Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f/eed51cde-5a64-363c-8fc9-19eeaec5affb.roa
File: eed51cde-5a64-363c-8fc9-19eeaec5affb.roa (raw, json)
Hash identifier: /oQ2iv2T1PzB1348SIA4U3g3a1Anfsl1Ag3iSS7St6A=
Subject key identifier: 2C:E3:0C:8A:90:22:C8:85:C7:C5:89:3D:AA:43:52:E0:86:B3:D6:64
Certificate issuer: /CN=5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f
Certificate serial: 010D0C9F432858494B68CBDCBEAD18FF2B66DA00
Authority key identifier: B9:85:D3:10:04:80:A9:C8:0C:89:53:A2:98:78:8F:C2:16:23:8B:71
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f/eed51cde-5a64-363c-8fc9-19eeaec5affb.roa
Signing time: Mon 24 Mar 2025 13:10:36 +0000
ROA not before: Mon 24 Mar 2025 13:10:36 +0000
ROA not after: Sun 22 Jun 2025 13:10:36 +0000
asID: 3320
IP address blocks: 64.49.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:68:cb:dc:be:ad:18:ff:2b:66:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f
Validity
Not Before: Mar 24 13:10:36 2025 GMT
Not After : Jun 22 13:10:36 2025 GMT
Subject: CN=21598a19-89e0-4ecd-8f47-ea892aa7d5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:dd:fd:fc:b0:47:97:bc:fc:b3:a8:ab:85:fc:
75:e5:27:02:f9:15:3b:dc:31:e3:a5:89:ec:5c:62:
1a:d8:f3:5f:76:3b:11:61:67:bc:4e:6c:17:7a:0f:
19:59:ad:1f:86:64:32:3f:7e:97:35:70:09:3e:10:
cc:0c:2e:0e:58:96:45:7d:2e:8e:ad:14:df:5b:13:
43:29:8c:85:af:b5:e7:b5:42:0e:8a:4f:c0:3c:a6:
a7:1c:be:43:e1:fa:3d:75:b0:23:72:1e:75:20:99:
b2:1c:cb:4d:fc:2d:ac:ff:99:cd:ab:ad:fa:24:c8:
77:ab:c9:2e:c5:3f:ab:5e:f4:71:41:d5:59:e9:08:
be:7c:4a:e2:bc:15:21:85:c4:30:c1:f1:27:37:c0:
8d:c7:4a:21:62:8e:12:00:30:58:f0:f3:fd:7c:81:
20:5a:68:25:fe:31:79:6c:29:83:5c:a3:57:e0:10:
57:3d:ff:bf:9f:a2:12:2d:ae:cb:98:b3:99:cd:df:
d0:f8:66:b5:3f:1e:03:71:fb:0b:1e:1b:b6:bb:2b:
84:43:ef:f5:f1:7e:3f:1d:30:87:6f:b5:99:80:f1:
3a:9e:02:24:83:a2:10:6c:b8:84:d7:6d:2c:22:82:
30:e3:0e:e9:31:f4:d0:2b:88:14:9f:db:0e:10:ad:
86:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E3:0C:8A:90:22:C8:85:C7:C5:89:3D:AA:43:52:E0:86:B3:D6:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f/eed51cde-5a64-363c-8fc9-19eeaec5affb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f.crl
X509v3 Authority Key Identifier:
keyid:B9:85:D3:10:04:80:A9:C8:0C:89:53:A2:98:78:8F:C2:16:23:8B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c197a8a-4bcc-4a1b-8a02-06b3611f0b6f.cer
sbgp-ipAddrBlock: critical
IPv4:
64.49.56.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:dc:8e:3a:0b:62:d8:39:ee:92:2c:f9:77:09:1a:bc:a8:7a:
