Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/60fc1c20-f11c-3c0f-be32-0c59e4705579.roa
File: 60fc1c20-f11c-3c0f-be32-0c59e4705579.roa (raw, json)
Hash identifier: r5QC1jjCzUxWJX76JcJNW1jVvJXGSyxxUJXmKE9BA7c=
Subject key identifier: 5D:29:67:CC:2F:03:B7:09:65:32:C2:17:6D:BD:7F:C0:29:BD:52:B9
Certificate issuer: /CN=34b715b9-211f-4bf7-ace9-03b3446775ab
Certificate serial: 010D0C9F43285848C41B7E2BCC66A12DF89A6A80
Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/60fc1c20-f11c-3c0f-be32-0c59e4705579.roa
Signing time: Tue 04 Feb 2025 02:00:40 +0000
ROA not before: Tue 04 Feb 2025 02:00:40 +0000
ROA not after: Mon 05 May 2025 01:00:40 +0000
asID: 213867
IP address blocks: 199.79.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c4:1b:7e:2b:cc:66:a1:2d:f8:9a:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab
Validity
Not Before: Feb 4 02:00:40 2025 GMT
Not After : May 5 01:00:40 2025 GMT
Subject: CN=00eb853a-5ed4-4463-981c-e112666b3621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:1e:c6:11:ed:c3:b5:d2:29:1e:f5:10:b4:
02:26:09:58:08:fb:6e:20:5e:67:cc:d8:d4:cb:c8:
02:11:0f:0c:65:f8:58:88:70:5d:c9:bb:c1:34:37:
6d:45:31:03:fe:fe:d9:91:f0:d5:1e:c9:db:54:8e:
1c:ba:54:82:41:a7:c9:45:71:25:61:dc:3f:5c:7a:
de:e6:9d:70:18:da:2c:35:e0:cf:e0:b3:04:b2:9a:
33:bd:1f:6a:61:9d:44:9d:a2:c8:82:e8:cc:87:06:
c2:1d:fd:a9:ea:7d:f1:cc:4f:89:13:ca:86:1f:9d:
25:29:8d:ba:64:e1:ac:88:e8:b2:6e:8f:9e:ac:9c:
c0:06:3c:d4:4e:be:e6:db:1f:26:b9:2c:86:63:d3:
d0:4b:09:a0:f3:dc:6e:8a:5c:b7:6f:6c:a5:83:86:
45:94:35:90:3f:29:6e:af:b5:e5:7b:f9:84:90:5d:
cd:e3:40:71:60:24:c1:7d:78:ab:7e:d8:8d:ae:1d:
be:2d:81:72:d1:db:86:56:72:e4:18:4d:6b:ca:68:
8a:14:97:fe:b0:be:f5:ad:bd:e3:33:f2:bd:ca:90:
8b:01:f9:21:90:71:ba:60:8a:67:73:b6:27:44:12:
2d:4a:62:19:e4:77:78:e3:0d:c9:78:0d:99:80:21:
0d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:29:67:CC:2F:03:B7:09:65:32:C2:17:6D:BD:7F:C0:29:BD:52:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/60fc1c20-f11c-3c0f-be32-0c59e4705579.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl
X509v3 Authority Key Identifier:
keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
sbgp-ipAddrBlock: critical
IPv4:
199.79.247.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:5f:0b:34:7e:73:cd:16:2e:ec:e8:c3:3a:04:99:3d:f5:23:
49:7a:fe:e5:e2:a7:9b:a2:6f:7c:55:54:12:ca:2c:f2:d1:c7:
e8:55:0c:72:4d:ef:f6:8d:55:b7:ef:fd:ba:07:a6:1c:4a:ef:
