Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/17acb471-f0ec-3752-90a5-05f953ebd85f.roa
File: 17acb471-f0ec-3752-90a5-05f953ebd85f.roa (raw, json)
Hash identifier: HV6o3BCreAhwwACiGc0Wd2vleO6YEaQHL18CmSlkSmE=
Subject key identifier: 0D:E0:03:0C:F5:F6:AF:18:74:26:C4:1E:F9:49:E4:C6:90:C8:47:9A
Certificate issuer: /CN=c69aff30-4786-431c-90e8-aaf78cc64cbe
Certificate serial: 010D0C9F43285848DEA11CFA2C93AAD3EDAC4080
Authority key identifier: E1:0A:E6:D5:89:3E:01:8C:85:F8:81:AB:FB:33:FF:60:A3:34:2F:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/17acb471-f0ec-3752-90a5-05f953ebd85f.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 36352
IP address blocks: 128.254.228.0/22 maxlen: 22
162.245.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:1c:fa:2c:93:aa:d3:ed:ac:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69aff30-4786-431c-90e8-aaf78cc64cbe
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=a8e2d7b6-c826-46df-8719-91c825579b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1c:81:22:ac:4a:c7:6f:c2:16:89:0b:11:cd:
fc:57:fc:3e:43:4e:cf:51:48:b4:ac:0f:8a:e2:66:
8e:32:1f:23:e5:06:33:cd:44:3b:61:db:45:66:2b:
7e:85:c5:5b:7d:75:92:74:8f:d1:e1:4c:e7:91:84:
10:4a:e1:28:c7:ca:da:d3:ab:f2:fe:8d:f4:14:10:
51:ae:da:ab:46:0d:16:2f:96:4b:1d:ea:bd:fd:ad:
41:bf:32:5e:33:92:c3:2d:d1:9f:b4:c9:07:50:48:
66:d1:1e:72:ce:01:3f:1d:77:c0:aa:12:1b:26:66:
3c:f1:d4:dd:8b:af:2a:9d:d9:62:2d:a5:45:b9:0c:
b1:cd:66:c6:84:4a:a2:b1:49:42:90:4f:e1:32:a7:
00:74:95:24:b8:f9:df:b8:17:2d:4c:77:f6:06:18:
8c:9c:3d:96:89:6b:8a:a9:a0:8d:dc:db:04:38:0c:
29:0b:79:30:c3:6d:5c:fd:33:ab:02:cd:e7:ea:3e:
3a:6a:ad:c1:c8:56:4f:5a:6d:de:da:07:7d:1d:1e:
71:62:fc:ae:82:c7:c5:3c:ce:6c:6e:83:87:56:5d:
5a:1d:d2:2f:e4:a6:5d:a6:6b:fc:7a:35:86:7c:f1:
02:ad:f8:b7:77:e0:5d:8c:1a:f2:1e:61:18:a0:fe:
bd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E0:03:0C:F5:F6:AF:18:74:26:C4:1E:F9:49:E4:C6:90:C8:47:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/17acb471-f0ec-3752-90a5-05f953ebd85f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe/c69aff30-4786-431c-90e8-aaf78cc64cbe.crl
X509v3 Authority Key Identifier:
keyid:E1:0A:E6:D5:89:3E:01:8C:85:F8:81:AB:FB:33:FF:60:A3:34:2F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c69aff30-4786-431c-90e8-aaf78cc64cbe.cer
sbgp-ipAddrBlock: critical
IPv4:
128.254.228.0/22
162.245.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:48:10:53:cd:38:33:b9:ea:38:11:b6:8a:23:e2:32:9c:a8:
d3:28:db:6d:25:57:82:ce:d8:99:08:5f:5c:48:43:e0:e9:f2:
c2:48:46:7e:aa:35:a5:84:9e:5f:a9:b3:43:4d:05:b8:10:67:
1c:13:b3:bb:f3:b6:26:df:2a:8e:37:8b:9e:61:7c:2f:08:3f:
41:a4:69:d1:75:0d:b4:aa:92:cc:93:cd:3d:d6:78:67:0d:17:
9c:70:9d:73:70:59:81:87:f3:19:37:3e:7b:86:08:0e:1f:d8:
e7:db:38:fd:92:7f:84:c8:df:97:c6:85:af:6e:a9:80:53:b1:
b1:12:f2:4d:50:bc:17:75:4f:04:8b:b9:15:7e:bd:2b:34:a3:
50:f2:0a:17:93:2d:1e:87:75:fd:2e:56:5d:cd:e7:df:57:7d:
ba:a2:6e:3e:4b:4f:27:27:a8:58:16:24:47:c2:e4:5e:a3:19:
5d:51:11:42:67:9d:e6:b7:d6:fe:79:e8:58:bb:07:ff:02:f9:
46:d6:65:b0:91:d0:f0:37:d9:d2:da:28:ca:ef:ff:8b:64:d8:
50:ac:27:39:0b:e8:49:b7:59:2d:7a:39:bc:91:f5:b0:26:c8:
ac:e0:b8:4e:b2:1b:6f:33:f1:e4:f6:f8:5a:23:67:91:64:0a:
d4:f9:21:6f
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEjeoRz6LJOq0+2sQIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzY5YWZmMzAtNDc4Ni00MzFjLTkwZTgtYWFmNzhjYzY0
Y2JlMB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk
YThlMmQ3YjYtYzgyNi00NmRmLTg3MTktOTFjODI1NTc5YjU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxyBIqxKx2/CFokLEc38V/w+Q07PUUi0rA+K
4maOMh8j5QYzzUQ7YdtFZit+hcVbfXWSdI/R4UznkYQQSuEox8ra06vy/o30FBBR
rtqrRg0WL5ZLHeq9/a1BvzJeM5LDLdGftMkHUEhm0R5yzgE/HXfAqhIbJmY88dTd
i68qndliLaVFuQyxzWbGhEqisUlCkE/hMqcAdJUkuPnfuBctTHf2BhiMnD2WiWuK
qaCN3NsEOAwpC3kww21c/TOrAs3n6j46aq3ByFZPWm3e2gd9HR5xYvyugsfFPM5s
boOHVl1aHdIv5KZdpmv8ejWGfPECrfi3d+BdjBryHmEYoP69MQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFA3gAwz19q8YdCbEHvlJ5MaQyEeaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jNjlh
ZmYzMC00Nzg2LTQzMWMtOTBlOC1hYWY3OGNjNjRjYmUvMTdhY2I0NzEtZjBlYy0z
NzUyLTkwYTUtMDVmOTUzZWJkODVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzY5YWZmMzAtNDc4Ni00MzFjLTkw
ZTgtYWFmNzhjYzY0Y2JlL2M2OWFmZjMwLTQ3ODYtNDMxYy05MGU4LWFhZjc4Y2M2
NGNiZS5jcmwwHwYDVR0jBBgwFoAU4Qrm1Yk+AYyF+IGr+zP/YKM0L2YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9jNjlhZmYzMC00Nzg2LTQzMWMtOTBlOC1hYWY3
OGNjNjRjYmUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCgP7kAwQC
ovVkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAF5IEFPNODO56jgRtooj4jKcqNMo220lV4LO2JkIX1xIQ+Dp
8sJIRn6qNaWEnl+ps0NNBbgQZxwTs7vztibfKo43i55hfC8IP0GkadF1DbSqksyT
zT3WeGcNF5xwnXNwWYGH8xk3PnuGCA4f2OfbOP2Sf4TI35fGha9uqYBTsbES8k1Q
vBd1TwSLuRV+vSs0o1DyCheTLR6Hdf0uVl3N599Xfbqibj5LTycnqFgWJEfC5F6j
GV1REUJnnea31v556Fi7B/8C+UbWZbCR0PA32dLaKMrv/4tk2FCsJzkL6Em3WS16
ObyR9bAmyKzguE6yG28z8eT2+FojZ5FkCtT5IW8=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:16:24 2025 by rpki-client