0f:0a:67:06:d3:7e:18:f7:17:9f:ac:d5:48:da:67:55:bf:5e:
00:7d:57:b0:b8:58:61:bc:dd:a7:d9:39:93:ea:c6:75:c5:03:
84:ba:14:21:bc:43:96:14:31:2d:6f:74:a5:35:f7:7a:9a:e5:
d2:a7:c0:36:07:80:a7:c6:41:94:f7:a0:39:24:59:14:eb:40:
e6:81:c0:6c:d7:11:6d:1a:4c:5b:f6:41:bb:2b:b0:c3:07:75:
0d:e9:42:79:7c:bf:07:c4:e8:15:2d:1a:b8:4f:04:01:34:f4:
e0:83:00:93:9a:59:5f:ec:a8:4b:a6:cb:2a:18:92:e1:4d:9e:
dd:30:f1:30:c6:4a:57:d4:49:82:fa:dc:c7:05:6a:e5:79:1e:
64:e9:58:ce:b4:be:87:0c:fa:f7:e1:e0:d0:a0:2e:ef:8f:60:
a3:9a:13:56:7d:3e:7e:55:81:f0:cf:85:3f:b4:de:0d:ad:0b:
eb:87:de:c6:ac:f4:7d:24:28:43:cb:2e:8e:dd:dc:d7:d4:ad:
d1:07:1a:b1:90:13:8e:41:b4:5a:43:de:af:bb:5f:65:22:73:
8e:d8:59:b9:0c:6d:7f:be:96:b6:b8:92:8d:dd:f0:4b:8c:6c:
bc:9c:fc:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLaMvcvq0Y/ytm2gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWMxOTdhOGEtNGJjYy00YTFiLThhMDItMDZiMzYxMWYw
YjZmMB4XDTI1MDMyNDEzMTAzNloXDTI1MDYyMjEzMTAzNlowLzEtMCsGA1UEAxMk
MjE1OThhMTktODllMC00ZWNkLThmNDctZWE4OTJhYTdkNWNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAid39/LBHl7z8s6irhfx15ScC+RU73DHjpYns
XGIa2PNfdjsRYWe8TmwXeg8ZWa0fhmQyP36XNXAJPhDMDC4OWJZFfS6OrRTfWxND
KYyFr7XntUIOik/APKanHL5D4fo9dbAjch51IJmyHMtN/C2s/5nNq636JMh3q8ku
xT+rXvRxQdVZ6Qi+fErivBUhhcQwwfEnN8CNx0ohYo4SADBY8PP9fIEgWmgl/jF5
bCmDXKNX4BBXPf+/n6ISLa7LmLOZzd/Q+Ga1Px4DcfsLHhu2uyuEQ+/18X4/HTCH
b7WZgPE6ngIkg6IQbLiE120sIoIw4w7pMfTQK4gUn9sOEK2GyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCzjDIqQIsiFx8WJPapDUuCGs9ZkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81YzE5
N2E4YS00YmNjLTRhMWItOGEwMi0wNmIzNjExZjBiNmYvZWVkNTFjZGUtNWE2NC0z
NjNjLThmYzktMTllZWFlYzVhZmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNWMxOTdhOGEtNGJjYy00YTFiLThh
MDItMDZiMzYxMWYwYjZmLzVjMTk3YThhLTRiY2MtNGExYi04YTAyLTA2YjM2MTFm
MGI2Zi5jcmwwHwYDVR0jBBgwFoAUuYXTEASAqcgMiVOimHiPwhYji3EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81YzE5N2E4YS00YmNjLTRhMWItOGEwMi0wNmIz
NjExZjBiNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQDE4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA/cjjoLYtg57pIs+XcJGryoeg8KZwbTfhj3F5+s1UjaZ1W/XgB9V7C4
WGG83afZOZPqxnXFA4S6FCG8Q5YUMS1vdKU193qa5dKnwDYHgKfGQZT3oDkkWRTr
QOaBwGzXEW0aTFv2QbsrsMMHdQ3pQnl8vwfE6BUtGrhPBAE09OCDAJOaWV/sqEum
yyoYkuFNnt0w8TDGSlfUSYL63McFauV5HmTpWM60vocM+vfh4NCgLu+PYKOaE1Z9
Pn5VgfDPhT+03g2tC+uH3sas9H0kKEPLLo7d3NfUrdEHGrGQE45BtFpD3q+7X2Ui
c47YWbkMbX++lra4ko3d8EuMbLyc/GY=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:41:15 2025 by rpki-client