Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380/32310430-1564-34ba-a911-45325d8fda20.roa
File: 32310430-1564-34ba-a911-45325d8fda20.roa (raw, json)
Hash identifier: XghQwCj30nGcLpOTFTvHMiyDLNUVXCneP53vFosPvrY=
Subject key identifier: 79:11:C8:0A:FA:1D:EC:49:B4:45:C6:A6:7F:46:AC:1F:87:61:57:95
Certificate issuer: /CN=6988a68c-ec5c-4d72-9ee1-27118af98380
Certificate serial: 010D0C9F43285848E00654DAB61A38F971739380
Authority key identifier: 53:74:2B:1E:7F:79:D2:1A:D0:29:48:45:9A:93:5C:BA:54:EE:73:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380/32310430-1564-34ba-a911-45325d8fda20.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 29953
IP address blocks: 69.41.192.0/20 maxlen: 24
97.107.48.0/20 maxlen: 24
2605:1100::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:54:da:b6:1a:38:f9:71:73:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6988a68c-ec5c-4d72-9ee1-27118af98380
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=9f22159a-5f67-4748-ad1a-1ff4ec11f83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4d:4b:b1:86:cc:1d:2b:4b:1a:77:96:44:ab:
7e:94:d7:16:58:79:2b:e6:42:23:ec:ed:44:29:c3:
4f:45:cd:65:e3:55:df:65:ab:e0:15:d4:2d:37:3e:
d5:fa:6e:80:e3:2a:a4:31:97:28:14:4a:40:3e:44:
80:79:04:de:88:af:01:48:65:92:9c:8e:20:98:0d:
7a:9d:12:b6:d8:a6:69:82:38:9c:bf:15:e8:4d:fc:
6c:9a:09:43:d3:e3:d5:f7:58:30:67:40:68:1e:e2:
83:d5:00:7d:1e:be:9b:05:3f:19:2b:67:b0:1b:f1:
6d:58:e3:fa:0b:4d:1b:c0:34:0b:63:09:e3:61:d7:
9a:d8:08:a1:90:09:d1:a1:76:2d:fb:07:2e:ff:62:
da:1a:7d:a7:cb:0d:bb:50:dd:60:38:02:b5:69:98:
fd:ef:50:d8:9f:0a:13:02:ed:56:c9:bc:c6:d8:b2:
32:74:52:65:20:b2:03:d4:25:4f:76:81:16:10:04:
fe:b8:b8:b2:7a:29:6d:53:a8:49:34:5f:d9:dd:04:
5e:4b:ac:1d:69:cb:fb:4a:14:6a:58:c2:2d:30:07:
e8:40:2d:34:05:ea:39:e8:76:44:bf:ab:5c:49:44:
39:6d:dc:cf:bd:f1:6f:1c:b7:b3:30:f8:e6:63:a2:
08:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:11:C8:0A:FA:1D:EC:49:B4:45:C6:A6:7F:46:AC:1F:87:61:57:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380/32310430-1564-34ba-a911-45325d8fda20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380/6988a68c-ec5c-4d72-9ee1-27118af98380.crl
X509v3 Authority Key Identifier:
keyid:53:74:2B:1E:7F:79:D2:1A:D0:29:48:45:9A:93:5C:BA:54:EE:73:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380.cer
sbgp-ipAddrBlock: critical
IPv4:
69.41.192.0/20
97.107.48.0/20
IPv6:
2605:1100::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:69:54:ce:66:5d:02:b0:ff:cd:1b:9f:4a:c6:5f:f8:18:b1:
