Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d339c056-b26d-4cd7-96f4-34cf48d6627a/85a9548c-8bfd-3406-a6e7-c9df741d992a.roa
File: 85a9548c-8bfd-3406-a6e7-c9df741d992a.roa (raw, json)
Hash identifier: k2vCmJtHQvMBlpuGxVlsfwCCVkt5d1blBHG+ZUzqSx4=
Subject key identifier: F2:ED:48:70:EF:12:78:66:23:C3:E9:DE:CB:67:24:AF:12:4A:A4:3F
Certificate issuer: /CN=d339c056-b26d-4cd7-96f4-34cf48d6627a
Certificate serial: 010D0C9F43285848F65BDA438C9687AD6B8F23F0
Authority key identifier: 73:F3:2A:71:25:C5:35:A2:3B:9B:A3:84:6A:D7:04:17:C0:D2:7F:A5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d339c056-b26d-4cd7-96f4-34cf48d6627a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d339c056-b26d-4cd7-96f4-34cf48d6627a/85a9548c-8bfd-3406-a6e7-c9df741d992a.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 31898
IP address blocks: 172.82.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:da:43:8c:96:87:ad:6b:8f:23:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d339c056-b26d-4cd7-96f4-34cf48d6627a
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=e10d3328-4b60-46c2-8b0f-c9973b794633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:23:88:7c:06:1b:30:9b:61:68:c1:52:e5:9f:
e6:1a:8e:27:60:2d:ad:62:35:37:c7:5f:3f:53:7e:
43:ad:8b:c8:8a:a5:0a:c0:2b:34:3d:b6:0e:97:c9:
b6:b1:52:e6:ae:d0:01:11:b9:aa:d9:3f:eb:f8:b4:
ea:2d:30:00:d0:59:44:14:b4:2a:67:d4:f7:13:16:
70:07:b4:2a:5b:72:e8:de:3b:12:78:f1:6c:33:54:
21:04:27:09:29:58:22:c4:5e:9f:6a:6d:5e:02:6e:
91:ad:c4:78:a7:59:6a:40:47:9a:a2:e0:71:a4:0b:
c4:97:f4:82:71:17:15:ab:55:d7:3b:b2:37:83:74:
c4:26:31:19:8a:85:1e:ff:a0:00:25:fc:51:20:93:
78:8c:01:9b:f2:57:c6:30:d1:93:97:84:f1:58:87:
53:04:5f:8f:47:99:7f:55:19:06:f7:e7:65:61:35:
53:3b:01:0b:4b:21:4d:8a:e6:59:c7:ad:38:a6:42:
b2:84:43:40:d6:ca:43:c2:0b:39:00:a8:50:d2:29:
3d:8e:d2:21:f7:b9:27:e4:36:68:b9:10:e4:23:82:
b3:14:f5:7c:37:bb:a6:8a:7a:99:6d:49:41:40:0e:
18:a9:b8:94:79:b3:c7:82:ed:fe:29:0f:0d:24:fc:
50:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:ED:48:70:EF:12:78:66:23:C3:E9:DE:CB:67:24:AF:12:4A:A4:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d339c056-b26d-4cd7-96f4-34cf48d6627a/85a9548c-8bfd-3406-a6e7-c9df741d992a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d339c056-b26d-4cd7-96f4-34cf48d6627a/d339c056-b26d-4cd7-96f4-34cf48d6627a.crl
X509v3 Authority Key Identifier:
keyid:73:F3:2A:71:25:C5:35:A2:3B:9B:A3:84:6A:D7:04:17:C0:D2:7F:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d339c056-b26d-4cd7-96f4-34cf48d6627a.cer
sbgp-ipAddrBlock: critical
IPv4:
