Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/4203a888-ffda-34ce-bf72-ac4a102906e4.roa
File: 4203a888-ffda-34ce-bf72-ac4a102906e4.roa (raw, json)
Hash identifier: 7nHVcBpipX4oSHKa6RlmTw4ywGJGk25FMoTXbHdwVAI=
Subject key identifier: FE:52:F0:5C:77:AC:C2:E5:29:42:9C:14:54:0B:BC:DA:C8:60:F0:5E
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F43285848CC7B9525B7C2D011607D4B60
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/4203a888-ffda-34ce-bf72-ac4a102906e4.roa
Signing time: Fri 07 Feb 2025 02:00:39 +0000
ROA not before: Fri 07 Feb 2025 02:00:39 +0000
ROA not after: Thu 08 May 2025 01:00:39 +0000
asID: 11090
IP address blocks: 64.4.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cc:7b:95:25:b7:c2:d0:11:60:7d:4b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Feb 7 02:00:39 2025 GMT
Not After : May 8 01:00:39 2025 GMT
Subject: CN=534ab584-315a-410b-86a1-ce6b6938881b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1b:40:cb:98:95:f7:13:22:12:eb:c8:cc:9e:
d5:03:61:94:df:c8:8f:64:be:16:f5:e4:79:d1:37:
b0:06:ce:bb:72:82:d8:4f:25:0b:10:12:a3:e7:0e:
15:db:c9:59:ce:46:1d:1f:7b:02:7b:00:b1:71:9e:
ee:2f:12:fb:a1:f6:f8:8e:bd:3d:e0:2e:09:95:ee:
a6:03:37:38:27:f7:27:01:b4:1e:48:5d:a8:42:52:
25:52:2a:98:69:f3:36:73:7c:22:26:e1:b2:c0:ca:
53:5e:0e:bf:9e:6f:1d:43:1b:5b:20:e2:11:39:06:
65:5e:9f:f6:d1:60:3e:58:64:4f:0f:68:93:21:92:
ed:dd:61:49:a6:55:bd:19:fe:14:f3:68:77:80:cd:
f7:b8:4f:fb:4b:bd:a3:ba:f4:7f:17:96:cd:df:b2:
80:59:7c:ab:ad:d0:64:0b:e8:84:39:f8:bd:bf:57:
c9:2f:b7:cb:a6:da:27:9a:03:cf:70:ce:62:ed:57:
42:2e:a1:15:b0:e8:f4:27:a7:eb:b0:1e:3e:40:d7:
af:a3:da:1d:0c:61:b5:5c:6c:fe:f8:a3:fd:27:f4:
5c:d3:4c:47:0d:0f:bd:e1:92:64:68:51:24:61:bb:
59:cb:22:24:5c:f5:0d:d3:90:c7:6c:ea:4d:f6:fd:
c3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:52:F0:5C:77:AC:C2:E5:29:42:9C:14:54:0B:BC:DA:C8:60:F0:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/4203a888-ffda-34ce-bf72-ac4a102906e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
64.4.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:f1:d0:98:5a:3a:a7:1c:a3:7a:2e:1e:4a:3f:f7:f8:9e:34:
60:a1:39:bd:b7:73:4a:86:50:c8:88:8d:bf:c1:cc:9c:49:ed:
3d:63:b0:e9:a1:7e:3e:ee:f9:a2:06:89:a9:ba:c3:1f:2e:7f:
c3:77:37:c9:c7:4d:a0:01:3a:34:95:2e:fd:b5:36:7e:8b:3b:
ea:a8:cf:5c:75:3a:ee:fb:16:32:34:1e:4a:52:00:a2:1e:58:
bf:a8:11:07:f7:c6:c7:ce:e7:27:30:05:7f:7c:73:a6:67:50:
f0:e9:7e:db:74:95:04:87:3c:9a:1b:24:10:36:49:4a:d8:9a:
ae:ce:6e:75:38:76:83:ea:82:19:25:99:c4:11:50:6f:35:49:
c2:98:a5:2b:f5:5f:f0:1e:1c:30:35:c7:1d:e7:8e:71:a8:7b:
32:77:ca:f9:2f:54:10:e2:ee:a4:01:39:1d:e9:1c:07:c8:4f:
ee:4a:c5:ac:a4:d3:4f:22:c2:1b:1b:95:43:1c:37:c5:f8:c9:
42:bc:b3:eb:11:51:fe:f8:75:ca:99:19:8a:cd:da:0e:d9:61:
5c:f4:b6:cc:ae:d0:ff:68:00:23:f0:c0:3a:3b:33:a2:46:de:
78:0a:f0:15:f0:46:58:fc:5d:d8:34:00:79:3c:33:f1:14:a1:
6b:1e:c9:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe5Ult8LQEWB9S2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2
OWQxMB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk
NTM0YWI1ODQtMzE1YS00MTBiLTg2YTEtY2U2YjY5Mzg4ODFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphtAy5iV9xMiEuvIzJ7VA2GU38iPZL4W9eR5
0TewBs67coLYTyULEBKj5w4V28lZzkYdH3sCewCxcZ7uLxL7ofb4jr094C4Jle6m
Azc4J/cnAbQeSF2oQlIlUiqYafM2c3wiJuGywMpTXg6/nm8dQxtbIOIROQZlXp/2
0WA+WGRPD2iTIZLt3WFJplW9Gf4U82h3gM33uE/7S72juvR/F5bN37KAWXyrrdBk
C+iEOfi9v1fJL7fLptonmgPPcM5i7VdCLqEVsOj0J6frsB4+QNevo9odDGG1XGz+
+KP9J/Rc00xHDQ+94ZJkaFEkYbtZyyIkXPUN05DHbOpN9v3DGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP5S8Fx3rMLlKUKcFFQLvNrIYPBeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk
NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvNDIwM2E4ODgtZmZkYS0z
NGNlLWJmNzItYWM0YTEwMjkwNmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw
MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh
NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0
M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQAToMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC7x0JhaOqcco3ouHko/9/ieNGChOb23c0qGUMiIjb/BzJxJ7T1jsOmh
fj7u+aIGiam6wx8uf8N3N8nHTaABOjSVLv21Nn6LO+qoz1x1Ou77FjI0HkpSAKIe
WL+oEQf3xsfO5ycwBX98c6ZnUPDpftt0lQSHPJobJBA2SUrYmq7ObnU4doPqghkl
mcQRUG81ScKYpSv1X/AeHDA1xx3njnGoezJ3yvkvVBDi7qQBOR3pHAfIT+5Kxayk
008iwhsblUMcN8X4yUK8s+sRUf74dcqZGYrN2g7ZYVz0tsyu0P9oACPwwDo7M6JG
3ngK8BXwRlj8Xdg0AHk8M/EUoWseyYQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:09:55 2025 by rpki-client