Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/90cfd75a-03e8-3bf2-be07-d7214ee8b073.roa
File: 90cfd75a-03e8-3bf2-be07-d7214ee8b073.roa (raw, json)
Hash identifier: kKW90Ct8kIrJItMgA/IESBk2j6F47M72nz0mSrYJYXY=
Subject key identifier: 17:14:37:9A:C7:7D:5D:7D:3C:6E:D0:1C:EC:9F:28:40:5B:F6:8A:0F
Certificate issuer: /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
Certificate serial: 010D0C9F432858493673BE75E105529450ABBE80
Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/90cfd75a-03e8-3bf2-be07-d7214ee8b073.roa
Signing time: Mon 17 Mar 2025 01:00:37 +0000
ROA not before: Mon 17 Mar 2025 01:00:37 +0000
ROA not after: Sun 15 Jun 2025 01:00:37 +0000
asID: 8011
IP address blocks: 89.192.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:36:73:be:75:e1:05:52:94:50:ab:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
Validity
Not Before: Mar 17 01:00:37 2025 GMT
Not After : Jun 15 01:00:37 2025 GMT
Subject: CN=769830cb-3682-44e1-82d1-c38aaf6c9954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8e:29:1c:b4:40:81:e4:48:12:e2:a6:bf:56:
d2:cc:8d:8f:5f:76:f5:bd:5c:b3:8f:59:34:41:3f:
b3:67:6a:b2:b1:f7:76:82:2e:ea:7b:bd:9c:de:af:
c5:df:2d:16:88:25:8b:0a:a2:86:52:ba:23:3c:ed:
a8:4a:7e:3b:a8:22:67:b5:a1:53:b9:5f:00:63:c9:
dd:2d:f3:01:75:3b:1b:3d:0d:38:9a:e8:25:6d:f8:
84:53:9b:38:2d:8b:91:e5:2d:8b:93:64:74:b5:46:
a6:7e:0a:ec:9a:8e:8a:7e:15:dc:1d:2d:3a:6b:45:
20:a1:66:6b:83:1e:da:f2:85:9a:f4:49:11:31:8b:
d5:2f:b4:4a:d0:d6:66:a2:c7:95:be:13:81:ff:38:
db:98:80:37:f5:38:34:9d:a6:50:a6:9c:f7:b7:c6:
a6:5b:58:88:fb:ad:66:84:e3:b6:bd:6d:63:db:d3:
18:bc:2d:f2:80:02:5d:3e:b2:e8:d5:30:ee:6b:07:
40:21:94:13:14:5e:e2:d2:85:f1:da:83:40:27:62:
0d:55:aa:3c:8f:fe:c1:9e:97:71:df:5a:a9:c9:34:
6f:57:70:25:42:a2:21:f2:f5:2a:3a:83:94:89:37:
9c:d6:0d:58:84:0c:97:d9:47:27:df:35:84:1d:4b:
0a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:14:37:9A:C7:7D:5D:7D:3C:6E:D0:1C:EC:9F:28:40:5B:F6:8A:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/90cfd75a-03e8-3bf2-be07-d7214ee8b073.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl
X509v3 Authority Key Identifier:
keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
sbgp-ipAddrBlock: critical
IPv4:
89.192.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:d2:92:66:bd:11:c1:6b:6d:ca:5d:a0:ce:f6:dc:34:4e:01:
81:b2:24:02:4f:94:5c:37:48:84:74:05:5d:a6:d2:22:ec:b1:
22:10:8b:9e:cc:4c:a1:c3:2e:18:9b:1d:21:ef:f8:ae:92:cb:
c0:56:80:48:d9:b3:45:82:10:b4:46:39:f0:74:66:c9:71:f8:
c9:f4:41:fb:71:07:0d:ad:23:97:ea:46:e5:84:9d:0b:10:69:
60:0a:26:f2:e7:8c:e4:e0:c3:66:e6:50:28:3c:6e:e4:84:d9:
9f:f8:ce:ae:09:7d:bd:63:95:92:14:0d:5c:f6:4e:be:1e:77:
2f:c1:80:26:5e:25:4d:e1:8f:71:97:64:aa:ab:1d:92:01:92:
41:59:12:df:65:9d:d9:e0:fe:f1:c5:81:71:04:f9:5c:a3:29:
43:e5:29:70:aa:1b:93:ba:65:79:3a:a0:a3:a8:5d:ac:76:b5:
86:b6:52:a8:95:de:58:ec:83:77:3a:42:39:d6:8d:5b:8b:79:
67:b8:38:d8:af:1f:11:f9:58:6e:0c:9f:27:11:d9:eb:09:a5:
41:d5:94:be:69:51:12:d6:96:51:41:ff:cd:09:ca:6f:05:8d:
c8:5f:ce:49:bf:1b:e8:46:b1:bc:ea:9d:ab:ba:36:df:09:fe:
fa:6d:b2:7c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEk2c7514QVSlFCrvoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzdmZDI1YTItMzA0MS00MzFkLWE2YTktYzQwOWI0Mjgz
NWExMB4XDTI1MDMxNzAxMDAzN1oXDTI1MDYxNTAxMDAzN1owLzEtMCsGA1UEAxMk
NzY5ODMwY2ItMzY4Mi00NGUxLTgyZDEtYzM4YWFmNmM5OTU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Y4pHLRAgeRIEuKmv1bSzI2PX3b1vVyzj1k0
QT+zZ2qysfd2gi7qe72c3q/F3y0WiCWLCqKGUrojPO2oSn47qCJntaFTuV8AY8nd
LfMBdTsbPQ04muglbfiEU5s4LYuR5S2Lk2R0tUamfgrsmo6KfhXcHS06a0UgoWZr
gx7a8oWa9EkRMYvVL7RK0NZmoseVvhOB/zjbmIA39Tg0naZQppz3t8amW1iI+61m
hOO2vW1j29MYvC3ygAJdPrLo1TDuawdAIZQTFF7i0oXx2oNAJ2INVao8j/7Bnpdx
31qpyTRvV3AlQqIh8vUqOoOUiTec1g1YhAyX2Ucn3zWEHUsKxQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBcUN5rHfV19PG7QHOyfKEBb9ooPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jN2Zk
MjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5YjQyODM1YTEvOTBjZmQ3NWEtMDNlOC0z
YmYyLWJlMDctZDcyMTRlZThiMDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzdmZDI1YTItMzA0MS00MzFkLWE2
YTktYzQwOWI0MjgzNWExL2M3ZmQyNWEyLTMwNDEtNDMxZC1hNmE5LWM0MDliNDI4
MzVhMS5jcmwwHwYDVR0jBBgwFoAUNXEKw9dxeaFzg95nCkio4CDv6IUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9jN2ZkMjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5
YjQyODM1YTEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCWcAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAk9KSZr0RwWttyl2gzvbcNE4BgbIkAk+UXDdIhHQFXabSIuyxIhCLnsxM
ocMuGJsdIe/4rpLLwFaASNmzRYIQtEY58HRmyXH4yfRB+3EHDa0jl+pG5YSdCxBp
YAom8ueM5ODDZuZQKDxu5ITZn/jOrgl9vWOVkhQNXPZOvh53L8GAJl4lTeGPcZdk
qqsdkgGSQVkS32Wd2eD+8cWBcQT5XKMpQ+UpcKobk7pleTqgo6hdrHa1hrZSqJXe
WOyDdzpCOdaNW4t5Z7g42K8fEflYbgyfJxHZ6wmlQdWUvmlREtaWUUH/zQnKbwWN
yF/OSb8b6EaxvOqdq7o23wn++m2yfA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:22:20 2025 by rpki-client