33:35:ce:9d:fb:31:1d:e9:9d:44:70:79:65:c6:6e:1a:53:72:
2a:fe:eb:d0:a9:e4:a0:dd:e9:e0:7f:af:9d:c2:a0:93:a8:45:
67:5f:4b:38:e5:73:9f:4c:e3:e1:1b:3c:4e:69:39:c6:aa:d4:
18:f1:d3:a4:96:62:aa:97:a5:1d:36:44:35:f1:f1:02:54:27:
a2:e7:ca:82:98:44:11:a3:59:3d:c1:57:ef:75:d7:f6:ad:4a:
c8:9a:5c:e7:76:48:db:f7:d2:ad:7a:23:b9:fb:0c:1e:b2:a7:
e2:28:46:52:7c:fe:94:b4:d1:16:7d:6f:70:50:01:50:62:dc:
1f:ae:fa:6e:34:21:08:f1:cc:81:49:cf:22:0b:7e:76:ca:72:
2c:55:b9:56:e0:fa:39:5d:b7:f7:e1:33:c6:04:62:13:e2:90:
5a:ef:c0:4c:54:f6:d7:8f:cd:9c:5e:42:05:e3:ae:fd:ba:0b:
6d:75:4a:c0:0e:89:8a:8c:71:8b:23:24:dc:06:26:5c:11:b3:
c3:4a:ff:e8:e8:24:ee:e7:1b:35:a0:87:18:fe:ea:5b:bb:1c:
b1:41:93:fa:c5:99:ad:59:5e:36:34:10:fc:8e:05:e3:ae:5b:
49:4d:b5:0d
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEjgBlTatho4+XFzk4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjk4OGE2OGMtZWM1Yy00ZDcyLTllZTEtMjcxMThhZjk4
MzgwMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk
OWYyMjE1OWEtNWY2Ny00NzQ4LWFkMWEtMWZmNGVjMTFmODNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgE1LsYbMHStLGneWRKt+lNcWWHkr5kIj7O1E
KcNPRc1l41XfZavgFdQtNz7V+m6A4yqkMZcoFEpAPkSAeQTeiK8BSGWSnI4gmA16
nRK22KZpgjicvxXoTfxsmglD0+PV91gwZ0BoHuKD1QB9Hr6bBT8ZK2ewG/FtWOP6
C00bwDQLYwnjYdea2AihkAnRoXYt+wcu/2LaGn2nyw27UN1gOAK1aZj971DYnwoT
Au1WybzG2LIydFJlILID1CVPdoEWEAT+uLiyeiltU6hJNF/Z3QReS6wdacv7ShRq
WMItMAfoQC00Beo56HZEv6tcSUQ5bdzPvfFvHLezMPjmY6IIgQIDAQABo4IDajCC
A2YwHQYDVR0OBBYEFHkRyAr6HexJtEXGpn9GrB+HYVeVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82OTg4
YTY4Yy1lYzVjLTRkNzItOWVlMS0yNzExOGFmOTgzODAvMzIzMTA0MzAtMTU2NC0z
NGJhLWE5MTEtNDUzMjVkOGZkYTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjk4OGE2OGMtZWM1Yy00ZDcyLTll
ZTEtMjcxMThhZjk4MzgwLzY5ODhhNjhjLWVjNWMtNGQ3Mi05ZWUxLTI3MTE4YWY5
ODM4MC5jcmwwHwYDVR0jBBgwFoAUU3QrHn950hrQKUhFmpNculTuczswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi82OTg4YTY4Yy1lYzVjLTRkNzItOWVlMS0yNzEx
OGFmOTgzODAuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQERSnAAwQE
YWswMA0EAgACMAcDBQAmBREAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJ9pVM5mXQKw/80bn0rGX/gYsTM1
zp37MR3pnURweWXGbhpTcir+69Cp5KDd6eB/r53CoJOoRWdfSzjlc59M4+EbPE5p
Ocaq1Bjx06SWYqqXpR02RDXx8QJUJ6LnyoKYRBGjWT3BV+911/atSsiaXOd2SNv3
0q16I7n7DB6yp+IoRlJ8/pS00RZ9b3BQAVBi3B+u+m40IQjxzIFJzyILfnbKcixV
uVbg+jldt/fhM8YEYhPikFrvwExU9tePzZxeQgXjrv26C211SsAOiYqMcYsjJNwG
JlwRs8NK/+joJO7nGzWghxj+6lu7HLFBk/rFma1ZXjY0EPyOBeOuW0lNtQ0=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:50:45 2025 by rpki-client