Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/21f6a118-7a36-3daf-86a4-79d2584db80d.roa
File: 21f6a118-7a36-3daf-86a4-79d2584db80d.roa (raw, json)
Hash identifier: vHRnN4lPS4Ev4PuqGBWddUsiyFxFccMeKUPjh3rkwlc=
Subject key identifier: D7:8E:C6:76:5C:7D:59:8F:CA:AA:5D:69:D7:1D:69:CE:90:E8:EF:E0
Certificate issuer: /CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Certificate serial: 010D0C9F43285849552957226148CF344E363AA0
Authority key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/21f6a118-7a36-3daf-86a4-79d2584db80d.roa
Signing time: Fri 28 Mar 2025 01:00:41 +0000
ROA not before: Fri 28 Mar 2025 01:00:41 +0000
ROA not after: Thu 26 Jun 2025 01:00:41 +0000
asID: 23520
IP address blocks: 69.79.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:55:29:57:22:61:48:cf:34:4e:36:3a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Validity
Not Before: Mar 28 01:00:41 2025 GMT
Not After : Jun 26 01:00:41 2025 GMT
Subject: CN=0719241b-bfa2-472c-a52e-83ca8d5267ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7a:e3:1d:0e:0c:0b:74:02:25:00:c4:24:a9:
71:f7:26:b4:ea:fb:fe:4c:af:40:83:f0:a7:7c:3f:
66:82:39:6a:a1:ea:cc:97:6f:fb:d1:da:d6:1b:00:
80:d4:29:f7:a3:fd:67:bd:16:27:40:37:26:f5:1c:
6f:2d:99:bb:50:ba:13:cb:15:2b:29:cc:36:51:ba:
28:3e:6d:f6:9e:91:d6:02:17:af:f3:c2:8b:fe:08:
4d:b8:53:ca:1e:48:86:4a:9a:e1:72:c5:a0:1b:cb:
05:b7:26:07:f4:63:5b:59:12:e5:a4:4a:17:c4:8a:
bd:e2:8d:e6:4a:cc:62:50:e8:44:cc:26:5b:f0:fd:
d7:0d:45:4a:07:e4:b4:82:76:31:ac:33:8c:d1:95:
89:61:26:d5:5a:2a:84:a5:24:90:6f:da:5e:65:90:
54:b0:ab:14:b8:7c:f1:d8:92:ce:eb:1c:f9:13:2e:
9a:31:01:11:07:ac:50:a1:6a:c6:a4:3b:c8:12:ef:
de:73:49:8e:ca:2b:6e:c5:96:8b:d0:10:a7:0b:ee:
29:d2:c6:6c:85:ff:5c:de:7f:86:4f:00:42:38:76:
4a:b3:64:62:7d:41:29:7c:42:fb:91:9b:c9:86:01:
3e:3c:6c:ce:f5:68:23:f6:c4:bf:17:ef:87:ef:3c:
0a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8E:C6:76:5C:7D:59:8F:CA:AA:5D:69:D7:1D:69:CE:90:E8:EF:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/21f6a118-7a36-3daf-86a4-79d2584db80d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl
X509v3 Authority Key Identifier:
keyid:F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
sbgp-ipAddrBlock: critical
IPv4:
69.79.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:ed:1e:cd:e4:f1:23:aa:f8:67:37:92:c4:32:1e:42:82:b2:
5f:d9:5a:79:50:29:dc:aa:7d:81:bb:7b:3e:40:55:59:ca:70:
56:99:dc:88:22:d9:e0:a2:ca:67:54:80:95:be:6e:3a:31:29:
b4:05:f3:c3:b8:01:08:80:99:d7:b3:28:1f:8c:2b:80:d5:97:
d4:8b:3a:79:9f:91:24:0e:26:12:dd:2d:4d:de:7b:4d:a5:df:
90:9a:33:64:44:26:f8:a9:29:84:7c:ca:5f:75:7e:b5:1c:26:
85:ec:2c:35:0b:0e:b3:25:aa:e5:31:25:5f:97:8f:33:6c:ab:
37:fc:08:56:30:bd:68:73:d1:21:46:c8:13:50:73:23:02:50:
87:8c:ad:ad:3c:2a:04:3d:67:22:c4:47:bc:2c:8f:a8:12:6e:
d8:f8:14:66:64:6a:b3:9a:3c:f9:59:08:24:9e:a8:48:b6:84:
d6:46:3b:19:38:26:ff:2d:1e:ca:99:80:22:fa:4d:bc:8f:d5:
f1:94:36:8f:ca:a3:db:6c:e0:5a:15:ff:6d:ec:4f:88:58:d9:
bf:5c:01:32:cc:0d:c5:0a:e0:96:9b:dc:2b:50:4b:0a:fa:94:
e0:27:d6:16:6a:a4:d7:da:f6:78:f0:48:1c:04:84:68:93:42:
c1:b7:c2:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElVKVciYUjPNE42OqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODBlNDMyNzctNDQ5MC00Y2M5LTk5ZWMtNTcyNmFmMDhj
OGFiMB4XDTI1MDMyODAxMDA0MVoXDTI1MDYyNjAxMDA0MVowLzEtMCsGA1UEAxMk
MDcxOTI0MWItYmZhMi00NzJjLWE1MmUtODNjYThkNTI2N2FlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXrjHQ4MC3QCJQDEJKlx9ya06vv+TK9Ag/Cn
fD9mgjlqoerMl2/70drWGwCA1Cn3o/1nvRYnQDcm9RxvLZm7ULoTyxUrKcw2Uboo
Pm32npHWAhev88KL/ghNuFPKHkiGSprhcsWgG8sFtyYH9GNbWRLlpEoXxIq94o3m
SsxiUOhEzCZb8P3XDUVKB+S0gnYxrDOM0ZWJYSbVWiqEpSSQb9peZZBUsKsUuHzx
2JLO6xz5Ey6aMQERB6xQoWrGpDvIEu/ec0mOyituxZaL0BCnC+4p0sZshf9c3n+G
TwBCOHZKs2RifUEpfEL7kZvJhgE+PGzO9Wgj9sS/F++H7zwK8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNeOxnZcfVmPyqpdadcdac6Q6O/gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MGU0
MzI3Ny00NDkwLTRjYzktOTllYy01NzI2YWYwOGM4YWIvMjFmNmExMTgtN2EzNi0z
ZGFmLTg2YTQtNzlkMjU4NGRiODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODBlNDMyNzctNDQ5MC00Y2M5LTk5
ZWMtNTcyNmFmMDhjOGFiLzgwZTQzMjc3LTQ0OTAtNGNjOS05OWVjLTU3MjZhZjA4
YzhhYi5jcmwwHwYDVR0jBBgwFoAU9W5QKXAQrkNBl+H/jCjkkjkd3fAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84MGU0MzI3Ny00NDkwLTRjYzktOTllYy01NzI2
YWYwOGM4YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARU9rMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGbtHs3k8SOq+Gc3ksQyHkKCsl/ZWnlQKdyqfYG7ez5AVVnKcFaZ3Igi
2eCiymdUgJW+bjoxKbQF88O4AQiAmdezKB+MK4DVl9SLOnmfkSQOJhLdLU3ee02l
35CaM2REJvipKYR8yl91frUcJoXsLDULDrMlquUxJV+XjzNsqzf8CFYwvWhz0SFG
yBNQcyMCUIeMra08KgQ9ZyLER7wsj6gSbtj4FGZkarOaPPlZCCSeqEi2hNZGOxk4
Jv8tHsqZgCL6TbyP1fGUNo/Ko9ts4FoV/23sT4hY2b9cATLMDcUK4Jab3CtQSwr6
lOAn1hZqpNfa9njwSBwEhGiTQsG3wpE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:05:14 2025 by rpki-client