Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2ff47a0d-289e-3070-8daf-af316ad1b0f8.roa
File: 2ff47a0d-289e-3070-8daf-af316ad1b0f8.roa (raw, json)
Hash identifier: 9L0D3gqPaxWxdomryvwW0lCasafLjqIz0+d4X+neDag=
Subject key identifier: 71:5D:1C:1D:77:72:61:C1:5E:66:45:EF:4E:D4:71:AE:06:04:14:BE
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F432858487DC805DD6AC6345D2620D7A0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2ff47a0d-289e-3070-8daf-af316ad1b0f8.roa
Signing time: Thu 09 Jan 2025 21:25:57 +0000
ROA not before: Thu 09 Jan 2025 21:25:57 +0000
ROA not after: Wed 09 Apr 2025 20:25:57 +0000
asID: 213888
IP address blocks: 64.4.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7d:c8:05:dd:6a:c6:34:5d:26:20:d7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Jan 9 21:25:57 2025 GMT
Not After : Apr 9 20:25:57 2025 GMT
Subject: CN=ad356a98-3b19-4a78-a5c5-d250b98d81d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e1:57:66:ca:cd:78:24:c8:86:29:c3:d0:76:
9f:31:b5:d5:99:e3:5a:90:b1:ef:ae:44:aa:51:fd:
19:e0:46:df:4d:92:72:9e:40:99:ef:bb:7f:eb:00:
4c:59:d7:d4:1f:76:3d:a4:f4:b0:b8:f2:ca:64:20:
7f:ea:42:3d:2b:ad:f6:bf:f7:53:2d:ff:bc:9d:da:
c9:8b:02:5c:a9:59:fe:c3:eb:96:2a:e5:ef:41:b4:
96:a9:b7:72:42:38:5d:4e:3a:7a:82:96:97:6e:58:
28:11:7b:8e:8d:ed:15:44:60:00:5c:a5:3e:79:7f:
20:99:b7:f5:13:83:df:46:89:fe:1d:6c:7d:2f:36:
23:c8:55:c5:bc:5e:4e:80:16:e6:07:97:7e:e1:71:
bf:e0:76:a3:2b:d6:ba:af:95:7d:d0:fb:6c:69:37:
d4:b6:2d:50:a6:32:f2:3b:99:79:01:08:8b:40:4b:
76:26:b7:20:5c:82:4a:1b:31:db:2a:6d:62:35:8c:
dc:2f:db:7f:1c:55:ce:88:81:0d:1a:cc:2d:cd:47:
d0:d9:fa:34:ec:11:67:a9:da:f9:0d:7b:ea:cf:ee:
ed:b4:2e:61:13:97:8f:d6:df:40:3c:ce:58:86:e5:
a9:46:29:58:57:17:12:b0:ba:68:e7:e7:11:1c:8f:
ed:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5D:1C:1D:77:72:61:C1:5E:66:45:EF:4E:D4:71:AE:06:04:14:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2ff47a0d-289e-3070-8daf-af316ad1b0f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
64.4.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:10:05:71:24:84:9a:83:b3:5f:c9:2f:90:35:28:5f:13:24:
02:cf:0a:7f:ee:6c:ec:00:f7:33:0b:77:02:27:2b:b3:96:28:
23:f7:d2:73:98:54:1c:58:40:68:00:95:b5:7b:08:55:ec:0f:
3d:cf:2d:8a:7c:05:38:71:1a:2b:3f:ab:e4:7a:5c:2c:9e:17:
e5:9e:6d:29:6a:c2:9f:f0:13:21:18:0b:d1:b9:d3:01:fe:51:
91:5f:6f:2b:d5:53:81:e0:4a:86:f2:92:34:d7:1c:3c:17:0f:
29:f2:0c:3d:ae:a2:28:89:15:fb:4b:e8:6d:50:07:ab:70:61:
c8:42:f7:78:d3:8d:1e:af:50:0d:74:6d:c2:8c:13:ae:bf:24:
4c:5c:bb:a7:11:2b:fc:93:b4:e4:67:d2:00:49:73:26:72:30:
4b:df:6e:ed:12:c6:d9:28:4a:72:5c:18:00:e9:11:ab:2a:11:
e7:d2:75:3d:f1:8d:34:43:27:d7:7e:74:0f:36:69:80:43:c4:
01:77:fc:3f:40:8c:13:70:fa:22:51:30:f2:53:fa:04:35:fd:
76:f5:be:4f:28:bb:5b:b3:d7:17:f4:4e:bf:c7:3c:b4:1c:ef:
b4:93:c6:ad:04:79:af:13:79:51:08:22:f8:0e:16:f4:7c:de:
7a:c6:a0:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh9yAXdasY0XSYg16AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI1MDEwOTIxMjU1N1oXDTI1MDQwOTIwMjU1N1owLzEtMCsGA1UEAxMk
YWQzNTZhOTgtM2IxOS00YTc4LWE1YzUtZDI1MGI5OGQ4MWQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeFXZsrNeCTIhinD0HafMbXVmeNakLHvrkSq
Uf0Z4EbfTZJynkCZ77t/6wBMWdfUH3Y9pPSwuPLKZCB/6kI9K632v/dTLf+8ndrJ
iwJcqVn+w+uWKuXvQbSWqbdyQjhdTjp6gpaXblgoEXuOje0VRGAAXKU+eX8gmbf1
E4PfRon+HWx9LzYjyFXFvF5OgBbmB5d+4XG/4HajK9a6r5V90PtsaTfUti1QpjLy
O5l5AQiLQEt2JrcgXIJKGzHbKm1iNYzcL9t/HFXOiIENGswtzUfQ2fo07BFnqdr5
DXvqz+7ttC5hE5eP1t9APM5YhuWpRilYVxcSsLpo5+cRHI/t3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHFdHB13cmHBXmZF707Uca4GBBS+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMmZmNDdhMGQtMjg5ZS0z
MDcwLThkYWYtYWYzMTZhZDFiMGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQATPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKIQBXEkhJqDs1/JL5A1KF8TJALPCn/ubOwA9zMLdwInK7OWKCP30nOY
VBxYQGgAlbV7CFXsDz3PLYp8BThxGis/q+R6XCyeF+WebSlqwp/wEyEYC9G50wH+
UZFfbyvVU4HgSobykjTXHDwXDynyDD2uoiiJFftL6G1QB6twYchC93jTjR6vUA10
bcKME66/JExcu6cRK/yTtORn0gBJcyZyMEvfbu0SxtkoSnJcGADpEasqEefSdT3x
jTRDJ9d+dA82aYBDxAF3/D9AjBNw+iJRMPJT+gQ1/Xb1vk8ou1uz1xf0Tr/HPLQc
77STxq0Eea8TeVEIIvgOFvR83nrGoBU=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:07:05 2025 by rpki-client