Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/cde0b382-acbd-3f3d-9670-8bebdcc9bdb4.roa
File: cde0b382-acbd-3f3d-9670-8bebdcc9bdb4.roa (raw, json)
Hash identifier: DkHBv4DCsHHwA/DN2EcLfmK6hnwIPXRRacRSskq+xMs=
Subject key identifier: 6A:DD:81:2D:49:D7:75:2A:87:F2:6B:DC:3A:63:29:7C:FE:F5:DD:FE
Certificate issuer: /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
Certificate serial: 010D0C9F432858493673BE9F9BD87598F3D456A0
Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/cde0b382-acbd-3f3d-9670-8bebdcc9bdb4.roa
Signing time: Mon 17 Mar 2025 01:00:37 +0000
ROA not before: Mon 17 Mar 2025 01:00:37 +0000
ROA not after: Sun 15 Jun 2025 01:00:37 +0000
asID: 8011
IP address blocks: 65.62.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:36:73:be:9f:9b:d8:75:98:f3:d4:56:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
Validity
Not Before: Mar 17 01:00:37 2025 GMT
Not After : Jun 15 01:00:37 2025 GMT
Subject: CN=00cfa414-8f30-4a1d-8039-1bdf94c0adfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a6:ee:15:1e:d3:f4:cc:25:c7:b4:02:a9:6a:
4e:8a:96:8c:a3:da:8a:d6:df:76:9c:39:04:b7:49:
4d:13:31:c1:63:6a:ec:04:3c:56:d0:48:b0:5b:61:
c4:9f:20:0f:9e:3d:be:66:25:37:b7:ab:40:b8:18:
f9:25:df:16:17:1c:f8:d2:0b:55:6d:b1:a1:eb:0f:
93:88:6f:d8:c2:68:2d:bf:ef:5c:23:63:4b:1c:47:
42:c8:d5:4e:73:7c:7d:ec:cd:76:de:55:39:7e:5b:
74:3f:5e:07:88:a6:24:ea:59:bb:ce:df:90:ec:0a:
68:5f:41:2a:45:9b:0e:a4:c9:e5:3a:48:0c:ec:81:
4b:14:0a:07:3f:e7:7b:9a:6c:a8:01:54:99:16:42:
bc:f4:35:4c:5d:7e:de:fc:85:e6:11:97:90:c2:d0:
cf:60:20:18:92:b2:6f:a3:cf:3e:5e:f4:a3:d3:54:
8f:a4:e3:ec:dc:1b:b1:67:33:43:20:eb:35:7c:f8:
a7:e6:e7:fb:36:5c:5d:76:ca:70:22:67:15:69:cf:
73:ad:6d:d2:c5:6b:9e:60:b0:9e:86:61:00:75:c8:
cb:68:fb:90:6d:c1:77:98:6c:49:e8:cc:4e:a0:ef:
19:52:19:4a:4f:fb:87:69:71:32:48:af:ee:4a:49:
53:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DD:81:2D:49:D7:75:2A:87:F2:6B:DC:3A:63:29:7C:FE:F5:DD:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/cde0b382-acbd-3f3d-9670-8bebdcc9bdb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl
X509v3 Authority Key Identifier:
keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
sbgp-ipAddrBlock: critical
IPv4:
65.62.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:87:96:a9:82:9c:1c:e2:0a:2d:10:f1:6b:e2:c0:35:7f:94:
1e:32:92:47:8d:e4:76:f0:db:62:86:57:8b:cd:17:03:2a:9a:
17:d4:e1:68:72:25:79:3c:e1:e6:bb:bf:0c:14:a2:8d:ea:21:
c4:18:ab:2a:7d:25:fd:be:d1:5d:c5:29:c5:b5:ed:d4:ef:05:
45:d6:0e:26:e6:b2:e7:bd:8e:41:06:65:3a:31:ca:e5:00:db:
42:2c:06:ef:c6:22:e4:14:d7:e4:8b:68:a9:ec:d3:51:b6:bf:
df:49:e7:6c:42:f3:5b:68:e5:9c:84:8e:ba:9e:1f:c9:05:06:
87:cd:f9:46:20:c2:4f:66:81:40:1a:ea:70:bb:bb:f0:f6:fd:
48:c3:4a:3c:ff:ff:67:ce:38:f0:20:e6:66:0b:73:b7:0c:ad:
58:89:80:12:19:83:52:c1:42:87:34:aa:79:f1:32:af:35:03:
67:40:d7:43:a8:8b:6e:bb:17:ea:bb:ef:e7:32:ef:93:12:d0:
ba:01:86:3f:7f:94:e5:64:57:5f:60:0b:e2:f0:c8:22:d2:29:
32:6f:ce:33:b6:de:05:c4:18:a7:50:38:cd:be:aa:67:7c:ec:
ad:82:a5:1a:68:6a:f9:85:f6:62:42:ef:e4:b2:89:dc:31:8e:
40:89:bc:7d
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEk2c76fm9h1mPPUVqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzdmZDI1YTItMzA0MS00MzFkLWE2YTktYzQwOWI0Mjgz
NWExMB4XDTI1MDMxNzAxMDAzN1oXDTI1MDYxNTAxMDAzN1owLzEtMCsGA1UEAxMk
MDBjZmE0MTQtOGYzMC00YTFkLTgwMzktMWJkZjk0YzBhZGZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqbuFR7T9Mwlx7QCqWpOipaMo9qK1t92nDkE
t0lNEzHBY2rsBDxW0EiwW2HEnyAPnj2+ZiU3t6tAuBj5Jd8WFxz40gtVbbGh6w+T
iG/Ywmgtv+9cI2NLHEdCyNVOc3x97M123lU5flt0P14HiKYk6lm7zt+Q7ApoX0Eq
RZsOpMnlOkgM7IFLFAoHP+d7mmyoAVSZFkK89DVMXX7e/IXmEZeQwtDPYCAYkrJv
o88+XvSj01SPpOPs3BuxZzNDIOs1fPin5uf7NlxddspwImcVac9zrW3SxWueYLCe
hmEAdcjLaPuQbcF3mGxJ6MxOoO8ZUhlKT/uHaXEySK/uSklT9wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGrdgS1J13Uqh/Jr3DpjKXz+9d3+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jN2Zk
MjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5YjQyODM1YTEvY2RlMGIzODItYWNiZC0z
ZjNkLTk2NzAtOGJlYmRjYzliZGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzdmZDI1YTItMzA0MS00MzFkLWE2
YTktYzQwOWI0MjgzNWExL2M3ZmQyNWEyLTMwNDEtNDMxZC1hNmE5LWM0MDliNDI4
MzVhMS5jcmwwHwYDVR0jBBgwFoAUNXEKw9dxeaFzg95nCkio4CDv6IUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9jN2ZkMjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5
YjQyODM1YTEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBQT4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAgYeWqYKcHOIKLRDxa+LANX+UHjKSR43kdvDbYoZXi80XAyqaF9ThaHIl
eTzh5ru/DBSijeohxBirKn0l/b7RXcUpxbXt1O8FRdYOJuay572OQQZlOjHK5QDb
QiwG78Yi5BTX5ItoqezTUba/30nnbELzW2jlnISOup4fyQUGh835RiDCT2aBQBrq
cLu78Pb9SMNKPP//Z8448CDmZgtztwytWImAEhmDUsFChzSqefEyrzUDZ0DXQ6iL
brsX6rvv5zLvkxLQugGGP3+U5WRXX2AL4vDIItIpMm/OM7beBcQYp1A4zb6qZ3zs
rYKlGmhq+YX2YkLv5LKJ3DGOQIm8fQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:15:01 2025 by rpki-client