Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/5fa0521b-a1e5-3ac5-9554-724b61c72923.roa
File: 5fa0521b-a1e5-3ac5-9554-724b61c72923.roa (raw, json)
Hash identifier: 2woLobunmdmWDPDQGINNs/8e7GTNLR6uzSUxhNqC0Jw=
Subject key identifier: AE:04:CE:9B:49:7B:F1:BE:62:9F:53:E9:4C:98:67:D8:77:97:33:72
Certificate issuer: /CN=928cccc8-4c1d-457b-a709-2f2c5d83c939
Certificate serial: 010D0C9F43285848FD56B61650C7F6F5123CF718
Authority key identifier: E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/5fa0521b-a1e5-3ac5-9554-724b61c72923.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 16509
IP address blocks: 67.226.220.0/24 maxlen: 24
67.226.222.0/24 maxlen: 24
204.110.221.0/24 maxlen: 24
204.110.222.0/24 maxlen: 24
204.110.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:b6:16:50:c7:f6:f5:12:3c:f7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=928cccc8-4c1d-457b-a709-2f2c5d83c939
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=5da24a2f-7d68-4eee-a675-21938acaf331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:96:47:85:b3:e6:2f:43:47:b3:f9:95:b8:87:
47:3a:41:d2:96:41:31:e3:e2:5e:dc:ae:92:f9:3b:
c2:30:09:61:a9:4e:5f:08:5f:dc:51:76:60:ff:a7:
c0:bd:37:00:b9:6f:4e:40:d8:2d:fa:39:cb:20:dd:
b3:14:12:cc:e6:30:10:b0:0c:73:88:47:42:9f:80:
e0:86:63:78:15:5c:5d:84:55:92:19:01:9e:52:da:
a8:1a:e1:9c:df:7f:bc:3b:41:71:78:f0:3c:90:06:
b6:71:77:bf:14:5f:2d:fb:e7:eb:ae:77:5b:0e:36:
eb:17:8b:38:6f:9b:f1:98:3c:b9:3f:38:66:41:dd:
f7:7d:83:af:56:d8:4e:51:76:7d:33:9d:38:6a:8f:
62:1d:be:dd:2b:9b:58:2f:d1:56:1d:4d:3f:2c:c3:
a3:6b:8d:1f:a9:a4:b0:bb:0c:50:e4:e8:74:4c:c8:
f9:7a:b3:b2:dd:42:7e:6a:e6:6e:60:6f:be:53:05:
8f:d5:58:33:8b:ce:e4:86:c0:e4:f5:60:62:1a:5b:
ec:58:fb:bc:62:d8:7f:b1:48:3e:1c:17:39:03:17:
fb:81:d4:28:fb:19:f8:af:7c:1e:1b:4e:b7:74:0e:
d3:a0:a0:30:48:b2:84:d3:23:2c:24:82:64:59:4f:
ca:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:04:CE:9B:49:7B:F1:BE:62:9F:53:E9:4C:98:67:D8:77:97:33:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/5fa0521b-a1e5-3ac5-9554-724b61c72923.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl
X509v3 Authority Key Identifier:
keyid:E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer
sbgp-ipAddrBlock: critical
IPv4:
67.226.220.0/24
67.226.222.0/24
204.110.221.0-204.110.223.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:7f:31:bc:78:51:ab:a8:6e:9b:fa:e8:a8:2d:5d:da:c2:9b:
98:2a:84:d5:f8:28:9c:5c:cc:fb:70:3d:2e:b2:a1:07:5f:18:
