Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/1a49a204-f23b-390b-a867-32da110f685c.roa
File: 1a49a204-f23b-390b-a867-32da110f685c.roa (raw, json)
Hash identifier: r/zyhw1RopDd7ZoGTKfSyiLeBptQRHM9Bawd8qbUij4=
Subject key identifier: 56:43:9B:10:F7:8B:0C:2D:45:B1:3B:F4:29:41:1D:E4:77:7F:4E:98
Certificate issuer: /CN=11111c75-ef67-41bd-b074-4c401bf74ccd
Certificate serial: 010D0C9F4328584911BB0DC30D2A2EF442C5D300
Authority key identifier: 29:B8:F7:05:F8:67:60:30:DB:26:B9:66:F3:69:B3:C3:BF:59:90:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/1a49a204-f23b-390b-a867-32da110f685c.roa
Signing time: Mon 03 Mar 2025 21:19:27 +0000
ROA not before: Mon 03 Mar 2025 21:19:27 +0000
ROA not after: Sun 01 Jun 2025 20:19:27 +0000
asID: 8047
IP address blocks: 72.42.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:11:bb:0d:c3:0d:2a:2e:f4:42:c5:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11111c75-ef67-41bd-b074-4c401bf74ccd
Validity
Not Before: Mar 3 21:19:27 2025 GMT
Not After : Jun 1 20:19:27 2025 GMT
Subject: CN=d655a936-96fa-48e0-85b7-c9728135dcde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e5:54:2d:42:9d:2c:e8:21:ad:d3:e2:8f:87:
15:93:7f:72:16:0b:1c:14:5c:b0:87:7c:10:e2:f8:
d7:f8:32:e8:e7:37:48:8a:7a:b6:80:e0:5c:70:68:
78:2c:64:36:86:1f:19:ce:ed:01:0e:f0:b4:c3:af:
0f:ac:a7:c0:be:92:50:0e:81:4f:a0:bc:0a:6b:53:
2e:cd:fd:5b:de:8e:bf:f6:90:25:06:10:25:b1:7e:
98:fe:44:ee:a5:7e:10:62:be:02:25:21:86:8c:78:
4d:4f:08:12:11:9c:38:be:dc:5a:bd:5a:25:1b:2b:
0c:f3:f0:d6:b9:89:c4:37:09:84:3a:e3:c2:5b:10:
45:cb:11:05:f0:d5:e3:5f:36:15:c4:42:91:16:ce:
91:b2:4a:50:9b:6f:fb:1c:d8:3f:15:a0:dc:6c:69:
13:90:11:5f:1a:1c:95:22:8c:b0:1d:72:33:b2:b5:
f6:44:c3:49:c9:c1:46:e6:20:b7:14:4f:7d:4a:fc:
28:8f:dd:13:15:b3:96:37:7d:bf:a3:1f:51:39:bd:
8c:84:5a:6b:d5:91:76:48:c3:fe:00:f5:e5:65:74:
74:3b:d3:0d:e8:09:89:b8:0f:aa:a8:4a:bb:6e:28:
21:cd:54:5b:fc:fd:bf:27:7f:e9:50:b7:25:01:f9:
85:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:43:9B:10:F7:8B:0C:2D:45:B1:3B:F4:29:41:1D:E4:77:7F:4E:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/1a49a204-f23b-390b-a867-32da110f685c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/11111c75-ef67-41bd-b074-4c401bf74ccd.crl
X509v3 Authority Key Identifier:
keyid:29:B8:F7:05:F8:67:60:30:DB:26:B9:66:F3:69:B3:C3:BF:59:90:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd.cer
sbgp-ipAddrBlock: critical
IPv4:
72.42.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:6d:ea:d8:42:9f:b4:23:08:16:23:3d:19:5e:02:7f:32:e0:
