Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/2eff86d5-4a1d-30f9-aea6-6fa923db9776.roa
File: 2eff86d5-4a1d-30f9-aea6-6fa923db9776.roa (raw, json)
Hash identifier: gWb5eASgU+doHkfbAYc6iVSbIf0FW9LsEmnTbCAXack=
Subject key identifier: DB:16:0B:2F:A1:8B:7F:10:1B:3D:16:E8:F2:8A:8A:C9:2B:B5:A6:A9
Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial: 010D0C9F432858491ED6E7D8A9E773A8E1A54130
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/2eff86d5-4a1d-30f9-aea6-6fa923db9776.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 140952
IP address blocks: 64.145.90.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:e7:d8:a9:e7:73:a8:e1:a5:41:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=1fedb95f-59ee-4c20-a111-79c847dd4524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b5:86:e4:71:7b:1a:f4:bd:6c:ad:a9:ed:1a:
bd:3f:fc:d4:73:cc:b2:86:f3:d7:6b:ba:26:03:27:
e7:53:b6:a8:fc:19:ae:0e:71:f9:e3:18:28:64:df:
29:38:16:0c:98:3a:0a:d4:4c:3c:4c:38:17:14:74:
a9:b4:f9:bd:fa:6d:da:19:34:63:d9:7f:d9:4e:24:
ef:1b:77:86:2c:f7:ea:e7:57:27:e7:76:64:0d:37:
72:fe:40:0a:a5:53:37:15:a8:35:ef:c3:a8:29:69:
6b:d1:46:27:c4:82:b1:36:16:63:b1:08:a6:ab:99:
d2:bb:74:8a:85:ce:f7:84:9b:f7:38:93:d8:7e:60:
f6:71:6e:52:4a:c1:ee:c3:2c:d4:b3:3a:2b:f2:e3:
d0:0c:3a:28:91:33:b2:10:1f:58:fd:79:5c:f2:2f:
e1:e4:22:01:a6:df:bf:98:8e:e6:d5:b9:4e:89:8d:
70:47:fb:62:37:a2:38:66:82:6c:88:d2:56:f6:a8:
c7:cd:7b:0d:1e:0b:40:76:63:69:5e:13:97:57:bf:
d6:99:88:c0:8d:b2:4f:82:79:54:1d:f9:83:f1:1c:
18:29:ff:6c:53:34:6b:78:7f:86:3d:f9:d4:a1:41:
c0:fb:9d:86:4a:b7:b9:7a:c0:85:d5:13:d9:79:3d:
72:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:16:0B:2F:A1:8B:7F:10:1B:3D:16:E8:F2:8A:8A:C9:2B:B5:A6:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/2eff86d5-4a1d-30f9-aea6-6fa923db9776.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
X509v3 Authority Key Identifier:
keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.145.90.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:61:79:4f:67:28:f4:08:54:bc:05:e0:f0:e4:26:9e:b1:07:
89:10:66:c8:86:0a:d3:10:94:10:d9:86:f5:2d:dc:b0:0c:96:
dc:93:b9:29:9b:59:c2:0f:f3:76:47:af:f7:46:fc:16:0a:ae:
4b:93:94:d4:6e:d7:90:18:f3:48:34:02:95:89:fc:4f:82:44:
a7:c8:6b:21:b1:af:5d:87:2b:df:66:2f:8d:9b:8a:b4:a8:a5:
9e:74:9f:89:74:bf:bb:97:5e:eb:3b:02:8d:57:45:db:2b:dd:
85:00:fb:03:15:d8:d7:4e:b7:20:59:6a:a8:68:bf:cd:f8:bb:
34:65:df:38:42:d0:50:01:82:ab:a4:cf:04:69:2a:44:35:3d:
63:93:06:eb:63:02:13:a9:bc:34:d8:12:bc:8d:c6:43:de:04:
63:97:43:c6:fc:50:94:ba:40:40:d1:4c:86:fd:76:0f:2e:91:
c0:47:1c:80:d7:51:15:57:f9:9a:f9:c4:a5:96:e7:9e:34:dc:
fe:c0:fc:ce:35:11:f7:18:9a:5b:5b:12:47:96:c3:f9:3f:3a:
8d:53:55:8a:e8:d8:b0:e9:79:3a:07:37:cc:19:a0:60:17:d2:
0d:fd:9e:b5:77:50:b7:e9:44:f1:36:da:99:3b:50:90:b7:6c:
a3:48:14:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1ufYqedzqOGlQTAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz
OGFhMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk
MWZlZGI5NWYtNTllZS00YzIwLWExMTEtNzljODQ3ZGQ0NTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbWG5HF7GvS9bK2p7Rq9P/zUc8yyhvPXa7om
AyfnU7ao/BmuDnH54xgoZN8pOBYMmDoK1Ew8TDgXFHSptPm9+m3aGTRj2X/ZTiTv
G3eGLPfq51cn53ZkDTdy/kAKpVM3Fag178OoKWlr0UYnxIKxNhZjsQimq5nSu3SK
hc73hJv3OJPYfmD2cW5SSsHuwyzUszor8uPQDDookTOyEB9Y/Xlc8i/h5CIBpt+/
mI7m1blOiY1wR/tiN6I4ZoJsiNJW9qjHzXsNHgtAdmNpXhOXV7/WmYjAjbJPgnlU
HfmD8RwYKf9sUzRreH+GPfnUoUHA+52GSre5esCF1RPZeT1yAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNsWCy+hi38QGz0W6PKKiskrtaapMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk
MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvMmVmZjg2ZDUtNGExZC0z
MGY5LWFlYTYtNmZhOTIzZGI5Nzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2
ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy
MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4
ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQJFaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFhheU9nKPQIVLwF4PDkJp6xB4kQZsiGCtMQlBDZhvUt3LAMltyTuSmb
WcIP83ZHr/dG/BYKrkuTlNRu15AY80g0ApWJ/E+CRKfIayGxr12HK99mL42birSo
pZ50n4l0v7uXXus7Ao1XRdsr3YUA+wMV2NdOtyBZaqhov834uzRl3zhC0FABgquk
zwRpKkQ1PWOTButjAhOpvDTYEryNxkPeBGOXQ8b8UJS6QEDRTIb9dg8ukcBHHIDX
URVX+Zr5xKWW55403P7A/M41EfcYmltbEkeWw/k/Oo1TVYro2LDpeToHN8wZoGAX
0g39nrV3ULfpRPE22pk7UJC3bKNIFMk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:10:34 2025 by rpki-client