Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ae610f6a-2d74-3aa2-8cd5-a3505e492462.roa
File: ae610f6a-2d74-3aa2-8cd5-a3505e492462.roa (raw, json)
Hash identifier: R3xBFgl7PufLxOVzFHpCVs9h07dWLoed3mFsztncMbE=
Subject key identifier: 0B:8A:18:52:11:6D:8F:E9:38:8E:6C:3A:37:0A:F7:E7:0E:DC:67:C5
Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial: 010D0C9F43285848D7A648C55704ED28ED84E980
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ae610f6a-2d74-3aa2-8cd5-a3505e492462.roa
Signing time: Tue 11 Feb 2025 02:00:39 +0000
ROA not before: Tue 11 Feb 2025 02:00:39 +0000
ROA not after: Mon 12 May 2025 01:00:39 +0000
asID: 396253
IP address blocks: 97.64.56.0/22 maxlen: 22
104.225.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d7:a6:48:c5:57:04:ed:28:ed:84:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Validity
Not Before: Feb 11 02:00:39 2025 GMT
Not After : May 12 01:00:39 2025 GMT
Subject: CN=2f0884c2-aee4-4d2f-97c2-3c8360b6b830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c2:68:29:c0:22:78:3e:69:c0:3d:ea:01:15:
26:a3:df:6d:ac:84:76:c9:a7:3d:55:c2:d6:13:0d:
b1:ae:c4:99:08:27:21:61:e5:7a:7a:4b:b0:4b:35:
28:18:c8:91:ca:16:29:5e:48:e3:ce:08:cb:7b:6e:
c6:0f:a0:06:0c:b1:f4:ab:4b:3d:a9:da:78:51:8b:
15:13:ad:a3:39:c5:21:30:ee:53:57:7b:a1:d9:fe:
59:23:3f:00:6e:d2:a1:35:0f:65:3a:7d:4f:39:ac:
d9:e9:79:d4:fc:b4:a4:f1:27:0c:81:50:80:9a:9a:
81:5c:ee:3e:5a:64:be:93:cf:d0:e2:dd:2a:a8:ac:
c2:29:b3:4b:70:08:1f:37:7f:bd:2c:cd:b1:e7:84:
0f:60:f0:d1:5f:57:ce:8b:28:30:eb:c0:88:51:76:
3e:ef:ba:9a:7c:a8:de:30:7b:7a:14:f0:41:87:54:
15:6a:3f:5b:4c:ca:51:f5:f5:df:bf:4e:0f:3d:b2:
38:67:9d:b6:d5:fd:fd:53:ad:7a:9a:f2:a6:77:0f:
af:dc:0f:06:64:cd:93:d1:f4:2c:82:5a:4e:c8:ca:
98:85:57:c9:68:8b:5c:85:84:6c:25:46:be:7d:8a:
eb:0b:27:ce:b4:15:4f:81:0a:c5:00:6c:41:20:71:
f7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8A:18:52:11:6D:8F:E9:38:8E:6C:3A:37:0A:F7:E7:0E:DC:67:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/ae610f6a-2d74-3aa2-8cd5-a3505e492462.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
X509v3 Authority Key Identifier:
keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
sbgp-ipAddrBlock: critical
IPv4:
97.64.56.0/22
104.225.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:77:a2:23:8c:d7:f0:8d:11:08:96:aa:d1:b2:ef:a1:fb:a4:
32:98:0e:81:9c:3e:37:d9:b4:81:0b:28:bd:5c:c3:37:f2:4a:
78:4c:a4:fa:5c:2f:b0:d1:41:03:f4:41:d8:7e:ff:0e:3c:ff:
fd:b2:3a:78:95:c9:83:37:2a:3a:b6:67:0c:4a:8b:b7:88:76:
61:bd:02:a7:f7:e2:32:4b:dc:92:38:40:a1:10:cd:0e:86:66:
df:d5:58:36:84:3e:9e:5b:03:96:b6:aa:7d:1c:55:27:ac:6e:
5f:c8:fa:f5:de:85:14:34:fd:c5:c5:f6:b4:de:2e:88:19:53:
27:f7:2a:d1:62:43:55:62:0e:31:7c:ea:38:d6:f0:26:26:a3:
c3:0c:9d:5a:3e:5a:af:20:1d:96:22:f9:b5:f8:a9:87:be:5d:
15:58:1b:24:ae:a0:04:13:93:80:e8:47:07:e5:5e:70:78:49:
34:04:1a:da:72:fa:d8:3f:45:c4:8d:d9:05:9b:f7:e8:44:46:
5e:02:e9:0c:06:75:ac:be:c3:27:59:41:bc:ab:d0:8d:e9:60:
f4:72:94:74:07:8e:33:4b:10:06:81:dd:67:26:b6:6b:32:31:
11:50:d4:be:be:7d:be:67:5b:49:f0:83:98:a0:66:b9:71:6d:
20:82:64:4c
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEjXpkjFVwTtKO2E6YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk
YTkzMB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk
MmYwODg0YzItYWVlNC00ZDJmLTk3YzItM2M4MzYwYjZiODMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcJoKcAieD5pwD3qARUmo99trIR2yac9VcLW
Ew2xrsSZCCchYeV6ekuwSzUoGMiRyhYpXkjjzgjLe27GD6AGDLH0q0s9qdp4UYsV
E62jOcUhMO5TV3uh2f5ZIz8AbtKhNQ9lOn1POazZ6XnU/LSk8ScMgVCAmpqBXO4+
WmS+k8/Q4t0qqKzCKbNLcAgfN3+9LM2x54QPYPDRX1fOiygw68CIUXY+77qafKje
MHt6FPBBh1QVaj9bTMpR9fXfv04PPbI4Z5221f39U616mvKmdw+v3A8GZM2T0fQs
glpOyMqYhVfJaItchYRsJUa+fYrrCyfOtBVPgQrFAGxBIHH3rQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFAuKGFIRbY/pOI5sOjcK9+cO3GfFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0
N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvYWU2MTBmNmEtMmQ3NC0z
YWEyLThjZDUtYTM1MDVlNDkyNDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0
NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1
ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj
OWFlNWRhOTMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCYUA4AwQE
aOGwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFF3oiOM1/CNEQiWqtGy76H7pDKYDoGcPjfZtIELKL1cwzfy
SnhMpPpcL7DRQQP0Qdh+/w48//2yOniVyYM3Kjq2ZwxKi7eIdmG9Aqf34jJL3JI4
QKEQzQ6GZt/VWDaEPp5bA5a2qn0cVSesbl/I+vXehRQ0/cXF9rTeLogZUyf3KtFi
Q1ViDjF86jjW8CYmo8MMnVo+Wq8gHZYi+bX4qYe+XRVYGySuoAQTk4DoRwflXnB4
STQEGtpy+tg/RcSN2QWb9+hERl4C6QwGday+wydZQbyr0I3pYPRylHQHjjNLEAaB
3WcmtmsyMRFQ1L6+fb5nW0nwg5igZrlxbSCCZEw=
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:39:58 2025 by rpki-client