Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa
File: 1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa (raw, json)
Hash identifier: dLDLrzw6MOZ+IVTRJrpXn3GM1utIS3pGtXvtz64oLJU=
Subject key identifier: D0:7C:3A:F6:AA:95:42:07:11:93:FB:86:D5:0D:38:24:AD:83:03:AF
Certificate issuer: /CN=d00749ed-70ef-447c-b17c-da6be8d7f312
Certificate serial: 010D0C9F4328584902EC2E9393375A30CD227F00
Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 396998
IP address blocks: 64.68.193.0/24 maxlen: 24
2620:49:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:2e:93:93:37:5a:30:cd:22:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=7eabcc8e-0f14-4eb1-b2fc-bb608a6f5c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4a:e7:3d:f1:c3:e0:6c:0a:70:d1:2a:70:5b:
ae:39:26:7d:41:99:28:70:b4:7d:09:27:f9:62:15:
df:a8:07:c9:42:6c:5f:88:18:a7:31:ef:1e:b6:bd:
a4:90:ad:db:d5:57:85:b7:87:7e:26:95:72:6e:c1:
c2:bf:c4:8d:a4:5b:1a:5c:9c:cb:e9:de:10:a5:a9:
71:ba:fc:50:22:cf:41:07:b7:55:00:32:8d:f7:a0:
f0:2b:c3:2c:18:90:b2:bb:db:54:31:a2:53:0f:3d:
e3:e1:7d:02:a7:c1:1d:3c:bb:ba:f6:72:2b:99:b5:
47:1c:9c:e4:b5:fe:70:81:4b:0a:c8:b8:0a:c5:f1:
80:f2:35:1f:a2:56:15:db:5f:97:aa:bd:47:e6:7c:
02:5b:72:b1:a8:99:cd:20:8d:e5:34:55:a5:c3:66:
4c:00:9b:ad:37:4a:f3:bc:10:7c:1c:98:61:81:d5:
f4:79:13:20:bb:b8:42:c1:7e:e9:83:95:74:f9:0c:
1e:b2:c6:34:3f:5f:6e:ac:ec:ae:a2:de:23:8a:a9:
be:d3:9b:79:d6:df:79:8d:5c:ba:5f:db:ce:f7:d7:
82:56:c0:5b:86:46:16:79:91:e9:ad:20:85:74:80:
2a:03:f5:0e:81:c2:c7:7b:04:a3:ae:31:86:3e:f8:
5f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7C:3A:F6:AA:95:42:07:11:93:FB:86:D5:0D:38:24:AD:83:03:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl
X509v3 Authority Key Identifier:
keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer
sbgp-ipAddrBlock: critical
IPv4:
64.68.193.0/24
IPv6:
2620:49:2::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:34:3c:06:6a:57:58:9c:8b:14:2a:e7:ab:05:ca:15:f7:d3:
3b:b1:39:dc:fd:16:96:f8:d2:06:b4:7e:33:15:5a:dc:46:f0:
f9:82:d2:ac:1c:09:d6:61:c5:46:47:c7:66:cc:aa:ed:d4:27:
c5:cc:29:fd:f7:f8:67:da:a0:12:1f:5d:c5:d3:c4:26:0b:a1:
a2:2d:c9:39:af:63:e4:7b:b0:09:e0:16:bd:a3:11:23:0f:64:
62:75:ee:80:39:a8:9c:e0:05:48:0a:86:27:e5:68:03:c6:c6:
0c:62:9b:f8:66:2e:18:ab:fb:c0:4a:72:a5:d8:74:f1:db:89:
ca:b3:e6:2d:05:ff:9a:2c:cc:46:15:a4:35:87:73:5b:e4:a4:
6b:23:35:55:f1:d5:cd:e8:c7:b7:7e:a0:2b:4f:f2:2e:74:cc:
f4:6a:04:80:a5:4c:c9:f2:d5:1f:d1:6b:9e:d2:9d:a0:8a:ec:
92:c1:d1:c8:1b:5d:f2:20:bc:ee:36:e2:4e:95:64:7c:1b:93:
f0:67:0e:80:ac:1f:3a:28:0d:4f:42:f8:8b:4c:f6:fc:98:38:
a4:5d:e6:d6:0f:d0:4f:d9:0b:76:5e:af:ce:f0:02:8b:a6:95:
6f:d7:f7:07:92:0c:26:f3:ba:aa:c8:4b:b8:28:8f:cc:20:d4:
bb:40:ea:10
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEkC7C6TkzdaMM0ifwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDAwNzQ5ZWQtNzBlZi00NDdjLWIxN2MtZGE2YmU4ZDdm
MzEyMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
N2VhYmNjOGUtMGYxNC00ZWIxLWIyZmMtYmI2MDhhNmY1YzAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0krnPfHD4GwKcNEqcFuuOSZ9QZkocLR9CSf5
YhXfqAfJQmxfiBinMe8etr2kkK3b1VeFt4d+JpVybsHCv8SNpFsaXJzL6d4Qpalx
uvxQIs9BB7dVADKN96DwK8MsGJCyu9tUMaJTDz3j4X0Cp8EdPLu69nIrmbVHHJzk
tf5wgUsKyLgKxfGA8jUfolYV21+Xqr1H5nwCW3KxqJnNII3lNFWlw2ZMAJutN0rz
vBB8HJhhgdX0eRMgu7hCwX7pg5V0+QwessY0P19urOyuot4jiqm+05t51t95jVy6
X9vO99eCVsBbhkYWeZHprSCFdIAqA/UOgcLHewSjrjGGPvhfrQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFNB8OvaqlUIHEZP7htUNOCStgwOvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3
NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZiZThkN2YzMTIvMWEzNWRkMWUtMWQzNy0z
ZDBhLWFiZjEtYTJmNjU1ZGVkZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDAwNzQ5ZWQtNzBlZi00NDdjLWIx
N2MtZGE2YmU4ZDdmMzEyL2QwMDc0OWVkLTcwZWYtNDQ3Yy1iMTdjLWRhNmJlOGQ3
ZjMxMi5jcmwwHwYDVR0jBBgwFoAU9SAVhzNYxRJ4ZGbzsONdivR4eXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZi
ZThkN2YzMTIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQETBMA8E
AgACMAkDBwAmIABJAAIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASDQ8BmpXWJyLFCrnqwXKFffTO7E53P0W
lvjSBrR+MxVa3Ebw+YLSrBwJ1mHFRkfHZsyq7dQnxcwp/ff4Z9qgEh9dxdPEJguh
oi3JOa9j5HuwCeAWvaMRIw9kYnXugDmonOAFSAqGJ+VoA8bGDGKb+GYuGKv7wEpy
pdh08duJyrPmLQX/mizMRhWkNYdzW+SkayM1VfHVzejHt36gK0/yLnTM9GoEgKVM
yfLVH9FrntKdoIrsksHRyBtd8iC87jbiTpVkfBuT8GcOgKwfOigNT0L4i0z2/Jg4
pF3m1g/QT9kLdl6vzvACi6aVb9f3B5IMJvO6qshLuCiPzCDUu0DqEA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:29:17 2025 by rpki-client