Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/35f5672e-7bb9-344a-a0ac-f8c8023e9a6c.roa
File: 35f5672e-7bb9-344a-a0ac-f8c8023e9a6c.roa (raw, json)
Hash identifier: I/AyC9Eo7lPloMyL1sZhAlmLj54IzrdhlptoAsHTS84=
Subject key identifier: F8:BC:9C:13:D7:61:5E:76:1D:5B:B3:2C:AB:B7:66:C8:3E:57:7F:02
Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Certificate serial: 010D0C9F43285848ED3EAA323E443B47CCAB14A4
Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/35f5672e-7bb9-344a-a0ac-f8c8023e9a6c.roa
Signing time: Tue 18 Feb 2025 19:39:44 +0000
ROA not before: Tue 18 Feb 2025 19:39:44 +0000
ROA not after: Mon 19 May 2025 18:39:44 +0000
asID: 15830
IP address blocks: 64.112.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ed:3e:aa:32:3e:44:3b:47:cc:ab:14:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Validity
Not Before: Feb 18 19:39:44 2025 GMT
Not After : May 19 18:39:44 2025 GMT
Subject: CN=ca0ed14d-9411-401b-98f4-f3ab5e6e0161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d7:d3:24:24:42:25:50:3d:9c:48:36:2b:e6:
8c:8e:68:e9:15:3e:9e:20:24:1a:f6:35:71:ef:ea:
e0:78:cc:9a:59:ed:f5:74:6d:31:74:e4:b1:86:e3:
aa:d2:04:f4:0f:46:21:09:73:d1:21:c9:1f:07:26:
06:7c:35:75:a9:5b:6e:9c:94:7b:63:4f:cc:26:39:
ca:06:06:ef:8b:5a:12:50:d6:27:28:93:3a:75:10:
59:4c:c6:9f:50:f9:dd:37:d8:48:61:9c:50:93:5b:
4a:02:fe:61:69:ab:6d:a3:3e:6c:e0:2a:0b:39:89:
15:dc:b2:02:e9:bf:eb:eb:51:71:86:ea:31:98:04:
07:94:5f:dd:95:92:fd:d0:7c:85:b1:7e:1f:2e:b4:
7c:8d:9b:6d:db:a9:9d:38:d2:7e:2d:ce:36:5b:7f:
80:e8:43:18:28:16:58:4a:c7:eb:6a:2b:8f:13:5c:
b1:20:aa:46:08:51:cd:df:f6:17:15:08:88:ed:ee:
19:b1:f1:bf:22:72:d4:db:4d:37:31:39:6a:f8:4d:
d7:78:d1:df:6a:87:66:af:d2:97:37:02:8e:a6:38:
30:9f:62:54:68:3c:63:14:08:e3:07:54:84:02:bc:
d9:29:24:0a:1d:d8:b8:50:6b:8a:8c:90:04:75:2b:
9d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BC:9C:13:D7:61:5E:76:1D:5B:B3:2C:AB:B7:66:C8:3E:57:7F:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/35f5672e-7bb9-344a-a0ac-f8c8023e9a6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl
X509v3 Authority Key Identifier:
keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
sbgp-ipAddrBlock: critical
IPv4:
64.112.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:1b:ee:99:dd:db:87:46:3c:02:10:ac:7d:78:e6:55:c3:82:
3d:10:f1:f1:d9:48:fd:2a:ac:f5:90:6a:aa:f9:d6:1f:b9:b6:
7f:26:f6:71:94:47:e7:0f:9d:bd:b2:5d:0a:0d:55:35:7f:e4:
ff:2b:b9:bc:a9:5a:dd:ca:81:b4:7b:42:da:db:f9:0a:d4:d3:
d6:a7:21:9d:1b:0e:fe:c5:ea:25:03:6b:8d:94:eb:f5:f4:27:
fe:49:28:69:19:e8:9d:92:cd:17:5e:4f:50:b7:dd:cb:38:db:
e7:5a:a3:1c:2c:48:b2:94:2d:d5:90:9b:10:22:d2:d1:68:b6:
41:17:e2:39:2b:27:4b:46:c5:b5:26:96:fb:3b:5e:56:9f:5f:
2d:fd:58:1d:cb:1b:57:7d:e8:77:7f:5a:2e:1b:27:8b:51:b7:
db:93:96:17:95:a8:5c:71:1b:07:13:d7:2f:76:a1:40:5c:86:
98:5b:48:e2:e9:54:dd:55:07:85:f4:c2:3b:15:b7:db:89:bf:
88:1f:9e:6e:bf:b5:2d:19:1e:34:94:3e:37:99:ea:b7:49:36:
bb:f9:29:2b:48:56:56:c9:9d:eb:90:02:91:45:30:9f:42:38:
7c:7d:32:1b:73:25:03:79:36:ab:ae:4c:33:46:c6:d8:f8:cc:
bd:00:c5:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjtPqoyPkQ7R8yrFKQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjM4NmUyNTYtMmRjMy00ZDIxLTkzYjktYzI1M2RjZDM3
ZTRmMB4XDTI1MDIxODE5Mzk0NFoXDTI1MDUxOTE4Mzk0NFowLzEtMCsGA1UEAxMk
Y2EwZWQxNGQtOTQxMS00MDFiLTk4ZjQtZjNhYjVlNmUwMTYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9fTJCRCJVA9nEg2K+aMjmjpFT6eICQa9jVx
7+rgeMyaWe31dG0xdOSxhuOq0gT0D0YhCXPRIckfByYGfDV1qVtunJR7Y0/MJjnK
Bgbvi1oSUNYnKJM6dRBZTMafUPndN9hIYZxQk1tKAv5haattoz5s4CoLOYkV3LIC
6b/r61FxhuoxmAQHlF/dlZL90HyFsX4fLrR8jZtt26mdONJ+Lc42W3+A6EMYKBZY
SsfraiuPE1yxIKpGCFHN3/YXFQiI7e4ZsfG/InLU2003MTlq+E3XeNHfaodmr9KX
NwKOpjgwn2JUaDxjFAjjB1SEArzZKSQKHdi4UGuKjJAEdSudPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPi8nBPXYV52HVuzLKu3Zsg+V38CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2
ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUzZGNkMzdlNGYvMzVmNTY3MmUtN2JiOS0z
NDRhLWEwYWMtZjhjODAyM2U5YTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjM4NmUyNTYtMmRjMy00ZDIxLTkz
YjktYzI1M2RjZDM3ZTRmL2IzODZlMjU2LTJkYzMtNGQyMS05M2I5LWMyNTNkY2Qz
N2U0Zi5jcmwwHwYDVR0jBBgwFoAU8iJcB8LMp4SDvdYUpquzee8m3jwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUz
ZGNkMzdlNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHBjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHMb7pnd24dGPAIQrH145lXDgj0Q8fHZSP0qrPWQaqr51h+5tn8m9nGU
R+cPnb2yXQoNVTV/5P8rubypWt3KgbR7Qtrb+QrU09anIZ0bDv7F6iUDa42U6/X0
J/5JKGkZ6J2SzRdeT1C33cs42+daoxwsSLKULdWQmxAi0tFotkEX4jkrJ0tGxbUm
lvs7XlafXy39WB3LG1d96Hd/Wi4bJ4tRt9uTlheVqFxxGwcT1y92oUBchphbSOLp
VN1VB4X0wjsVt9uJv4gfnm6/tS0ZHjSUPjeZ6rdJNrv5KStIVlbJneuQApFFMJ9C
OHx9MhtzJQN5NquuTDNGxtj4zL0AxUU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:55 2025 by rpki-client