Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/af7494ac-0942-3181-861e-27e3b67ee7a6.roa
File: af7494ac-0942-3181-861e-27e3b67ee7a6.roa (raw, json)
Hash identifier: NPbEhzQO4nPtRigXe5RsnzmkZzokTYUihJFrpLHPdRI=
Subject key identifier: 88:8B:C7:3C:36:15:C6:3D:74:3B:C8:76:6A:23:73:02:89:55:B6:DB
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921342B83769557CA15D03A60
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/af7494ac-0942-3181-861e-27e3b67ee7a6.roa
Signing time: Sun 09 Mar 2025 10:20:37 +0000
ROA not before: Sun 09 Mar 2025 10:20:37 +0000
ROA not after: Sat 07 Jun 2025 10:20:37 +0000
asID: 577
IP address blocks: 70.26.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:2b:83:76:95:57:ca:15:d0:3a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:37 2025 GMT
Not After : Jun 7 10:20:37 2025 GMT
Subject: CN=4ebfadcd-805c-4806-9b83-ba0123a91fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ef:dd:e1:a6:09:cc:3c:88:41:30:38:f6:e3:
a7:28:b3:64:58:25:7f:3a:12:cf:fb:c2:c6:e2:4f:
44:b5:50:08:1f:ca:49:b7:3f:49:f0:59:fa:f9:27:
27:b4:a5:7e:bc:f9:9c:5e:4f:72:54:20:13:fd:25:
19:6d:62:04:c8:4b:f7:4f:67:04:6a:d9:59:fd:81:
6d:14:55:7f:e1:50:14:09:41:c3:bd:d4:fb:13:a2:
2e:0e:e9:75:48:7e:f9:d8:da:a6:1d:1a:4f:00:12:
a1:5c:58:f7:51:dc:9e:a3:f3:7f:a7:52:5d:b4:8a:
b1:65:10:12:86:2f:0c:ae:c5:21:0f:4b:5e:c0:33:
a3:71:e5:0b:1f:8b:25:32:af:87:3c:c0:bd:4a:f6:
6b:3c:79:46:16:84:4d:c7:b6:1a:f8:c6:30:d6:8c:
2f:2d:ad:76:c1:ce:e8:27:3e:37:58:1d:83:03:26:
3d:27:05:a3:7f:64:9d:c2:49:55:7e:f1:59:e3:96:
57:59:d0:08:aa:da:76:9a:63:42:d9:56:3e:41:c5:
01:21:b0:34:51:6f:25:bb:fd:e6:86:d9:b8:2f:5f:
96:48:e6:a7:db:9f:22:51:fe:65:99:9f:a8:62:3a:
3a:3a:4c:40:ae:fe:2d:80:e3:e1:db:62:6a:41:db:
a1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8B:C7:3C:36:15:C6:3D:74:3B:C8:76:6A:23:73:02:89:55:B6:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/af7494ac-0942-3181-861e-27e3b67ee7a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.26.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:41:a7:be:63:26:79:81:1b:c2:91:19:bb:e3:5d:6e:e4:6e:
83:c8:22:2d:d4:dc:d5:de:be:8d:fb:64:47:e0:d3:cb:33:20:
9c:8f:64:9b:a8:44:4f:37:90:5c:91:c0:9c:e3:21:eb:72:fe:
0a:b5:83:19:21:8b:79:e1:0f:2a:f4:72:f7:28:64:2d:d3:92:
89:6e:79:cf:50:59:48:bb:7d:b8:60:65:5a:49:7a:57:86:99:
f7:89:3a:b4:ae:47:29:e0:1b:e3:88:3c:5f:3c:c6:4f:42:ee:
23:da:92:ba:7d:a2:e7:fe:40:3c:36:bc:41:a4:92:f1:87:ac:
d1:f7:ca:5e:70:41:75:e5:2d:cb:f4:60:68:3b:46:7a:a1:6b:
9a:18:6b:5d:17:52:ce:ec:e2:31:34:82:20:8d:a7:d5:4c:1d:
b9:83:cf:00:58:e6:8c:03:cf:f0:5c:d0:8c:34:22:21:92:5d:
30:fd:c8:4c:fb:6c:ca:22:6e:04:e0:cd:d2:7e:a0:e9:90:5a:
14:a2:f2:ff:f0:86:d0:98:a9:a8:85:97:4b:3d:71:a5:cf:26:
b1:7e:0a:5d:84:a7:cb:da:b3:de:4a:14:2c:60:c8:ba:b6:4f:
6c:cc:96:39:39:66:a3:96:19:2b:b6:ec:07:fd:49:39:14:0c:
9b:0a:db:40
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkhNCuDdpVXyhXQOmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDMwOTEwMjAzN1oXDTI1MDYwNzEwMjAzN1owLzEtMCsGA1UEAxMk
NGViZmFkY2QtODA1Yy00ODA2LTliODMtYmEwMTIzYTkxZmJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO/d4aYJzDyIQTA49uOnKLNkWCV/OhLP+8LG
4k9EtVAIH8pJtz9J8Fn6+ScntKV+vPmcXk9yVCAT/SUZbWIEyEv3T2cEatlZ/YFt
FFV/4VAUCUHDvdT7E6IuDul1SH752NqmHRpPABKhXFj3Udyeo/N/p1JdtIqxZRAS
hi8MrsUhD0tewDOjceULH4slMq+HPMC9SvZrPHlGFoRNx7Ya+MYw1owvLa12wc7o
Jz43WB2DAyY9JwWjf2SdwklVfvFZ45ZXWdAIqtp2mmNC2VY+QcUBIbA0UW8lu/3m
htm4L1+WSOan258iUf5lmZ+oYjo6OkxArv4tgOPh22JqQduh/QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIiLxzw2FcY9dDvIdmojcwKJVbbbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYWY3NDk0YWMtMDk0Mi0z
MTgxLTg2MWUtMjdlM2I2N2VlN2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARhowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAmkGnvmMmeYEbwpEZu+NdbuRug8giLdTc1d6+jftkR+DTyzMgnI9km6hE
TzeQXJHAnOMh63L+CrWDGSGLeeEPKvRy9yhkLdOSiW55z1BZSLt9uGBlWkl6V4aZ
94k6tK5HKeAb44g8XzzGT0LuI9qSun2i5/5APDa8QaSS8Yes0ffKXnBBdeUty/Rg
aDtGeqFrmhhrXRdSzuziMTSCII2n1UwduYPPAFjmjAPP8FzQjDQiIZJdMP3ITPts
yiJuBODN0n6g6ZBaFKLy//CG0JipqIWXSz1xpc8msX4KXYSny9qz3koULGDIurZP
bMyWOTlmo5YZK7bsB/1JORQMmwrbQA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:38 2025 by rpki-client