Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc/c70e9fda-4775-3e35-b953-e37e4d13808d.roa
File: c70e9fda-4775-3e35-b953-e37e4d13808d.roa (raw, json)
Hash identifier: eBbH6DK7RJTQYF1CK0N0aAsP5Cqv1nYLHVvxeODn034=
Subject key identifier: 84:FD:E4:80:97:60:71:74:D6:3C:44:D0:09:64:0B:3F:62:77:45:B3
Certificate issuer: /CN=4c855281-0740-46c1-8432-9952688807bc
Certificate serial: 010D0C9F4328584882808F64B585AD59D76A8FE0
Authority key identifier: 99:11:74:5F:71:9A:44:B4:E0:54:57:74:0E:1C:27:13:6F:FF:A3:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc/c70e9fda-4775-3e35-b953-e37e4d13808d.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 14713
IP address blocks: 204.109.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:8f:64:b5:85:ad:59:d7:6a:8f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c855281-0740-46c1-8432-9952688807bc
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=21d6a2e9-2c93-4462-9457-c2f5c03e9830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f5:c0:9b:18:2e:9e:05:61:ea:d8:7d:9b:72:
70:24:8a:82:55:d0:ef:fe:2f:13:f8:b4:c1:c9:19:
93:33:0f:b7:91:46:98:ef:2a:80:ee:20:f8:52:d2:
87:e9:e3:67:51:1d:1c:f2:2a:64:3c:c1:28:ab:28:
aa:ce:ed:7e:e0:b0:fa:62:a7:e5:f3:e0:bd:47:f8:
0a:66:ab:28:45:ee:ff:dc:5a:92:52:e9:86:be:7a:
27:73:55:74:8b:3e:50:67:a6:c2:da:05:72:c2:e5:
17:0f:b1:08:17:40:23:0b:d2:5e:27:45:6f:2d:e6:
4e:75:1d:68:47:74:6c:74:8b:47:b9:be:81:83:c1:
74:ec:95:2f:62:ec:e3:c4:fc:06:54:01:c1:83:ac:
2d:82:65:40:47:0f:bb:29:b7:f3:54:13:00:10:63:
4f:89:37:35:5e:78:db:af:25:5b:62:6c:2f:82:0a:
6c:c3:49:90:cf:68:5a:0f:06:75:39:64:b4:ec:6c:
90:ec:1e:a3:43:f0:20:5f:cf:a3:b7:86:d4:3e:dc:
08:45:8a:46:24:39:fd:c6:01:23:1d:e2:56:6a:d1:
75:2e:24:a4:97:06:23:77:04:13:ad:bf:0a:9a:18:
b9:17:f1:e3:50:3d:25:17:4d:dd:08:61:ab:36:0f:
0c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FD:E4:80:97:60:71:74:D6:3C:44:D0:09:64:0B:3F:62:77:45:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc/c70e9fda-4775-3e35-b953-e37e4d13808d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc/4c855281-0740-46c1-8432-9952688807bc.crl
X509v3 Authority Key Identifier:
keyid:99:11:74:5F:71:9A:44:B4:E0:54:57:74:0E:1C:27:13:6F:FF:A3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc.cer
sbgp-ipAddrBlock: critical
IPv4:
204.109.52.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:92:8f:19:02:a5:71:70:47:69:86:18:a2:29:3b:3d:bc:f8:
d9:ab:c5:7f:fb:b3:f5:16:ab:f4:cc:f4:f6:93:94:9c:a4:79:
46:a6:d4:21:05:75:96:7b:35:f1:da:cc:e5:45:ba:d7:fa:e1:
21:83:e7:e4:a8:1f:f7:7e:d6:8c:12:7f:29:23:5b:6f:20:d4:
c9:38:9a:3b:26:0f:93:a5:62:6b:a3:c8:e9:8d:4b:ed:88:c8:
a1:ea:5f:25:1f:76:24:eb:ae:9e:3c:6c:29:71:93:df:2f:92:
59:a2:ba:06:aa:cc:92:2d:58:d4:5f:d5:ff:d3:6b:5a:20:35:
20:dc:c9:ae:e5:e5:dc:ad:c9:2d:0f:af:06:a0:d9:e6:df:67:
59:61:f3:64:18:cc:92:35:10:5f:fd:be:50:95:b5:50:87:e2:
b5:4b:0d:f9:d4:23:27:c0:32:3a:0b:28:39:9e:22:51:40:6e:
10:a0:c5:b2:1f:72:bf:0f:39:f5:ce:26:04:22:6d:1f:42:57:
fa:05:7d:c7:8b:f6:e1:e6:ac:83:99:79:2a:8c:28:86:f3:e4:
67:eb:9e:84:c6:36:b4:6f:f5:d0:bb:44:51:15:bb:12:8f:16:
57:77:1f:82:ff:eb:21:2a:7c:c3:94:07:3d:9a:fd:fa:b8:fa:
0c:f6:a0:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiCgI9ktYWtWddqj+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGM4NTUyODEtMDc0MC00NmMxLTg0MzItOTk1MjY4ODgw
N2JjMB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk
MjFkNmEyZTktMmM5My00NDYyLTk0NTctYzJmNWMwM2U5ODMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufXAmxgungVh6th9m3JwJIqCVdDv/i8T+LTB
yRmTMw+3kUaY7yqA7iD4UtKH6eNnUR0c8ipkPMEoqyiqzu1+4LD6Yqfl8+C9R/gK
ZqsoRe7/3FqSUumGvnonc1V0iz5QZ6bC2gVywuUXD7EIF0AjC9JeJ0VvLeZOdR1o
R3RsdItHub6Bg8F07JUvYuzjxPwGVAHBg6wtgmVARw+7KbfzVBMAEGNPiTc1Xnjb
ryVbYmwvggpsw0mQz2haDwZ1OWS07GyQ7B6jQ/AgX8+jt4bUPtwIRYpGJDn9xgEj
HeJWatF1LiSklwYjdwQTrb8Kmhi5F/HjUD0lF03dCGGrNg8MvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIT95ICXYHF01jxE0AlkCz9id0WzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80Yzg1
NTI4MS0wNzQwLTQ2YzEtODQzMi05OTUyNjg4ODA3YmMvYzcwZTlmZGEtNDc3NS0z
ZTM1LWI5NTMtZTM3ZTRkMTM4MDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGM4NTUyODEtMDc0MC00NmMxLTg0
MzItOTk1MjY4ODgwN2JjLzRjODU1MjgxLTA3NDAtNDZjMS04NDMyLTk5NTI2ODg4
MDdiYy5jcmwwHwYDVR0jBBgwFoAUmRF0X3GaRLTgVFd0DhwnE2//o4owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80Yzg1NTI4MS0wNzQwLTQ2YzEtODQzMi05OTUy
Njg4ODA3YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzG00MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFKSjxkCpXFwR2mGGKIpOz28+NmrxX/7s/UWq/TM9PaTlJykeUam1CEF
dZZ7NfHazOVFutf64SGD5+SoH/d+1owSfykjW28g1Mk4mjsmD5OlYmujyOmNS+2I
yKHqXyUfdiTrrp48bClxk98vklmiugaqzJItWNRf1f/Ta1ogNSDcya7l5dytyS0P
rwag2ebfZ1lh82QYzJI1EF/9vlCVtVCH4rVLDfnUIyfAMjoLKDmeIlFAbhCgxbIf
cr8POfXOJgQibR9CV/oFfceL9uHmrIOZeSqMKIbz5GfrnoTGNrRv9dC7RFEVuxKP
Fld3H4L/6yEqfMOUBz2a/fq4+gz2oF4=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:15 2025 by rpki-client