Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8b093795-6a33-39bd-9eb1-aecc3363a216.roa
File: 8b093795-6a33-39bd-9eb1-aecc3363a216.roa (raw, json)
Hash identifier: NPqkcbOTxr1JeXwumdGqCrnBCB0d3x8e8bjfw15ySlQ=
Subject key identifier: FF:39:37:87:80:DA:DD:CB:AC:55:53:C6:04:38:76:98:BD:FB:44:BE
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B5537B54E266072A51BE80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8b093795-6a33-39bd-9eb1-aecc3363a216.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 74.14.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:53:7b:54:e2:66:07:2a:51:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=bed8ad78-e121-45c0-b631-ef49f5514258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ff:58:b4:64:bf:eb:1c:22:06:d1:f3:10:66:
06:15:15:55:14:37:71:1d:7b:1d:03:bd:f7:a2:9c:
15:9d:33:bc:94:11:d9:96:a6:79:2b:07:a0:b2:b0:
cb:d5:fc:c5:c3:5b:41:bf:17:a6:d7:88:af:5d:e2:
94:3e:7b:88:8a:dd:d6:e4:9a:ca:e8:27:6c:a9:f3:
20:6c:fa:8f:2b:a7:f4:75:47:cb:42:01:8a:7d:df:
c8:22:e6:2e:e3:f7:9d:6b:a6:4b:48:83:49:4c:89:
1e:bb:3a:8f:fc:c7:b4:1a:a3:8e:78:82:de:8a:17:
1f:9b:82:94:5e:b1:bc:cf:b1:6b:ca:09:33:d1:d8:
c2:2d:f1:a3:df:9c:c3:8a:62:92:ff:0f:1c:80:20:
96:42:a8:63:79:a8:c0:17:f2:f1:83:fa:ff:82:c0:
bf:df:f8:e1:3d:02:b9:dc:86:d9:07:96:52:10:29:
13:c2:e3:ae:8f:d5:1d:8d:10:7d:71:fe:d2:6f:06:
e4:d5:80:cf:e7:ce:10:25:1e:71:95:30:8b:dd:e1:
99:28:e4:32:66:b2:a6:be:b6:fb:15:58:79:d6:93:
7b:9d:e6:11:90:4f:2a:48:26:fe:0b:80:30:4d:b2:
03:49:c3:c3:9f:cd:5e:f5:e7:e7:9d:98:6f:fe:68:
ae:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:39:37:87:80:DA:DD:CB:AC:55:53:C6:04:38:76:98:BD:FB:44:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8b093795-6a33-39bd-9eb1-aecc3363a216.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
74.14.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:37:b2:90:ae:36:a6:e0:a8:29:80:b2:40:8a:d2:36:95:ad:
a4:41:b2:4a:e4:dd:83:16:be:21:d2:a8:1d:28:d9:af:4d:9c:
8a:e3:6a:f3:4f:a0:31:ec:7c:ce:d6:cb:9e:09:9b:88:17:7b:
08:6e:8f:dd:81:0f:e3:f1:32:eb:f5:ef:1b:16:c4:06:17:ad:
7f:08:12:d5:f0:6f:47:b0:27:35:fe:e9:52:2c:21:b2:29:10:
63:09:e1:c5:0e:a0:df:85:cc:2e:f8:7b:b3:aa:ed:8e:be:0c:
68:13:8b:d1:c2:ad:d7:ce:31:4d:b2:79:98:5a:a8:a1:d6:52:
1b:40:ca:82:19:f4:c7:97:d5:12:ae:c4:b1:2f:49:48:47:c5:
bc:91:e8:98:99:26:fe:ab:7d:d5:5d:a7:67:6e:3c:c8:b7:61:
c9:4e:ff:bb:9f:54:c4:a0:c6:13:4c:3b:b8:2e:df:11:df:64:
dd:cb:4d:e4:d0:a3:31:21:7e:ad:37:bc:7f:4b:db:50:17:13:
d3:90:9c:e8:74:50:bf:f8:b7:b9:1f:3a:09:25:8d:0d:d9:4f:
4c:85:65:df:0c:aa:6e:8d:49:8c:87:f9:42:e4:bc:4d:b7:6d:
e8:30:49:5a:f1:54:f8:e5:fd:3f:4c:fc:ae:43:93:46:84:8a:
b4:6c:51:4e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEgmtVN7VOJmBypRvoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MTIwODEyMDAwMFoXDTI1MDMxMDA0MDAwMFowLzEtMCsGA1UEAxMk
YmVkOGFkNzgtZTEyMS00NWMwLWI2MzEtZWY0OWY1NTE0MjU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP9YtGS/6xwiBtHzEGYGFRVVFDdxHXsdA733
opwVnTO8lBHZlqZ5KwegsrDL1fzFw1tBvxem14ivXeKUPnuIit3W5JrK6CdsqfMg
bPqPK6f0dUfLQgGKfd/IIuYu4/eda6ZLSINJTIkeuzqP/Me0GqOOeILeihcfm4KU
XrG8z7Frygkz0djCLfGj35zDimKS/w8cgCCWQqhjeajAF/Lxg/r/gsC/3/jhPQK5
3IbZB5ZSECkTwuOuj9UdjRB9cf7Sbwbk1YDP584QJR5xlTCL3eGZKOQyZrKmvrb7
FVh51pN7neYRkE8qSCb+C4AwTbIDScPDn81e9efnnZhv/miuxwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFP85N4eA2t3LrFVTxgQ4dpi9+0S+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvOGIwOTM3OTUtNmEzMy0z
OWJkLTllYjEtYWVjYzMzNjNhMjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMASg4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAFzeykK42puCoKYCyQIrSNpWtpEGySuTdgxa+IdKoHSjZr02ciuNq80+g
Mex8ztbLngmbiBd7CG6P3YEP4/Ey6/XvGxbEBhetfwgS1fBvR7AnNf7pUiwhsikQ
YwnhxQ6g34XMLvh7s6rtjr4MaBOL0cKt184xTbJ5mFqoodZSG0DKghn0x5fVEq7E
sS9JSEfFvJHomJkm/qt91V2nZ248yLdhyU7/u59UxKDGE0w7uC7fEd9k3ctN5NCj
MSF+rTe8f0vbUBcT05Cc6HRQv/i3uR86CSWNDdlPTIVl3wyqbo1JjIf5QuS8Tbdt
6DBJWvFU+OX9P0z8rkOTRoSKtGxRTg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:49:50 2025 by rpki-client