Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/e0ad3b0f-7869-3619-ab7f-8889d031055b.roa
File: e0ad3b0f-7869-3619-ab7f-8889d031055b.roa (raw, json)
Hash identifier: dQ0uQOMThX9+rz/3mt5JWNFseA7PIB6flN2QHshA2Yc=
Subject key identifier: 86:50:F3:B2:3F:47:44:94:8D:EB:37:DE:97:01:A6:7A:FF:74:34:91
Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial: 010D0C9F4328584930DE60FCD27F273FA4E66A00
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/e0ad3b0f-7869-3619-ab7f-8889d031055b.roa
Signing time: Sat 15 Mar 2025 01:00:39 +0000
ROA not before: Sat 15 Mar 2025 01:00:39 +0000
ROA not after: Fri 13 Jun 2025 01:00:39 +0000
asID: 394094
IP address blocks: 65.99.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:de:60:fc:d2:7f:27:3f:a4:e6:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Validity
Not Before: Mar 15 01:00:39 2025 GMT
Not After : Jun 13 01:00:39 2025 GMT
Subject: CN=990439b6-748e-4d47-8187-63c615447b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b0:5c:56:d5:f4:9e:76:0f:66:76:92:a7:c9:
0a:0a:10:e9:7e:a4:0f:13:b6:ca:d5:29:8e:ab:d1:
58:e0:16:85:de:cb:ac:6c:a5:53:09:8a:0f:c6:fd:
4c:83:43:16:59:f1:52:70:ee:13:4b:0e:b7:39:3c:
d7:41:b3:06:5f:1f:d0:f5:3e:f0:e8:d2:67:54:f3:
8d:9a:56:c9:f6:8f:66:24:6c:f1:f1:95:2c:01:ff:
0e:94:53:7d:be:cd:06:96:c5:52:32:28:79:4f:de:
3f:9c:35:72:c9:0d:a7:6e:2f:73:55:4d:df:63:66:
bd:2e:c9:8d:75:b4:d2:1c:cf:ef:5f:2c:cb:53:c3:
7e:b4:19:f2:f2:cc:73:47:93:fe:c2:c8:20:52:94:
74:6d:a0:b3:e6:e8:42:11:58:07:58:0d:f1:b1:a9:
1a:03:b3:35:1e:c2:0e:23:bc:bc:0a:70:51:3d:ed:
03:99:e5:29:10:9b:f9:96:63:12:23:4b:e3:71:ce:
ae:1f:69:4c:f0:93:52:dd:a9:af:69:0d:60:74:d6:
8f:1d:d7:db:05:ef:e7:bf:09:b4:2c:1d:91:1a:72:
7c:fa:59:29:3e:49:c4:4e:e8:74:01:c8:1b:3e:db:
a0:14:72:f1:3d:e7:41:0a:24:13:8c:84:0f:ef:2c:
f0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:50:F3:B2:3F:47:44:94:8D:EB:37:DE:97:01:A6:7A:FF:74:34:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/e0ad3b0f-7869-3619-ab7f-8889d031055b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
X509v3 Authority Key Identifier:
keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
sbgp-ipAddrBlock: critical
IPv4:
65.99.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:d0:24:cd:9a:90:1d:2f:68:b5:a7:42:62:85:50:17:d6:d0:
00:b1:17:de:46:5b:9f:e0:0c:61:d8:ef:6d:09:4c:0f:03:67:
14:1b:f4:d0:f9:6f:20:4c:6b:82:71:b4:40:61:ff:d5:00:39:
3c:22:1b:71:f9:69:55:e9:13:bc:e4:f0:59:07:b0:c1:0c:86:
33:2d:a4:98:db:da:69:74:97:14:76:7a:fb:4b:f5:dc:ab:ad:
31:f1:ec:a1:3b:5b:57:14:88:0c:3d:f8:94:65:51:0d:2e:2b:
9b:50:1b:47:5f:e9:4f:ed:5b:be:e2:8e:28:21:a2:6c:b2:1e:
8f:b4:ce:7d:91:a8:22:1c:b2:d7:3a:ed:bd:26:7c:42:02:f1:
ea:b9:09:ab:68:76:32:d6:23:4b:42:ee:c9:1d:d1:e1:08:3f:
9a:aa:90:2b:84:0e:2f:d3:33:80:9a:21:af:9b:dd:0b:51:bc:
e6:46:e0:a6:5f:02:13:70:92:67:18:53:b0:08:56:33:ad:d7:
28:5f:9d:63:7b:9d:b6:2a:8d:af:06:3d:53:5e:f3:34:fa:c3:
76:2f:a7:c2:93:03:f1:0d:21:d5:9c:43:8e:c9:cb:28:24:e2:
bc:5a:a6:ce:f2:c6:9c:df:f3:fd:95:c7:ff:3b:c9:ee:37:ed:
65:3e:94:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3mD80n8nP6TmagAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3
OWZmMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk
OTkwNDM5YjYtNzQ4ZS00ZDQ3LTgxODctNjNjNjE1NDQ3YjExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7BcVtX0nnYPZnaSp8kKChDpfqQPE7bK1SmO
q9FY4BaF3susbKVTCYoPxv1Mg0MWWfFScO4TSw63OTzXQbMGXx/Q9T7w6NJnVPON
mlbJ9o9mJGzx8ZUsAf8OlFN9vs0GlsVSMih5T94/nDVyyQ2nbi9zVU3fY2a9LsmN
dbTSHM/vXyzLU8N+tBny8sxzR5P+wsggUpR0baCz5uhCEVgHWA3xsakaA7M1HsIO
I7y8CnBRPe0DmeUpEJv5lmMSI0vjcc6uH2lM8JNS3amvaQ1gdNaPHdfbBe/nvwm0
LB2RGnJ8+lkpPknETuh0AcgbPtugFHLxPedBCiQTjIQP7yzwZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIZQ87I/R0SUjes33pcBpnr/dDSRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4
YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvZTBhZDNiMGYtNzg2OS0z
NjE5LWFiN2YtODg4OWQwMzEwNTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4
MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0
NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0
ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQWP+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEDQJM2akB0vaLWnQmKFUBfW0ACxF95GW5/gDGHY720JTA8DZxQb9ND5
byBMa4JxtEBh/9UAOTwiG3H5aVXpE7zk8FkHsMEMhjMtpJjb2ml0lxR2evtL9dyr
rTHx7KE7W1cUiAw9+JRlUQ0uK5tQG0df6U/tW77ijighomyyHo+0zn2RqCIcstc6
7b0mfEIC8eq5CatodjLWI0tC7skd0eEIP5qqkCuEDi/TM4CaIa+b3QtRvOZG4KZf
AhNwkmcYU7AIVjOt1yhfnWN7nbYqja8GPVNe8zT6w3Yvp8KTA/ENIdWcQ47Jyygk
4rxaps7yxpzf8/2Vx/87ye437WU+lHI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:30:53 2025 by rpki-client