Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1a7be2df-d2ca-3210-845e-fe2ae5891fc0.roa
File: 1a7be2df-d2ca-3210-845e-fe2ae5891fc0.roa (raw, json)
Hash identifier: olHnjNPeiQAbsHUwar2AG5XE46EVM8ogqD6RhsYHW1k=
Subject key identifier: 46:A7:AA:A2:00:98:69:3A:F0:05:A9:B1:14:6F:61:15:2A:AE:6E:A5
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D17DC043178A40BF769580
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1a7be2df-d2ca-3210-845e-fe2ae5891fc0.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 68.191.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:7d:c0:43:17:8a:40:bf:76:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=67385143-2ba8-469e-b9cd-c3809bd9bf71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:67:0d:8c:d8:77:02:3f:62:64:88:5c:a6:29:
98:76:d6:f0:41:be:72:fa:28:ef:89:3f:a1:c3:b4:
db:07:b6:cf:e2:dd:ef:77:71:53:4c:4d:94:f8:83:
e5:65:ab:fb:63:c1:37:14:df:45:7c:5a:bb:ef:46:
39:ea:23:c3:80:66:39:fb:72:0f:96:ab:51:cd:31:
b2:ec:71:ad:81:da:b5:f7:23:a9:f6:63:b4:69:63:
4d:dd:8a:0e:2c:ba:8d:49:23:0b:dd:6e:1f:12:91:
b7:f8:da:1c:31:00:f6:7d:2d:42:53:3d:ed:52:b2:
f5:f0:fa:ec:36:de:eb:95:ab:b3:db:30:cb:37:65:
3b:48:fd:89:ee:81:78:a8:21:84:71:15:37:da:a3:
5d:28:8c:3a:fd:b3:fe:1c:b9:6d:d7:9d:33:6b:1e:
22:33:e6:14:ec:8b:8b:d9:5b:1b:36:3b:41:9e:c8:
6a:f1:43:cc:e0:52:9f:81:85:a8:99:bb:7a:8a:f7:
89:8d:55:82:6a:32:59:04:2d:16:d7:96:95:f3:ea:
51:36:f7:37:4a:c2:e3:61:08:90:42:c5:06:f3:f2:
cf:2b:27:71:d6:b7:51:81:2e:eb:14:5a:b3:18:5d:
ff:86:ca:b3:54:00:65:aa:04:fd:56:78:a2:42:1b:
a4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A7:AA:A2:00:98:69:3A:F0:05:A9:B1:14:6F:61:15:2A:AE:6E:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1a7be2df-d2ca-3210-845e-fe2ae5891fc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
68.191.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:f6:a6:b2:ec:c8:0e:0c:ed:d2:bf:3d:b3:5b:71:2e:d8:07:
64:29:5b:85:f7:35:e6:c3:6b:89:6b:2b:c6:4c:ff:3d:14:0a:
aa:60:07:a1:b6:d9:73:06:dc:c1:5b:aa:ae:4d:af:8b:9c:33:
40:4a:9f:69:83:0e:e3:ea:f8:23:cc:61:b5:f9:69:c9:c1:99:
1f:76:5e:85:59:f5:76:07:23:58:e7:1e:2f:e5:c4:8c:f7:ab:
84:0c:e5:b9:6e:07:0d:6c:54:0d:c4:49:15:51:03:77:d4:54:
c4:b2:d0:ec:f6:0e:1b:75:f2:6e:f7:ef:53:59:78:db:f2:bf:
d2:8f:e8:62:84:ea:a2:6b:ec:ff:b5:f8:11:3b:68:7a:07:b9:
db:45:59:b7:6a:0d:4c:10:e7:74:7c:aa:b5:e5:4d:f2:a6:d7:
93:80:8a:b8:30:5b:27:2c:2d:ff:50:f2:7f:0e:ea:ed:97:9a:
18:b0:b5:f9:78:c9:54:1a:00:31:58:86:4f:6b:d3:a8:5b:f2:
ba:8e:91:23:32:3d:b8:52:22:f1:2b:68:17:ee:56:9a:c6:70:
a4:c1:50:4a:99:61:eb:48:11:dd:7d:57:36:58:48:91:f5:ed:
60:66:29:bf:3d:12:a0:76:a0:7c:57:23:82:fb:42:84:1f:52:
a6:f5:0e:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0X3AQxeKQL92lYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
NjczODUxNDMtMmJhOC00NjllLWI5Y2QtYzM4MDliZDliZjcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWcNjNh3Aj9iZIhcpimYdtbwQb5y+ijviT+h
w7TbB7bP4t3vd3FTTE2U+IPlZav7Y8E3FN9FfFq770Y56iPDgGY5+3IPlqtRzTGy
7HGtgdq19yOp9mO0aWNN3YoOLLqNSSML3W4fEpG3+NocMQD2fS1CUz3tUrL18Prs
Nt7rlauz2zDLN2U7SP2J7oF4qCGEcRU32qNdKIw6/bP+HLlt150zax4iM+YU7IuL
2VsbNjtBnshq8UPM4FKfgYWombt6iveJjVWCajJZBC0W15aV8+pRNvc3SsLjYQiQ
QsUG8/LPKydx1rdRgS7rFFqzGF3/hsqzVABlqgT9VniiQhukGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEanqqIAmGk68AWpsRRvYRUqrm6lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMWE3YmUyZGYtZDJjYS0z
MjEwLTg0NWUtZmUyYWU1ODkxZmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRL8gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABv2prLsyA4M7dK/PbNbcS7YB2QpW4X3NebDa4lrK8ZM/z0UCqpgB6G2
2XMG3MFbqq5Nr4ucM0BKn2mDDuPq+CPMYbX5acnBmR92XoVZ9XYHI1jnHi/lxIz3
q4QM5bluBw1sVA3ESRVRA3fUVMSy0Oz2Dht18m7371NZeNvyv9KP6GKE6qJr7P+1
+BE7aHoHudtFWbdqDUwQ53R8qrXlTfKm15OAirgwWycsLf9Q8n8O6u2Xmhiwtfl4
yVQaADFYhk9r06hb8rqOkSMyPbhSIvEraBfuVprGcKTBUEqZYetIEd19VzZYSJH1
7WBmKb89EqB2oHxXI4L7QoQfUqb1DlQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:08:13 2025 by rpki-client