Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/1a6706bd-6cd5-3a7f-a8cf-611f08673076.roa
File: 1a6706bd-6cd5-3a7f-a8cf-611f08673076.roa (raw, json)
Hash identifier: G88ZY/qwYxpFuWBOr1AZ/Q09WstRJ5hsfl7pF2TbP6g=
Subject key identifier: 45:FB:CC:26:55:5E:3B:C9:BF:59:6C:8D:1A:7B:CA:EA:28:7E:04:DE
Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial: 010D0C9F432858491AA6B9943DC7CE132F097B00
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/1a6706bd-6cd5-3a7f-a8cf-611f08673076.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 394708
IP address blocks: 74.126.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:b9:94:3d:c7:ce:13:2f:09:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=9b941d58-3b3a-44f1-8b25-58cdf0b50e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:70:d2:86:65:c2:3c:61:bb:79:e3:56:cd:5b:
85:2a:fb:b2:ce:79:44:88:8c:a0:2f:30:0a:cc:eb:
f2:9b:73:61:2c:43:66:3e:e3:e4:3c:2a:49:f7:37:
ae:e2:70:46:d0:96:89:b9:c9:6c:2f:1a:a3:a6:7e:
f1:ee:49:c3:32:25:08:6e:3f:4e:ec:d7:6b:c0:4c:
e7:17:fc:d7:97:7a:3c:b1:74:49:39:97:6f:91:f4:
a0:4c:f2:29:6d:2f:7d:8a:1f:32:b7:81:5c:62:4a:
db:b6:98:0d:26:e3:6c:09:39:7c:9b:e7:c5:5f:dd:
75:cf:40:73:30:32:65:93:d3:ae:05:8c:3a:14:84:
de:75:e5:10:32:2e:d2:46:85:70:de:9b:f3:66:4a:
f8:6d:22:e1:8f:78:c3:c6:f9:d5:77:66:d8:5d:2a:
4e:27:70:c8:6a:9d:ac:2e:75:d3:d2:ee:28:00:49:
f0:bc:d8:ca:10:98:4e:ea:22:6d:fe:86:6b:26:65:
37:00:49:f0:41:a7:c5:d2:3a:4a:34:2a:be:7f:d3:
10:2d:25:dc:f8:5b:3b:5d:c1:06:df:bf:e5:e9:67:
17:a5:82:a0:76:6f:dc:1b:7b:0d:b0:80:23:c0:f0:
0c:6e:5b:1f:8e:a3:5c:35:78:90:2b:6e:72:3c:d0:
fc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FB:CC:26:55:5E:3B:C9:BF:59:6C:8D:1A:7B:CA:EA:28:7E:04:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/1a6706bd-6cd5-3a7f-a8cf-611f08673076.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
X509v3 Authority Key Identifier:
keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
sbgp-ipAddrBlock: critical
IPv4:
74.126.77.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:07:85:16:21:6f:9e:cd:fa:4c:c8:3c:68:44:20:f1:5b:9a:
bb:1b:b6:68:ba:03:32:a7:28:d0:ec:d4:fc:54:40:22:eb:ac:
1f:ee:2a:49:d8:67:d5:61:49:a0:8c:53:b3:74:de:37:ab:97:
a7:72:10:91:1a:63:71:4b:c3:1f:e6:87:60:7e:04:5a:62:b0:
81:07:f3:09:2d:7f:8e:6e:94:3a:c8:ff:2e:24:60:68:44:f9:
5a:7b:4d:6a:d0:38:a0:ee:e4:d6:e9:b6:3a:c2:d6:56:d5:c4:
f4:ec:94:c9:82:2f:95:0a:6e:14:03:c9:b5:7d:ae:bf:1b:41:
0c:c7:d6:d2:a7:82:3a:83:8e:13:3a:3f:6f:11:36:eb:a7:93:
b4:26:15:ef:29:61:d8:1e:cc:4d:59:f5:61:f1:27:57:d9:45:
d8:00:ab:ba:a4:50:7e:3b:b3:07:3a:bf:5a:af:5c:ef:ff:a2:
75:7e:57:fd:78:e2:7a:f0:40:4a:bb:f7:2e:56:cc:51:eb:d2:
86:43:2c:bf:62:69:a3:e7:9e:6b:47:64:0f:d2:be:70:44:3c:
91:77:df:0f:01:75:3c:3c:06:49:3e:85:48:fe:b7:10:5e:39:
da:26:63:e5:83:f3:c8:2b:ae:75:61:7a:2d:29:35:b3:13:9a:
f6:5f:45:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaprmUPcfOEy8JewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk
N2ZiMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk
OWI5NDFkNTgtM2IzYS00NGYxLThiMjUtNThjZGYwYjUwZTkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXDShmXCPGG7eeNWzVuFKvuyznlEiIygLzAK
zOvym3NhLENmPuPkPCpJ9zeu4nBG0JaJuclsLxqjpn7x7knDMiUIbj9O7NdrwEzn
F/zXl3o8sXRJOZdvkfSgTPIpbS99ih8yt4FcYkrbtpgNJuNsCTl8m+fFX911z0Bz
MDJlk9OuBYw6FITedeUQMi7SRoVw3pvzZkr4bSLhj3jDxvnVd2bYXSpOJ3DIap2s
LnXT0u4oAEnwvNjKEJhO6iJt/oZrJmU3AEnwQafF0jpKNCq+f9MQLSXc+Fs7XcEG
37/l6WcXpYKgdm/cG3sNsIAjwPAMblsfjqNcNXiQK25yPND86QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEX7zCZVXjvJv1lsjRp7yuoofgTeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2
ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvMWE2NzA2YmQtNmNkNS0z
YTdmLWE4Y2YtNjExZjA4NjczMDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl
ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1
ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1
YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn5NMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACsHhRYhb57N+kzIPGhEIPFbmrsbtmi6AzKnKNDs1PxUQCLrrB/uKknY
Z9VhSaCMU7N03jerl6dyEJEaY3FLwx/mh2B+BFpisIEH8wktf45ulDrI/y4kYGhE
+Vp7TWrQOKDu5NbptjrC1lbVxPTslMmCL5UKbhQDybV9rr8bQQzH1tKngjqDjhM6
P28RNuunk7QmFe8pYdgezE1Z9WHxJ1fZRdgAq7qkUH47swc6v1qvXO//onV+V/14
4nrwQEq79y5WzFHr0oZDLL9iaaPnnmtHZA/SvnBEPJF33w8BdTw8Bkk+hUj+txBe
OdomY+WD88grrnVhei0pNbMTmvZfRYc=
-----END CERTIFICATE-----
Generated at Wed Apr 9 03:37:57 2025 by rpki-client