Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/1f36c010-0da8-3095-9972-d65efcd1e1f1.roa
File: 1f36c010-0da8-3095-9972-d65efcd1e1f1.roa (raw, json)
Hash identifier: nDar4YVPTIdVuvEkPaZVGvR59KscD65O7dQA9dPCcFU=
Subject key identifier: 75:6B:2A:7D:CB:0A:8B:49:4B:5F:35:49:64:21:1B:C5:81:06:DA:CD
Certificate issuer: /CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd
Certificate serial: 010D0C9F43285849350EAEDD27D1DFEEC975F2E0
Authority key identifier: 0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/1f36c010-0da8-3095-9972-d65efcd1e1f1.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 393474
IP address blocks: 64.90.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:ae:dd:27:d1:df:ee:c9:75:f2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=34ab18f4-f22d-403d-953e-a314fd76503c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:03:b1:ad:48:1d:82:c3:89:d7:5e:6f:60:d7:
0d:97:f9:4a:a5:4e:82:30:f2:4e:ac:da:a4:02:ad:
f9:60:74:82:8e:8d:69:be:46:c0:9e:c0:31:50:98:
dd:ef:22:33:92:8a:4a:e7:36:60:62:b9:4a:1f:89:
87:5a:07:30:06:3d:05:bd:13:50:33:9e:99:9e:7f:
c3:c2:64:cc:cd:84:a7:ff:f6:56:ff:7f:19:9f:b6:
9d:ef:4f:f6:03:ad:8b:4a:9b:7c:e9:48:85:bf:73:
69:f3:ef:3a:71:62:da:5a:5b:31:38:ca:59:ec:00:
68:02:84:7a:3a:f0:5f:15:f1:67:09:61:8f:da:9a:
d5:46:54:f2:17:00:3a:fe:21:e8:9f:e8:99:e4:c2:
3e:25:78:84:ad:d5:fc:5a:89:4c:b1:64:46:77:e8:
f8:b2:f8:06:21:23:f1:9a:e5:bf:c4:e5:1e:df:24:
86:82:b0:13:e2:ce:b9:da:6a:d7:78:81:7b:99:be:
d0:95:2e:b2:fe:64:76:7c:70:c2:f2:89:fd:6a:53:
81:ef:e9:04:a7:f0:e7:73:b0:df:04:17:95:64:35:
6c:a6:bc:f2:51:5f:f8:35:bb:84:3c:30:59:59:5e:
bb:70:13:e9:be:a5:f7:7c:fc:84:a8:be:7d:69:89:
b9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6B:2A:7D:CB:0A:8B:49:4B:5F:35:49:64:21:1B:C5:81:06:DA:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/1f36c010-0da8-3095-9972-d65efcd1e1f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl
X509v3 Authority Key Identifier:
keyid:0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer
sbgp-ipAddrBlock: critical
IPv4:
64.90.135.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:00:62:02:b7:e7:30:34:e0:46:d1:11:08:0d:58:b0:2b:fb:
89:ad:36:f1:95:b4:95:5c:ed:0f:64:51:85:03:6e:a0:10:60:
60:78:e5:8e:6c:4e:de:3d:c1:27:7a:81:5a:79:7e:8a:9f:4a:
00:a9:33:4b:bb:df:8a:f7:89:03:e4:41:f6:15:da:08:be:c2:
82:71:e1:af:a5:51:74:b2:b9:fb:bc:22:d5:dd:34:4f:56:77:
0e:1c:d4:c6:92:80:15:10:5c:55:b5:03:c1:7e:f6:3e:80:ac:
1f:02:56:c1:56:5a:53:ff:9b:14:71:e3:f9:9f:b6:b3:f6:46:
88:61:e8:67:ab:fc:99:9c:9c:ef:ea:86:68:3d:f1:43:a0:33:
ca:44:07:8c:52:6e:aa:a6:e8:9c:22:d8:33:38:3f:2f:5f:ef:
7a:10:9f:e9:78:27:86:86:42:7e:7b:84:11:2c:23:7c:c3:db:
92:e2:e5:60:40:b1:b1:63:eb:36:b6:6b:b9:49:71:ea:57:d5:
87:66:c9:fd:d6:91:07:de:5a:c1:11:0c:ed:b6:0d:ef:82:a4:
aa:da:7c:b7:b9:6d:69:eb:a0:a0:52:71:da:89:ab:2b:e9:8a:
07:da:16:ba:45:b3:d4:53:11:ee:69:5e:70:49:71:61:fb:a8:
fb:8b:0f:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1Dq7dJ9Hf7sl18uAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMwMmRjOWMtMTJlOS00YjY2LThjNmQtZTI5OTRhMjFh
MWJkMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk
MzRhYjE4ZjQtZjIyZC00MDNkLTk1M2UtYTMxNGZkNzY1MDNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAOxrUgdgsOJ115vYNcNl/lKpU6CMPJOrNqk
Aq35YHSCjo1pvkbAnsAxUJjd7yIzkopK5zZgYrlKH4mHWgcwBj0FvRNQM56Znn/D
wmTMzYSn//ZW/38Zn7ad70/2A62LSpt86UiFv3Np8+86cWLaWlsxOMpZ7ABoAoR6
OvBfFfFnCWGP2prVRlTyFwA6/iHon+iZ5MI+JXiErdX8WolMsWRGd+j4svgGISPx
muW/xOUe3ySGgrAT4s652mrXeIF7mb7QlS6y/mR2fHDC8on9alOB7+kEp/Dnc7Df
BBeVZDVsprzyUV/4NbuEPDBZWV67cBPpvqX3fPyEqL59aYm5AQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHVrKn3LCotJS181SWQhG8WBBtrNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAy
ZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5NGEyMWExYmQvMWYzNmMwMTAtMGRhOC0z
MDk1LTk5NzItZDY1ZWZjZDFlMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTMwMmRjOWMtMTJlOS00YjY2LThj
NmQtZTI5OTRhMjFhMWJkL2EzMDJkYzljLTEyZTktNGI2Ni04YzZkLWUyOTk0YTIx
YTFiZC5jcmwwHwYDVR0jBBgwFoAUD9wvbjNkX+N70ljHXoRo2VwdIpswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAyZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5
NGEyMWExYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFqHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHoAYgK35zA04EbREQgNWLAr+4mtNvGVtJVc7Q9kUYUDbqAQYGB45Y5s
Tt49wSd6gVp5foqfSgCpM0u734r3iQPkQfYV2gi+woJx4a+lUXSyufu8ItXdNE9W
dw4c1MaSgBUQXFW1A8F+9j6ArB8CVsFWWlP/mxRx4/mftrP2Rohh6Ger/JmcnO/q
hmg98UOgM8pEB4xSbqqm6Jwi2DM4Py9f73oQn+l4J4aGQn57hBEsI3zD25Li5WBA
sbFj6za2a7lJcepX1Ydmyf3WkQfeWsERDO22De+CpKrafLe5bWnroKBScdqJqyvp
igfaFrpFs9RTEe5pXnBJcWH7qPuLD0o=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:42:31 2025 by rpki-client