Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/0a70de16-2bea-3890-b0cf-c8b1e69344cc.roa
File: 0a70de16-2bea-3890-b0cf-c8b1e69344cc.roa (raw, json)
Hash identifier: pB8BCnIW+fdbyrRQNyw1rspcWrkC5Ur2QZ9qm6o0wVs=
Subject key identifier: 94:22:3B:17:E0:E9:77:FD:E9:B3:79:C3:9B:6D:AF:F8:24:0E:C1:FB
Certificate issuer: /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial: 010D0C9F4328584902EC097CA82B7B9E0A90C940
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/0a70de16-2bea-3890-b0cf-c8b1e69344cc.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 11260
IP address blocks: 24.222.0.0/24 maxlen: 24
71.7.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:09:7c:a8:2b:7b:9e:0a:90:c9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=ae109140-af12-4c48-b978-7e45189d8277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:10:c9:90:9c:86:ae:c6:5d:1e:8f:fa:f9:ed:
03:72:b0:cc:ce:cc:73:9c:2e:62:70:b5:97:12:da:
3c:61:9e:45:a0:2f:a4:f1:84:de:c6:c1:13:d4:00:
0f:d3:c1:01:55:4c:c1:18:36:40:17:f8:f5:3c:ec:
9c:22:73:9b:39:ee:a0:88:7c:90:e2:48:c8:f0:ee:
cb:42:aa:4d:a9:6e:ef:1f:bd:57:c4:cd:81:a5:c7:
1e:5c:4b:ca:48:22:37:eb:bb:ad:eb:74:4f:75:e4:
fd:e8:bf:6a:70:ba:fc:8b:83:d6:65:20:9d:41:68:
96:40:c7:1c:1a:11:0b:00:95:ca:74:b6:b8:67:1b:
1d:fb:db:0e:47:ed:37:c5:ba:17:c4:3a:3b:69:2a:
41:e3:4a:cd:4b:52:be:f8:57:8f:f1:b2:a1:e0:f6:
71:0c:51:58:02:d6:6f:3b:c8:c7:fa:78:9c:cf:8d:
1b:ed:52:25:dd:aa:d1:ff:89:25:e3:26:cc:6a:16:
c0:9b:54:10:1b:0c:9e:85:78:8b:db:ec:2e:99:ff:
92:e1:b3:6c:1e:c6:c4:70:4e:19:25:dd:55:06:14:
7f:22:d3:24:e7:f0:c5:72:bb:47:bd:4f:d7:2b:0e:
1e:00:c4:93:d7:9e:47:1a:c3:10:de:fb:42:57:c0:
e4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:22:3B:17:E0:E9:77:FD:E9:B3:79:C3:9B:6D:AF:F8:24:0E:C1:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/0a70de16-2bea-3890-b0cf-c8b1e69344cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
X509v3 Authority Key Identifier:
keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
sbgp-ipAddrBlock: critical
IPv4:
24.222.0.0/24
71.7.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:52:39:59:4e:d5:d3:33:e2:f5:b4:a2:5c:2d:03:5c:02:d5:
6f:3b:99:26:86:cd:56:98:27:ab:e7:dc:87:f3:c0:ba:e0:cf:
52:8e:b9:fb:40:10:45:b3:1e:22:76:da:dc:e7:eb:36:ea:91:
bd:d5:54:21:16:aa:2d:64:7a:fd:0b:71:4c:80:14:c0:d7:90:
b7:cf:ae:df:9f:70:67:3e:70:9a:55:da:42:80:1c:38:c5:5b:
1a:9f:80:7c:47:4f:df:1b:f7:0b:ef:aa:0e:40:df:4a:7a:2e:
77:c4:20:16:01:c0:6c:46:af:b1:47:1b:23:f0:f7:39:80:c4:
50:11:49:87:f8:a8:d0:5e:e0:61:f8:e2:ae:54:e2:24:e0:54:
75:e7:d9:df:96:8e:58:5d:61:80:ba:e8:20:61:07:0d:6f:84:
f8:5e:99:5e:22:1e:c1:d4:ba:72:24:97:4a:f4:7b:81:9d:b7:
77:04:33:ce:27:56:69:34:36:05:48:44:4f:eb:e7:53:f0:f3:
09:ec:98:fa:35:30:26:81:e0:c0:29:29:15:d0:f0:aa:e3:df:
4b:ae:5a:b1:d9:5d:9e:78:c2:4f:6a:b5:64:ad:c0:2d:78:3d:
7c:b8:89:f6:6a:7b:60:27:6b:49:1b:d6:df:fe:24:9e:b5:dd:
32:c0:bc:5c
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEkC7Al8qCt7ngqQyUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlhODBkYTgtNjllMS00NTgwLWFiNjMtMWNlMjNiZWE4
OTViMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
YWUxMDkxNDAtYWYxMi00YzQ4LWI5NzgtN2U0NTE4OWQ4Mjc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRDJkJyGrsZdHo/6+e0DcrDMzsxznC5icLWX
Eto8YZ5FoC+k8YTexsET1AAP08EBVUzBGDZAF/j1POycInObOe6giHyQ4kjI8O7L
QqpNqW7vH71XxM2BpcceXEvKSCI367ut63RPdeT96L9qcLr8i4PWZSCdQWiWQMcc
GhELAJXKdLa4Zxsd+9sOR+03xboXxDo7aSpB40rNS1K++FeP8bKh4PZxDFFYAtZv
O8jH+nicz40b7VIl3arR/4kl4ybMahbAm1QQGwyehXiL2+wumf+S4bNsHsbEcE4Z
Jd1VBhR/ItMk5/DFcrtHvU/XKw4eAMST155HGsMQ3vtCV8DkkwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFJQiOxfg6Xf96bN5w5ttr/gkDsH7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4
MGRhOC02OWUxLTQ1ODAtYWI2My0xY2UyM2JlYTg5NWIvMGE3MGRlMTYtMmJlYS0z
ODkwLWIwY2YtYzhiMWU2OTM0NGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjlhODBkYTgtNjllMS00NTgwLWFi
NjMtMWNlMjNiZWE4OTViLzY5YTgwZGE4LTY5ZTEtNDU4MC1hYjYzLTFjZTIzYmVh
ODk1Yi5jcmwwHwYDVR0jBBgwFoAUhqiB3KYHVFZrTqUs0M1hUuvpHc8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4MGRhOC02OWUxLTQ1ODAtYWI2My0xY2Uy
M2JlYTg5NWIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAGN4AAwQA
RwfHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFRSOVlO1dMz4vW0olwtA1wC1W87mSaGzVaYJ6vn3IfzwLrg
z1KOuftAEEWzHiJ22tzn6zbqkb3VVCEWqi1kev0LcUyAFMDXkLfPrt+fcGc+cJpV
2kKAHDjFWxqfgHxHT98b9wvvqg5A30p6LnfEIBYBwGxGr7FHGyPw9zmAxFARSYf4
qNBe4GH44q5U4iTgVHXn2d+WjlhdYYC66CBhBw1vhPhemV4iHsHUunIkl0r0e4Gd
t3cEM84nVmk0NgVIRE/r51Pw8wnsmPo1MCaB4MApKRXQ8Krj30uuWrHZXZ54wk9q
tWStwC14PXy4ifZqe2Ana0kb1t/+JJ613TLAvFw=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:47:26 2025 by rpki-client