Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5deb69a1-fca8-3338-98a9-dd8794670819.roa
File: 5deb69a1-fca8-3338-98a9-dd8794670819.roa (raw, json)
Hash identifier: To0aH81j1kXhB9BOx86D0MVakA5XmmaMIxOjrELBWXw=
Subject key identifier: 65:BE:CB:0E:C1:B5:73:E9:56:5F:3D:6E:33:D0:22:57:A8:E7:92:B1
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D1E855436B541F22B0D020
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5deb69a1-fca8-3338-98a9-dd8794670819.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 71.81.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:e8:55:43:6b:54:1f:22:b0:d0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=e483139b-293e-40bb-8548-fecc040128bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:48:5b:b1:9b:f3:12:94:89:96:7c:0d:13:0d:
7a:a1:d5:e1:74:2b:a9:2a:55:5a:f4:05:0e:e3:61:
2e:b7:e6:3f:ac:8b:64:22:84:5e:d4:31:cd:59:ed:
b4:12:a9:f8:c8:f9:f4:86:70:d3:7b:ad:88:ef:29:
f8:b1:77:d3:cb:1f:97:84:d0:91:1e:51:7e:23:f8:
06:3a:14:4c:ad:8c:f5:08:13:96:e2:a8:e5:ba:3d:
1c:f7:4e:02:5e:61:14:58:79:16:03:54:6f:16:b7:
32:ae:ee:de:aa:6b:46:c0:7d:1b:90:a1:8e:12:05:
4b:37:f8:08:70:5e:ad:10:15:ba:9b:27:39:68:9a:
37:d1:0e:25:bd:8f:d1:e8:9a:1e:74:8c:4f:a3:87:
18:32:20:c7:d0:9e:74:97:8d:c4:c7:c8:47:04:da:
cb:79:35:47:86:a7:12:34:a1:e8:08:b3:06:d0:25:
9e:91:50:cb:55:de:f5:fc:0e:ca:92:a5:86:2b:24:
7b:c5:16:20:ed:2c:ad:e2:25:5c:ca:aa:3a:06:42:
bc:a7:a0:65:5d:82:fd:d6:c4:d5:e2:c2:f9:00:a2:
c1:3e:3e:6c:a8:2a:a5:1f:e9:37:20:b0:15:a9:cc:
ec:c8:20:f1:21:1b:06:a1:13:c6:16:8a:b7:b8:d9:
4a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BE:CB:0E:C1:B5:73:E9:56:5F:3D:6E:33:D0:22:57:A8:E7:92:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/5deb69a1-fca8-3338-98a9-dd8794670819.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.81.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:8f:67:3f:66:31:18:cc:cb:57:c7:fb:90:c3:45:8f:08:d8:
b7:b9:3d:8a:b6:ba:71:5d:49:ef:da:03:d9:6c:87:f0:0b:c7:
0a:c6:fe:f8:a7:52:f9:53:de:62:28:63:c8:c6:a3:e2:fa:62:
76:b8:da:37:ce:e8:ba:88:3f:ed:9d:68:35:c6:c0:e0:ef:a0:
ee:1b:b2:67:1b:06:3e:c2:b1:b5:ec:e6:32:f8:80:cb:d8:fc:
ec:cc:ee:28:29:28:e2:c3:08:ad:ed:f1:13:fa:93:07:45:89:
64:ce:28:2f:5c:86:20:85:78:62:28:76:89:95:f5:05:96:4f:
b2:0c:3f:8e:77:d3:b9:48:69:1a:81:b3:15:96:65:59:ee:3e:
bb:92:64:24:db:b9:ba:65:f4:de:62:14:45:af:5f:52:10:83:
1d:c0:54:5f:16:3d:b1:14:75:e2:5d:50:78:bb:df:f8:89:5e:
c0:1e:91:09:b4:54:af:21:b4:3e:6c:90:b6:dc:de:ac:a3:e2:
dc:f5:d5:66:96:03:65:a2:f0:fb:aa:85:50:cf:4e:bd:7f:d0:
ed:4b:46:9a:1d:41:22:cf:5c:5b:7f:e6:a8:78:49:1a:3d:f8:
39:ec:3e:bd:02:8a:37:67:c7:23:53:f9:58:2a:f5:13:6f:20:
a9:a1:36:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0ehVQ2tUHyKw0CAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
ZTQ4MzEzOWItMjkzZS00MGJiLTg1NDgtZmVjYzA0MDEyOGJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUhbsZvzEpSJlnwNEw16odXhdCupKlVa9AUO
42Eut+Y/rItkIoRe1DHNWe20Eqn4yPn0hnDTe62I7yn4sXfTyx+XhNCRHlF+I/gG
OhRMrYz1CBOW4qjluj0c904CXmEUWHkWA1RvFrcyru7eqmtGwH0bkKGOEgVLN/gI
cF6tEBW6myc5aJo30Q4lvY/R6JoedIxPo4cYMiDH0J50l43Ex8hHBNrLeTVHhqcS
NKHoCLMG0CWekVDLVd71/A7KkqWGKyR7xRYg7Syt4iVcyqo6BkK8p6BlXYL91sTV
4sL5AKLBPj5sqCqlH+k3ILAVqczsyCDxIRsGoRPGFoq3uNlKZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGW+yw7BtXPpVl89bjPQIleo55KxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNWRlYjY5YTEtZmNhOC0z
MzM4LTk4YTktZGQ4Nzk0NjcwODE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR1EAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKKPZz9mMRjMy1fH+5DDRY8I2Le5PYq2unFdSe/aA9lsh/ALxwrG/vin
UvlT3mIoY8jGo+L6Yna42jfO6LqIP+2daDXGwODvoO4bsmcbBj7CsbXs5jL4gMvY
/OzM7igpKOLDCK3t8RP6kwdFiWTOKC9chiCFeGIodomV9QWWT7IMP45307lIaRqB
sxWWZVnuPruSZCTbubpl9N5iFEWvX1IQgx3AVF8WPbEUdeJdUHi73/iJXsAekQm0
VK8htD5skLbc3qyj4tz11WaWA2Wi8PuqhVDPTr1/0O1LRpodQSLPXFt/5qh4SRo9
+DnsPr0CijdnxyNT+Vgq9RNvIKmhNno=
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:10:32 2025 by rpki-client