Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/ac82c1e8-a4fe-310f-aabb-542370b44ca8.roa
File: ac82c1e8-a4fe-310f-aabb-542370b44ca8.roa (raw, json)
Hash identifier: IYfMT4jmVakAim2Go0337VjS41cejP/rIIjYGuVbmq0=
Subject key identifier: FF:08:AE:07:A7:16:1D:56:9B:FD:C1:EA:CE:CD:2C:DE:67:49:62:EB
Certificate issuer: /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial: 010D0C9F432858491ED6E3A983C4FA7B8955A600
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/ac82c1e8-a4fe-310f-aabb-542370b44ca8.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 174
IP address blocks: 65.160.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:e3:a9:83:c4:fa:7b:89:55:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=4375d7e3-20eb-4212-a7c0-7cb544dc3bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9a:0a:4b:fc:9b:2d:f9:68:5b:a9:10:04:c1:
a0:99:76:e8:31:d8:ba:f9:2f:b0:be:64:a0:7a:b6:
e7:df:99:e2:0f:df:27:65:63:a5:00:5a:7f:a0:b0:
1b:4c:60:1a:99:44:95:d0:46:2e:24:72:f3:d8:34:
c4:58:ea:37:7e:3d:30:32:ff:36:8c:a0:15:42:eb:
88:44:a3:96:6a:eb:f1:18:4c:d7:54:8c:33:b9:0b:
38:6d:55:db:de:af:c3:49:23:75:3b:c0:53:cb:81:
fd:8e:04:76:9b:db:c1:d8:d1:9d:a2:a1:b2:ac:36:
93:aa:cf:2b:07:ea:ae:f8:dc:99:6f:16:7e:da:bf:
74:2d:04:39:93:4e:94:c7:75:ab:ec:40:79:7d:f8:
d7:0b:b3:75:da:8e:da:26:8c:35:a0:4f:5e:79:17:
11:0e:df:2c:a8:48:68:49:eb:92:8b:90:e9:23:b8:
bd:07:a0:f2:8f:59:53:10:23:36:ed:96:69:b2:16:
13:4f:7b:e5:1e:91:14:40:eb:d8:79:fe:af:07:33:
2f:d8:95:b7:8c:1d:71:54:54:03:c2:52:55:a8:32:
76:e7:c6:ba:e3:90:4e:ab:c2:c9:7b:73:d4:24:aa:
37:d5:40:45:ec:44:df:d1:83:1a:af:4e:e4:ae:67:
63:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:08:AE:07:A7:16:1D:56:9B:FD:C1:EA:CE:CD:2C:DE:67:49:62:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/ac82c1e8-a4fe-310f-aabb-542370b44ca8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
X509v3 Authority Key Identifier:
keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
sbgp-ipAddrBlock: critical
IPv4:
65.160.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:18:d3:cb:f6:9d:96:b8:f2:39:36:bd:27:57:92:ca:c2:06:
ae:2f:45:19:f1:6a:fd:0e:cc:dd:f1:7a:e8:00:66:fa:3f:79:
86:45:80:b1:7e:48:1e:24:06:72:b2:37:55:91:eb:c8:2e:68:
a2:4f:8c:1f:88:37:93:38:7e:2c:5d:32:c2:59:7f:c7:ac:19:
6b:a6:9d:4d:55:17:ed:fd:d0:e8:96:1a:00:ab:50:62:07:60:
0a:c5:e1:63:94:09:1c:ae:bc:c0:cb:ab:c2:3e:ef:e5:9a:fa:
4b:a2:4c:86:99:98:b7:07:5b:b4:5c:8c:bb:69:b6:fc:ee:02:
5b:74:29:44:f0:94:97:eb:39:f8:0a:96:8f:bb:53:6a:3c:c1:
9b:ac:95:65:62:d0:19:70:2e:84:47:22:b0:d5:cf:45:0a:ed:
cf:9c:bf:46:0f:3c:54:a6:cd:b2:8f:19:f2:32:06:f6:07:fa:
fd:7b:21:88:55:bf:6a:05:23:17:4f:03:22:ff:09:2b:90:5c:
0c:7b:c6:7e:d8:28:9e:b1:ee:b5:99:cd:dc:36:45:38:43:df:
45:1d:93:a0:82:cc:ee:c9:49:24:f3:5a:c4:bd:ca:32:d7:9e:
13:8c:7f:c6:57:a8:eb:53:e8:75:d6:47:7c:c8:15:cf:31:f2:
f4:15:34:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1uOpg8T6e4lVpgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk
ZjZkMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk
NDM3NWQ3ZTMtMjBlYi00MjEyLWE3YzAtN2NiNTQ0ZGMzYmFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15oKS/ybLfloW6kQBMGgmXboMdi6+S+wvmSg
erbn35niD98nZWOlAFp/oLAbTGAamUSV0EYuJHLz2DTEWOo3fj0wMv82jKAVQuuI
RKOWauvxGEzXVIwzuQs4bVXb3q/DSSN1O8BTy4H9jgR2m9vB2NGdoqGyrDaTqs8r
B+qu+NyZbxZ+2r90LQQ5k06Ux3Wr7EB5ffjXC7N12o7aJow1oE9eeRcRDt8sqEho
SeuSi5DpI7i9B6Dyj1lTECM27ZZpshYTT3vlHpEUQOvYef6vBzMv2JW3jB1xVFQD
wlJVqDJ258a645BOq8LJe3PUJKo31UBF7ETf0YMar07krmdjfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP8IrgenFh1Wm/3B6s7NLN5nSWLrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm
MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvYWM4MmMxZTgtYTRmZS0z
MTBmLWFhYmItNTQyMzcwYjQ0Y2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw
MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy
ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy
ZWIyMmRmNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQaBGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFsY08v2nZa48jk2vSdXksrCBq4vRRnxav0OzN3xeugAZvo/eYZFgLF+
SB4kBnKyN1WR68guaKJPjB+IN5M4fixdMsJZf8esGWumnU1VF+390OiWGgCrUGIH
YArF4WOUCRyuvMDLq8I+7+Wa+kuiTIaZmLcHW7RcjLtptvzuAlt0KUTwlJfrOfgK
lo+7U2o8wZuslWVi0BlwLoRHIrDVz0UK7c+cv0YPPFSmzbKPGfIyBvYH+v17IYhV
v2oFIxdPAyL/CSuQXAx7xn7YKJ6x7rWZzdw2RThD30Udk6CCzO7JSSTzWsS9yjLX
nhOMf8ZXqOtT6HXWR3zIFc8x8vQVNHs=
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:12:52 2025 by rpki-client