Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59c44230-ec55-3638-8a91-87a24d084422.roa
File: 59c44230-ec55-3638-8a91-87a24d084422.roa (raw, json)
Hash identifier: pQLn0mJSaPa4yOPzgwhtr5hyGSu0dGIRXD7CD4Zt6nQ=
Subject key identifier: 2A:9F:CB:A0:3F:7C:9F:35:B2:09:5D:A6:65:8C:39:62:54:27:D3:6E
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285849244E6F2849460DA41D773A78
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59c44230-ec55-3638-8a91-87a24d084422.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 3356
IP address blocks: 20.137.14.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:6f:28:49:46:0d:a4:1d:77:3a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=4ea796de-7a31-4df4-bcfc-d07c05773a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d0:c2:cc:74:28:e3:d3:f9:26:52:0a:d8:2c:
ae:be:0e:2b:d1:96:7f:d3:15:72:0e:9a:95:bb:66:
e1:1a:e0:54:5f:0c:66:55:39:90:09:00:8e:46:9a:
a4:f8:ca:41:85:2f:11:59:b0:1a:19:d9:fd:db:11:
3b:d6:08:c7:d0:71:74:1e:ed:7a:e1:f3:c8:73:c4:
2b:46:6b:97:13:55:ea:c8:62:d5:96:4b:77:55:1e:
9b:0e:9c:ea:5b:58:6f:f7:cd:79:e8:52:5d:50:2f:
d5:90:2a:16:58:31:bf:6a:42:eb:2d:85:0c:d7:71:
d5:37:69:f1:77:ca:fb:41:da:23:19:3d:58:7e:e4:
a6:c3:cb:5f:74:80:79:cb:21:ae:b4:c8:1a:be:b9:
b7:79:11:16:b1:54:c6:03:3e:16:31:80:34:cd:de:
e2:09:87:5a:c3:74:7c:82:c0:88:48:1e:e0:61:04:
a7:52:d8:b2:a7:f6:2e:0b:27:c2:b6:5f:90:a1:ad:
89:ae:9b:12:7e:9b:bd:18:b9:9a:a3:29:f6:20:0f:
e8:d0:78:ab:91:5f:9f:38:14:71:59:43:2a:4b:49:
7a:4f:c8:d4:3e:17:a5:e2:8a:be:a7:0b:00:58:f9:
32:a6:cc:c9:84:5a:15:4e:f6:30:41:0b:e9:77:bc:
b2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9F:CB:A0:3F:7C:9F:35:B2:09:5D:A6:65:8C:39:62:54:27:D3:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59c44230-ec55-3638-8a91-87a24d084422.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.137.14.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:5f:51:a9:48:bd:e6:f8:c4:57:88:d7:15:b4:68:71:4d:74:
11:a3:cf:db:7d:24:aa:16:01:e0:b6:e7:d6:aa:02:6c:23:7f:
9a:d6:83:5a:5b:26:61:ea:02:7b:d4:9c:b0:1f:ad:d2:d6:09:
e8:67:ad:cc:a8:42:13:0d:8b:d1:6a:1d:2f:e4:80:a1:76:cc:
d7:fa:5b:b8:36:9b:c7:84:64:57:6b:fb:aa:f6:73:4a:b8:e1:
4b:3c:67:f3:f0:d1:8d:63:77:e8:78:01:82:f0:be:12:2f:96:
8b:04:3f:d5:16:b6:26:67:69:42:7e:90:64:d0:75:a4:ef:c1:
dd:ff:e6:f8:14:74:23:28:f5:d5:f9:8d:00:8c:29:7a:8d:59:
53:ed:79:55:d9:0a:51:58:68:46:9f:6c:af:08:3c:af:08:9d:
e9:71:c0:ab:52:d9:6d:16:f4:88:ce:7e:f0:bc:30:3d:06:82:
2e:61:ec:e3:0c:31:55:5c:85:8b:21:45:2c:3e:01:14:14:8b:
d6:94:a7:21:82:3b:80:03:ca:69:61:aa:df:54:17:62:6e:ea:
56:07:cd:a2:2c:4d:aa:cb:93:b3:1f:1a:ab:4b:d5:e9:93:01:
a6:dd:ff:84:dc:3a:1b:bf:c3:84:63:66:d9:31:c1:29:e5:bb:
31:90:32:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTm8oSUYNpB13OngwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk
NGVhNzk2ZGUtN2EzMS00ZGY0LWJjZmMtZDA3YzA1NzczYTRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9DCzHQo49P5JlIK2Cyuvg4r0ZZ/0xVyDpqV
u2bhGuBUXwxmVTmQCQCORpqk+MpBhS8RWbAaGdn92xE71gjH0HF0Hu164fPIc8Qr
RmuXE1XqyGLVlkt3VR6bDpzqW1hv98156FJdUC/VkCoWWDG/akLrLYUM13HVN2nx
d8r7QdojGT1YfuSmw8tfdIB5yyGutMgavrm3eREWsVTGAz4WMYA0zd7iCYdaw3R8
gsCISB7gYQSnUtiyp/YuCyfCtl+Qoa2JrpsSfpu9GLmaoyn2IA/o0HirkV+fOBRx
WUMqS0l6T8jUPhel4oq+pwsAWPkypszJhFoVTvYwQQvpd7yygwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCqfy6A/fJ81sgldpmWMOWJUJ9NuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNTljNDQyMzAtZWM1NS0z
NjM4LThhOTEtODdhMjRkMDg0NDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFIkOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIhfUalIveb4xFeI1xW0aHFNdBGjz9t9JKoWAeC259aqAmwjf5rWg1pb
JmHqAnvUnLAfrdLWCehnrcyoQhMNi9FqHS/kgKF2zNf6W7g2m8eEZFdr+6r2c0q4
4Us8Z/Pw0Y1jd+h4AYLwvhIvlosEP9UWtiZnaUJ+kGTQdaTvwd3/5vgUdCMo9dX5
jQCMKXqNWVPteVXZClFYaEafbK8IPK8InelxwKtS2W0W9IjOfvC8MD0Ggi5h7OMM
MVVchYshRSw+ARQUi9aUpyGCO4ADymlhqt9UF2Ju6lYHzaIsTarLk7MfGqtL1emT
Aabd/4TcOhu/w4RjZtkxwSnluzGQMow=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:27:21 2025 by rpki-client