Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/d8d8c4dd-20b0-35f5-824b-21e480ccbf79.roa
File: d8d8c4dd-20b0-35f5-824b-21e480ccbf79.roa (raw, json)
Hash identifier: Uts+yLQsgnO9lakb2aP77EsFU644sCJTqkvNPzPq2Y0=
Subject key identifier: CE:6F:02:E3:01:19:97:50:0E:52:54:10:16:38:CF:9F:21:DC:93:B8
Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial: 010D0C9F432858491AA6B986257E5F391B8D7CC0
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/d8d8c4dd-20b0-35f5-824b-21e480ccbf79.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 394708
IP address blocks: 74.126.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:b9:86:25:7e:5f:39:1b:8d:7c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=86878d7a-dc35-48dc-9fb6-050afeee6e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:04:e0:92:1a:f2:d3:a8:ba:9a:45:3e:dc:ef:
e6:93:2c:19:f2:d6:37:ec:50:3e:f2:f8:85:2a:73:
5c:91:b5:c2:39:e2:97:0f:db:26:3e:95:55:02:05:
3e:8b:f9:3b:6c:45:60:40:3f:12:46:b4:a5:82:00:
b7:18:0b:73:fa:68:55:99:09:58:17:ba:25:3d:b0:
2e:3e:27:bd:7a:58:b1:1b:4b:dc:06:6f:95:0f:c6:
24:98:ab:11:3a:ce:e2:e3:20:9e:00:d3:47:f7:0f:
37:b9:53:d4:da:2e:94:61:cc:fd:f8:a7:ff:67:b4:
f2:69:6f:62:f9:58:3e:59:18:d3:fc:0e:e4:99:9e:
70:28:e3:44:77:ab:ca:32:dc:13:c6:56:cc:3d:56:
0c:c4:d2:55:76:60:44:60:86:9d:05:ae:5c:dd:c4:
be:5b:99:5e:3b:57:9b:f7:cb:ee:75:c6:9f:8e:16:
84:45:1b:4e:3a:fb:8f:5a:c9:02:bf:2b:d9:22:b1:
82:d7:88:bf:c3:65:15:26:71:dd:d6:0e:8d:d0:86:
7d:a8:ba:ef:3c:20:51:ee:ca:3a:fe:c9:c7:45:b8:
cc:80:c9:2d:9d:ed:2a:12:62:93:f0:19:c8:e3:52:
25:64:02:5a:69:48:60:d7:41:f3:e6:1a:6c:06:fc:
c1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6F:02:E3:01:19:97:50:0E:52:54:10:16:38:CF:9F:21:DC:93:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/d8d8c4dd-20b0-35f5-824b-21e480ccbf79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
X509v3 Authority Key Identifier:
keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
sbgp-ipAddrBlock: critical
IPv4:
74.126.76.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:25:a3:00:44:35:df:8e:db:7e:d1:c2:99:67:7d:73:0d:b3:
3a:34:d3:11:5d:5d:6d:50:62:c2:ed:88:7f:af:69:a7:58:0a:
e3:69:30:7d:f9:d5:c3:08:05:ef:ff:91:d5:5d:f3:b3:04:86:
65:dd:ca:87:48:d9:c1:b6:8a:fd:51:ae:46:35:43:e1:86:73:
e3:37:3d:3a:4c:10:dc:29:9e:61:b1:ca:fa:4d:25:ce:ec:7a:
ff:81:5b:56:91:76:1c:20:77:3b:5c:50:ad:60:22:13:e9:c2:
ce:ab:8a:19:7b:11:95:d3:dc:27:c3:fa:c2:7b:04:a9:2f:0d:
66:07:1a:b9:b7:07:a1:22:69:d2:af:69:7d:3f:e2:63:78:45:
d2:fa:cb:23:ed:43:72:84:ef:c7:bf:c7:40:63:1b:94:44:d8:
ef:1a:08:ec:d8:4d:5d:ae:dc:d3:cc:3c:19:1e:3d:57:36:49:
76:4d:9b:8a:d9:28:f4:7f:5b:a9:22:23:c5:26:6d:05:98:7e:
0c:eb:92:7d:7e:4a:b8:b2:cd:51:62:87:14:8b:21:ca:41:91:
ad:fb:36:5f:ce:bc:2f:b2:dd:9b:fa:07:bd:0e:77:25:73:37:
de:02:ab:df:6f:f1:0e:09:02:c2:01:d8:76:b7:08:85:57:ce:
61:b7:44:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaprmGJX5fORuNfMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk
N2ZiMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk
ODY4NzhkN2EtZGMzNS00OGRjLTlmYjYtMDUwYWZlZWU2ZTkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwTgkhry06i6mkU+3O/mkywZ8tY37FA+8viF
KnNckbXCOeKXD9smPpVVAgU+i/k7bEVgQD8SRrSlggC3GAtz+mhVmQlYF7olPbAu
Pie9elixG0vcBm+VD8YkmKsROs7i4yCeANNH9w83uVPU2i6UYcz9+Kf/Z7TyaW9i
+Vg+WRjT/A7kmZ5wKONEd6vKMtwTxlbMPVYMxNJVdmBEYIadBa5c3cS+W5leO1eb
98vudcafjhaERRtOOvuPWskCvyvZIrGC14i/w2UVJnHd1g6N0IZ9qLrvPCBR7so6
/snHRbjMgMktne0qEmKT8BnI41IlZAJaaUhg10Hz5hpsBvzBzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM5vAuMBGZdQDlJUEBY4z58h3JO4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2
ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvZDhkOGM0ZGQtMjBiMC0z
NWY1LTgyNGItMjFlNDgwY2NiZjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl
ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1
ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1
YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSn5MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGglowBENd+O237RwplnfXMNszo00xFdXW1QYsLtiH+vaadYCuNpMH35
1cMIBe//kdVd87MEhmXdyodI2cG2iv1RrkY1Q+GGc+M3PTpMENwpnmGxyvpNJc7s
ev+BW1aRdhwgdztcUK1gIhPpws6rihl7EZXT3CfD+sJ7BKkvDWYHGrm3B6EiadKv
aX0/4mN4RdL6yyPtQ3KE78e/x0BjG5RE2O8aCOzYTV2u3NPMPBkePVc2SXZNm4rZ
KPR/W6kiI8UmbQWYfgzrkn1+SriyzVFihxSLIcpBka37Nl/OvC+y3Zv6B70OdyVz
N94Cq99v8Q4JAsIB2Ha3CIVXzmG3RNw=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:33:18 2025 by rpki-client