172.82.61.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:0a:0f:41:3e:69:70:98:49:7f:0f:89:96:d9:a5:2c:4e:20:
46:95:b1:28:80:45:d8:50:04:ba:0b:cd:1d:21:b6:ac:87:f5:
d5:82:74:7b:2d:fd:ce:fc:28:d5:21:a9:e5:ab:91:0e:0b:8d:
10:93:1b:e8:1d:7d:cd:7b:55:f3:73:fd:42:b9:2c:8a:83:85:
c0:bd:c9:9f:1f:d6:da:d3:e8:90:0c:86:72:9c:62:b1:84:9f:
7c:1d:ae:8b:f6:89:ce:4c:4f:37:02:6d:a2:2b:e8:a5:cd:e7:
ae:93:c3:a5:03:61:6e:9d:af:11:d1:75:ce:e8:b2:d8:ce:54:
5d:79:1e:11:90:3b:b5:7a:2c:78:b1:50:ff:34:31:dd:a7:71:
09:4b:f8:4b:65:cd:51:e7:81:d4:5a:56:7a:2a:a3:0a:45:85:
de:e6:40:83:06:7a:a3:6f:73:7f:99:90:0f:b0:b2:3f:92:12:
a9:99:9d:b9:c0:da:0f:d0:e2:cd:61:4a:a3:8b:fb:f1:47:04:
6e:8f:6c:e4:7a:fd:9b:72:a7:76:58:22:82:33:1b:55:2a:17:
7a:fe:48:bc:5f:7f:d2:86:02:cf:86:06:b6:e3:09:2b:59:b5:
18:1b:0e:1b:b3:1d:51:9c:7b:f6:7e:93:d7:d7:8a:ef:ed:82:
67:5a:86:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W9pDjJaHrWuPI/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDMzOWMwNTYtYjI2ZC00Y2Q3LTk2ZjQtMzRjZjQ4ZDY2
MjdhMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk
ZTEwZDMzMjgtNGI2MC00NmMyLThiMGYtYzk5NzNiNzk0NjMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCOIfAYbMJthaMFS5Z/mGo4nYC2tYjU3x18/
U35DrYvIiqUKwCs0PbYOl8m2sVLmrtABEbmq2T/r+LTqLTAA0FlEFLQqZ9T3ExZw
B7QqW3Lo3jsSePFsM1QhBCcJKVgixF6fam1eAm6RrcR4p1lqQEeaouBxpAvEl/SC
cRcVq1XXO7I3g3TEJjEZioUe/6AAJfxRIJN4jAGb8lfGMNGTl4TxWIdTBF+PR5l/
VRkG9+dlYTVTOwELSyFNiuZZx604pkKyhENA1spDwgs5AKhQ0ik9jtIh97kn5DZo
uRDkI4KzFPV8N7uminqZbUlBQA4YqbiUebPHgu3+KQ8NJPxQBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPLtSHDvEnhmI8Pp3stnJK8SSqQ/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMzM5
YzA1Ni1iMjZkLTRjZDctOTZmNC0zNGNmNDhkNjYyN2EvODVhOTU0OGMtOGJmZC0z
NDA2LWE2ZTctYzlkZjc0MWQ5OTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDMzOWMwNTYtYjI2ZC00Y2Q3LTk2
ZjQtMzRjZjQ4ZDY2MjdhL2QzMzljMDU2LWIyNmQtNGNkNy05NmY0LTM0Y2Y0OGQ2
NjI3YS5jcmwwHwYDVR0jBBgwFoAUc/MqcSXFNaI7m6OEatcEF8DSf6UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kMzM5YzA1Ni1iMjZkLTRjZDctOTZmNC0zNGNm
NDhkNjYyN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFI9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACEKD0E+aXCYSX8PiZbZpSxOIEaVsSiARdhQBLoLzR0htqyH9dWCdHst
/c78KNUhqeWrkQ4LjRCTG+gdfc17VfNz/UK5LIqDhcC9yZ8f1trT6JAMhnKcYrGE
n3wdrov2ic5MTzcCbaIr6KXN566Tw6UDYW6drxHRdc7ostjOVF15HhGQO7V6LHix
UP80Md2ncQlL+EtlzVHngdRaVnoqowpFhd7mQIMGeqNvc3+ZkA+wsj+SEqmZnbnA
2g/Q4s1hSqOL+/FHBG6PbOR6/Ztyp3ZYIoIzG1UqF3r+SLxff9KGAs+GBrbjCStZ
tRgbDhuzHVGce/Z+k9fXiu/tgmdahhU=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:09 2025 by rpki-client