Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/19f94a23-4ca9-31c0-b89d-a7ef3c1bb051.roa
File: 19f94a23-4ca9-31c0-b89d-a7ef3c1bb051.roa (raw, json)
Hash identifier: +TSnhTzkiQW822Sr9tE78gjDgo/ZZOR7n5yWn1QRtL4=
Subject key identifier: CA:04:8F:EF:67:C0:2F:65:C1:D9:FF:58:3A:8E:35:52:35:C7:88:48
Certificate issuer: /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
Certificate serial: 010D0C9F43285848C2B64BF78721715C23E99F00
Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/19f94a23-4ca9-31c0-b89d-a7ef3c1bb051.roa
Signing time: Mon 03 Feb 2025 14:00:52 +0000
ROA not before: Mon 03 Feb 2025 14:00:52 +0000
ROA not after: Sun 04 May 2025 13:00:52 +0000
asID: 7029
IP address blocks: 69.80.227.0/24 maxlen: 24
128.254.185.0/24 maxlen: 24
128.254.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:b6:4b:f7:87:21:71:5c:23:e9:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
Validity
Not Before: Feb 3 14:00:52 2025 GMT
Not After : May 4 13:00:52 2025 GMT
Subject: CN=689daedf-8da1-48a8-a9b1-f174e7faa410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:d4:f8:1f:7e:bb:8b:68:43:ee:65:61:a9:
5b:76:c0:c0:ce:29:fa:a4:28:f0:6c:08:be:e9:29:
90:ce:bb:a8:94:f3:7c:52:3a:38:f8:4c:f3:2b:83:
21:2e:25:b6:28:6f:44:d7:db:09:66:64:47:80:83:
b7:b4:33:7a:58:b3:18:68:24:35:2f:5a:8f:0e:e8:
07:1d:76:34:f6:d8:f5:4c:03:e2:be:2d:da:e5:4a:
d0:ee:79:b0:ae:d5:b9:71:e3:68:77:6a:02:6f:f9:
dd:f2:5d:46:07:6c:83:74:da:2f:c1:cf:75:55:99:
28:f8:f0:74:59:39:df:af:a4:a8:d9:b0:f7:26:3c:
38:5d:45:99:87:de:49:69:54:d3:9a:96:19:2d:c8:
8f:0c:e2:36:8e:34:59:70:ad:7d:44:a2:37:98:62:
f3:e3:9a:30:88:dd:80:5f:07:94:23:80:57:d5:cf:
fb:01:91:4f:e4:84:21:c0:4b:de:87:ce:eb:1e:ad:
b9:e2:05:eb:97:1f:1f:42:26:f5:32:e8:26:6a:57:
38:4a:3a:46:72:e7:79:ba:68:b9:41:b8:08:a5:2c:
4b:47:5a:c9:d1:41:9e:27:3e:d0:2f:79:81:13:a8:
50:28:97:35:02:8d:0f:83:16:d4:3f:19:67:ff:28:
2b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:04:8F:EF:67:C0:2F:65:C1:D9:FF:58:3A:8E:35:52:35:C7:88:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/19f94a23-4ca9-31c0-b89d-a7ef3c1bb051.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl
X509v3 Authority Key Identifier:
keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
sbgp-ipAddrBlock: critical
IPv4:
69.80.227.0/24
128.254.185.0-128.254.186.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:2f:cc:a0:80:0c:77:d3:fe:f9:df:54:d3:6c:cb:42:66:38:
ca:5f:8f:82:b6:99:b1:bc:9e:0f:06:99:2b:b5:ce:f7:ee:32:
