Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c8eb5a13-cb1f-3170-aba7-ed27122a64ff.roa
File: c8eb5a13-cb1f-3170-aba7-ed27122a64ff.roa (raw, json)
Hash identifier: G6FjzSq/SQjt7j9J5COv+tu+Ofeqn+ZMh7y47Yo1L5o=
Subject key identifier: 27:F3:10:DF:C9:74:61:31:7F:71:2C:1D:D1:3A:3E:1B:DB:E7:3B:8B
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B53C64CE3F8957D5B52980
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c8eb5a13-cb1f-3170-aba7-ed27122a64ff.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 36522
IP address blocks: 70.28.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:3c:64:ce:3f:89:57:d5:b5:29:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=0b620be5-5822-4a53-beee-96564f604b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:91:77:90:48:53:7e:79:e2:d5:33:e0:d3:5a:
65:b8:ba:ed:ab:ba:da:8c:5d:d9:71:e1:49:1e:c4:
11:8d:71:be:a3:69:85:3f:3a:82:ff:1f:ac:b2:4f:
12:f9:c7:5e:4f:4d:ec:04:0f:50:4c:4e:66:0c:18:
12:34:71:81:23:21:29:00:3b:70:e6:b0:2f:31:c5:
87:02:1c:00:36:df:50:e1:a6:d4:f2:d1:bf:25:73:
c5:6e:80:f2:0d:ca:52:17:56:ae:fc:e9:49:ab:f2:
aa:b6:fa:9d:25:d3:a9:65:0a:29:fe:57:45:1f:a3:
c2:2a:70:04:05:49:82:3a:82:1d:98:e7:bc:0d:7c:
59:17:35:5b:ba:11:b7:d1:85:7e:25:18:5c:bf:82:
2c:5b:8b:73:cb:60:4e:41:2d:a4:9d:65:a1:fa:6f:
25:45:2b:6d:8a:cd:23:7f:91:7d:ee:2c:17:2d:f5:
c6:c4:ec:ac:d2:43:98:db:22:86:75:0d:83:b0:99:
b5:75:dc:7b:3f:a0:da:31:9f:d3:b0:a9:35:e2:9e:
69:7f:06:d9:8c:12:21:79:a1:8b:5a:d7:a1:78:66:
7e:3d:2b:bf:ba:37:c7:a4:98:27:87:6b:a0:b8:6e:
d7:c0:56:4c:8d:f9:19:ce:61:1f:7f:09:da:a8:16:
94:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F3:10:DF:C9:74:61:31:7F:71:2C:1D:D1:3A:3E:1B:DB:E7:3B:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c8eb5a13-cb1f-3170-aba7-ed27122a64ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.28.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:06:b8:7b:a3:7c:e5:1d:29:fe:93:db:2f:df:38:5a:e8:3f:
da:9f:0a:11:6d:bc:29:8c:4d:f0:0f:e2:de:aa:1d:6f:a8:24:
20:1c:1b:3e:0b:6f:87:29:85:25:71:ef:74:76:6d:91:e9:e8:
47:2a:50:49:f8:32:9c:67:59:89:ed:d7:c7:18:2e:db:19:93:
ae:fe:a1:49:5d:d6:23:d5:72:01:03:9f:87:e6:4f:50:b2:ee:
ce:27:c7:dc:41:54:fa:35:5c:f0:0a:55:f7:cb:78:3e:f2:7d:
0a:de:e3:25:ba:97:60:dd:ec:97:9d:b3:2c:ce:21:82:cb:55:
1c:6f:43:af:6c:19:e2:eb:f4:bf:9c:ef:2d:7f:ca:b1:2b:fc:
cd:97:5b:b1:f3:03:5f:d9:10:6f:05:e3:1e:54:8c:3b:b3:fd:
ea:aa:01:37:58:01:be:4e:c9:fc:ea:ff:8e:6f:c3:29:1a:35:
3e:85:89:b6:c0:f6:fc:ca:46:f7:07:d0:0d:fc:db:99:dd:26:
2d:00:14:25:85:a1:af:ac:82:3e:35:29:1f:cb:3d:20:ac:1a:
64:44:27:4b:50:56:0f:b6:71:94:c9:26:1d:0d:9a:58:00:61:
a7:03:e8:1e:1b:0d:66:f8:e5:14:25:e0:84:7f:86:31:cc:7f:
a9:6a:0c:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgmtTxkzj+JV9W1KYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MTIwODEyMDAwMFoXDTI1MDMxMDA0MDAwMFowLzEtMCsGA1UEAxMk
MGI2MjBiZTUtNTgyMi00YTUzLWJlZWUtOTY1NjRmNjA0YjllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZF3kEhTfnni1TPg01pluLrtq7rajF3ZceFJ
HsQRjXG+o2mFPzqC/x+ssk8S+cdeT03sBA9QTE5mDBgSNHGBIyEpADtw5rAvMcWH
AhwANt9Q4abU8tG/JXPFboDyDcpSF1au/OlJq/KqtvqdJdOpZQop/ldFH6PCKnAE
BUmCOoIdmOe8DXxZFzVbuhG30YV+JRhcv4IsW4tzy2BOQS2knWWh+m8lRSttis0j
f5F97iwXLfXGxOys0kOY2yKGdQ2DsJm1ddx7P6DaMZ/TsKk14p5pfwbZjBIheaGL
WteheGZ+PSu/ujfHpJgnh2uguG7XwFZMjfkZzmEffwnaqBaUYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCfzEN/JdGExf3EsHdE6Phvb5zuLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYzhlYjVhMTMtY2IxZi0z
MTcwLWFiYTctZWQyNzEyMmE2NGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARhz1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIkGuHujfOUdKf6T2y/fOFroP9qfChFtvCmMTfAP4t6qHW+oJCAcGz4L
b4cphSVx73R2bZHp6EcqUEn4MpxnWYnt18cYLtsZk67+oUld1iPVcgEDn4fmT1Cy
7s4nx9xBVPo1XPAKVffLeD7yfQre4yW6l2Dd7JedsyzOIYLLVRxvQ69sGeLr9L+c
7y1/yrEr/M2XW7HzA1/ZEG8F4x5UjDuz/eqqATdYAb5Oyfzq/45vwykaNT6FibbA
9vzKRvcH0A3825ndJi0AFCWFoa+sgj41KR/LPSCsGmREJ0tQVg+2cZTJJh0NmlgA
YacD6B4bDWb45RQl4IR/hjHMf6lqDHs=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:24:10 2025 by rpki-client