Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/628b6158-a17d-3d6e-8752-71761eeb9967.roa
File: 628b6158-a17d-3d6e-8752-71761eeb9967.roa (raw, json)
Hash identifier: KP4tyUp1fSKgdqkuDtXDHnA6UQUo7cE7j+UlZNSnos4=
Subject key identifier: B2:76:87:38:A5:1F:C1:7F:A8:85:0F:41:BE:26:87:62:61:AD:E8:2A
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D17450A5697E962A58F040
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/628b6158-a17d-3d6e-8752-71761eeb9967.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 47.44.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:74:50:a5:69:7e:96:2a:58:f0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=4a1b72f5-0529-4f5f-94e9-5ccba3b8c656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d0:3e:d8:76:ba:03:ac:94:aa:c3:6c:fd:fb:
7c:9f:f6:ba:94:58:ad:93:5d:6d:46:0e:9b:6c:49:
31:8f:6a:76:a4:02:55:14:4d:7c:55:f2:94:f5:45:
4a:bc:b2:c6:a8:62:f8:5a:d8:be:8e:cd:87:de:1f:
82:af:6f:75:b7:ed:17:ba:4d:fb:80:fc:75:6c:0f:
ad:48:fb:bb:31:08:4f:80:f2:ad:b8:5f:85:17:d9:
81:46:e7:8e:25:82:a5:96:4e:b0:82:ae:12:ab:c1:
4d:eb:e7:d7:8f:f1:cf:9b:9b:c3:5d:05:6a:ac:8c:
ee:3f:8d:bd:d2:09:2c:22:ca:fd:9a:08:b9:13:41:
3c:60:e4:0b:4f:bd:54:2b:a5:fc:b8:07:4b:d6:f3:
84:90:48:c1:4f:f6:0d:a5:4c:0b:97:5a:81:13:b1:
d6:50:68:ea:ab:8f:68:4a:7f:f7:23:46:cb:bd:b5:
6d:89:6c:72:45:74:ee:ed:40:04:73:c0:b6:f3:40:
7e:96:c5:d4:73:fa:ca:ef:6a:04:53:7f:ed:c3:38:
93:2c:66:5e:52:c3:b7:24:33:59:b4:60:8b:8f:c2:
62:32:f7:90:a9:0c:a9:cc:65:85:d0:35:dc:e1:7a:
c6:af:9e:20:8e:a8:87:20:1b:24:4e:54:7a:df:43:
fb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:76:87:38:A5:1F:C1:7F:A8:85:0F:41:BE:26:87:62:61:AD:E8:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/628b6158-a17d-3d6e-8752-71761eeb9967.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
47.44.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:35:41:51:63:e2:08:86:31:db:77:9f:52:ad:89:42:d1:f1:
5c:c5:ba:32:60:79:de:8f:ec:9a:89:2e:24:f7:f6:bb:f7:8a:
75:4d:55:27:c3:8f:e8:83:2f:83:1f:04:46:8c:90:ce:b6:e7:
3e:30:fb:76:0f:8e:45:dd:ad:28:f1:38:29:37:8e:e4:52:5a:
85:7d:94:dd:39:1a:48:79:48:7c:50:0a:0b:b4:8c:ee:47:c4:
b1:03:11:65:05:67:98:04:ce:a0:22:53:c6:e0:f0:b0:8c:80:
a7:81:30:db:a6:3c:02:79:75:c7:93:d2:4a:16:8f:0d:cc:9e:
57:7d:9b:72:c9:f1:87:14:2f:d7:f5:7d:16:a0:e5:3b:4d:32:
bb:fb:36:3a:be:ce:1c:42:97:97:5e:cd:2a:a5:78:d2:4c:cb:
5f:6e:ab:92:81:6b:b2:50:78:9a:9d:42:a5:ce:af:18:a8:54:
7e:1e:48:c3:c6:2c:1b:b6:67:dc:f8:63:29:1b:9a:3c:dd:40:
91:71:07:e4:6c:ae:cb:2e:2d:5b:5a:39:18:7f:27:28:8b:e6:
71:f8:4a:36:b2:76:36:19:c2:4b:b9:4d:b0:51:6f:45:40:5d:
8a:bc:e8:b6:92:f7:66:fb:d4:c5:c0:36:f1:60:85:db:69:40:
fa:50:f7:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0XRQpWl+lipY8EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
NGExYjcyZjUtMDUyOS00ZjVmLTk0ZTktNWNjYmEzYjhjNjU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNA+2Ha6A6yUqsNs/ft8n/a6lFitk11tRg6b
bEkxj2p2pAJVFE18VfKU9UVKvLLGqGL4Wti+js2H3h+Cr291t+0Xuk37gPx1bA+t
SPu7MQhPgPKtuF+FF9mBRueOJYKllk6wgq4Sq8FN6+fXj/HPm5vDXQVqrIzuP429
0gksIsr9mgi5E0E8YOQLT71UK6X8uAdL1vOEkEjBT/YNpUwLl1qBE7HWUGjqq49o
Sn/3I0bLvbVtiWxyRXTu7UAEc8C280B+lsXUc/rK72oEU3/twziTLGZeUsO3JDNZ
tGCLj8JiMveQqQypzGWF0DXc4XrGr54gjqiHIBskTlR630P7awIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLJ2hzilH8F/qIUPQb4mh2JhregqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNjI4YjYxNTgtYTE3ZC0z
ZDZlLTg3NTItNzE3NjFlZWI5OTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLyyAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIs1QVFj4giGMdt3n1KtiULR8VzFujJged6P7JqJLiT39rv3inVNVSfD
j+iDL4MfBEaMkM625z4w+3YPjkXdrSjxOCk3juRSWoV9lN05Gkh5SHxQCgu0jO5H
xLEDEWUFZ5gEzqAiU8bg8LCMgKeBMNumPAJ5dceT0koWjw3Mnld9m3LJ8YcUL9f1
fRag5TtNMrv7Njq+zhxCl5dezSqleNJMy19uq5KBa7JQeJqdQqXOrxioVH4eSMPG
LBu2Z9z4YykbmjzdQJFxB+RsrssuLVtaORh/JyiL5nH4SjaydjYZwku5TbBRb0VA
XYq86LaS92b71MXANvFghdtpQPpQ95Y=
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:23:22 2025 by rpki-client