Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/574eb9ce-9074-34b5-a14c-ebe0716fe6d4.roa
File: 574eb9ce-9074-34b5-a14c-ebe0716fe6d4.roa (raw, json)
Hash identifier: Mtn1d3PRis+PBVqqeoKNgrnp8jzVp7/90pn8vRC7YR4=
Subject key identifier: 50:6C:B1:73:50:56:6B:12:0E:BF:50:99:73:EB:AF:B6:03:F4:C0:34
Certificate issuer: /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial: 010D0C9F43285849218405B8D2EABBA9071630A0
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/574eb9ce-9074-34b5-a14c-ebe0716fe6d4.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 54994
IP address blocks: 174.35.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:05:b8:d2:ea:bb:a9:07:16:30:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=860e840b-6604-4eb8-9733-8dfe53ce4cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1c:c7:3b:aa:89:ae:8f:8e:c9:71:b7:8a:f9:
ef:13:43:a3:5f:c0:16:57:e5:ae:28:25:75:2e:81:
86:2d:76:5a:00:a3:79:2a:35:be:ac:c1:f5:1e:98:
79:22:ab:f5:9b:a8:b6:4d:0b:1c:53:ca:c4:cb:e8:
d9:6c:82:c7:94:9d:92:58:9f:4b:71:ef:1d:b7:9c:
5e:75:04:0a:d0:63:0a:52:d1:10:36:65:0e:4e:35:
fd:66:27:cf:f5:86:d7:52:27:d0:9c:34:72:30:6a:
b3:7b:f7:83:92:72:48:e7:91:b9:91:83:22:a9:7f:
21:5e:e5:1c:83:cb:26:71:aa:3d:e4:8d:5e:60:2f:
73:51:72:8d:ed:e6:b2:81:0d:05:68:5c:d8:73:28:
e1:f6:80:b4:b8:6a:af:af:2f:8e:ff:6d:07:7d:9c:
eb:3a:f0:33:39:37:45:77:98:be:8d:b9:8a:cf:ea:
83:38:39:ec:77:28:17:f0:cc:4a:26:02:57:e9:3a:
40:ff:5f:00:15:6e:1b:32:65:ec:c4:5e:40:70:2e:
1e:d7:f5:16:fb:86:55:24:a3:57:5d:8c:84:53:43:
b6:4d:4c:d9:f1:e5:ed:25:e7:13:40:2c:8d:f9:ac:
ce:34:55:94:b5:af:db:8f:01:c7:82:c8:33:81:1d:
d6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6C:B1:73:50:56:6B:12:0E:BF:50:99:73:EB:AF:B6:03:F4:C0:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/574eb9ce-9074-34b5-a14c-ebe0716fe6d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
X509v3 Authority Key Identifier:
keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
sbgp-ipAddrBlock: critical
IPv4:
174.35.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:10:d1:44:e8:b4:7f:a9:0b:6a:12:c7:9a:35:0a:1c:d4:ad:
ab:d3:19:76:fe:f0:8e:4d:ee:e2:1e:33:80:ee:bb:d1:cd:d7:
1b:9c:fa:7f:94:02:9e:e2:cd:ff:b6:b6:4d:5c:46:dd:13:b0:
77:8e:54:50:8a:2a:e9:6b:d4:6a:6b:f9:50:0b:88:37:af:30:
32:0f:0e:c5:4a:cf:7d:ce:2d:85:83:83:3a:74:5b:40:19:e1:
14:49:35:29:0f:ac:fa:1c:66:07:f3:1e:81:71:c5:56:ca:bb:
30:9b:46:83:f3:c8:17:4b:12:74:e0:de:77:c4:0c:da:c8:1d:
2a:c5:75:78:d1:66:cf:76:81:e0:70:e2:af:3c:a0:94:8b:be:
57:64:10:af:dc:0c:dc:47:54:01:e0:a0:3c:ab:9e:fd:da:80:
aa:3e:d8:eb:4d:61:3b:1d:63:cb:ce:5d:49:e8:be:0e:41:ce:
7b:be:43:b0:3f:e2:e6:62:d4:e3:3d:6a:12:33:d4:15:0e:98:
9c:8e:b9:3a:8e:a2:6a:a5:54:93:7e:b3:82:70:4e:bc:02:27:
9c:8e:ea:7f:56:61:26:0f:46:64:95:95:e7:49:ba:db:a3:3b:
9e:6f:56:1e:75:3c:5c:5c:58:10:fb:1c:96:87:e3:d0:37:d1:
2c:81:06:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhAW40uq7qQcWMKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGEyZGE3YjMtZDIwOC00MmM3LThiYmItYzA2M2EzOTQ3
MGE4MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
ODYwZTg0MGItNjYwNC00ZWI4LTk3MzMtOGRmZTUzY2U0Y2ZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RzHO6qJro+OyXG3ivnvE0OjX8AWV+WuKCV1
LoGGLXZaAKN5KjW+rMH1Hph5Iqv1m6i2TQscU8rEy+jZbILHlJ2SWJ9Lce8dt5xe
dQQK0GMKUtEQNmUOTjX9ZifP9YbXUifQnDRyMGqze/eDknJI55G5kYMiqX8hXuUc
g8smcao95I1eYC9zUXKN7eaygQ0FaFzYcyjh9oC0uGqvry+O/20HfZzrOvAzOTdF
d5i+jbmKz+qDODnsdygX8MxKJgJX6TpA/18AFW4bMmXsxF5AcC4e1/UW+4ZVJKNX
XYyEU0O2TUzZ8eXtJecTQCyN+azONFWUta/bjwHHgsgzgR3WEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFBssXNQVmsSDr9QmXPrr7YD9MA0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YTJk
YTdiMy1kMjA4LTQyYzctOGJiYi1jMDYzYTM5NDcwYTgvNTc0ZWI5Y2UtOTA3NC0z
NGI1LWExNGMtZWJlMDcxNmZlNmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGEyZGE3YjMtZDIwOC00MmM3LThi
YmItYzA2M2EzOTQ3MGE4LzhhMmRhN2IzLWQyMDgtNDJjNy04YmJiLWMwNjNhMzk0
NzBhOC5jcmwwHwYDVR0jBBgwFoAUBTUtzsWmL8l6PmdKARlp/0Mx6RYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84YTJkYTdiMy1kMjA4LTQyYzctOGJiYi1jMDYz
YTM5NDcwYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAriMUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHkQ0UTotH+pC2oSx5o1ChzUravTGXb+8I5N7uIeM4Duu9HN1xuc+n+U
Ap7izf+2tk1cRt0TsHeOVFCKKulr1Gpr+VALiDevMDIPDsVKz33OLYWDgzp0W0AZ
4RRJNSkPrPocZgfzHoFxxVbKuzCbRoPzyBdLEnTg3nfEDNrIHSrFdXjRZs92geBw
4q88oJSLvldkEK/cDNxHVAHgoDyrnv3agKo+2OtNYTsdY8vOXUnovg5Bznu+Q7A/
4uZi1OM9ahIz1BUOmJyOuTqOomqlVJN+s4JwTrwCJ5yO6n9WYSYPRmSVledJutuj
O55vVh51PFxcWBD7HJaH49A30SyBBtI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:02 2025 by rpki-client