Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a77ce80-d864-3e16-8a49-dc1c869a056f.roa
File: 1a77ce80-d864-3e16-8a49-dc1c869a056f.roa (raw, json)
Hash identifier: 88LlQ1+ChBBL04/hrurn+F39PhNAeEhBMjsOA5YjjXo=
Subject key identifier: DA:60:4E:CC:96:EC:2A:B8:A9:B8:9B:BE:75:F3:C6:3B:54:43:48:D5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAEF4612338B858CCCDDF80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a77ce80-d864-3e16-8a49-dc1c869a056f.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33659
IP address blocks: 174.57.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:f4:61:23:38:b8:58:cc:cd:df:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=858c2bb2-fac6-4489-9ff9-1c37bba23ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f4:98:15:20:79:5b:87:01:c5:27:ab:0c:e7:
af:96:06:9c:0a:94:a7:0a:c9:f2:8f:e0:6b:3a:58:
ec:04:9f:91:8d:f2:61:5f:c7:1a:d1:cd:63:df:cb:
67:49:ab:23:70:d1:73:df:f2:03:04:0d:a6:48:5d:
20:e9:9e:0f:1a:de:65:b6:ac:17:33:0c:28:b2:cf:
33:39:41:2c:e1:7e:67:d8:93:a4:26:b7:b0:e0:23:
f2:98:99:69:9d:4f:56:0a:5a:46:0f:ef:60:70:2c:
c3:5a:88:6f:0b:c9:9d:34:24:13:6a:00:e6:88:99:
f0:99:43:da:ff:c3:c1:85:44:c3:84:8c:aa:87:8a:
94:90:bf:0c:a7:fc:aa:73:09:1e:9a:9d:e6:21:9d:
99:57:e7:e1:3d:e6:47:30:77:e4:f0:e5:36:e2:6a:
e1:10:69:95:39:e8:b9:97:ce:b9:62:15:f3:b6:fc:
e6:f9:9a:c3:3d:6f:ff:68:f1:bb:b9:bb:e0:67:df:
63:94:8c:bc:e5:48:94:9a:2d:9b:a8:45:d8:c7:99:
a2:22:02:a1:d1:13:eb:7b:9b:2f:0c:b7:37:48:57:
53:b6:5f:a6:41:40:a7:7a:2a:4b:27:ee:70:9d:09:
f6:d6:2e:85:89:1b:da:2d:e2:f1:bd:06:45:45:05:
0d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:60:4E:CC:96:EC:2A:B8:A9:B8:9B:BE:75:F3:C6:3B:54:43:48:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a77ce80-d864-3e16-8a49-dc1c869a056f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.57.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:1d:6a:58:6f:19:2d:90:7c:01:72:53:c4:44:4d:30:ae:74:
e5:9b:66:96:8c:b0:28:57:a6:5a:2c:c1:10:90:e3:17:9c:e2:
b2:fa:f5:40:e4:71:2e:28:8d:15:fa:d1:ec:5f:86:b1:c7:d3:
73:a8:0c:33:78:02:78:ae:c0:54:8e:9f:96:57:8c:fd:9d:d6:
86:00:3f:11:47:fe:45:8f:2a:1c:16:d3:72:6b:2a:62:88:cd:
74:09:a4:a4:6a:b3:1a:59:ad:e5:dd:d5:f4:bd:61:4c:6a:85:
9c:47:01:7c:f5:47:5c:94:cf:13:2c:fd:12:d7:40:b6:b9:4f:
cd:e9:5f:25:33:ee:76:dd:fb:02:af:8e:7d:6e:b4:91:18:e4:
46:a8:ab:8b:27:fc:13:5b:42:4a:ac:f0:0f:e8:4e:f6:71:ce:
22:5f:e6:41:5d:31:d5:8e:67:36:b8:fb:c1:28:ca:a0:4a:f5:
60:05:71:7e:c6:f8:dc:80:a9:2b:7a:6b:be:30:54:6e:fa:00:
cb:05:89:68:c1:1b:3c:07:93:14:7c:04:44:e3:72:39:04:0b:
68:42:44:de:86:d6:e1:e5:13:ee:31:35:77:38:fe:ed:ed:63:
33:1d:42:3a:44:73:4e:f1:86:0d:2d:b3:71:9a:8a:25:5d:ec:
b3:57:26:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrvRhIzi4WMzN34AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ODU4YzJiYjItZmFjNi00NDg5LTlmZjktMWMzN2JiYTIzZmY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vSYFSB5W4cBxSerDOevlgacCpSnCsnyj+Br
OljsBJ+RjfJhX8ca0c1j38tnSasjcNFz3/IDBA2mSF0g6Z4PGt5ltqwXMwwoss8z
OUEs4X5n2JOkJrew4CPymJlpnU9WClpGD+9gcCzDWohvC8mdNCQTagDmiJnwmUPa
/8PBhUTDhIyqh4qUkL8Mp/yqcwkemp3mIZ2ZV+fhPeZHMHfk8OU24mrhEGmVOei5
l865YhXztvzm+ZrDPW//aPG7ubvgZ99jlIy85UiUmi2bqEXYx5miIgKh0RPre5sv
DLc3SFdTtl+mQUCneipLJ+5wnQn21i6FiRvaLeLxvQZFRQUNfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNpgTsyW7Cq4qbibvnXzxjtUQ0jVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWE3N2NlODAtZDg2NC0z
ZTE2LThhNDktZGMxYzg2OWEwNTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrjlYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAgdalhvGS2QfAFyU8RETTCudOWbZpaMsChXploswRCQ4xec4rL69UDk
cS4ojRX60exfhrHH03OoDDN4AniuwFSOn5ZXjP2d1oYAPxFH/kWPKhwW03JrKmKI
zXQJpKRqsxpZreXd1fS9YUxqhZxHAXz1R1yUzxMs/RLXQLa5T83pXyUz7nbd+wKv
jn1utJEY5Eaoq4sn/BNbQkqs8A/oTvZxziJf5kFdMdWOZza4+8EoyqBK9WAFcX7G
+NyAqSt6a74wVG76AMsFiWjBGzwHkxR8BETjcjkEC2hCRN6G1uHlE+4xNXc4/u3t
YzMdQjpEc07xhg0ts3GaiiVd7LNXJmE=
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:36:50 2025 by rpki-client