Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9/44da0c68-fb28-307e-afbf-ca3b5cfc37ea.roa
File: 44da0c68-fb28-307e-afbf-ca3b5cfc37ea.roa (raw, json)
Hash identifier: YRg8Hc0BgQWXoIc3Va4uSzeo0yRTiNI1Kww1/WkIFGg=
Subject key identifier: 5B:3E:5C:EA:79:0C:D8:CE:8F:38:43:BF:3F:39:14:1D:60:D9:2B:31
Certificate issuer: /CN=81aef195-0247-4104-9f46-f88e0dfd6ca9
Certificate serial: 010D0C9F432858490E16C6351992D99423F708C0
Authority key identifier: 0E:84:CA:F5:7E:88:73:D1:27:C9:63:1E:5A:A1:37:56:0F:88:83:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9/44da0c68-fb28-307e-afbf-ca3b5cfc37ea.roa
Signing time: Sun 02 Mar 2025 14:00:52 +0000
ROA not before: Sun 02 Mar 2025 14:00:52 +0000
ROA not after: Sat 31 May 2025 13:00:52 +0000
asID: 21858
IP address blocks: 208.70.64.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0e:16:c6:35:19:92:d9:94:23:f7:08:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81aef195-0247-4104-9f46-f88e0dfd6ca9
Validity
Not Before: Mar 2 14:00:52 2025 GMT
Not After : May 31 13:00:52 2025 GMT
Subject: CN=51ca7f84-a5b3-4932-9cb3-7e3229076f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a6:b9:72:13:01:6b:ed:34:19:f1:fd:74:69:
61:50:52:dd:1f:12:e9:7e:5a:f4:d3:5b:d2:fd:6f:
1c:ae:0f:e1:78:23:dd:c2:b0:10:1a:74:02:f6:b5:
35:6c:5f:96:21:c8:2e:c7:7c:05:54:a9:9e:97:f5:
f3:27:0e:43:ad:cf:a1:d9:43:50:e9:e5:c9:19:c7:
b5:6e:78:fe:93:4f:c6:c1:47:dd:11:90:42:50:ef:
1d:ba:95:84:73:01:e2:f1:91:ab:5f:4d:1b:2a:aa:
57:8c:07:7e:ce:7d:1b:32:0c:00:13:86:a3:8b:fc:
1b:7a:6a:a3:6a:21:9f:c6:ca:39:25:5e:ce:28:38:
e4:18:22:e2:4a:8e:11:bd:53:86:81:e8:a0:8e:f0:
4f:fe:2a:0d:ff:06:0e:f8:6a:d8:50:fd:a0:67:b4:
d5:20:ad:b2:91:ea:cd:7d:24:48:58:f0:ea:2f:0c:
88:e0:3e:7f:21:23:36:21:8b:e4:01:80:f2:33:03:
30:32:92:13:97:bd:de:b0:8a:24:6d:ce:31:39:fd:
64:9c:b4:65:c3:88:cc:54:25:4a:79:c6:3a:4d:9f:
85:f6:b4:3b:47:d4:a0:cf:a5:ee:06:3b:33:47:2b:
1f:3b:f3:04:77:19:5f:b4:fc:cd:76:b4:f6:5c:b9:
a2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3E:5C:EA:79:0C:D8:CE:8F:38:43:BF:3F:39:14:1D:60:D9:2B:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9/44da0c68-fb28-307e-afbf-ca3b5cfc37ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9/81aef195-0247-4104-9f46-f88e0dfd6ca9.crl
X509v3 Authority Key Identifier:
keyid:0E:84:CA:F5:7E:88:73:D1:27:C9:63:1E:5A:A1:37:56:0F:88:83:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9.cer
sbgp-ipAddrBlock: critical
IPv4:
208.70.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:a6:ce:60:c0:a4:d8:6d:29:e7:95:73:2f:e8:d0:41:1e:d5:
08:ff:7f:71:fd:25:f5:32:76:a2:b8:88:43:cc:2b:0a:05:39:
94:71:32:45:bc:d5:5b:27:fb:f5:f1:2d:90:d8:6b:14:03:d5:
9c:44:4a:32:5c:8e:a4:fe:a4:fd:8a:2c:ea:10:80:a6:4c:40:
4d:ee:b4:3a:59:a8:90:c1:1a:08:f4:85:d9:46:40:ce:91:ea:
e6:f7:fc:63:c3:95:61:9a:be:c5:9d:95:1b:2e:e3:07:98:0b:
40:f9:75:22:1e:0b:39:a6:96:84:64:60:dc:1d:cf:54:ae:fe:
1a:5b:e0:a2:41:04:26:40:85:51:92:16:9c:5d:52:9b:55:66:
8b:4f:1d:61:3d:c0:cb:a5:d8:e8:3e:58:91:d0:d3:0f:fa:74:
ff:3c:54:d1:99:11:b0:25:3b:e9:56:ee:c8:f0:42:5e:75:5c:
aa:4f:37:48:c2:96:85:b6:75:13:54:38:9a:4d:2d:ae:d8:34:
10:ee:ae:3b:b2:7c:52:f9:dd:3c:25:76:e5:ed:8a:bd:0f:5a:
40:81:39:7f:af:be:2c:e9:c7:9d:6f:68:67:06:6a:e1:0e:bd:
c5:f0:70:44:b1:e5:28:77:af:92:bc:a8:b2:50:f0:35:57:33:
e0:c0:8e:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFsY1GZLZlCP3CMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODFhZWYxOTUtMDI0Ny00MTA0LTlmNDYtZjg4ZTBkZmQ2
Y2E5MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk
NTFjYTdmODQtYTViMy00OTMyLTljYjMtN2UzMjI5MDc2ZjgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqa5chMBa+00GfH9dGlhUFLdHxLpflr001vS
/W8crg/heCPdwrAQGnQC9rU1bF+WIcgux3wFVKmel/XzJw5Drc+h2UNQ6eXJGce1
bnj+k0/GwUfdEZBCUO8dupWEcwHi8ZGrX00bKqpXjAd+zn0bMgwAE4aji/wbemqj
aiGfxso5JV7OKDjkGCLiSo4RvVOGgeigjvBP/ioN/wYO+GrYUP2gZ7TVIK2ykerN
fSRIWPDqLwyI4D5/ISM2IYvkAYDyMwMwMpITl73esIokbc4xOf1knLRlw4jMVCVK
ecY6TZ+F9rQ7R9Sgz6XuBjszRysfO/MEdxlftPzNdrT2XLmiSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFs+XOp5DNjOjzhDvz85FB1g2SsxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84MWFl
ZjE5NS0wMjQ3LTQxMDQtOWY0Ni1mODhlMGRmZDZjYTkvNDRkYTBjNjgtZmIyOC0z
MDdlLWFmYmYtY2EzYjVjZmMzN2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODFhZWYxOTUtMDI0Ny00MTA0LTlm
NDYtZjg4ZTBkZmQ2Y2E5LzgxYWVmMTk1LTAyNDctNDEwNC05ZjQ2LWY4OGUwZGZk
NmNhOS5jcmwwHwYDVR0jBBgwFoAUDoTK9X6Ic9EnyWMeWqE3Vg+Ig+owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy84MWFlZjE5NS0wMjQ3LTQxMDQtOWY0Ni1mODhl
MGRmZDZjYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EZAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHemzmDApNhtKeeVcy/o0EEe1Qj/f3H9JfUydqK4iEPMKwoFOZRxMkW8
1Vsn+/XxLZDYaxQD1ZxESjJcjqT+pP2KLOoQgKZMQE3utDpZqJDBGgj0hdlGQM6R
6ub3/GPDlWGavsWdlRsu4weYC0D5dSIeCzmmloRkYNwdz1Su/hpb4KJBBCZAhVGS
FpxdUptVZotPHWE9wMul2Og+WJHQ0w/6dP88VNGZEbAlO+lW7sjwQl51XKpPN0jC
loW2dRNUOJpNLa7YNBDurjuyfFL53TwlduXtir0PWkCBOX+vvizpx51vaGcGauEO
vcXwcESx5Sh3r5K8qLJQ8DVXM+DAjvw=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:26:09 2025 by rpki-client