Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/fefa3b84-b268-3640-ba36-19a910258277.roa
File: fefa3b84-b268-3640-ba36-19a910258277.roa (raw, json)
Hash identifier: E2fofUKlymK5qw5fQNQw4/K94aUcXmtw1EvTF42jLx0=
Subject key identifier: 63:D6:09:18:67:D2:65:8C:FF:7D:77:08:00:82:D3:5E:4E:1D:3B:A4
Certificate issuer: /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial: 010D0C9F432858494733EB0ED9B0A1AFADB03600
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/fefa3b84-b268-3640-ba36-19a910258277.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 3695
IP address blocks: 70.36.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:eb:0e:d9:b0:a1:af:ad:b0:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=fe5ee3e7-6adb-489c-a29a-f194bfdf44f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:92:4b:37:a3:32:d4:09:65:ee:08:75:5e:fc:
10:ed:cf:d0:03:2f:e7:f9:a6:86:1b:b5:0a:87:10:
33:3c:cf:3a:64:f5:1c:e4:f3:13:55:fe:f6:fb:8b:
33:76:df:a2:70:17:14:7f:4a:37:57:68:e0:5b:25:
65:2b:9c:c6:23:0c:81:41:a0:5c:1d:86:c6:42:b6:
e3:cb:4f:df:a9:5d:88:85:9a:4a:0f:cb:fb:95:5b:
1d:00:32:f6:2d:ea:6a:d0:76:3d:63:e0:52:07:5b:
fc:f7:b5:54:93:aa:42:b6:6f:6a:c7:f8:36:ef:4a:
03:7d:fa:72:21:6b:7a:39:ba:3f:e0:35:30:1e:a7:
a3:42:19:c6:13:49:fa:2a:e5:6e:c5:af:e8:57:0b:
27:dc:c4:61:9a:bd:d0:53:80:c6:42:40:03:41:00:
21:81:b1:b6:be:86:78:37:38:88:e9:4b:f6:be:f5:
8f:73:42:e1:cf:8b:51:2f:77:3c:7b:e9:1c:3b:98:
4f:a9:62:7f:7d:6e:ca:ff:f4:2d:2d:d5:e0:a1:b8:
24:59:00:2d:5c:bf:38:34:34:07:21:04:f5:8c:38:
f6:3e:3c:ae:e5:f5:5c:c8:10:b8:25:2d:99:7a:5b:
22:3a:86:ee:fe:c4:94:b8:fa:1e:a6:98:1f:7f:21:
46:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D6:09:18:67:D2:65:8C:FF:7D:77:08:00:82:D3:5E:4E:1D:3B:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/fefa3b84-b268-3640-ba36-19a910258277.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
X509v3 Authority Key Identifier:
keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
sbgp-ipAddrBlock: critical
IPv4:
70.36.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:e9:23:83:1e:eb:e7:2d:46:aa:d0:d8:fa:13:39:fb:ef:2e:
dd:74:39:e8:22:b5:d6:69:87:34:2d:74:15:68:e7:da:cb:79:
52:ff:24:7e:68:b7:16:4c:72:be:1a:2e:7f:08:83:3a:64:19:
7e:3c:e9:05:7c:df:05:d5:53:cd:d4:45:d3:0d:e3:68:12:0d:
a3:b3:21:60:03:a3:d7:15:4b:27:f9:95:81:6f:bb:de:b0:19:
84:ad:b3:ed:06:0d:4b:ba:a0:0a:1c:11:54:47:8b:27:df:bc:
06:42:0a:7e:cd:80:0c:33:70:59:f7:43:3e:12:9c:df:95:e6:
45:8e:2c:34:8c:a5:1f:77:c4:2e:7c:c0:f7:00:08:47:de:fc:
4b:41:77:28:85:cc:1c:ab:8d:62:f6:ae:0a:e2:3c:5a:8b:87:
49:4b:0b:46:fe:ac:f7:4a:2f:65:c5:7c:09:7c:47:51:a5:01:
65:3e:e2:20:90:da:d7:82:c3:6e:b0:57:a5:ef:90:5f:06:09:
09:bf:76:23:5a:bb:0c:4c:5f:2b:47:c9:bc:a7:d1:d7:a8:34:
c4:f1:a8:23:c1:dd:89:d0:3e:62:23:66:4c:9e:c4:29:3f:12:
55:30:e4:bb:d1:2f:b2:36:c2:8f:da:b8:ac:2b:f0:72:1e:c5:
11:49:f1:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM+sO2bChr62wNgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjljZDhiYzQtNWUzYy00Y2M4LTk0MWUtMDg0MDQzZWZi
NTIwMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk
ZmU1ZWUzZTctNmFkYi00ODljLWEyOWEtZjE5NGJmZGY0NGYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpJLN6My1All7gh1XvwQ7c/QAy/n+aaGG7UK
hxAzPM86ZPUc5PMTVf72+4szdt+icBcUf0o3V2jgWyVlK5zGIwyBQaBcHYbGQrbj
y0/fqV2IhZpKD8v7lVsdADL2Lepq0HY9Y+BSB1v897VUk6pCtm9qx/g270oDffpy
IWt6Obo/4DUwHqejQhnGE0n6KuVuxa/oVwsn3MRhmr3QU4DGQkADQQAhgbG2voZ4
NziI6Uv2vvWPc0Lhz4tRL3c8e+kcO5hPqWJ/fW7K//QtLdXgobgkWQAtXL84NDQH
IQT1jDj2Pjyu5fVcyBC4JS2ZelsiOobu/sSUuPoeppgffyFG7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGPWCRhn0mWM/313CACC015OHTukMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82OWNk
OGJjNC01ZTNjLTRjYzgtOTQxZS0wODQwNDNlZmI1MjAvZmVmYTNiODQtYjI2OC0z
NjQwLWJhMzYtMTlhOTEwMjU4Mjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjljZDhiYzQtNWUzYy00Y2M4LTk0
MWUtMDg0MDQzZWZiNTIwLzY5Y2Q4YmM0LTVlM2MtNGNjOC05NDFlLTA4NDA0M2Vm
YjUyMC5jcmwwHwYDVR0jBBgwFoAU8u5yVm4HrBcrJBWRIoc0mDBvYIkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82OWNkOGJjNC01ZTNjLTRjYzgtOTQxZS0wODQw
NDNlZmI1MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiQEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKPpI4Me6+ctRqrQ2PoTOfvvLt10OegitdZphzQtdBVo59rLeVL/JH5o
txZMcr4aLn8IgzpkGX486QV83wXVU83URdMN42gSDaOzIWADo9cVSyf5lYFvu96w
GYSts+0GDUu6oAocEVRHiyffvAZCCn7NgAwzcFn3Qz4SnN+V5kWOLDSMpR93xC58
wPcACEfe/EtBdyiFzByrjWL2rgriPFqLh0lLC0b+rPdKL2XFfAl8R1GlAWU+4iCQ
2teCw26wV6XvkF8GCQm/diNauwxMXytHybyn0deoNMTxqCPB3YnQPmIjZkyexCk/
ElUw5LvRL7I2wo/auKwr8HIexRFJ8RA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:43:15 2025 by rpki-client