Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/5bf7ca7a-9b31-39bf-b829-186b9bcbb5dc.roa
File: 5bf7ca7a-9b31-39bf-b829-186b9bcbb5dc.roa (raw, json)
Hash identifier: f+vJL5RvPN62iIMLUWbGkdg9u/yJD8Lzhe191/9KLZ0=
Subject key identifier: ED:CE:9B:4C:D9:87:3D:62:2A:91:21:4F:1A:6E:87:A7:B4:21:33:7B
Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial: 010D0C9F43285849552951266B72F1935A0A62C0
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/5bf7ca7a-9b31-39bf-b829-186b9bcbb5dc.roa
Signing time: Fri 28 Mar 2025 01:00:41 +0000
ROA not before: Fri 28 Mar 2025 01:00:41 +0000
ROA not after: Thu 26 Jun 2025 01:00:41 +0000
asID: 4540
IP address blocks: 74.50.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:55:29:51:26:6b:72:f1:93:5a:0a:62:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Validity
Not Before: Mar 28 01:00:41 2025 GMT
Not After : Jun 26 01:00:41 2025 GMT
Subject: CN=daaf1e50-e05d-4ea0-89b8-ee7d1fc2e190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:dd:60:8a:d0:37:48:ac:bf:7f:27:44:41:24:
58:ef:61:4b:4e:dc:78:c2:b8:37:09:8a:23:a0:95:
ee:d1:64:ec:ba:53:c7:ea:19:67:18:03:64:96:ec:
5f:a9:ba:f5:24:ea:1f:ad:89:31:70:2f:98:7d:bc:
66:7c:12:d4:f9:68:61:f4:9a:6e:e1:55:93:fb:5c:
38:82:5e:94:5c:3d:b7:ff:d4:c5:fd:79:eb:93:1c:
0d:a7:5b:c7:74:fc:de:21:9f:f4:31:76:b6:c5:43:
b3:41:dd:4d:35:12:23:c4:ef:de:09:6d:dd:50:bc:
cd:ec:33:6c:11:58:b6:d2:b5:65:f9:b1:45:2d:ab:
c8:61:e8:26:58:ad:eb:9c:ea:6a:2e:a3:41:98:1b:
0b:a0:58:df:49:3c:79:9a:3b:0c:a6:26:51:21:10:
15:7b:98:38:1e:20:98:14:19:29:e8:6a:76:bd:fa:
b2:3f:c5:34:db:f7:08:ac:3c:fe:ab:a1:bd:92:d2:
59:39:af:a9:dc:c7:78:fc:58:24:9f:3c:68:e2:c3:
62:8c:07:7e:74:1f:60:7f:b9:f4:69:6f:d1:9a:e6:
48:a4:b6:13:f2:c9:ed:26:e6:d5:ee:f4:78:95:0d:
db:f2:61:58:02:1e:35:65:e3:5f:85:ed:54:ed:82:
07:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CE:9B:4C:D9:87:3D:62:2A:91:21:4F:1A:6E:87:A7:B4:21:33:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/5bf7ca7a-9b31-39bf-b829-186b9bcbb5dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
X509v3 Authority Key Identifier:
keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
sbgp-ipAddrBlock: critical
IPv4:
74.50.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:bb:be:e3:44:e3:ea:75:33:8b:c1:60:6e:a0:f8:75:29:93:
3a:8c:8e:b6:7b:06:5e:7b:4d:06:f1:e4:c7:e2:fa:fd:16:0c:
64:73:72:e4:6e:dc:1c:42:e1:ca:cd:a9:cc:f4:3e:79:f0:10:
b8:a7:48:eb:a4:41:e7:c0:c9:3f:2c:8c:91:74:ff:54:2d:3a:
24:f9:85:ed:97:99:37:9c:ae:94:e9:97:ef:9c:08:f7:e2:1c:
f1:4c:da:d6:75:94:02:c4:67:49:4b:8f:d7:6e:d6:ba:01:b6:
32:a7:56:83:23:f3:50:78:0f:77:7e:42:56:fb:03:0b:e4:dc:
88:fa:be:42:ab:a1:af:1f:ba:52:46:19:0f:13:a7:50:2c:a4:
25:4b:88:0f:b8:52:07:ba:86:4d:71:28:fc:ae:8a:eb:aa:83:
65:9b:28:38:2a:4f:41:ea:48:15:9e:c7:e2:10:de:d6:e6:ca:
89:4e:6b:a8:ad:79:48:0a:2f:93:4f:d4:d9:73:f2:39:b3:10:
76:17:21:e2:ae:52:a4:01:bd:6e:a4:df:7c:6e:ea:a8:ce:fc:
fa:70:b1:0e:05:18:48:49:80:5f:82:3c:ca:f4:37:41:3b:6c:
23:87:6b:07:f2:8f:22:50:35:1f:b5:53:ff:14:be:af:92:d2:
c3:7b:69:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElVKVEma3Lxk1oKYsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3
ZDkyMB4XDTI1MDMyODAxMDA0MVoXDTI1MDYyNjAxMDA0MVowLzEtMCsGA1UEAxMk
ZGFhZjFlNTAtZTA1ZC00ZWEwLTg5YjgtZWU3ZDFmYzJlMTkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjt1gitA3SKy/fydEQSRY72FLTtx4wrg3CYoj
oJXu0WTsulPH6hlnGANkluxfqbr1JOofrYkxcC+YfbxmfBLU+Whh9Jpu4VWT+1w4
gl6UXD23/9TF/XnrkxwNp1vHdPzeIZ/0MXa2xUOzQd1NNRIjxO/eCW3dULzN7DNs
EVi20rVl+bFFLavIYegmWK3rnOpqLqNBmBsLoFjfSTx5mjsMpiZRIRAVe5g4HiCY
FBkp6Gp2vfqyP8U02/cIrDz+q6G9ktJZOa+p3Md4/Fgknzxo4sNijAd+dB9gf7n0
aW/RmuZIpLYT8sntJubV7vR4lQ3b8mFYAh41ZeNfhe1U7YIH7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO3Om0zZhz1iKpEhTxpuh6e0ITN7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx
YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvNWJmN2NhN2EtOWIzMS0z
OWJmLWI4MjktMTg2YjliY2JiNWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm
NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3
N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl
NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSjKoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHC7vuNE4+p1M4vBYG6g+HUpkzqMjrZ7Bl57TQbx5Mfi+v0WDGRzcuRu
3BxC4crNqcz0PnnwELinSOukQefAyT8sjJF0/1QtOiT5he2XmTecrpTpl++cCPfi
HPFM2tZ1lALEZ0lLj9du1roBtjKnVoMj81B4D3d+Qlb7Awvk3Ij6vkKroa8fulJG
GQ8Tp1AspCVLiA+4Uge6hk1xKPyuiuuqg2WbKDgqT0HqSBWex+IQ3tbmyolOa6it
eUgKL5NP1Nlz8jmzEHYXIeKuUqQBvW6k33xu6qjO/PpwsQ4FGEhJgF+CPMr0N0E7
bCOHawfyjyJQNR+1U/8Uvq+S0sN7aaY=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:21:23 2025 by rpki-client