwHwYDVR0jBBgwFoAUjkoNtMfpM0cLNL0AOGQeSnjs4mowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zM2QzYzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1
MTY1Y2JjNzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnsIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAM7C0UkpdETerelxoF5iYBd2E7jEEPiKsY+3xwP8w/TyrovMrZePKTOt
2m+Fh7oftOUqIcFF2cnqjEJMMX1QUMLbZuGffyf/2KA839fKAHmQOtwRF7d8/9/w
FfL5tEljIv4vjgVyXCVmmpTkmDvBX6NpzDRToKOX0vwZffiPlmHcnBCSnmkYa4fX
H+0hUX6m0BmnjR3AdZ175/X8DmhHiapIEsFaikLZvyeMQ2Xzj9G78TXvjUStJAj5
1sTfyh1xnn8q76ZB59sYEsHcl6ldFGDd4CK8Sk4B4IhtOZjaL8yAn2O1J0gZLxS1
/PuvhdrLmnniq/RKRAHO00uyJ3q+NBc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:22:45 2025 by rpki-client