Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/255fb3e2-66b1-3c2a-80d8-f8806348c48e.roa
File: 255fb3e2-66b1-3c2a-80d8-f8806348c48e.roa (raw, json)
Hash identifier: 74NAEpkV4Mm5Z1psgvVFDxVSFFW7dd3xQWgDsF1zNX8=
Subject key identifier: 57:1F:CC:A6:EC:0E:9D:13:B8:1C:33:3C:56:01:D6:69:4A:EF:17:CE
Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
Certificate serial: 010D0C9F43285848AF2BB9FEDC8BF04CF208BCC0
Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/255fb3e2-66b1-3c2a-80d8-f8806348c48e.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 396185
IP address blocks: 74.127.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:b9:fe:dc:8b:f0:4c:f2:08:bc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=8c1b93c7-26d2-41d6-b5c5-24a9ddd95b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:32:ff:50:45:fe:2b:20:e4:17:0f:6c:e5:19:
58:2c:fe:d8:1b:36:39:05:41:fa:48:c1:68:ae:a3:
60:b5:f7:d6:61:27:30:53:70:e7:e0:42:b6:ac:7c:
32:47:50:d4:13:95:04:05:2f:f0:f6:03:85:6c:67:
c3:8a:b5:5a:ac:6b:37:a8:3d:d4:13:27:cf:b9:78:
da:e8:50:54:0d:00:c2:58:04:4a:9f:2d:0a:73:35:
b4:00:05:4b:5e:55:52:b0:ff:75:c1:13:32:f0:43:
69:c4:d8:24:69:3b:c8:b0:74:66:f7:c6:e4:00:b3:
9f:89:73:97:ac:55:04:fc:db:41:36:0b:26:86:28:
2e:c0:f1:22:74:4c:06:cf:15:2c:59:e2:94:ad:30:
6d:09:5e:5e:02:92:0d:28:fc:f2:e4:62:fd:72:c1:
90:5f:e1:c5:04:6b:41:04:86:9d:7d:b1:fc:cb:1d:
d4:60:c2:61:3c:b7:d8:ad:8b:34:9b:58:d2:94:5d:
1d:4a:48:e9:30:07:b6:c5:28:bc:35:80:df:99:cb:
bc:7c:aa:bd:97:ba:cf:b9:70:ae:c5:f7:5c:e4:90:
35:2c:c8:23:f8:31:f3:5e:1b:7c:fc:e2:6a:ee:91:
1c:0a:62:37:0d:81:d4:62:f1:cb:c7:df:2a:af:43:
0d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1F:CC:A6:EC:0E:9D:13:B8:1C:33:3C:56:01:D6:69:4A:EF:17:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/255fb3e2-66b1-3c2a-80d8-f8806348c48e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl
X509v3 Authority Key Identifier:
keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
sbgp-ipAddrBlock: critical
IPv4:
74.127.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:c4:a9:0f:54:da:0e:00:14:74:d2:9d:5a:ae:4d:4e:db:1c:
bf:31:e1:54:e5:81:5e:b7:6e:42:6e:c9:b9:4e:95:3b:d6:a6:
56:c2:d8:82:9d:b7:80:0a:2b:de:2e:b0:94:67:c3:61:4a:e1:
84:5a:39:5d:d1:c3:8d:f3:74:49:9d:02:d8:bd:e6:47:76:ef:
b1:52:56:8f:85:56:09:e7:db:d4:a9:1a:40:54:60:d6:0f:4c:
3e:63:32:25:87:25:f4:0c:4f:1f:6b:81:fe:43:5e:e2:27:a6:
f0:93:85:d9:00:51:b5:b5:9e:d5:b0:81:e1:dd:90:90:d0:fe:
ba:5c:b7:30:95:d9:0c:a4:22:d6:9d:53:1f:65:63:9f:ba:f6:
8b:a7:56:9e:4d:5f:21:2a:98:c8:16:9d:93:17:ef:54:57:64:
4c:fd:52:05:02:11:ae:42:bd:47:f5:e6:6f:3a:a0:7a:b5:70:
f5:0f:32:b1:c8:f2:a5:85:d4:cd:3e:2d:b6:1f:ef:07:95:e5:
65:c9:73:b7:ee:8c:48:a2:c0:53:58:af:65:84:92:b5:13:40:
20:e7:d0:5a:cc:77:6d:0f:dc:58:83:fe:0d:6e:ae:27:72:af:
b8:7a:57:d4:35:25:f8:fc:ac:44:23:f5:50:85:7a:9b:51:53:
03:f4:3a:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK7n+3IvwTPIIvMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm
YTExMB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk
OGMxYjkzYzctMjZkMi00MWQ2LWI1YzUtMjRhOWRkZDk1YjlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujL/UEX+KyDkFw9s5RlYLP7YGzY5BUH6SMFo
rqNgtffWYScwU3Dn4EK2rHwyR1DUE5UEBS/w9gOFbGfDirVarGs3qD3UEyfPuXja
6FBUDQDCWARKny0KczW0AAVLXlVSsP91wRMy8ENpxNgkaTvIsHRm98bkALOfiXOX
rFUE/NtBNgsmhiguwPEidEwGzxUsWeKUrTBtCV5eApINKPzy5GL9csGQX+HFBGtB
BIadfbH8yx3UYMJhPLfYrYs0m1jSlF0dSkjpMAe2xSi8NYDfmcu8fKq9l7rPuXCu
xfdc5JA1LMgj+DHzXht8/OJq7pEcCmI3DYHUYvHLx98qr0MNBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFcfzKbsDp0TuBwzPFYB1mlK7xfOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw
ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvMjU1ZmIzZTItNjZiMS0z
YzJhLTgwZDgtZjg4MDYzNDhjNDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1
YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk
ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5
NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn9ZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKTEqQ9U2g4AFHTSnVquTU7bHL8x4VTlgV63bkJuyblOlTvWplbC2IKd
t4AKK94usJRnw2FK4YRaOV3Rw43zdEmdAti95kd277FSVo+FVgnn29SpGkBUYNYP
TD5jMiWHJfQMTx9rgf5DXuInpvCThdkAUbW1ntWwgeHdkJDQ/rpctzCV2QykItad
Ux9lY5+69ounVp5NXyEqmMgWnZMX71RXZEz9UgUCEa5CvUf15m86oHq1cPUPMrHI
8qWF1M0+LbYf7weV5WXJc7fujEiiwFNYr2WEkrUTQCDn0FrMd20P3FiD/g1uridy
r7h6V9Q1Jfj8rEQj9VCFeptRUwP0OiY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:37:32 2025 by rpki-client