Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7288e10f-3acf-3954-8944-fda616a3c43c.roa
File: 7288e10f-3acf-3954-8944-fda616a3c43c.roa (raw, json)
Hash identifier: lPlsbKpVbVlshYyxnddnVRv2KDYs4oYhJqU0NS4Ugx4=
Subject key identifier: AF:0D:E8:08:89:88:27:A4:ED:AD:5A:BB:38:AA:9E:19:57:C3:0B:68
Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial: 010D0C9F432858494B642E053C0CCFAB8CAA8500
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7288e10f-3acf-3954-8944-fda616a3c43c.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 11404
IP address blocks: 68.67.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:2e:05:3c:0c:cf:ab:8c:aa:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=8f1dab6b-d7b5-456f-ac8b-b3b31934cefd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0f:79:86:a8:37:4e:5b:db:3f:d6:ca:0f:6d:
99:29:ae:8d:5f:a2:f2:27:92:5d:34:60:c7:8e:61:
97:88:42:9e:e7:1d:e4:f7:e8:c5:f7:f7:54:bc:f6:
2d:eb:c9:39:56:b4:5e:cc:5b:df:ba:6d:a1:01:7c:
14:6b:76:06:bf:4f:fa:18:9e:fe:f3:5d:66:b9:20:
6e:48:79:4e:15:f9:df:39:5b:04:5c:37:6e:33:46:
98:6e:85:0e:5c:2d:36:f9:4c:ea:b6:87:d0:d7:0a:
f9:43:a7:84:53:1d:ea:87:d4:f7:4e:3b:98:f9:31:
ca:e1:9c:fa:ee:68:eb:84:8c:b2:fa:e6:89:0c:b5:
62:2f:04:90:a0:6b:72:38:f0:3f:17:38:7c:28:ca:
3e:fd:41:a9:d9:48:97:bf:0a:9e:19:95:4f:db:4b:
07:0c:e8:25:47:e4:fa:7a:20:da:ab:b2:b8:08:36:
4b:cc:b7:23:4e:1d:7b:78:cc:67:a0:62:27:e9:df:
06:d9:69:2c:66:5c:a3:a0:49:96:80:10:08:f8:60:
d1:10:d7:d4:37:2c:4b:f6:45:8a:db:60:9b:a7:d1:
54:96:63:4f:e1:be:d1:73:03:c2:1a:24:20:f9:ea:
db:70:2e:8f:f2:95:52:05:a5:07:65:9d:77:b0:ad:
96:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0D:E8:08:89:88:27:A4:ED:AD:5A:BB:38:AA:9E:19:57:C3:0B:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7288e10f-3acf-3954-8944-fda616a3c43c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
X509v3 Authority Key Identifier:
keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
sbgp-ipAddrBlock: critical
IPv4:
68.67.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:6e:23:81:6d:96:68:f7:67:dd:53:40:cd:5f:fe:42:b8:64:
66:76:3a:93:d5:cb:73:a3:ec:78:b4:f5:26:e6:2c:b2:3f:69:
15:1f:3e:01:0e:e2:08:08:44:ba:2a:53:3b:54:76:d3:0c:02:
4d:7b:59:46:9a:78:42:4a:df:d6:dc:9f:e1:be:e9:1f:7c:33:
2f:cc:88:03:4b:e3:fc:b5:77:7a:9f:ff:49:a6:b1:e4:63:41:
3c:49:01:89:c4:7a:4e:22:a5:4d:e9:e8:cd:73:e5:56:77:41:
4f:f0:38:9d:44:0c:3e:ad:56:e8:be:3a:03:53:1b:36:57:32:
1f:e4:f2:07:88:47:e6:9e:09:f6:ca:b6:df:cc:43:db:36:c3:
2e:9b:a0:dd:55:cb:c4:7f:c2:00:6d:e3:53:9f:b7:78:5a:67:
dd:00:e7:fe:42:dd:cb:6b:f1:23:e4:5e:e3:78:71:ac:6b:8e:
92:3e:ca:90:c3:44:78:d1:d0:6a:aa:5c:e3:32:bf:ad:61:72:
d4:e7:65:54:81:fc:4c:f1:c2:0a:66:48:33:4d:ec:6d:73:e1:
8b:04:d2:95:e2:6b:3f:50:07:2c:69:3b:ea:ed:79:82:dc:7e:
53:38:e7:47:40:85:0d:92:d5:2d:29:89:c5:4b:2c:13:3b:6e:
2d:9d:54:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZC4FPAzPq4yqhQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk
OGYxZGFiNmItZDdiNS00NTZmLWFjOGItYjNiMzE5MzRjZWZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg95hqg3TlvbP9bKD22ZKa6NX6LyJ5JdNGDH
jmGXiEKe5x3k9+jF9/dUvPYt68k5VrRezFvfum2hAXwUa3YGv0/6GJ7+811muSBu
SHlOFfnfOVsEXDduM0aYboUOXC02+UzqtofQ1wr5Q6eEUx3qh9T3TjuY+THK4Zz6
7mjrhIyy+uaJDLViLwSQoGtyOPA/Fzh8KMo+/UGp2UiXvwqeGZVP20sHDOglR+T6
eiDaq7K4CDZLzLcjTh17eMxnoGIn6d8G2WksZlyjoEmWgBAI+GDRENfUNyxL9kWK
22Cbp9FUlmNP4b7RcwPCGiQg+erbcC6P8pVSBaUHZZ13sK2W7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK8N6AiJiCek7a1auziqnhlXwwtoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNzI4OGUxMGYtM2FjZi0z
OTU0LTg5NDQtZmRhNjE2YTNjNDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERENQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFJuI4Ftlmj3Z91TQM1f/kK4ZGZ2OpPVy3Oj7Hi09SbmLLI/aRUfPgEO
4ggIRLoqUztUdtMMAk17WUaaeEJK39bcn+G+6R98My/MiANL4/y1d3qf/0mmseRj
QTxJAYnEek4ipU3p6M1z5VZ3QU/wOJ1EDD6tVui+OgNTGzZXMh/k8geIR+aeCfbK
tt/MQ9s2wy6boN1Vy8R/wgBt41Oft3haZ90A5/5C3ctr8SPkXuN4caxrjpI+ypDD
RHjR0GqqXOMyv61hctTnZVSB/EzxwgpmSDNN7G1z4YsE0pXiaz9QByxpO+rteYLc
flM450dAhQ2S1S0picVLLBM7bi2dVMM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:35 2025 by rpki-client