Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/880be207-1fd0-3e98-a94a-1e37a9ee0e2b.roa
File: 880be207-1fd0-3e98-a94a-1e37a9ee0e2b.roa (raw, json)
Hash identifier: zRVae1+AH0Nr0Yg+d+1ZRv+jv/aDRw27qiJndR6vfEk=
Subject key identifier: 84:3B:EE:66:E3:A2:00:52:9B:B9:08:9D:F0:CC:90:56:D5:52:97:79
Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial: 010D0C9F4328584930DE60A01A1B114FDCD34B80
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/880be207-1fd0-3e98-a94a-1e37a9ee0e2b.roa
Signing time: Sat 15 Mar 2025 01:00:39 +0000
ROA not before: Sat 15 Mar 2025 01:00:39 +0000
ROA not after: Fri 13 Jun 2025 01:00:39 +0000
asID: 36352
IP address blocks: 65.99.193.0/24 maxlen: 24
65.99.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:de:60:a0:1a:1b:11:4f:dc:d3:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Validity
Not Before: Mar 15 01:00:39 2025 GMT
Not After : Jun 13 01:00:39 2025 GMT
Subject: CN=53faf2b0-5be6-4d50-acf4-58c98bee2380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:07:af:5b:ac:19:80:a9:df:ef:55:3b:d7:65:
2b:c6:63:50:96:8f:1c:07:ca:de:20:3b:6c:2f:3f:
f0:f7:a1:49:5e:b4:d0:cc:29:a7:40:d5:1f:98:14:
d8:22:e0:33:e3:2c:4a:12:56:23:db:fe:c8:6a:37:
ae:af:ae:fd:c0:08:d4:5b:59:2e:bd:44:37:43:b7:
f5:e5:e5:49:70:82:47:df:c3:d7:45:22:81:79:df:
f7:9a:0c:71:5c:96:c7:05:8b:1e:37:df:51:82:ad:
f0:b4:10:3f:b6:0e:79:34:5c:46:c8:1e:62:50:fb:
b9:06:49:05:6d:4d:69:de:76:33:3d:f9:17:a4:5c:
b9:af:03:38:2a:07:e8:76:da:06:f2:31:23:b0:7e:
1a:7e:f3:cb:d5:9b:0f:05:60:75:af:43:3a:16:ba:
ac:5f:8c:47:75:e1:9e:01:99:71:44:24:fc:ab:77:
56:db:da:2a:8b:ef:7e:10:25:98:99:91:a5:98:2c:
61:27:ee:c9:41:08:4b:f3:7f:a0:e8:0f:01:a4:80:
d7:e2:d4:fe:54:e1:63:06:28:eb:6e:0e:e4:46:cd:
05:94:50:54:0f:2d:9c:49:9e:52:98:e1:f7:5b:c9:
41:fa:3e:5d:ae:04:e2:ba:8c:f0:d5:fb:6a:7f:ff:
15:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3B:EE:66:E3:A2:00:52:9B:B9:08:9D:F0:CC:90:56:D5:52:97:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/880be207-1fd0-3e98-a94a-1e37a9ee0e2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
X509v3 Authority Key Identifier:
keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
sbgp-ipAddrBlock: critical
IPv4:
65.99.193.0/24
65.99.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:5f:ea:13:1a:d8:57:83:7a:cf:34:df:4a:79:8d:e9:8f:c0:
1b:b6:0b:5e:db:8a:07:8d:99:4b:16:34:f7:8a:fb:70:1a:ef:
5f:5d:de:96:55:0d:57:67:35:3c:a4:bd:7b:4f:ac:db:2a:3a:
d2:97:72:19:4c:af:8c:f7:ff:ef:62:b7:18:38:13:07:47:ff:
06:ee:9b:fb:9a:33:05:b4:39:b7:4e:6a:25:42:a5:2c:0c:c1:
b9:80:51:72:80:e7:fc:6f:d5:94:e0:05:7b:f7:2b:af:9b:22:
51:f6:ee:34:2e:08:e3:49:14:3c:14:2d:8f:a8:54:01:28:10:
cc:c9:87:89:51:1d:82:7b:37:b5:20:c0:a4:a1:ec:9e:22:ee:
a1:26:12:9c:08:fa:60:2e:16:28:7c:77:0b:f1:4f:aa:a3:bc:
2a:cd:15:3a:63:60:e0:dd:b6:20:ca:6c:e6:aa:ce:d6:7e:5e:
ca:3e:f3:b1:09:93:4e:bf:3b:78:cb:55:0e:62:88:e6:4f:ae:
d6:25:2d:23:10:82:ec:ff:ae:34:88:0b:e0:5d:b5:45:38:0d:
1a:32:a6:88:75:a6:84:32:52:3b:81:4f:c7:c2:dd:35:2b:9e:
55:38:c7:06:8b:4f:4c:00:b5:31:f1:a9:bd:16:5a:84:c7:ca:
e9:43:bf:bc
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEkw3mCgGhsRT9zTS4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3
OWZmMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk
NTNmYWYyYjAtNWJlNi00ZDUwLWFjZjQtNThjOThiZWUyMzgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwevW6wZgKnf71U712UrxmNQlo8cB8reIDts
Lz/w96FJXrTQzCmnQNUfmBTYIuAz4yxKElYj2/7Iajeur679wAjUW1kuvUQ3Q7f1
5eVJcIJH38PXRSKBed/3mgxxXJbHBYseN99Rgq3wtBA/tg55NFxGyB5iUPu5BkkF
bU1p3nYzPfkXpFy5rwM4KgfodtoG8jEjsH4afvPL1ZsPBWB1r0M6FrqsX4xHdeGe
AZlxRCT8q3dW29oqi+9+ECWYmZGlmCxhJ+7JQQhL83+g6A8BpIDX4tT+VOFjBijr
bg7kRs0FlFBUDy2cSZ5SmOH3W8lB+j5drgTiuozw1ftqf/8V/wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFIQ77mbjogBSm7kInfDMkFbVUpd5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4
YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvODgwYmUyMDctMWZkMC0z
ZTk4LWE5NGEtMWUzN2E5ZWUwZTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4
MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0
NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0
ODJmNDc5ZmYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQWPBAwQA
QWP2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAAFf6hMa2FeDes8030p5jemPwBu2C17bigeNmUsWNPeK+3Aa
719d3pZVDVdnNTykvXtPrNsqOtKXchlMr4z3/+9itxg4EwdH/wbum/uaMwW0ObdO
aiVCpSwMwbmAUXKA5/xv1ZTgBXv3K6+bIlH27jQuCONJFDwULY+oVAEoEMzJh4lR
HYJ7N7UgwKSh7J4i7qEmEpwI+mAuFih8dwvxT6qjvCrNFTpjYODdtiDKbOaqztZ+
Xso+87EJk06/O3jLVQ5iiOZPrtYlLSMQguz/rjSIC+BdtUU4DRoypoh1poQyUjuB
T8fC3TUrnlU4xwaLT0wAtTHxqb0WWoTHyulDv7w=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:42:32 2025 by rpki-client