Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/e94d701f-d4f8-34d9-9378-572a7951e7f6.roa
File: e94d701f-d4f8-34d9-9378-572a7951e7f6.roa (raw, json)
Hash identifier: J3+VNc9esVX1fCaLd7a6bJMKrTXma6b1xaldVDxD2JA=
Subject key identifier: 43:41:23:A9:44:41:2F:91:69:F0:58:D6:9D:B9:F6:5A:98:16:74:35
Certificate issuer: /CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
Certificate serial: 010D0C9F4328584913AC1DECC81B4A25D71A0F00
Authority key identifier: C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/e94d701f-d4f8-34d9-9378-572a7951e7f6.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 20299
IP address blocks: 65.182.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:1d:ec:c8:1b:4a:25:d7:1a:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=7335b3b4-a6c8-4310-8c60-9a3334a3a626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ff:5d:6f:84:4e:dd:e1:e6:dc:f0:4e:86:20:
69:de:f7:cf:8a:5f:be:fa:45:36:dc:af:96:f3:1a:
08:c9:49:06:bc:1d:d4:fc:db:32:c2:8f:25:fb:e2:
40:03:38:2f:99:c4:2e:89:4d:a9:e8:cb:38:54:10:
f7:ef:84:4a:ba:2e:5d:44:a6:2f:ea:61:a2:bb:2f:
dd:fd:07:80:ec:2d:5b:bd:c4:55:b9:c6:2c:99:0b:
a2:21:67:43:a0:77:b9:17:0f:7e:33:5b:59:27:c5:
e8:ad:7f:5d:0e:89:48:df:b9:23:4e:07:43:ad:3f:
39:2b:d0:dd:61:b4:20:35:48:5f:85:fc:1d:54:31:
99:9e:2f:51:c4:da:a7:8f:3c:e2:8c:68:7d:5d:5d:
e3:bb:33:c9:60:97:71:6c:a2:73:b9:9c:8d:76:1d:
d9:17:b9:73:10:e1:49:4e:e6:49:ed:41:a9:4f:5f:
3f:12:14:f4:30:c6:66:1e:8d:3f:31:7e:2f:9d:a0:
9c:88:c9:af:fc:bb:99:ce:85:42:9c:fe:8b:70:f0:
93:4f:d4:ea:bb:1e:cd:ca:41:d9:a6:9e:86:fa:a7:
6a:b1:76:7e:63:f3:6a:22:60:53:c8:92:60:47:06:
6b:bc:35:0d:47:0a:ca:15:fb:84:6e:4f:8a:a2:69:
50:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:41:23:A9:44:41:2F:91:69:F0:58:D6:9D:B9:F6:5A:98:16:74:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/e94d701f-d4f8-34d9-9378-572a7951e7f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl
X509v3 Authority Key Identifier:
keyid:C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
sbgp-ipAddrBlock: critical
IPv4:
65.182.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:ef:45:94:08:4b:a4:27:0a:2f:c6:98:4d:ac:0e:4b:1d:4d:
43:7f:82:7d:bf:07:84:f2:d8:80:f0:79:df:bd:f3:5a:47:07:
2a:ef:df:cb:93:29:fd:5b:01:75:be:50:1d:b7:13:2a:7d:40:
1a:3c:8f:0a:92:40:70:88:6a:04:a1:58:42:2e:b3:0f:35:8c:
44:5f:9a:e4:8f:64:56:eb:fd:07:8a:1d:ef:a6:98:3e:65:cf:
78:b9:60:c9:1b:09:49:fb:20:56:de:ea:21:a0:da:7f:ff:c5:
90:72:be:3d:75:6a:64:b2:f3:7c:fb:1b:f5:4f:82:8c:90:12:
29:87:c3:29:f6:0d:cf:3d:c9:46:74:3d:ef:cb:fc:81:43:11:
34:8e:7a:9d:e6:e2:1f:eb:78:bd:0f:c1:d7:c5:52:a9:06:93:
4c:d5:8b:5a:25:d1:c3:ee:89:ac:d3:88:ab:f0:23:8d:f4:1e:
ac:d0:9e:b5:99:5a:56:32:46:1e:3a:8a:30:9d:8c:bc:9e:8b:
e2:c8:af:9a:e9:2c:ed:5c:77:0d:aa:4c:7b:fa:3c:45:eb:49:
90:21:6c:9e:08:9d:5f:e2:90:d2:2d:64:05:6f:1f:2f:3e:4e:
dd:be:87:0d:d3:ba:9d:7e:b4:1c:62:b8:5f:10:30:2f:79:6e:
57:76:4c:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrB3syBtKJdcaDwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjE1MzJhZGItZWQ3ZC00M2JhLWE2NmYtMmEzMzNmYjlj
ZjYyMB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk
NzMzNWIzYjQtYTZjOC00MzEwLThjNjAtOWEzMzM0YTNhNjI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1v9db4RO3eHm3PBOhiBp3vfPil+++kU23K+W
8xoIyUkGvB3U/Nsywo8l++JAAzgvmcQuiU2p6Ms4VBD374RKui5dRKYv6mGiuy/d
/QeA7C1bvcRVucYsmQuiIWdDoHe5Fw9+M1tZJ8XorX9dDolI37kjTgdDrT85K9Dd
YbQgNUhfhfwdVDGZni9RxNqnjzzijGh9XV3juzPJYJdxbKJzuZyNdh3ZF7lzEOFJ
TuZJ7UGpT18/EhT0MMZmHo0/MX4vnaCciMmv/LuZzoVCnP6LcPCTT9Tqux7NykHZ
pp6G+qdqsXZ+Y/NqImBTyJJgRwZrvDUNRwrKFfuEbk+KomlQAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFENBI6lEQS+RafBY1p259lqYFnQ1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MTUz
MmFkYi1lZDdkLTQzYmEtYTY2Zi0yYTMzM2ZiOWNmNjIvZTk0ZDcwMWYtZDRmOC0z
NGQ5LTkzNzgtNTcyYTc5NTFlN2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjE1MzJhZGItZWQ3ZC00M2JhLWE2
NmYtMmEzMzNmYjljZjYyLzYxNTMyYWRiLWVkN2QtNDNiYS1hNjZmLTJhMzMzZmI5
Y2Y2Mi5jcmwwHwYDVR0jBBgwFoAUyWUizQq8OtYAsr0X/ULCZsZFX80wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82MTUzMmFkYi1lZDdkLTQzYmEtYTY2Zi0yYTMz
M2ZiOWNmNjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQbYHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD7vRZQIS6QnCi/GmE2sDksdTUN/gn2/B4Ty2IDwed+981pHByrv38uT
Kf1bAXW+UB23Eyp9QBo8jwqSQHCIagShWEIusw81jERfmuSPZFbr/QeKHe+mmD5l
z3i5YMkbCUn7IFbe6iGg2n//xZByvj11amSy83z7G/VPgoyQEimHwyn2Dc89yUZ0
Pe/L/IFDETSOep3m4h/reL0PwdfFUqkGk0zVi1ol0cPuiazTiKvwI430HqzQnrWZ
WlYyRh46ijCdjLyei+LIr5rpLO1cdw2qTHv6PEXrSZAhbJ4InV/ikNItZAVvHy8+
Tt2+hw3Tup1+tBxiuF8QMC95bld2TMU=
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:26:33 2025 by rpki-client