Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/720db375-7b89-3b9b-bbb2-ce87c18f6ec0.roa
File: 720db375-7b89-3b9b-bbb2-ce87c18f6ec0.roa (raw, json)
Hash identifier: 6zYrFjvOg6EMfWHgaEsD2yLwK4YmDsGk0Qc7greiPz8=
Subject key identifier: C9:4A:10:77:37:30:F8:0A:BB:1E:B6:31:23:4D:37:07:40:B5:BE:AE
Certificate issuer: /CN=f78a234f-9553-446a-965d-0bfffa402f1b
Certificate serial: 010D0C9F4328584913AC39398EA131E083F88500
Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/720db375-7b89-3b9b-bbb2-ce87c18f6ec0.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 32837
IP address blocks: 216.59.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:39:39:8e:a1:31:e0:83:f8:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=5dd54fb1-8d77-435a-bd27-bcb1806b6115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ca:cc:4f:85:cf:46:f9:f1:f6:1f:ab:c8:f5:
dd:00:13:c7:3b:9f:06:d0:e6:b9:60:2f:f7:60:7b:
a0:67:06:15:e8:3a:ea:27:5c:20:8e:76:6d:23:8c:
d1:a2:5f:3b:40:83:b0:bd:37:24:96:d2:91:91:4e:
14:60:0e:9a:1f:39:f9:a4:bf:2e:ee:a2:e2:9a:11:
a3:95:e8:4e:48:5a:30:d9:90:8b:5f:10:fb:d6:9a:
90:f6:d8:bf:cc:fd:cd:8f:9c:a2:15:f9:92:9b:fe:
7e:eb:66:54:74:3c:9b:d9:30:b4:98:dc:a1:5e:e8:
35:6f:10:25:c6:53:6f:65:13:4d:75:6d:b4:4a:a8:
3f:41:fe:60:08:bd:74:7b:4a:dc:f1:60:2a:a8:cc:
f8:63:ac:1c:ca:bd:cd:95:6c:98:cf:a1:e4:1e:d9:
3c:28:60:09:3a:41:0e:8f:ad:79:1a:23:d4:d9:d5:
ff:5a:69:b2:7a:e4:31:26:88:a2:4d:6d:60:74:0a:
55:49:07:3c:c7:bd:a6:98:23:0f:1e:5c:f1:01:9d:
21:ed:6c:71:b3:73:5f:41:81:df:7f:28:ab:ab:65:
c8:8a:c8:14:89:e1:82:87:1b:88:68:9c:0a:ac:37:
03:64:21:b2:23:6b:d5:5e:60:4e:9a:7f:ba:f4:0c:
4d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4A:10:77:37:30:F8:0A:BB:1E:B6:31:23:4D:37:07:40:B5:BE:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/720db375-7b89-3b9b-bbb2-ce87c18f6ec0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl
X509v3 Authority Key Identifier:
keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
sbgp-ipAddrBlock: critical
IPv4:
216.59.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:28:5f:3e:11:49:a9:d5:74:d0:3e:cd:e5:0d:34:42:3e:95:
68:43:b5:a2:16:0c:2e:01:51:3d:0b:4c:e0:28:e1:7b:4c:3e:
1f:d7:05:82:02:c6:0d:1f:eb:cb:ac:ff:2e:b2:31:72:48:f6:
7c:31:45:7f:50:0a:56:85:a2:c3:ca:10:1c:36:b5:3f:e0:b3:
39:d3:ef:aa:e0:f9:3d:65:02:31:9f:86:ec:f8:37:a5:a2:57:
9c:cc:df:f6:a3:7c:09:29:1a:52:6c:96:96:7c:41:5d:bc:77:
bb:72:b0:02:b2:1a:71:45:19:10:3a:b5:42:4f:1a:bd:1e:f2:
27:d8:08:97:88:77:77:43:ff:37:25:79:bf:47:e5:58:d6:9f:
35:7e:90:a3:46:af:28:d3:43:d9:49:2e:c1:ba:c4:9d:03:33:
94:51:24:33:be:51:6a:7b:8b:00:18:1a:bb:90:3d:01:c8:f5:
55:3e:29:e6:5d:cc:39:98:36:19:7e:18:f5:28:88:1d:24:36:
d0:c0:5d:da:2a:5a:b7:bf:82:f6:2a:7c:0e:5e:a8:3b:9a:75:
de:7d:6e:78:87:9b:5c:a2:23:fc:9d:66:54:9f:09:75:2c:f8:
f8:30:d2:77:07:ad:26:8a:98:37:50:99:61:a2:8f:2b:06:a2:
6b:78:33:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrDk5jqEx4IP4hQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjc4YTIzNGYtOTU1My00NDZhLTk2NWQtMGJmZmZhNDAy
ZjFiMB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk
NWRkNTRmYjEtOGQ3Ny00MzVhLWJkMjctYmNiMTgwNmI2MTE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8rMT4XPRvnx9h+ryPXdABPHO58G0Oa5YC/3
YHugZwYV6DrqJ1wgjnZtI4zRol87QIOwvTckltKRkU4UYA6aHzn5pL8u7qLimhGj
lehOSFow2ZCLXxD71pqQ9ti/zP3Nj5yiFfmSm/5+62ZUdDyb2TC0mNyhXug1bxAl
xlNvZRNNdW20Sqg/Qf5gCL10e0rc8WAqqMz4Y6wcyr3NlWyYz6HkHtk8KGAJOkEO
j615GiPU2dX/WmmyeuQxJoiiTW1gdApVSQc8x72mmCMPHlzxAZ0h7Wxxs3NfQYHf
fyirq2XIisgUieGChxuIaJwKrDcDZCGyI2vVXmBOmn+69AxNtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMlKEHc3MPgKux62MSNNNwdAtb6uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNzhh
MjM0Zi05NTUzLTQ0NmEtOTY1ZC0wYmZmZmE0MDJmMWIvNzIwZGIzNzUtN2I4OS0z
YjliLWJiYjItY2U4N2MxOGY2ZWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjc4YTIzNGYtOTU1My00NDZhLTk2
NWQtMGJmZmZhNDAyZjFiL2Y3OGEyMzRmLTk1NTMtNDQ2YS05NjVkLTBiZmZmYTQw
MmYxYi5jcmwwHwYDVR0jBBgwFoAUySL1rL077bzOZt54JOhaPckKjtYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNzhhMjM0Zi05NTUzLTQ0NmEtOTY1ZC0wYmZm
ZmE0MDJmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Dt/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAUoXz4RSanVdNA+zeUNNEI+lWhDtaIWDC4BUT0LTOAo4XtMPh/XBYIC
xg0f68us/y6yMXJI9nwxRX9QClaFosPKEBw2tT/gsznT76rg+T1lAjGfhuz4N6Wi
V5zM3/ajfAkpGlJslpZ8QV28d7tysAKyGnFFGRA6tUJPGr0e8ifYCJeId3dD/zcl
eb9H5VjWnzV+kKNGryjTQ9lJLsG6xJ0DM5RRJDO+UWp7iwAYGruQPQHI9VU+KeZd
zDmYNhl+GPUoiB0kNtDAXdoqWre/gvYqfA5eqDuadd59bniHm1yiI/ydZlSfCXUs
+Pgw0ncHrSaKmDdQmWGijysGomt4M3E=
-----END CERTIFICATE-----
Generated at Wed Apr 9 13:01:10 2025 by rpki-client