80:09:ac:e6:a3:ab:bd:3b:c3:53:95:8d:41:24:54:7e:9b:cb:
32:1a:55:7f:0f:e4:2b:a2:5c:83:22:35:93:09:7e:c2:04:7f:
86:7b:8c:28:48:35:c9:9c:c8:73:de:15:9f:57:4a:2b:7d:ea:
c4:6f:60:ca:dd:92:63:03:2b:aa:f5:58:a3:b0:0a:a0:7c:b0:
b9:b8:79:db:c7:a9:36:3d:4c:a0:0d:28:4a:38:46:cd:b7:40:
9a:e3:02:b5:79:18:6d:41:dc:7c:2a:bf:77:1b:eb:bd:f7:54:
db:ee:c6:6f:d8:2b:74:83:55:7b:cb:25:c2:22:05:d4:eb:8c:
e3:36:d3:d1:07:2c:57:46:c9:d3:39:39:1f:15:1a:56:50:26:
fc:32:79:87:45:18:56:c8:d4:5b:af:d7:c6:af:da:77:2f:01:
08:f5:71:87:08:07:d9:d1:37:f1:f3:14:e1:e8:a2:48:0c:2b:
15:3b:48:4f:07:4d:9d:b4:5e:24:16:16:32:ec:09:d5:ee:5b:
b5:3f:3a:ca:48:1d:80:e8:be:91:be:d3:72:43:9e:d1:08:a1:
2a:87:06:d3:d1:5c:be:ef:14:40:69:09:19:99:a6:a5:1c:e7:
05:e4:f3:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkRuw3DDSou9ELF0wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTExMTFjNzUtZWY2Ny00MWJkLWIwNzQtNGM0MDFiZjc0
Y2NkMB4XDTI1MDMwMzIxMTkyN1oXDTI1MDYwMTIwMTkyN1owLzEtMCsGA1UEAxMk
ZDY1NWE5MzYtOTZmYS00OGUwLTg1YjctYzk3MjgxMzVkY2RlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eVULUKdLOghrdPij4cVk39yFgscFFywh3wQ
4vjX+DLo5zdIinq2gOBccGh4LGQ2hh8Zzu0BDvC0w68PrKfAvpJQDoFPoLwKa1Mu
zf1b3o6/9pAlBhAlsX6Y/kTupX4QYr4CJSGGjHhNTwgSEZw4vtxavVolGysM8/DW
uYnENwmEOuPCWxBFyxEF8NXjXzYVxEKRFs6RskpQm2/7HNg/FaDcbGkTkBFfGhyV
IoywHXIzsrX2RMNJycFG5iC3FE99Svwoj90TFbOWN32/ox9ROb2MhFpr1ZF2SMP+
APXlZXR0O9MN6AmJuA+qqEq7bighzVRb/P2/J3/pULclAfmFnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFZDmxD3iwwtRbE79ClBHeR3f06YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMTEx
MWM3NS1lZjY3LTQxYmQtYjA3NC00YzQwMWJmNzRjY2QvMWE0OWEyMDQtZjIzYi0z
OTBiLWE4NjctMzJkYTExMGY2ODVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTExMTFjNzUtZWY2Ny00MWJkLWIw
NzQtNGM0MDFiZjc0Y2NkLzExMTExYzc1LWVmNjctNDFiZC1iMDc0LTRjNDAxYmY3
NGNjZC5jcmwwHwYDVR0jBBgwFoAUKbj3BfhnYDDbJrlm82mzw79ZkP4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMTExMWM3NS1lZjY3LTQxYmQtYjA3NC00YzQw
MWJmNzRjY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSCqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACtt6thCn7QjCBYjPRleAn8y4IAJrOajq707w1OVjUEkVH6byzIaVX8P
5CuiXIMiNZMJfsIEf4Z7jChINcmcyHPeFZ9XSit96sRvYMrdkmMDK6r1WKOwCqB8
sLm4edvHqTY9TKANKEo4Rs23QJrjArV5GG1B3Hwqv3cb6733VNvuxm/YK3SDVXvL
JcIiBdTrjOM209EHLFdGydM5OR8VGlZQJvwyeYdFGFbI1Fuv18av2ncvAQj1cYcI
B9nRN/HzFOHookgMKxU7SE8HTZ20XiQWFjLsCdXuW7U/OspIHYDovpG+03JDntEI
oSqHBtPRXL7vFEBpCRmZpqUc5wXk81Q=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:49 2025 by rpki-client