Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/489ce8af-fb9b-3f26-8b37-0ea1d374e75c.roa
File: 489ce8af-fb9b-3f26-8b37-0ea1d374e75c.roa (raw, json)
Hash identifier: o471Kn3iHbbn0zeGAHs0apg0uxtEXibvHEKvVPcEpeA=
Subject key identifier: F4:50:09:FF:7A:91:D2:A0:E1:11:26:22:17:38:47:C3:4B:F8:EA:7D
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B555703AE6BB1E56007380
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/489ce8af-fb9b-3f26-8b37-0ea1d374e75c.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 76.64.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:55:70:3a:e6:bb:1e:56:00:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=585217a6-40df-4bab-bd15-fe95ae7b44dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4d:85:6f:79:2c:0f:25:bf:78:f7:e7:19:bf:
e4:0b:02:df:29:a8:cf:c6:25:d2:b6:6a:27:93:92:
c2:08:66:58:8f:c9:9d:7b:ca:45:70:57:44:0b:8e:
76:94:4d:61:09:c5:e8:b8:47:22:3c:80:a4:e3:67:
7f:12:2c:8a:bf:d3:e2:ab:79:33:93:bf:db:76:f9:
3a:96:7e:29:c9:c2:46:2c:0f:cc:d9:a0:24:c0:c0:
01:bd:de:4a:31:a7:97:ed:04:a8:ee:9e:3f:46:d4:
ff:47:ce:35:5b:2c:6f:97:a7:68:af:34:32:70:dd:
9e:21:fe:d4:b3:2b:ac:4d:3b:72:40:f3:72:b2:c7:
57:71:04:65:39:64:c2:d8:c8:6d:50:f7:b8:a7:c8:
9f:5d:71:99:26:7c:f8:9e:e3:c1:ed:96:f8:fb:3c:
6f:2c:0e:9f:4c:e7:3e:c8:e3:db:db:39:e5:24:94:
82:c8:9c:ad:bd:2c:f5:26:4a:69:d3:3d:fb:e1:16:
85:d1:9c:87:42:94:41:05:4c:17:0e:37:f8:de:16:
c7:ed:3a:17:89:df:0c:f5:1d:2d:ed:93:4b:4a:c8:
22:d2:a8:c8:5a:80:44:f1:5a:16:e5:f8:52:ef:e1:
86:60:6b:12:19:af:ed:ff:37:cf:69:5c:07:d0:2b:
c3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:50:09:FF:7A:91:D2:A0:E1:11:26:22:17:38:47:C3:4B:F8:EA:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/489ce8af-fb9b-3f26-8b37-0ea1d374e75c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
76.64.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:90:33:ab:55:58:25:e3:90:5a:b3:ad:85:4d:97:5c:34:e3:
ea:26:d6:65:e5:25:47:7c:3e:33:70:20:04:b2:11:0e:82:43:
3d:ba:13:5c:02:c6:fd:97:56:93:08:c1:32:66:3d:46:8f:04:
b2:e2:14:5c:b4:79:6b:8d:c6:89:6f:54:a9:be:61:d7:10:ed:
5b:be:96:35:f8:a2:9c:4a:95:ed:59:c3:16:90:87:35:7d:e2:
ec:ba:cf:e1:4f:6e:1f:7a:0b:eb:77:52:f9:c3:5b:29:0f:73:
7b:11:fc:41:5c:01:c8:f6:1b:bf:18:56:a5:53:c9:cd:0f:76:
87:06:c0:e0:29:01:89:79:89:d4:78:26:e2:00:85:74:0b:47:
5d:06:ec:bd:b4:c0:c7:ab:bc:88:aa:0d:6a:7e:2d:a5:bf:fd:
52:1e:ac:5e:35:f4:ab:7d:14:46:b7:16:0f:33:76:71:43:4a:
44:0d:2d:85:24:04:a9:eb:24:50:5d:ea:0c:2b:b9:15:85:80:
9d:f6:6f:9b:06:b2:a7:56:4a:40:84:e1:b6:25:ca:f6:f0:d4:
a2:d5:ed:5c:d7:cf:61:4b:7f:85:36:43:ca:c6:ca:1f:d2:28:
c2:fa:bf:5c:e5:20:d2:44:b5:3c:10:87:05:70:1e:df:7e:a7:
b6:82:e5:ee
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEgmtVVwOua7HlYAc4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MTIwODEyMDAwMFoXDTI1MDMxMDA0MDAwMFowLzEtMCsGA1UEAxMk
NTg1MjE3YTYtNDBkZi00YmFiLWJkMTUtZmU5NWFlN2I0NGRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzE2Fb3ksDyW/ePfnGb/kCwLfKajPxiXStmon
k5LCCGZYj8mde8pFcFdEC452lE1hCcXouEciPICk42d/EiyKv9Piq3kzk7/bdvk6
ln4pycJGLA/M2aAkwMABvd5KMaeX7QSo7p4/RtT/R841Wyxvl6dorzQycN2eIf7U
syusTTtyQPNyssdXcQRlOWTC2MhtUPe4p8ifXXGZJnz4nuPB7Zb4+zxvLA6fTOc+
yOPb2znlJJSCyJytvSz1Jkpp0z374RaF0ZyHQpRBBUwXDjf43hbH7ToXid8M9R0t
7ZNLSsgi0qjIWoBE8VoW5fhS7+GGYGsSGa/t/zfPaVwH0CvDXwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPRQCf96kdKg4REmIhc4R8NL+Op9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNDg5Y2U4YWYtZmI5Yi0z
ZjI2LThiMzctMGVhMWQzNzRlNzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMATEAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAO5Azq1VYJeOQWrOthU2XXDTj6ibWZeUlR3w+M3AgBLIRDoJDPboTXALG
/ZdWkwjBMmY9Ro8EsuIUXLR5a43GiW9Uqb5h1xDtW76WNfiinEqV7VnDFpCHNX3i
7LrP4U9uH3oL63dS+cNbKQ9zexH8QVwByPYbvxhWpVPJzQ92hwbA4CkBiXmJ1Hgm
4gCFdAtHXQbsvbTAx6u8iKoNan4tpb/9Uh6sXjX0q30URrcWDzN2cUNKRA0thSQE
qeskUF3qDCu5FYWAnfZvmwayp1ZKQIThtiXK9vDUotXtXNfPYUt/hTZDysbKH9Io
wvq/XOUg0kS1PBCHBXAe336ntoLl7g==
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:49:27 2025 by rpki-client