Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/f75a4e02-8507-3c2d-8626-a4939f673e3a.roa
File: f75a4e02-8507-3c2d-8626-a4939f673e3a.roa (raw, json)
Hash identifier: Uo6B3eAu+OSclAXZcr8tmNJc+PfF1hjCdwhsPvRA+nQ=
Subject key identifier: FF:C7:AC:30:ED:86:A4:40:3E:FE:4D:D7:BD:84:06:FC:E8:31:2D:33
Certificate issuer: /CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
Certificate serial: 010D0C9F43285848C5035EB541A8D508DEA83700
Authority key identifier: 89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/f75a4e02-8507-3c2d-8626-a4939f673e3a.roa
Signing time: Tue 04 Feb 2025 09:47:55 +0000
ROA not before: Tue 04 Feb 2025 09:47:55 +0000
ROA not after: Mon 05 May 2025 08:47:55 +0000
asID: 6079
IP address blocks: 74.118.171.0/24 maxlen: 24
74.118.173.0/24 maxlen: 24
74.118.174.0/24 maxlen: 24
74.118.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:03:5e:b5:41:a8:d5:08:de:a8:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
Validity
Not Before: Feb 4 09:47:55 2025 GMT
Not After : May 5 08:47:55 2025 GMT
Subject: CN=af0a7bde-0748-46be-a832-c05394ad7542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0d:6c:78:69:7f:f7:06:d0:71:c0:23:7f:96:
b6:b5:20:cd:b3:c2:41:ae:4b:ce:a0:7b:06:02:d0:
e4:17:04:df:d8:8a:c7:32:cf:d5:52:0f:bf:3a:71:
fb:ba:b6:0a:72:8b:cf:38:fc:e9:48:88:04:68:a4:
01:3f:80:1e:f1:19:be:fa:73:82:5d:8a:2e:2b:e4:
56:65:2a:89:ff:62:90:e0:1f:05:3e:a0:5f:bd:ad:
8a:a5:5a:8f:d1:b5:37:55:8f:a3:fc:de:ea:d3:cf:
17:a4:dd:82:57:c0:63:c0:6d:75:87:fb:ab:98:08:
18:be:8d:ea:b0:a0:e5:f3:d2:da:61:25:d8:dd:29:
36:4d:0e:61:e8:00:03:14:b1:4a:9a:4a:bd:92:9c:
a3:60:9d:7f:04:8c:0c:a8:c6:0a:20:08:e6:47:a1:
5b:cc:87:12:43:0f:f5:6c:be:fb:fe:ae:20:7b:b5:
2b:18:d8:af:34:e5:6b:bf:ab:10:dc:c5:8b:aa:af:
e5:7f:4f:56:4e:12:7d:33:b7:98:7f:7f:fb:e5:15:
1e:2a:13:c2:ea:f7:b1:b5:e6:59:37:f8:a9:01:65:
b8:30:01:89:ce:4c:88:97:9f:bb:92:29:2b:33:ac:
12:1e:a6:35:ea:1e:91:c7:0b:fc:51:0f:c3:8a:fc:
f1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C7:AC:30:ED:86:A4:40:3E:FE:4D:D7:BD:84:06:FC:E8:31:2D:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/f75a4e02-8507-3c2d-8626-a4939f673e3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl
X509v3 Authority Key Identifier:
keyid:89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
sbgp-ipAddrBlock: critical
IPv4:
74.118.171.0/24
74.118.173.0-74.118.175.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:da:0d:0e:f0:77:76:c9:6e:f4:fa:e8:45:7e:2d:8b:a3:79:
13:80:01:9e:12:21:c5:6b:70:5f:4b:3a:89:1a:dc:43:1e:80:
65:5c:e8:7b:a4:b6:66:7f:88:44:01:33:d1:5d:68:65:c1:c5:
78:57:9e:58:10:37:ee:74:7e:8e:3e:1f:81:ff:66:dc:15:0f:
5e:39:30:c0:86:68:75:2f:1a:00:f1:80:3f:cd:70:af:34:d2:
1c:4c:59:c2:82:e7:40:2e:99:3c:80:2e:a6:38:d5:86:e5:a9:
a3:a3:cf:78:1d:4f:ab:a0:8b:8f:28:79:c9:e8:5d:3f:da:17:
2e:cb:21:12:4a:1b:83:ef:66:7c:73:fc:d7:d6:3c:19:4b:67:
24:8d:33:6e:0f:22:4b:8c:59:50:1b:9c:f7:d2:0e:2b:45:6f:
78:69:1d:9b:61:8a:aa:87:07:42:47:e6:3f:63:6f:62:7b:7f:
51:c5:ac:80:7f:bb:64:4e:47:00:f4:51:13:d5:15:f4:b4:03:
31:cd:c3:6e:0c:2b:e6:1f:b1:a0:79:70:62:99:e8:c7:bd:ea:
24:6a:08:c5:22:8d:2b:53:34:28:cd:2c:54:1a:36:80:00:13:
1b:5c:38:16:8f:9a:cf:c7:c7:31:30:3b:84:bf:53:ba:6f:38:
9a:5a:33:07
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEjFA161QajVCN6oNwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmIxYmZiOWQtM2NlNS00ZmEwLTg3YTItNzM1M2VlOGNj
MjljMB4XDTI1MDIwNDA5NDc1NVoXDTI1MDUwNTA4NDc1NVowLzEtMCsGA1UEAxMk
YWYwYTdiZGUtMDc0OC00NmJlLWE4MzItYzA1Mzk0YWQ3NTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnA1seGl/9wbQccAjf5a2tSDNs8JBrkvOoHsG
AtDkFwTf2IrHMs/VUg+/OnH7urYKcovPOPzpSIgEaKQBP4Ae8Rm++nOCXYouK+RW
ZSqJ/2KQ4B8FPqBfva2KpVqP0bU3VY+j/N7q088XpN2CV8BjwG11h/urmAgYvo3q
sKDl89LaYSXY3Sk2TQ5h6AADFLFKmkq9kpyjYJ1/BIwMqMYKIAjmR6FbzIcSQw/1
bL77/q4ge7UrGNivNOVrv6sQ3MWLqq/lf09WThJ9M7eYf3/75RUeKhPC6vexteZZ
N/ipAWW4MAGJzkyIl5+7kikrM6wSHqY16h6Rxwv8UQ/DivzxpQIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFP/HrDDthqRAPv5N172EBvzoMS0zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82YjFi
ZmI5ZC0zY2U1LTRmYTAtODdhMi03MzUzZWU4Y2MyOWMvZjc1YTRlMDItODUwNy0z
YzJkLTg2MjYtYTQ5MzlmNjczZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNmIxYmZiOWQtM2NlNS00ZmEwLTg3
YTItNzM1M2VlOGNjMjljLzZiMWJmYjlkLTNjZTUtNGZhMC04N2EyLTczNTNlZThj
YzI5Yy5jcmwwHwYDVR0jBBgwFoAUiZ7PjIFhGc30CeRkoLh5rVZXgTQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy82YjFiZmI5ZC0zY2U1LTRmYTAtODdhMi03MzUz
ZWU4Y2MyOWMuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQASnarMAwD
BABKdq0DBARKdqAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAANoNDvB3dslu9ProRX4ti6N5E4ABnhIhxWtw
X0s6iRrcQx6AZVzoe6S2Zn+IRAEz0V1oZcHFeFeeWBA37nR+jj4fgf9m3BUPXjkw
wIZodS8aAPGAP81wrzTSHExZwoLnQC6ZPIAupjjVhuWpo6PPeB1Pq6CLjyh5yehd
P9oXLsshEkobg+9mfHP819Y8GUtnJI0zbg8iS4xZUBuc99IOK0VveGkdm2GKqocH
QkfmP2NvYnt/UcWsgH+7ZE5HAPRRE9UV9LQDMc3Dbgwr5h+xoHlwYpnox73qJGoI
xSKNK1M0KM0sVBo2gAATG1w4Fo+az8fHMTA7hL9Tum84mlozBw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:03:49 2025 by rpki-client