Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f567321e-eaf9-3923-9e4f-0237a9ab8f2a.roa
File: f567321e-eaf9-3923-9e4f-0237a9ab8f2a.roa (raw, json)
Hash identifier: C4CHrdaZJQjplNjjcuQIBPVfpXwg027jwzKdVXzxc2Y=
Subject key identifier: B2:E7:C1:AF:99:5E:09:98:EC:DE:BB:BD:51:BB:A4:FC:A0:42:9B:D1
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D189F68724327109308000
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f567321e-eaf9-3923-9e4f-0237a9ab8f2a.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 97.86.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:89:f6:87:24:32:71:09:30:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=44bcbb02-4bc1-4b6c-b1a5-eabb0ef742ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e7:1f:41:69:79:04:61:90:b3:b5:ec:86:1c:
32:34:a3:2a:8c:10:d3:58:af:f1:14:b2:e8:3e:6d:
48:5d:1f:70:20:d5:85:18:ee:30:1e:14:3f:ff:72:
32:e3:02:ce:93:dd:e8:65:53:cf:da:28:7a:f4:37:
a8:fb:c6:90:a0:e6:f1:d4:b0:00:22:f7:c2:8a:2a:
de:1d:0c:ed:fb:be:14:ba:e8:80:19:53:a0:58:1c:
10:d9:88:7b:83:79:93:19:0f:aa:79:37:c0:51:dd:
c9:55:9a:c5:e7:60:7d:e9:5b:7a:6e:45:1a:2e:15:
25:b3:e8:a5:20:d0:38:7b:60:e3:89:ed:67:a0:b3:
71:b3:eb:36:49:31:27:f3:04:b4:26:de:39:a9:5b:
c4:b6:f0:52:8b:e1:11:0b:e9:e3:18:63:0a:bf:2a:
d8:57:54:b3:8a:1f:36:13:de:28:ef:f4:6f:77:3a:
af:62:47:df:9b:b4:be:d9:85:e5:e5:21:91:8f:20:
89:67:59:f2:83:57:0c:73:4b:52:27:85:9c:41:4d:
4a:e4:7e:5c:c0:45:6e:44:c4:2d:be:0f:c3:0d:c7:
6b:04:2c:25:d2:10:f5:4b:75:ae:1b:96:93:d1:84:
19:14:c9:df:b5:f6:23:e2:ed:b0:d7:53:16:ce:8e:
b6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E7:C1:AF:99:5E:09:98:EC:DE:BB:BD:51:BB:A4:FC:A0:42:9B:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f567321e-eaf9-3923-9e4f-0237a9ab8f2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
97.86.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:f1:d1:6b:d9:50:75:d8:f6:3b:ef:4e:46:38:f3:d5:17:9d:
ca:4c:c9:86:23:82:e9:1a:71:09:b1:06:6b:be:68:a5:87:81:
aa:cf:01:03:f3:95:bd:a1:b6:81:5c:45:5d:6f:1f:78:20:44:
ac:6c:ea:0d:13:f8:c5:33:dd:25:89:74:78:33:a5:99:73:f0:
f3:51:37:26:cf:7a:8d:e0:94:69:b3:cf:0a:63:ff:13:25:7f:
fd:22:f8:f4:d5:46:0d:0d:df:dc:de:32:b4:69:ff:a3:d3:10:
af:02:5a:c4:a1:09:63:0e:02:cb:fc:a4:0c:87:0a:35:38:3a:
f3:6b:aa:40:aa:95:be:3f:ee:49:ac:41:99:a6:c2:2a:38:3a:
0b:18:0f:43:db:c4:46:bc:ef:9d:8b:9e:fa:a1:17:76:ca:fd:
8e:b1:d3:55:8a:16:ed:c2:7b:87:43:b0:d0:7d:3a:d1:d1:c2:
a3:19:17:1f:09:8a:15:b1:25:a5:1e:aa:e3:95:2a:47:24:1f:
b3:7a:b6:77:15:dd:b8:57:2d:ac:af:82:a3:4e:a9:9c:8c:fd:
5a:46:f0:9b:16:76:58:01:19:3c:e8:b7:85:a6:5f:3b:65:a1:
64:6b:7c:03:47:08:00:ba:c1:93:a7:cf:1a:aa:9c:19:89:01:
d3:ad:ee:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0Yn2hyQycQkwgAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
NDRiY2JiMDItNGJjMS00YjZjLWIxYTUtZWFiYjBlZjc0MmVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OcfQWl5BGGQs7XshhwyNKMqjBDTWK/xFLLo
Pm1IXR9wINWFGO4wHhQ//3Iy4wLOk93oZVPP2ih69Deo+8aQoObx1LAAIvfCiire
HQzt+74UuuiAGVOgWBwQ2Yh7g3mTGQ+qeTfAUd3JVZrF52B96Vt6bkUaLhUls+il
INA4e2Djie1noLNxs+s2STEn8wS0Jt45qVvEtvBSi+ERC+njGGMKvyrYV1Szih82
E94o7/RvdzqvYkffm7S+2YXl5SGRjyCJZ1nyg1cMc0tSJ4WcQU1K5H5cwEVuRMQt
vg/DDcdrBCwl0hD1S3WuG5aT0YQZFMnftfYj4u2w11MWzo62PQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLLnwa+ZXgmY7N67vVG7pPygQpvRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZjU2NzMyMWUtZWFmOS0z
OTIzLTllNGYtMDIzN2E5YWI4ZjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYVarMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGjx0WvZUHXY9jvvTkY489UXncpMyYYjgukacQmxBmu+aKWHgarPAQPz
lb2htoFcRV1vH3ggRKxs6g0T+MUz3SWJdHgzpZlz8PNRNybPeo3glGmzzwpj/xMl
f/0i+PTVRg0N39zeMrRp/6PTEK8CWsShCWMOAsv8pAyHCjU4OvNrqkCqlb4/7kms
QZmmwio4OgsYD0PbxEa8752LnvqhF3bK/Y6x01WKFu3Ce4dDsNB9OtHRwqMZFx8J
ihWxJaUequOVKkckH7N6tncV3bhXLayvgqNOqZyM/VpG8JsWdlgBGTzot4WmXztl
oWRrfANHCAC6wZOnzxqqnBmJAdOt7oc=
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:42:44 2025 by rpki-client