Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/d3f55b78-b0db-358b-92ae-a01f4943931a.roa
File: d3f55b78-b0db-358b-92ae-a01f4943931a.roa (raw, json)
Hash identifier: JoxVKlyH/KA1BV+I3dNZfg4lGpmk3aNbDrn7uW59q54=
Subject key identifier: 8A:17:9A:E1:06:FA:E0:C3:DB:38:1C:72:61:9F:7C:08:40:23:C1:99
Certificate issuer: /CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d
Certificate serial: 010D0C9F43285849287E6869C96853CD914E20C0
Authority key identifier: 44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/d3f55b78-b0db-358b-92ae-a01f4943931a.roa
Signing time: Wed 12 Mar 2025 01:00:39 +0000
ROA not before: Wed 12 Mar 2025 01:00:39 +0000
ROA not after: Tue 10 Jun 2025 01:00:39 +0000
asID: 18705
IP address blocks: 173.247.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:28:7e:68:69:c9:68:53:cd:91:4e:20:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d
Validity
Not Before: Mar 12 01:00:39 2025 GMT
Not After : Jun 10 01:00:39 2025 GMT
Subject: CN=1b4575ad-f753-4e04-b794-8a3328afd496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2b:43:20:5f:2d:e1:c9:3d:27:3b:df:5e:bf:
d3:d3:a3:59:8a:84:92:21:9d:16:ee:c0:e2:30:08:
04:2b:57:d3:07:5f:95:e4:47:86:b9:17:7e:7d:73:
45:ae:2f:b8:cb:bf:a1:e0:36:93:f2:cb:c8:75:6f:
3d:8f:f4:93:84:88:a9:dd:71:fd:c9:79:19:ca:a4:
2f:1b:68:7d:86:63:67:9e:da:e6:01:13:51:dd:a0:
aa:eb:ad:f5:91:cf:ab:18:05:63:d8:f7:e2:d6:4d:
83:08:b0:9e:1f:75:a4:88:d3:4b:5d:fa:5a:ee:0e:
42:61:c2:73:cc:ad:d5:d2:6b:b1:36:46:83:c7:77:
08:9a:b3:80:64:c4:55:82:c8:36:66:36:7b:31:78:
09:d6:88:92:64:23:71:5c:16:80:6f:06:94:7c:0f:
5b:56:a8:8b:ca:e6:bd:b3:6e:84:b6:bd:d5:f0:e2:
72:e0:2c:48:31:53:7f:12:c2:d9:13:a4:4c:19:85:
26:4a:4e:ad:53:87:f6:17:ea:14:8a:24:4d:93:4f:
0e:d1:b7:a3:d3:36:e7:22:e3:08:85:86:38:d3:d8:
e1:af:11:ac:2b:ee:bc:3c:9b:9e:dd:a1:d4:51:d6:
e9:3c:23:4e:fe:ec:3d:f0:7e:4a:64:85:98:c7:9a:
32:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:17:9A:E1:06:FA:E0:C3:DB:38:1C:72:61:9F:7C:08:40:23:C1:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/d3f55b78-b0db-358b-92ae-a01f4943931a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl
X509v3 Authority Key Identifier:
keyid:44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer
sbgp-ipAddrBlock: critical
IPv4:
173.247.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:98:e2:33:f5:07:36:c4:46:bc:5a:fc:1b:a7:24:02:aa:8f:
3a:2f:85:c7:1a:e0:a2:4b:14:dd:71:34:d4:f2:8a:be:b9:12:
a2:cf:d0:8c:ec:3b:76:ab:fb:35:b2:4e:51:72:5c:4f:c7:4d:
37:e9:53:a0:e6:9a:d6:df:60:d8:08:e4:b5:95:c8:74:ca:21:
ab:76:90:48:e5:01:23:b2:57:ef:35:e3:62:36:9d:05:53:06:
05:42:95:c0:55:ef:50:01:6e:82:a7:01:e3:15:7f:00:a6:d4:
21:7f:59:9c:4f:b5:39:be:02:20:ad:d2:17:9c:e5:01:3c:41:
ba:d6:c4:66:3d:72:c5:86:ee:65:64:77:54:51:1f:4b:6e:2c:
8f:f4:f9:8b:7a:7c:a9:bf:2f:db:1c:54:9e:07:e7:68:3f:38:
2f:e8:9c:01:76:14:06:23:aa:d4:14:cf:a1:d9:66:55:99:6f:
56:2a:b4:9c:d3:e3:80:16:35:11:34:dc:2f:06:9d:1b:c5:54:
ab:ab:bc:37:3d:13:67:e6:0c:fa:0d:d5:c8:a0:c2:5c:36:78:
a6:74:59:a2:66:25:18:d3:32:ab:0e:f0:dc:7a:4a:81:84:cb:
ee:c7:66:b0:e5:7f:b0:85:83:b0:ef:2d:f9:65:ad:8a:e1:66:
72:5d:fa:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofmhpyWhTzZFOIMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTFiZDlkNDMtYzEyNy00YTllLWIwMzgtMGM0MzZjNWQ5
MDVkMB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk
MWI0NTc1YWQtZjc1My00ZTA0LWI3OTQtOGEzMzI4YWZkNDk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkStDIF8t4ck9JzvfXr/T06NZioSSIZ0W7sDi
MAgEK1fTB1+V5EeGuRd+fXNFri+4y7+h4DaT8svIdW89j/SThIip3XH9yXkZyqQv
G2h9hmNnntrmARNR3aCq6631kc+rGAVj2Pfi1k2DCLCeH3WkiNNLXfpa7g5CYcJz
zK3V0muxNkaDx3cImrOAZMRVgsg2ZjZ7MXgJ1oiSZCNxXBaAbwaUfA9bVqiLyua9
s26Etr3V8OJy4CxIMVN/EsLZE6RMGYUmSk6tU4f2F+oUiiRNk08O0bej0zbnIuMI
hYY409jhrxGsK+68PJue3aHUUdbpPCNO/uw98H5KZIWYx5oy6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIoXmuEG+uDD2zgccmGffAhAI8GZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWJk
OWQ0My1jMTI3LTRhOWUtYjAzOC0wYzQzNmM1ZDkwNWQvZDNmNTViNzgtYjBkYi0z
NThiLTkyYWUtYTAxZjQ5NDM5MzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTFiZDlkNDMtYzEyNy00YTllLWIw
MzgtMGM0MzZjNWQ5MDVkL2ExYmQ5ZDQzLWMxMjctNGE5ZS1iMDM4LTBjNDM2YzVk
OTA1ZC5jcmwwHwYDVR0jBBgwFoAURFawDMNvboLVigocKndFeOYzoPIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWJkOWQ0My1jMTI3LTRhOWUtYjAzOC0wYzQz
NmM1ZDkwNWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrfcgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC6Y4jP1BzbERrxa/BunJAKqjzovhcca4KJLFN1xNNTyir65EqLP0Izs
O3ar+zWyTlFyXE/HTTfpU6DmmtbfYNgI5LWVyHTKIat2kEjlASOyV+8142I2nQVT
BgVClcBV71ABboKnAeMVfwCm1CF/WZxPtTm+AiCt0hec5QE8QbrWxGY9csWG7mVk
d1RRH0tuLI/0+Yt6fKm/L9scVJ4H52g/OC/onAF2FAYjqtQUz6HZZlWZb1YqtJzT
44AWNRE03C8GnRvFVKurvDc9E2fmDPoN1cigwlw2eKZ0WaJmJRjTMqsO8Nx6SoGE
y+7HZrDlf7CFg7DvLfllrYrhZnJd+tE=
-----END CERTIFICATE-----
Generated at Fri Apr 4 15:56:32 2025 by rpki-client