Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/1e6d92e5-d123-30be-b170-e56ac208e478.roa
File: 1e6d92e5-d123-30be-b170-e56ac208e478.roa (raw, json)
Hash identifier: vtFPaho1Ql+VUmU4Lvhk8Cgx4tk3Egsx6OxNZlj9tfA=
Subject key identifier: 68:68:BF:62:E6:DE:2E:83:A0:D3:A3:3A:A7:32:44:97:D0:C4:72:0C
Certificate issuer: /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial: 010D0C9F432858494CC950277BB58E62E187C9C0
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/1e6d92e5-d123-30be-b170-e56ac208e478.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 20473
IP address blocks: 70.34.192.0/19 maxlen: 32
70.34.240.0/20 maxlen: 32
208.72.152.0/22 maxlen: 32
208.76.220.0/22 maxlen: 32
216.238.64.0/18 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:50:27:7b:b5:8e:62:e1:87:c9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=48f0e98f-6e20-4e9e-ba39-5daf3c2fd094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4c:36:cf:93:b2:cb:d8:27:97:a1:3d:6f:06:
b4:62:4e:82:00:89:30:b5:df:cd:85:0b:24:92:ee:
b7:04:9b:70:9a:a1:ca:b8:ce:f9:81:a5:f0:55:e4:
78:ce:18:90:c2:29:bf:d4:a6:10:43:39:fc:d6:1e:
16:fa:e3:f6:cc:93:42:af:3b:99:40:8e:84:c1:6d:
b2:30:08:85:47:c3:50:03:d6:67:a1:25:c1:d4:ca:
10:50:78:61:cc:c2:a0:2f:63:b0:76:4d:28:db:97:
01:09:71:03:dd:80:b2:c2:12:ae:ff:22:be:5d:1b:
d6:6a:1f:01:8b:4b:60:70:b8:f0:87:f4:80:0d:7f:
00:03:5c:56:41:82:c3:a1:c4:93:d4:80:2d:20:40:
30:78:01:c6:57:10:d7:21:17:d8:fa:40:ee:30:20:
08:6e:b6:43:f2:a9:34:04:63:1c:64:a5:42:e2:6a:
b7:ba:aa:2c:b6:00:63:8b:56:76:89:76:53:bd:ca:
08:72:ae:49:55:59:f2:33:7b:b5:4a:f0:88:27:9c:
17:fb:7f:ac:ac:15:cd:96:2e:31:40:68:6a:f6:a5:
2a:73:3f:4d:1a:c7:5d:40:cf:66:83:04:7c:ca:20:
81:dc:76:e6:2d:ba:18:0d:5c:61:a7:c8:fd:76:02:
c4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:68:BF:62:E6:DE:2E:83:A0:D3:A3:3A:A7:32:44:97:D0:C4:72:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/1e6d92e5-d123-30be-b170-e56ac208e478.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
X509v3 Authority Key Identifier:
keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
sbgp-ipAddrBlock: critical
IPv4:
70.34.192.0/19
70.34.240.0/20
208.72.152.0/22
208.76.220.0/22
216.238.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:e5:61:4c:14:8b:4a:0d:1b:8e:02:ad:32:7b:fa:29:4c:9b:
96:6c:42:bf:a8:2b:12:a5:b4:61:71:6a:84:4c:e9:01:54:c1:
93:0b:12:7c:7f:72:08:a5:d4:49:37:3f:56:46:38:30:12:63:
50:71:1b:a6:08:b0:5d:d9:82:8c:3f:a6:25:60:80:50:09:29:
da:16:c6:ee:b7:63:44:9d:42:49:84:fd:38:a3:98:a5:9f:10:
d4:de:88:21:96:91:54:18:d2:7f:9f:aa:f5:95:90:55:69:56:
5a:d3:d3:5a:e9:cc:86:5b:57:4e:7a:12:18:14:ba:e2:1f:b4:
ad:f0:47:ad:03:3b:d5:88:25:aa:b0:1d:8e:90:ae:e7:78:4a:
25:24:7f:6e:57:52:d8:a2:9e:63:b9:51:78:0b:c6:93:65:18:
79:37:60:63:33:b3:a1:e8:ef:53:b8:6a:fc:7f:c4:d2:24:f9:
90:47:4e:c3:29:03:fc:8b:fe:96:74:43:18:ac:e6:7e:35:96:
72:20:21:82:36:66:3e:bb:6f:3b:e0:07:c0:cc:72:e7:bd:5a:
89:bd:fd:b2:4f:be:f6:1d:f1:ac:44:25:53:6f:c9:de:8b:9d:
15:d4:ac:c2:87:28:b2:bd:c1:9c:e0:76:21:74:12:9b:97:51:
de:6c:d5:59
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWElMyVAne7WOYuGHycAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjM4MTc3MzYtN2U1ZS00NzQwLThlZTEtYWM2ZjIzMTdm
MDhkMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk
NDhmMGU5OGYtNmUyMC00ZTllLWJhMzktNWRhZjNjMmZkMDk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0w2z5Oyy9gnl6E9bwa0Yk6CAIkwtd/NhQsk
ku63BJtwmqHKuM75gaXwVeR4zhiQwim/1KYQQzn81h4W+uP2zJNCrzuZQI6EwW2y
MAiFR8NQA9ZnoSXB1MoQUHhhzMKgL2Owdk0o25cBCXED3YCywhKu/yK+XRvWah8B
i0tgcLjwh/SADX8AA1xWQYLDocST1IAtIEAweAHGVxDXIRfY+kDuMCAIbrZD8qk0
BGMcZKVC4mq3uqostgBji1Z2iXZTvcoIcq5JVVnyM3u1SvCIJ5wX+3+srBXNli4x
QGhq9qUqcz9NGsddQM9mgwR8yiCB3HbmLboYDVxhp8j9dgLE6QIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFGhov2Lm3i6DoNOjOqcyRJfQxHIMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82Mzgx
NzczNi03ZTVlLTQ3NDAtOGVlMS1hYzZmMjMxN2YwOGQvMWU2ZDkyZTUtZDEyMy0z
MGJlLWIxNzAtZTU2YWMyMDhlNDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjM4MTc3MzYtN2U1ZS00NzQwLThl
ZTEtYWM2ZjIzMTdmMDhkLzYzODE3NzM2LTdlNWUtNDc0MC04ZWUxLWFjNmYyMzE3
ZjA4ZC5jcmwwHwYDVR0jBBgwFoAUtfT/gcvgoCb1EjWns0Rz0IlP/HcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82MzgxNzczNi03ZTVlLTQ3NDAtOGVlMS1hYzZm
MjMxN2YwOGQuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQFRiLAAwQE
RiLwAwQC0EiYAwQC0EzcAwQG2O5AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADDlYUwUi0oNG44CrTJ7+ilM
m5ZsQr+oKxKltGFxaoRM6QFUwZMLEnx/cgil1Ek3P1ZGODASY1BxG6YIsF3Zgow/
piVggFAJKdoWxu63Y0SdQkmE/TijmKWfENTeiCGWkVQY0n+fqvWVkFVpVlrT01rp
zIZbV056EhgUuuIftK3wR60DO9WIJaqwHY6Qrud4SiUkf25XUtiinmO5UXgLxpNl
GHk3YGMzs6Ho71O4avx/xNIk+ZBHTsMpA/yL/pZ0Qxis5n41lnIgIYI2Zj67bzvg
B8DMcue9Wom9/bJPvvYd8axEJVNvyd6LnRXUrMKHKLK9wZzgdiF0EpuXUd5s1Vk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:11 2025 by rpki-client