Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/a8a014a5-2be6-3918-9e0a-0f728c23059e.roa
File: a8a014a5-2be6-3918-9e0a-0f728c23059e.roa (raw, json)
Hash identifier: YhlLRGTsJvisu5yabYii4+uE7KTVTJ0iqOn60Kaz5o8=
Subject key identifier: 3D:34:0E:0B:F0:99:46:4A:A4:4C:DB:7A:AB:51:4E:D1:43:9B:50:51
Certificate issuer: /CN=c86a7ba5-67c5-481d-b278-0b265dc97144
Certificate serial: 010D0C9F432858488DAB44DBF5D711E242AE0780
Authority key identifier: 69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/a8a014a5-2be6-3918-9e0a-0f728c23059e.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 23352
IP address blocks: 74.113.150.0/24 maxlen: 24
2620:7d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:44:db:f5:d7:11:e2:42:ae:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c86a7ba5-67c5-481d-b278-0b265dc97144
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=d2db129e-a5cb-4e30-ad47-acf52acae52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7c:6e:86:33:e3:80:0d:c8:19:c9:1f:dc:2a:
78:2d:53:f1:de:b9:a2:4e:dc:73:2b:33:fe:66:bd:
47:86:8b:d4:fa:8f:e7:5a:1f:0a:8c:d3:8a:a3:8d:
c6:92:58:1e:9a:7a:78:dc:e3:cc:37:53:be:c4:60:
54:11:28:d6:03:8d:a2:d2:01:06:da:bd:31:de:33:
14:3f:dd:a4:8d:4b:be:ae:64:74:54:63:8b:3c:83:
ce:74:92:b3:b7:10:26:14:a9:3a:7c:7c:24:68:77:
7a:c9:b7:bf:26:15:c8:6a:06:96:ba:09:df:65:4c:
21:8f:ec:42:2e:b9:df:18:e2:a3:77:3d:0d:68:ed:
ab:8b:25:46:f8:d6:eb:b1:50:4a:cf:bd:b7:0f:28:
46:2e:36:37:97:26:fc:ac:24:0b:b9:ef:e3:aa:6a:
87:94:09:00:bb:ab:f5:2b:a0:fd:4b:08:34:0d:3f:
f3:29:4f:e7:77:37:ae:dc:7a:4d:21:67:d3:48:f5:
90:34:4c:85:45:90:a2:04:bc:39:c4:0c:f0:33:07:
da:14:d5:7a:81:b5:5c:01:d3:ef:fd:8d:63:fb:99:
4d:75:ba:1e:21:ba:cc:e7:c8:00:3f:c2:b0:03:21:
2c:8b:d3:8f:d6:95:2d:2e:7a:f9:81:23:5a:bc:44:
bb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:34:0E:0B:F0:99:46:4A:A4:4C:DB:7A:AB:51:4E:D1:43:9B:50:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/a8a014a5-2be6-3918-9e0a-0f728c23059e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl
X509v3 Authority Key Identifier:
keyid:69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
sbgp-ipAddrBlock: critical
IPv4:
74.113.150.0/24
IPv6:
2620:7d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:95:75:37:c2:1c:91:c7:c5:d9:6c:79:fe:6f:17:08:ae:3f:
93:7b:5b:40:70:ec:ec:2c:ca:53:3d:c1:89:4e:ce:c3:57:19:
9d:71:02:48:a1:af:aa:b4:17:18:e3:4f:eb:42:6e:ca:b8:78:
93:a5:39:fa:91:89:2b:07:c4:c2:21:05:74:ad:9e:17:8b:b6:
ca:7f:5d:4c:c1:4a:e5:43:f6:d5:98:11:9d:1a:b8:4b:5d:f0:
53:3b:6b:4f:5c:d2:ee:b3:89:a0:5c:15:42:14:a6:58:b3:30:
da:00:d1:eb:ba:02:d4:b6:dd:94:77:d2:dc:89:91:ea:98:34:
92:ab:a7:53:3f:aa:84:aa:b4:a2:7b:65:c6:ab:66:23:da:34:
b5:b7:5b:df:a3:8c:ad:68:96:d1:d9:5a:69:2b:e3:01:95:b2:
19:21:79:cd:6b:2a:77:65:13:29:fc:6f:fa:fb:b8:6c:5d:96:
d7:87:4e:40:bd:c5:38:5b:10:08:41:ce:b4:a1:4e:fe:0e:ab:
8c:43:28:ee:11:49:0b:79:ea:73:d4:a6:49:6d:c5:40:96:89:
ee:65:f3:e7:13:1d:b6:2d:f8:61:ae:1e:9d:1d:ce:3c:9b:81:
93:94:d4:69:b2:99:1e:58:54:b7:53:89:08:04:d4:19:4c:6f:
bd:7f:5f:fd
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEiNq0Tb9dcR4kKuB4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzg2YTdiYTUtNjdjNS00ODFkLWIyNzgtMGIyNjVkYzk3
MTQ0MB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk
ZDJkYjEyOWUtYTVjYi00ZTMwLWFkNDctYWNmNTJhY2FlNTJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnxuhjPjgA3IGckf3Cp4LVPx3rmiTtxzKzP+
Zr1HhovU+o/nWh8KjNOKo43Gklgemnp43OPMN1O+xGBUESjWA42i0gEG2r0x3jMU
P92kjUu+rmR0VGOLPIPOdJKztxAmFKk6fHwkaHd6ybe/JhXIagaWugnfZUwhj+xC
LrnfGOKjdz0NaO2riyVG+NbrsVBKz723DyhGLjY3lyb8rCQLue/jqmqHlAkAu6v1
K6D9Swg0DT/zKU/ndzeu3HpNIWfTSPWQNEyFRZCiBLw5xAzwMwfaFNV6gbVcAdPv
/Y1j+5lNdboeIbrM58gAP8KwAyEsi9OP1pUtLnr5gSNavES7EQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFD00DgvwmUZKpEzbeqtRTtFDm1BRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODZh
N2JhNS02N2M1LTQ4MWQtYjI3OC0wYjI2NWRjOTcxNDQvYThhMDE0YTUtMmJlNi0z
OTE4LTllMGEtMGY3MjhjMjMwNTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg2YTdiYTUtNjdjNS00ODFkLWIy
NzgtMGIyNjVkYzk3MTQ0L2M4NmE3YmE1LTY3YzUtNDgxZC1iMjc4LTBiMjY1ZGM5
NzE0NC5jcmwwHwYDVR0jBBgwFoAUaZKNg8T0tJIYwf7weKQ89x3QKzwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODZhN2JhNS02N2M1LTQ4MWQtYjI3OC0wYjI2
NWRjOTcxNDQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQASnGWMA8E
AgACMAkDBwAmIAB9AAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACpV1N8IckcfF2Wx5/m8XCK4/k3tbQHDs
7CzKUz3BiU7Ow1cZnXECSKGvqrQXGONP60Juyrh4k6U5+pGJKwfEwiEFdK2eF4u2
yn9dTMFK5UP21ZgRnRq4S13wUztrT1zS7rOJoFwVQhSmWLMw2gDR67oC1LbdlHfS
3ImR6pg0kqunUz+qhKq0ontlxqtmI9o0tbdb36OMrWiW0dlaaSvjAZWyGSF5zWsq
d2UTKfxv+vu4bF2W14dOQL3FOFsQCEHOtKFO/g6rjEMo7hFJC3nqc9SmSW3FQJaJ
7mXz5xMdti34Ya4enR3OPJuBk5TUabKZHlhUt1OJCATUGUxvvX9f/Q==
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:51:25 2025 by rpki-client