Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/376a7ae4-8233-37bf-bfdc-d9a38d02658a.roa
File: 376a7ae4-8233-37bf-bfdc-d9a38d02658a.roa (raw, json)
Hash identifier: rzjbZzSjyVjrqy/UGoCJccPdwsdlu6xCkQSVFRS1pMc=
Subject key identifier: 9A:CF:F6:4D:AA:C6:98:94:AC:4C:26:B8:AA:75:00:B3:60:0D:78:63
Certificate issuer: /CN=b3f5323f-8bea-48c6-aa03-949255dd1997
Certificate serial: 010D0C9F432858489FD099459777E52F7874F900
Authority key identifier: 53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/376a7ae4-8233-37bf-bfdc-d9a38d02658a.roa
Signing time: Wed 22 Jan 2025 02:00:39 +0000
ROA not before: Wed 22 Jan 2025 02:00:39 +0000
ROA not after: Tue 22 Apr 2025 01:00:39 +0000
asID: 46474
IP address blocks: 74.205.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9f:d0:99:45:97:77:e5:2f:78:74:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3f5323f-8bea-48c6-aa03-949255dd1997
Validity
Not Before: Jan 22 02:00:39 2025 GMT
Not After : Apr 22 01:00:39 2025 GMT
Subject: CN=759f3592-2394-43d6-9032-38d9b455123c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3b:cb:b6:03:4d:d4:8a:13:d4:27:94:b2:bc:
24:f0:be:4f:e7:33:d9:99:41:7f:01:13:b9:dc:10:
a5:cd:02:f7:5d:da:c8:10:00:34:ed:bb:ae:d7:3c:
9c:1b:a5:77:c5:34:5c:0a:e3:6f:d5:72:fc:b1:dc:
db:92:1b:36:ac:18:a2:93:01:0b:09:2f:eb:8e:5f:
9d:ce:84:9b:e9:3b:38:40:df:d6:a3:91:06:ba:60:
3c:76:14:53:e1:23:ca:a9:45:51:43:13:7b:5c:d7:
7b:2d:38:1e:71:5b:80:37:fa:dd:3d:cd:4e:c5:35:
10:47:e1:d1:ce:26:e8:76:d4:13:2e:3f:64:b8:d3:
08:e1:ec:6c:7f:db:92:e1:a9:f8:5b:21:2a:9a:ee:
bb:f0:db:44:16:79:99:4e:92:70:94:20:f0:ff:49:
ca:c4:2c:9d:2c:cf:b3:21:a0:5a:6c:6b:a7:78:5f:
1e:43:2d:d9:c1:21:62:9c:5e:80:cb:ec:9e:bf:ff:
02:8d:c0:f3:6f:8a:14:86:40:61:e6:2a:e2:64:be:
52:0b:ac:7a:48:51:81:79:1c:67:0e:6d:06:6e:0f:
02:e1:04:1e:7b:ab:8e:92:b2:fc:de:42:b6:ef:3d:
ed:a3:44:75:7b:c2:f0:16:75:97:a2:7d:90:f3:39:
71:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CF:F6:4D:AA:C6:98:94:AC:4C:26:B8:AA:75:00:B3:60:0D:78:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/376a7ae4-8233-37bf-bfdc-d9a38d02658a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.crl
X509v3 Authority Key Identifier:
keyid:53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer
sbgp-ipAddrBlock: critical
IPv4:
74.205.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:d7:6b:eb:43:09:6a:51:f4:40:99:f9:15:83:b7:25:d4:56:
c9:14:55:b1:f6:3f:f1:b7:e3:a5:cc:72:5f:75:4a:76:db:92:
d5:63:b2:e9:be:36:81:77:95:fd:f8:58:4d:06:03:ac:72:07:
66:af:a0:2c:51:a1:44:b9:a3:11:21:5a:ae:02:df:e8:2e:bd:
52:d9:5e:9a:c8:74:c6:5c:c6:2d:38:f5:18:e1:d8:44:27:84:
8d:d1:ff:6a:7c:fb:9b:de:5e:3a:54:18:81:2c:cb:e8:a0:ce:
0e:2e:9e:13:bf:9b:52:f4:03:3c:37:b1:8c:3b:64:a0:b8:94:
c2:87:ee:e3:44:b4:31:8f:e1:a0:a1:9c:b1:95:b2:bc:52:d4:
c3:10:f9:7a:9c:5b:4d:a4:6a:0d:15:51:d1:23:13:36:40:63:
92:43:f5:e8:e1:19:06:37:60:4b:b4:ef:dd:65:7a:b8:45:ac:
e2:a5:96:57:54:37:81:18:0b:ef:a0:b0:b7:e3:b8:1a:9f:81:
5e:6d:2d:c1:b4:ec:c3:21:2d:72:0c:05:7e:11:a8:89:31:6e:
4b:7e:5c:d4:f6:74:16:3a:80:22:e6:98:e9:26:57:ec:50:9b:
45:50:ee:f7:50:18:18:68:01:a0:ad:f7:76:3a:2b:c7:37:2a:
62:ef:e9:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEif0JlFl3flL3h0+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjNmNTMyM2YtOGJlYS00OGM2LWFhMDMtOTQ5MjU1ZGQx
OTk3MB4XDTI1MDEyMjAyMDAzOVoXDTI1MDQyMjAxMDAzOVowLzEtMCsGA1UEAxMk
NzU5ZjM1OTItMjM5NC00M2Q2LTkwMzItMzhkOWI0NTUxMjNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijvLtgNN1IoT1CeUsrwk8L5P5zPZmUF/ARO5
3BClzQL3XdrIEAA07buu1zycG6V3xTRcCuNv1XL8sdzbkhs2rBiikwELCS/rjl+d
zoSb6Ts4QN/Wo5EGumA8dhRT4SPKqUVRQxN7XNd7LTgecVuAN/rdPc1OxTUQR+HR
zibodtQTLj9kuNMI4exsf9uS4an4WyEqmu678NtEFnmZTpJwlCDw/0nKxCydLM+z
IaBabGuneF8eQy3ZwSFinF6Ay+yev/8CjcDzb4oUhkBh5iriZL5SC6x6SFGBeRxn
Dm0Gbg8C4QQee6uOkrL83kK27z3to0R1e8LwFnWXon2Q8zlxGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJrP9k2qxpiUrEwmuKp1ALNgDXhjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iM2Y1
MzIzZi04YmVhLTQ4YzYtYWEwMy05NDkyNTVkZDE5OTcvMzc2YTdhZTQtODIzMy0z
N2JmLWJmZGMtZDlhMzhkMDI2NThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjNmNTMyM2YtOGJlYS00OGM2LWFh
MDMtOTQ5MjU1ZGQxOTk3L2IzZjUzMjNmLThiZWEtNDhjNi1hYTAzLTk0OTI1NWRk
MTk5Ny5jcmwwHwYDVR0jBBgwFoAUU4ELix9UHi+CHErdwD5wsGKV7F0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iM2Y1MzIzZi04YmVhLTQ4YzYtYWEwMy05NDky
NTVkZDE5OTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASs3KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACbXa+tDCWpR9ECZ+RWDtyXUVskUVbH2P/G346XMcl91SnbbktVjsum+
NoF3lf34WE0GA6xyB2avoCxRoUS5oxEhWq4C3+guvVLZXprIdMZcxi049Rjh2EQn
hI3R/2p8+5veXjpUGIEsy+igzg4unhO/m1L0Azw3sYw7ZKC4lMKH7uNEtDGP4aCh
nLGVsrxS1MMQ+XqcW02kag0VUdEjEzZAY5JD9ejhGQY3YEu0791lerhFrOKllldU
N4EYC++gsLfjuBqfgV5tLcG07MMhLXIMBX4RqIkxbkt+XNT2dBY6gCLmmOkmV+xQ
m0VQ7vdQGBhoAaCt93Y6K8c3KmLv6cY=
-----END CERTIFICATE-----
Generated at Sat Apr 12 09:28:18 2025 by rpki-client