Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/225cf2de-ddc9-3faa-8f31-758be401c844.roa
File: 225cf2de-ddc9-3faa-8f31-758be401c844.roa (raw, json)
Hash identifier: Rw+h52q3b0YCRmbED/QBV1EAzOFVEs74Lt9mRdwJTKE=
Subject key identifier: 56:15:72:A7:0F:65:99:16:58:66:7C:F6:FF:0D:70:5E:BC:52:58:89
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F43285848A13616CBD9FBCC5CE85D0E40
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/225cf2de-ddc9-3faa-8f31-758be401c844.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 16384
IP address blocks: 64.25.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:16:cb:d9:fb:cc:5c:e8:5d:0e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=884f9694-b0fa-4901-bd6c-32424df117d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:bd:04:9a:4b:51:38:cc:3a:be:62:13:77:bd:
e5:2d:ec:e5:b7:05:04:7f:c6:53:75:6e:bc:74:7d:
4e:ad:44:46:6c:d4:6e:f6:83:de:05:a7:32:49:11:
ab:b6:ca:f0:1d:18:2b:c4:3d:5c:1f:16:49:09:66:
ac:79:c1:de:f7:18:bb:2e:bc:c5:f3:b9:e1:3f:ca:
98:c6:9b:f8:02:2f:21:c9:c3:59:62:bc:c2:f3:5f:
7e:60:2d:14:fe:06:18:ce:65:13:d9:d9:cc:fe:e6:
ac:fc:57:7b:95:0a:88:71:84:2e:d4:d3:02:37:c8:
dd:12:cc:cd:1e:8a:72:6a:20:fe:52:7f:53:ba:15:
25:d5:1f:8e:26:5f:1a:da:cb:93:e7:4a:ab:cf:99:
64:f6:51:b9:54:a5:9c:0d:ef:de:23:a2:f5:9a:2c:
cc:7e:05:66:6f:01:69:bf:22:56:e6:01:78:07:ec:
88:2b:f0:f5:fe:38:83:ac:5b:e9:7d:72:76:1c:96:
9a:11:48:41:eb:d0:a9:46:dd:1c:4e:15:f3:02:4b:
fc:5c:32:49:ea:e2:75:9a:c0:a0:1d:67:fe:5d:fa:
b6:9c:43:4b:9b:8e:98:fa:71:be:e2:1c:79:55:23:
d0:03:41:e7:39:ad:10:2e:77:77:d9:4c:ba:39:c8:
14:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:15:72:A7:0F:65:99:16:58:66:7C:F6:FF:0D:70:5E:BC:52:58:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/225cf2de-ddc9-3faa-8f31-758be401c844.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
64.25.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c9:c7:4b:fc:d9:fc:7c:cb:01:07:fd:41:78:a9:5e:0c:3b:ac:
a2:24:39:0c:75:62:5d:9c:a7:b4:d4:69:72:89:0b:ca:11:52:
c2:79:26:65:08:64:fb:68:6d:fd:5b:03:c7:c7:aa:6f:cb:73:
e6:c6:d4:a7:7d:b7:47:d2:69:1f:d9:de:84:da:fe:70:d1:70:
3b:ef:79:e1:cc:7f:70:b8:ec:98:9e:b7:e1:42:38:80:60:80:
c2:3d:4f:41:4c:bb:03:f1:64:d8:11:72:f5:d5:97:6b:42:03:
aa:f1:16:63:48:7f:fd:d0:02:6c:a2:c2:04:80:33:eb:ef:0d:
5a:45:1c:0f:75:70:5b:f4:c3:d8:8e:12:06:05:6f:cf:62:39:
9d:6f:eb:39:20:74:65:8e:a0:f2:d8:57:79:92:19:05:6d:f8:
46:7f:f7:00:5d:f7:74:6f:f2:72:00:58:97:9a:d2:14:33:4a:
61:35:9b:a4:c9:68:b3:74:2a:f6:40:42:c9:d2:c7:d7:98:5a:
f1:9c:a5:66:8d:f5:ae:ec:78:60:82:07:e4:93:60:94:c0:26:
c0:ea:6f:99:cd:00:aa:8c:e7:44:50:46:e5:17:08:70:a0:49:
4e:53:f6:f0:74:9d:5c:10:1e:9d:db:e8:d7:2b:c3:fe:61:19:
fc:72:a5:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNhbL2fvMXOhdDkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz
OTdkMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk
ODg0Zjk2OTQtYjBmYS00OTAxLWJkNmMtMzI0MjRkZjExN2Q3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA970EmktROMw6vmITd73lLezltwUEf8ZTdW68
dH1OrURGbNRu9oPeBacySRGrtsrwHRgrxD1cHxZJCWasecHe9xi7LrzF87nhP8qY
xpv4Ai8hycNZYrzC819+YC0U/gYYzmUT2dnM/uas/Fd7lQqIcYQu1NMCN8jdEszN
HopyaiD+Un9TuhUl1R+OJl8a2suT50qrz5lk9lG5VKWcDe/eI6L1mizMfgVmbwFp
vyJW5gF4B+yIK/D1/jiDrFvpfXJ2HJaaEUhB69CpRt0cThXzAkv8XDJJ6uJ1msCg
HWf+Xfq2nENLm46Y+nG+4hx5VSPQA0HnOa0QLnd32Uy6OcgU5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFYVcqcPZZkWWGZ89v8NcF68UliJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh
NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvMjI1Y2YyZGUtZGRjOS0z
ZmFhLThmMzEtNzU4YmU0MDFjODQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4
NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi
Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz
MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBndMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMnHS/zZ/HzLAQf9QXipXgw7rKIkOQx1Yl2cp7TUaXKJC8oRUsJ5JmUI
ZPtobf1bA8fHqm/Lc+bG1Kd9t0fSaR/Z3oTa/nDRcDvveeHMf3C47Jiet+FCOIBg
gMI9T0FMuwPxZNgRcvXVl2tCA6rxFmNIf/3QAmyiwgSAM+vvDVpFHA91cFv0w9iO
EgYFb89iOZ1v6zkgdGWOoPLYV3mSGQVt+EZ/9wBd93Rv8nIAWJea0hQzSmE1m6TJ
aLN0KvZAQsnSx9eYWvGcpWaN9a7seGCCB+STYJTAJsDqb5nNAKqM50RQRuUXCHCg
SU5T9vB0nVwQHp3b6Ncrw/5hGfxypWU=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:02:56 2025 by rpki-client