22:65:48:ac:7b:13:12:bc:0f:f7:d3:69:95:bb:7a:a6:ca:b3:
fd:d3:c9:1a:3a:af:c7:be:ee:b5:67:c6:b1:e4:29:80:f4:73:
7a:ff:ae:f5:bf:a9:3b:c4:61:ad:9d:34:4c:20:4b:13:a5:12:
ca:d6:b2:2e:39:3a:b1:ba:a5:f1:d3:69:eb:4c:90:dd:fb:06:
d5:7f:3d:c6:ca:7f:d6:ba:1f:7c:3f:33:bf:3a:be:8e:f9:3c:
0b:5a:21:0b:31:6e:51:a3:ec:a6:22:51:7f:37:51:9e:2e:ae:
1d:30:33:d4:d2:63:85:a9:9b:8c:52:29:20:5f:06:2b:d6:ab:
0f:20:38:3b:07:5e:86:c5:70:30:ed:e2:62:5a:39:43:11:3b:
84:1c:28:be:69:58:9b:27:76:60:41:89:3c:70:17:49:94:2e:
7e:f8:bf:7d:ba:1c:e7:02:e6:53:40:1f:e4:57:51:31:95:49:
4b:7b:d8:43:74:89:d9:13:60:70:19:54:41:56:2d:64:7e:10:
42:54:70:10:58:7a:4d:76:95:c6:51:3c:02:d9:c5:38:1a:db:
1b:30:42:0b
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEjCtkv3hyFxXCPpnwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDM4OGQ1MmEtZjhkZC00YzAyLThjM2UtZTEyODA5Zjkz
Y2ZlMB4XDTI1MDIwMzE0MDA1MloXDTI1MDUwNDEzMDA1MlowLzEtMCsGA1UEAxMk
Njg5ZGFlZGYtOGRhMS00OGE4LWE5YjEtZjE3NGU3ZmFhNDEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm7U+B9+u4toQ+5lYalbdsDAzin6pCjwbAi+
6SmQzruolPN8Ujo4+EzzK4MhLiW2KG9E19sJZmRHgIO3tDN6WLMYaCQ1L1qPDugH
HXY09tj1TAPivi3a5UrQ7nmwrtW5ceNod2oCb/nd8l1GB2yDdNovwc91VZko+PB0
WTnfr6So2bD3Jjw4XUWZh95JaVTTmpYZLciPDOI2jjRZcK19RKI3mGLz45owiN2A
XweUI4BX1c/7AZFP5IQhwEveh87rHq254gXrlx8fQib1Mugmalc4SjpGcud5umi5
QbgIpSxLR1rJ0UGeJz7QL3mBE6hQKJc1Ao0PgxbUPxln/ygrMQIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFMoEj+9nwC9lwdn/WDqONVI1x4hIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4
ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4MDlmOTNjZmUvMTlmOTRhMjMtNGNhOS0z
MWMwLWI4OWQtYTdlZjNjMWJiMDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDM4OGQ1MmEtZjhkZC00YzAyLThj
M2UtZTEyODA5ZjkzY2ZlLzAzODhkNTJhLWY4ZGQtNGMwMi04YzNlLWUxMjgwOWY5
M2NmZS5jcmwwHwYDVR0jBBgwFoAUcbVVsA0KERfSSVFKjETwTz2hZm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4
MDlmOTNjZmUuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQARVDjMAwD
BACA/rkDBACA/rowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEADi/MoIAMd9P++d9U02zLQmY4yl+PgraZsbye
DwaZK7XO9+4yImVIrHsTErwP99Nplbt6psqz/dPJGjqvx77utWfGseQpgPRzev+u
9b+pO8RhrZ00TCBLE6USytayLjk6sbql8dNp60yQ3fsG1X89xsp/1roffD8zvzq+
jvk8C1ohCzFuUaPspiJRfzdRni6uHTAz1NJjhambjFIpIF8GK9arDyA4OwdehsVw
MO3iYlo5QxE7hBwovmlYmyd2YEGJPHAXSZQufvi/fboc5wLmU0Af5FdRMZVJS3vY
Q3SJ2RNgcBlUQVYtZH4QQlRwEFh6TXaVxlE8AtnFOBrbGzBCCw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:41:40 2025 by rpki-client