Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/88b62d1b-fd35-3bab-87bd-ea41e242c121.roa
File: 88b62d1b-fd35-3bab-87bd-ea41e242c121.roa (raw, json)
Hash identifier: 31Cvnl8YK5P6wyeyexFqtZRjqkk0U5cpnBXaDLxSuZY=
Subject key identifier: 34:2D:5C:EB:8F:A4:4D:10:A8:34:DF:9E:C6:1B:7A:48:8A:94:0D:27
Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial: 010D0C9F4328584886B07A067488A8F4BBB03400
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/88b62d1b-fd35-3bab-87bd-ea41e242c121.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 5769
IP address blocks: 24.37.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:7a:06:74:88:a8:f4:bb:b0:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=b5632560-c555-48fc-aaea-be2e9afbfaaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a6:3b:13:c1:64:8f:96:79:ac:c2:80:76:cb:
f5:20:d5:30:3e:28:8b:5a:26:31:a5:4b:1f:fa:1a:
0a:ff:a9:5a:8b:94:ad:55:ef:aa:ed:b8:b9:f2:8d:
95:9e:96:81:ab:5c:3c:dc:bc:16:70:8c:82:0f:73:
94:3b:65:15:ac:8c:87:47:6d:4b:69:4f:76:cf:7d:
e7:a4:e3:c8:45:f9:54:b8:6a:95:1c:90:2d:a9:db:
47:81:b7:2b:ad:f3:d7:72:9b:84:cf:d0:ba:e0:92:
e9:1c:ee:aa:68:79:f1:b5:a2:10:85:2d:0a:01:85:
46:76:e8:84:94:d5:b8:db:de:bf:5b:25:1e:6c:77:
75:39:11:ac:1e:08:2e:0f:17:8a:72:87:e1:2f:3f:
22:93:6a:40:71:b3:43:dc:ae:e3:98:78:a3:42:54:
90:65:98:ff:c0:50:03:95:1e:de:77:6f:5c:c8:ae:
22:58:9d:fc:11:c9:3a:d7:21:a2:dd:f6:b9:35:3e:
11:63:5d:b6:8c:ba:51:d2:5a:c6:34:cf:e6:dc:de:
a7:78:48:a7:32:da:73:2d:b1:11:ba:69:69:08:c9:
2d:0a:53:25:85:7e:09:64:bf:e8:40:0d:8f:02:93:
5b:40:4e:cc:a4:c3:d2:ce:8a:68:09:cc:e7:f0:47:
d4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2D:5C:EB:8F:A4:4D:10:A8:34:DF:9E:C6:1B:7A:48:8A:94:0D:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/88b62d1b-fd35-3bab-87bd-ea41e242c121.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
X509v3 Authority Key Identifier:
keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
sbgp-ipAddrBlock: critical
IPv4:
24.37.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:6f:7a:a2:0f:08:2d:89:fa:de:44:9d:b8:ef:cb:fe:45:47:
7c:0d:2d:a7:92:8d:a9:4c:c5:c3:0e:3c:86:e1:e7:99:9b:48:
7e:c5:7a:de:56:64:9e:57:5f:14:72:ec:cb:c0:72:dc:f8:eb:
08:dc:f7:cd:f2:27:47:28:48:a9:00:84:4c:56:66:44:66:73:
00:c6:60:68:87:b5:6f:fd:33:f2:29:a3:68:39:81:c0:5f:52:
b4:29:d1:32:8b:08:1d:5e:da:db:2e:de:22:a8:51:90:d7:10:
a2:46:75:77:99:3d:02:da:6b:d0:da:a3:ba:91:ee:e1:c0:12:
ff:3f:8d:c9:6e:37:af:69:ed:1a:44:9c:c6:cb:cc:c4:72:08:
4b:0c:b5:f1:3f:e4:96:a6:10:be:2b:b7:4b:a3:ba:ab:d3:0b:
f9:38:8b:9e:e9:a6:dc:e8:86:a6:cf:dd:2a:aa:97:d5:59:fb:
a6:46:84:83:99:78:61:e3:a6:4b:47:52:6c:fd:e4:a3:13:7f:
0c:6e:87:69:32:66:30:ab:b0:eb:7d:9e:14:ef:04:04:b6:f0:
22:3f:2e:8a:65:4f:59:7b:bd:3d:05:0f:2b:bf:a8:ff:ef:f9:
78:e8:11:48:9f:79:a3:9d:6e:65:f7:02:a4:39:53:38:da:18:
0f:10:98:1a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEiGsHoGdIio9LuwNAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl
ZTdkMB4XDTI1MDExMzAyMDA0MFoXDTI1MDQxMzAxMDA0MFowLzEtMCsGA1UEAxMk
YjU2MzI1NjAtYzU1NS00OGZjLWFhZWEtYmUyZTlhZmJmYWFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaY7E8Fkj5Z5rMKAdsv1INUwPiiLWiYxpUsf
+hoK/6lai5StVe+q7bi58o2VnpaBq1w83LwWcIyCD3OUO2UVrIyHR21LaU92z33n
pOPIRflUuGqVHJAtqdtHgbcrrfPXcpuEz9C64JLpHO6qaHnxtaIQhS0KAYVGduiE
lNW4296/WyUebHd1ORGsHgguDxeKcofhLz8ik2pAcbND3K7jmHijQlSQZZj/wFAD
lR7ed29cyK4iWJ38Eck61yGi3fa5NT4RY122jLpR0lrGNM/m3N6neEinMtpzLbER
umlpCMktClMlhX4JZL/oQA2PApNbQE7MpMPSzopoCczn8EfU/QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDQtXOuPpE0QqDTfnsYbekiKlA0nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw
NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvODhiNjJkMWItZmQzNS0z
YmFiLTg3YmQtZWE0MWUyNDJjMTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll
NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4
ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh
MzlmOGVlN2QuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAGCUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAMW96og8ILYn63kSduO/L/kVHfA0tp5KNqUzFww48huHnmZtIfsV63lZk
nldfFHLsy8By3PjrCNz3zfInRyhIqQCETFZmRGZzAMZgaIe1b/0z8imjaDmBwF9S
tCnRMosIHV7a2y7eIqhRkNcQokZ1d5k9Atpr0NqjupHu4cAS/z+NyW43r2ntGkSc
xsvMxHIISwy18T/klqYQviu3S6O6q9ML+TiLnumm3OiGps/dKqqX1Vn7pkaEg5l4
YeOmS0dSbP3koxN/DG6HaTJmMKuw632eFO8EBLbwIj8uimVPWXu9PQUPK7+o/+/5
eOgRSJ95o51uZfcCpDlTONoYDxCYGg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:22:42 2025 by rpki-client