Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4b68a65c-17e9-3599-96f6-0cf666da583e.roa
File: 4b68a65c-17e9-3599-96f6-0cf666da583e.roa (raw, json)
Hash identifier: zX+HPZh0/d09J4fGNQZwHcntX7jnabwDfA1BH5ROV8E=
Subject key identifier: DC:C4:BF:43:87:75:72:A9:65:97:1F:99:4D:B4:A4:06:9E:E3:0C:88
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D20FA2AE45B2EE6A946B80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4b68a65c-17e9-3599-96f6-0cf666da583e.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 97.88.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d2:0f:a2:ae:45:b2:ee:6a:94:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=3c10b4bb-a0ea-429a-9fbe-a93e2a3f0082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f3:02:16:e8:89:4d:57:99:70:9c:6d:cc:16:
fb:c7:af:cd:6c:ba:d9:cf:1f:bd:e6:6a:cc:08:30:
2a:9b:ff:b6:9c:90:fe:2b:74:12:19:c7:42:61:8c:
3d:d4:7d:01:fa:ce:62:b5:2e:a4:d2:67:c2:21:ea:
e1:ba:ce:6b:7d:b7:3c:4d:f1:e4:92:30:48:ed:13:
15:0a:b9:75:cc:ce:59:a4:89:65:59:5b:b0:1d:4e:
eb:91:ff:a3:39:c8:7a:80:dc:dd:70:67:87:26:5e:
92:9a:e0:05:0c:86:6f:ba:40:61:52:2c:9a:6d:08:
7e:e8:45:31:a5:cb:46:c8:37:00:a7:69:1b:39:7e:
3b:ec:fd:c1:1e:82:95:cb:16:86:e3:d1:fb:54:1e:
23:ba:d9:fa:89:ac:8b:de:ce:1c:08:a6:25:d8:ba:
56:1b:3a:ed:16:94:93:de:1b:75:b8:ac:63:43:0c:
d2:90:ed:c7:ce:74:a8:2a:21:1b:57:42:4e:66:46:
12:75:f2:24:48:e9:d5:27:90:bf:e0:7e:6a:b6:73:
b6:4b:7b:2e:ce:44:24:a5:32:d7:1c:90:97:7d:fe:
61:33:05:c4:65:7b:a0:ec:8d:a6:54:b8:47:a3:7e:
4f:39:1d:93:cc:71:83:a1:c2:14:9c:8f:a1:b4:d7:
ca:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C4:BF:43:87:75:72:A9:65:97:1F:99:4D:B4:A4:06:9E:E3:0C:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4b68a65c-17e9-3599-96f6-0cf666da583e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
97.88.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:dc:10:b4:d6:af:11:fa:01:d2:d7:19:96:0d:42:d8:e6:68:
4a:ee:39:85:79:ba:6d:3f:13:a5:20:5f:70:59:35:ff:eb:37:
de:bb:4d:7c:fc:43:61:df:ec:55:8c:5a:d2:dd:45:10:f2:21:
9f:58:31:ce:9f:35:7b:de:49:45:9e:79:8f:89:5c:79:d9:09:
d4:0f:35:44:9c:7b:60:b2:89:d6:5e:1c:24:62:d8:6e:eb:c7:
ce:bd:db:88:a2:23:e1:e5:32:7e:74:71:b4:32:75:fa:f7:22:
fd:06:91:dd:e8:02:26:a0:27:67:b7:08:ca:e9:e8:40:0b:b0:
9b:a8:28:03:06:f5:ee:eb:e7:8f:5c:da:23:34:7b:54:d0:34:
53:06:ff:2f:d1:11:fe:f9:67:f1:00:f5:e1:38:0d:c6:57:15:
45:a5:40:52:22:bd:0b:e3:f0:f7:17:b1:1d:57:01:f8:c3:e4:
62:d6:7f:ee:7d:74:31:70:fd:bd:54:e4:4f:9d:08:01:be:ab:
b3:29:32:a6:02:69:24:5c:a0:7d:8f:64:c9:36:05:93:5f:75:
2c:30:69:49:b2:17:1b:7a:41:e3:ae:af:eb:fc:f8:49:d6:22:
9d:5a:96:a6:52:38:0a:dd:29:0b:b9:c4:62:8c:b1:b8:42:19:
d9:8c:4f:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0g+irkWy7mqUa4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
M2MxMGI0YmItYTBlYS00MjlhLTlmYmUtYTkzZTJhM2YwMDgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofMCFuiJTVeZcJxtzBb7x6/NbLrZzx+95mrM
CDAqm/+2nJD+K3QSGcdCYYw91H0B+s5itS6k0mfCIerhus5rfbc8TfHkkjBI7RMV
Crl1zM5ZpIllWVuwHU7rkf+jOch6gNzdcGeHJl6SmuAFDIZvukBhUiyabQh+6EUx
pctGyDcAp2kbOX477P3BHoKVyxaG49H7VB4jutn6iayL3s4cCKYl2LpWGzrtFpST
3ht1uKxjQwzSkO3HznSoKiEbV0JOZkYSdfIkSOnVJ5C/4H5qtnO2S3suzkQkpTLX
HJCXff5hMwXEZXug7I2mVLhHo35POR2TzHGDocIUnI+htNfKHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNzEv0OHdXKpZZcfmU20pAae4wyIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNGI2OGE2NWMtMTdlOS0z
NTk5LTk2ZjYtMGNmNjY2ZGE1ODNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYVjgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALHcELTWrxH6AdLXGZYNQtjmaEruOYV5um0/E6UgX3BZNf/rN967TXz8
Q2Hf7FWMWtLdRRDyIZ9YMc6fNXveSUWeeY+JXHnZCdQPNUSce2CyidZeHCRi2G7r
x86924iiI+HlMn50cbQydfr3Iv0Gkd3oAiagJ2e3CMrp6EALsJuoKAMG9e7r549c
2iM0e1TQNFMG/y/REf75Z/EA9eE4DcZXFUWlQFIivQvj8PcXsR1XAfjD5GLWf+59
dDFw/b1U5E+dCAG+q7MpMqYCaSRcoH2PZMk2BZNfdSwwaUmyFxt6QeOur+v8+EnW
Ip1alqZSOArdKQu5xGKMsbhCGdmMT1w=
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:58:14 2025 by rpki-client