Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/44f4f3da-18f8-3804-9775-d4656e898e07.roa
File: 44f4f3da-18f8-3804-9775-d4656e898e07.roa (raw, json)
Hash identifier: NLmxTUBJVJRVyD5MhjdaW8nIHSSWDXlzHPDMdGge+5k=
Subject key identifier: 4B:90:27:CC:C9:83:AA:38:88:B7:B3:ED:68:C8:96:1C:CB:28:7B:94
Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial: 010D0C9F432858494B6417C6FA83B6D9D17C7380
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/44f4f3da-18f8-3804-9775-d4656e898e07.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 394285
IP address blocks: 174.137.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:17:c6:fa:83:b6:d9:d1:7c:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=0c8726d3-114e-4814-99ae-ab9a79d79e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d8:0d:9d:65:b0:83:d0:7f:1f:7f:bc:c1:e3:
ae:2f:5e:50:17:bc:34:cd:48:a6:25:c1:c9:55:02:
c7:35:94:26:98:3d:7f:d7:14:64:ae:4d:d4:a0:cd:
d2:5a:37:6f:28:97:78:29:06:45:75:66:06:ad:bd:
43:4e:81:1a:8f:63:81:69:23:5e:0a:bf:ac:12:a7:
6f:fc:0d:9c:f0:58:da:b0:f0:cd:35:24:35:60:09:
4b:01:c7:19:79:88:14:2b:31:c0:d2:9d:23:60:c5:
8b:13:26:bb:71:92:e9:d1:96:f7:e9:ab:78:19:38:
38:89:8a:78:7c:ee:19:9b:9e:45:8c:cc:41:f6:29:
82:c7:d6:fa:bf:b5:94:a4:ba:88:79:98:97:5b:05:
cb:4b:89:3a:bf:03:29:2c:0e:14:d8:fd:d6:71:d3:
98:7e:dd:aa:cf:a4:68:20:83:64:1d:3e:fa:27:88:
cd:b9:f6:ac:65:8f:55:69:e3:07:6f:c8:b7:9b:91:
16:99:32:45:b5:df:e0:23:f7:0c:db:25:c3:bf:91:
7b:69:57:a0:04:4f:9b:f3:7a:fa:f2:16:f9:97:62:
03:97:16:01:a7:69:fe:5e:d2:cd:28:ed:97:15:a9:
bd:4d:9a:e0:dc:49:9c:39:84:ea:ea:57:7c:ea:0a:
df:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:90:27:CC:C9:83:AA:38:88:B7:B3:ED:68:C8:96:1C:CB:28:7B:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/44f4f3da-18f8-3804-9775-d4656e898e07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
X509v3 Authority Key Identifier:
keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
sbgp-ipAddrBlock: critical
IPv4:
174.137.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:9c:66:76:c3:f0:1e:e0:f6:59:ce:55:45:c8:b8:59:66:e1:
6e:77:24:cc:de:c9:c0:92:59:bb:92:ae:3e:6d:5d:74:ea:6b:
5a:13:01:05:be:28:f2:1b:79:cc:c8:d7:d8:a8:d7:98:c4:b7:
17:c5:70:45:e0:b4:73:93:bb:60:c4:df:bc:ae:eb:e6:1f:44:
5c:ca:5c:41:17:9b:92:8c:fb:f6:fa:9e:36:c6:51:ae:13:b6:
1d:9b:ab:a3:a3:8c:f2:8a:a8:43:74:93:b3:9c:47:e3:38:dc:
48:14:f6:f6:6f:5e:32:ba:ec:74:3b:a4:bf:a8:34:4b:0f:47:
63:d5:c5:06:01:0e:f0:a4:f7:a1:1f:ef:eb:8e:65:3d:04:8c:
b0:3d:1d:92:39:2e:5b:dd:4a:37:4e:4e:11:20:e3:95:a4:89:
fd:8a:90:b3:b3:76:4c:91:e9:e4:fd:6b:5a:d0:5b:e6:1c:80:
5b:43:cb:62:43:2b:e1:40:51:f3:0a:c4:cf:28:90:b5:ab:6a:
48:27:52:0c:43:c9:de:77:b5:ec:83:84:55:7f:5a:d8:30:02:
c1:b5:18:8e:09:47:05:64:f6:a9:df:8c:a9:37:89:1c:16:b9:
b5:86:b7:5b:5d:16:ef:c2:e0:3e:a8:d7:f7:5d:95:cf:36:8d:
a8:4e:71:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZBfG+oO22dF8c4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4
OGEwMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk
MGM4NzI2ZDMtMTE0ZS00ODE0LTk5YWUtYWI5YTc5ZDc5ZTczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNgNnWWwg9B/H3+8weOuL15QF7w0zUimJcHJ
VQLHNZQmmD1/1xRkrk3UoM3SWjdvKJd4KQZFdWYGrb1DToEaj2OBaSNeCr+sEqdv
/A2c8FjasPDNNSQ1YAlLAccZeYgUKzHA0p0jYMWLEya7cZLp0Zb36at4GTg4iYp4
fO4Zm55FjMxB9imCx9b6v7WUpLqIeZiXWwXLS4k6vwMpLA4U2P3WcdOYft2qz6Ro
IINkHT76J4jNufasZY9VaeMHb8i3m5EWmTJFtd/gI/cM2yXDv5F7aVegBE+b83r6
8hb5l2IDlxYBp2n+XtLNKO2XFam9TZrg3EmcOYTq6ld86grfsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEuQJ8zJg6o4iLez7WjIlhzLKHuUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk
NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvNDRmNGYzZGEtMThmOC0z
ODA0LTk3NzUtZDQ2NTZlODk4ZTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk
NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw
ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz
ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAroloMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFWcZnbD8B7g9lnOVUXIuFlm4W53JMzeycCSWbuSrj5tXXTqa1oTAQW+
KPIbeczI19io15jEtxfFcEXgtHOTu2DE37yu6+YfRFzKXEEXm5KM+/b6njbGUa4T
th2bq6OjjPKKqEN0k7OcR+M43EgU9vZvXjK67HQ7pL+oNEsPR2PVxQYBDvCk96Ef
7+uOZT0EjLA9HZI5LlvdSjdOThEg45Wkif2KkLOzdkyR6eT9a1rQW+YcgFtDy2JD
K+FAUfMKxM8okLWrakgnUgxDyd53teyDhFV/WtgwAsG1GI4JRwVk9qnfjKk3iRwW
ubWGt1tdFu/C4D6o1/ddlc82jahOcfw=
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:11:52 2025 by rpki-client