5e:c2:eb:c4:d8:1f:d5:99:96:75:4f:f4:49:05:66:6d:93:85:
62:ec:0e:f1:d6:ad:6b:19:8d:18:5f:4d:24:4b:dc:70:3f:36:
be:e0:42:7c:ef:27:46:54:ec:4a:a5:bd:ae:15:ae:d9:34:5c:
4c:cb:42:a5:ed:80:01:47:5b:b8:03:53:78:fd:53:8e:31:df:
61:fc:67:8f:9d:ca:13:fe:7d:77:14:98:d0:9a:51:0e:9d:1c:
fc:ae:9e:71:a0:c1:3e:16:48:82:6c:f1:f4:e7:b3:1e:c0:56:
8b:51:84:50:5f:b9:bf:99:36:67:0e:16:7c:af:0d:14:f0:f9:
f3:8e:ae:19:b3:07:50:01:33:c0:0e:a0:10:74:e1:00:94:ad:
01:2d:be:24:f6:30:1c:c0:ae:f1:b1:49:48:5d:e0:32:c2:f4:
1f:b3:36:da:ec:ae:9b:fe:f0:cd:18:49:4c:76:35:82:dd:67:
60:d3:49:eb:5a:bb:55:0a:a4:63:48:3d:4b:fe:9c:4d:14:05:
6e:2c:7a:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjEG34rzGahLfiaaoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzRiNzE1YjktMjExZi00YmY3LWFjZTktMDNiMzQ0Njc3
NWFiMB4XDTI1MDIwNDAyMDA0MFoXDTI1MDUwNTAxMDA0MFowLzEtMCsGA1UEAxMk
MDBlYjg1M2EtNWVkNC00NDYzLTk4MWMtZTExMjY2NmIzNjIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs68exhHtw7XSKR71ELQCJglYCPtuIF5nzNjU
y8gCEQ8MZfhYiHBdybvBNDdtRTED/v7ZkfDVHsnbVI4culSCQafJRXElYdw/XHre
5p1wGNosNeDP4LMEspozvR9qYZ1EnaLIgujMhwbCHf2p6n3xzE+JE8qGH50lKY26
ZOGsiOiybo+erJzABjzUTr7m2x8muSyGY9PQSwmg89xuily3b2ylg4ZFlDWQPylu
r7Xle/mEkF3N40BxYCTBfXirftiNrh2+LYFy0duGVnLkGE1rymiKFJf+sL71rb3j
M/K9ypCLAfkhkHG6YIpnc7YnRBItSmIZ5Hd44w3JeA2ZgCENKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF0pZ8wvA7cJZTLCF229f8ApvVK5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3
MTViOS0yMTFmLTRiZjctYWNlOS0wM2IzNDQ2Nzc1YWIvNjBmYzFjMjAtZjExYy0z
YzBmLWJlMzItMGM1OWU0NzA1NTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzRiNzE1YjktMjExZi00YmY3LWFj
ZTktMDNiMzQ0Njc3NWFiLzM0YjcxNWI5LTIxMWYtNGJmNy1hY2U5LTAzYjM0NDY3
NzVhYi5jcmwwHwYDVR0jBBgwFoAUogYtjI8Exo63AC0EODp3n4zrZ6wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3MTViOS0yMTFmLTRiZjctYWNlOS0wM2Iz
NDQ2Nzc1YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0/3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFdfCzR+c80WLuzowzoEmT31I0l6/uXip5uib3xVVBLKLPLRx+hVDHJN
7/aNVbfv/boHphxK717C68TYH9WZlnVP9EkFZm2ThWLsDvHWrWsZjRhfTSRL3HA/
Nr7gQnzvJ0ZU7Eqlva4Vrtk0XEzLQqXtgAFHW7gDU3j9U44x32H8Z4+dyhP+fXcU
mNCaUQ6dHPyunnGgwT4WSIJs8fTnsx7AVotRhFBfub+ZNmcOFnyvDRTw+fOOrhmz
B1ABM8AOoBB04QCUrQEtviT2MBzArvGxSUhd4DLC9B+zNtrsrpv+8M0YSUx2NYLd
Z2DTSetau1UKpGNIPUv+nE0UBW4sevE=
-----END CERTIFICATE-----
Generated at Fri Apr 4 15:57:38 2025 by rpki-client