30:ac:61:41:30:b8:59:2c:69:64:04:54:f7:88:a6:60:03:15:
64:e6:92:af:d3:9b:93:87:50:02:da:0a:b1:f5:be:f6:9e:b2:
b5:f2:97:87:99:bd:97:c4:82:41:df:fc:38:18:17:1d:42:7f:
ce:92:3f:6d:7f:03:f9:64:13:92:86:c7:66:15:f0:95:93:ea:
d4:75:d7:08:bb:f9:2a:6e:4d:12:9f:a5:48:35:8f:cb:7e:01:
61:97:93:a0:5b:52:a5:1e:75:60:b2:b6:be:6b:5e:60:99:ba:
b1:d0:53:11:a2:17:5c:80:f4:8a:75:ed:d4:99:21:06:18:8e:
bf:ac:3e:34:50:48:be:6a:8d:27:70:ab:3d:d6:45:d8:f2:99:
2a:df:b8:31:b1:39:be:f6:74:8c:27:ae:22:5e:42:a6:fa:15:
b1:1e:1d:23:85:72:02:89:f7:38:a8:92:d7:02:00:b3:bd:3c:
b9:b2:10:95:c4:fd:b1:ff:f8:29:4d:de:15:ab:24:fb:cc:92:
6d:ce:64:db:1f:38:99:08:e7:67:b4:a1:82:00:81:58:15:a6:
44:76:42:62
-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEj9VrYWUMf29RI89xgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI4Y2NjYzgtNGMxZC00NTdiLWE3MDktMmYyYzVkODNj
OTM5MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk
NWRhMjRhMmYtN2Q2OC00ZWVlLWE2NzUtMjE5MzhhY2FmMzMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45ZHhbPmL0NHs/mVuIdHOkHSlkEx4+Je3K6S
+TvCMAlhqU5fCF/cUXZg/6fAvTcAuW9OQNgt+jnLIN2zFBLM5jAQsAxziEdCn4Dg
hmN4FVxdhFWSGQGeUtqoGuGc33+8O0FxePA8kAa2cXe/FF8t++frrndbDjbrF4s4
b5vxmDy5PzhmQd33fYOvVthOUXZ9M504ao9iHb7dK5tYL9FWHU0/LMOja40fqaSw
uwxQ5Oh0TMj5erOy3UJ+auZuYG++UwWP1Vgzi87khsDk9WBiGlvsWPu8Yth/sUg+
HBc5Axf7gdQo+xn4r3weG063dA7ToKAwSLKE0yMsJIJkWU/K7wIDAQABo4IDaTCC
A2UwHQYDVR0OBBYEFK4EzptJe/G+Yp9T6UyYZ9h3lzNyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85Mjhj
Y2NjOC00YzFkLTQ1N2ItYTcwOS0yZjJjNWQ4M2M5MzkvNWZhMDUyMWItYTFlNS0z
YWM1LTk1NTQtNzI0YjYxYzcyOTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTI4Y2NjYzgtNGMxZC00NTdiLWE3
MDktMmYyYzVkODNjOTM5LzkyOGNjY2M4LTRjMWQtNDU3Yi1hNzA5LTJmMmM1ZDgz
YzkzOS5jcmwwHwYDVR0jBBgwFoAU50jP7N+pFw+ueUr7PjNtsErFiKgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MjhjY2NjOC00YzFkLTQ1N2ItYTcwOS0yZjJj
NWQ4M2M5MzkuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAQ+LcAwQA
Q+LeMAwDBADMbt0DBAXMbsAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUX8xvHhRq6hum/roqC1d2sKbmCqE
1fgonFzM+3A9LrKhB18YMKxhQTC4WSxpZARU94imYAMVZOaSr9Obk4dQAtoKsfW+
9p6ytfKXh5m9l8SCQd/8OBgXHUJ/zpI/bX8D+WQTkobHZhXwlZPq1HXXCLv5Km5N
Ep+lSDWPy34BYZeToFtSpR51YLK2vmteYJm6sdBTEaIXXID0inXt1JkhBhiOv6w+
NFBIvmqNJ3CrPdZF2PKZKt+4MbE5vvZ0jCeuIl5CpvoVsR4dI4VyAon3OKiS1wIA
s708ubIQlcT9sf/4KU3eFask+8ySbc5k2x84mQjnZ7ShggCBWBWmRHZCYg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:00:22 2025 by rpki-client