Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a469cc42-d6cc-3a2b-8008-ca2a4a46f47b.roa
File: a469cc42-d6cc-3a2b-8008-ca2a4a46f47b.roa (raw, json)
Hash identifier: +fdA1l8jf/3rzjhMkPSmKdJRQspGfpMlw84St1JFePU=
Subject key identifier: 2C:76:29:61:A6:56:F9:7F:54:11:D2:34:67:A8:C9:14:66:3D:44:7B
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848F65BE0576C9723B39E8C6400
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a469cc42-d6cc-3a2b-8008-ca2a4a46f47b.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 24413
IP address blocks: 63.217.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:e0:57:6c:97:23:b3:9e:8c:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=757d2e32-951a-4524-ba45-b4c7ec777585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1f:85:18:70:e2:f5:f3:6c:2c:23:94:37:20:
85:1a:fa:e3:3e:af:60:b8:e7:7a:d3:ce:08:8a:b0:
f8:39:93:a2:f1:42:14:09:7c:e4:12:e2:fa:bf:3a:
c2:df:fd:c8:35:9a:a0:ef:e2:c4:0d:0e:23:27:7c:
f6:27:c0:91:5b:cf:4d:24:5d:0f:1c:02:ca:2c:52:
07:9d:53:a8:1d:30:04:bd:ed:f5:3b:19:df:ae:39:
43:08:a6:81:8e:14:50:4c:61:d0:de:80:ce:00:f1:
aa:a7:c2:c3:43:28:37:83:7e:17:9d:4a:e6:06:15:
bf:76:0c:5d:36:fd:e1:69:41:b0:4c:b3:4e:c4:54:
f6:6a:05:69:3e:2e:57:79:7a:3c:c5:56:b5:71:ca:
8e:4f:f1:49:8d:bb:2e:19:ab:21:91:fa:17:22:1a:
9a:b2:f0:6a:0e:4b:71:76:a7:51:f3:75:ff:79:64:
09:3f:36:0d:40:13:a8:ad:a7:04:9f:98:b4:8c:3b:
2e:47:f5:3e:40:3e:e5:f3:9c:5b:d0:9e:86:9c:08:
d6:63:ff:05:aa:69:f2:68:24:0e:8d:e5:e9:2b:89:
b2:65:af:2d:30:a3:87:9f:cf:80:98:84:a7:e0:97:
61:fb:bb:b1:eb:82:8e:3f:bd:5e:de:0f:db:75:1f:
f1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:76:29:61:A6:56:F9:7F:54:11:D2:34:67:A8:C9:14:66:3D:44:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a469cc42-d6cc-3a2b-8008-ca2a4a46f47b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
63.217.81.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:1b:72:b5:e6:c1:7c:d3:95:1a:a3:b2:2a:cd:cd:67:c2:fa:
bf:9f:a0:c9:7f:8a:c9:4a:9e:fd:6a:ad:70:0f:96:21:4d:4a:
e4:ec:a5:d6:45:6b:8b:19:06:ba:ef:3e:91:d0:3b:38:65:5d:
c7:21:23:95:d8:aa:36:60:64:59:39:ba:67:36:f1:8e:24:e5:
2c:63:64:e8:84:07:9d:28:ac:47:c5:59:51:63:3b:62:b1:83:
8d:15:e6:4d:ae:34:4f:85:4e:70:8c:24:c6:be:7e:2b:ac:51:
c2:e5:c0:ad:5b:29:5e:29:d8:4e:1c:91:ee:f7:7a:53:e1:56:
7c:ae:b4:dd:4a:1f:ae:ff:df:57:ed:97:f2:70:0b:13:14:ef:
00:50:8d:2d:79:21:0b:1f:6d:68:c0:d2:95:6f:c3:39:00:50:
d3:3e:80:00:e4:d5:50:52:44:32:ea:48:5e:8d:5e:00:50:78:
c4:06:28:90:76:5c:dd:0f:a7:fa:60:55:6a:42:e6:95:54:39:
72:23:bc:26:0b:88:b2:be:22:16:6e:06:a0:3f:21:57:15:8f:
9f:f3:c5:a9:93:b4:c5:28:53:66:87:e0:1b:6a:f2:90:e8:d7:
f7:52:4d:c4:21:87:77:aa:69:7b:13:30:81:e1:c8:36:dd:4b:
0f:9b:e3:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+BXbJcjs56MZAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw
YzQ4MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk
NzU3ZDJlMzItOTUxYS00NTI0LWJhNDUtYjRjN2VjNzc3NTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjB+FGHDi9fNsLCOUNyCFGvrjPq9guOd6084I
irD4OZOi8UIUCXzkEuL6vzrC3/3INZqg7+LEDQ4jJ3z2J8CRW89NJF0PHALKLFIH
nVOoHTAEve31OxnfrjlDCKaBjhRQTGHQ3oDOAPGqp8LDQyg3g34XnUrmBhW/dgxd
Nv3haUGwTLNOxFT2agVpPi5XeXo8xVa1ccqOT/FJjbsuGashkfoXIhqasvBqDktx
dqdR83X/eWQJPzYNQBOoracEn5i0jDsuR/U+QD7l85xb0J6GnAjWY/8FqmnyaCQO
jeXpK4myZa8tMKOHn8+AmISn4Jdh+7ux64KOP71e3g/bdR/xMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCx2KWGmVvl/VBHSNGeoyRRmPUR7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5
ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvYTQ2OWNjNDItZDZjYy0z
YTJiLTgwMDgtY2EyYTRhNDZmNDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm
MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy
MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl
ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP9lRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC8bcrXmwXzTlRqjsirNzWfC+r+foMl/islKnv1qrXAPliFNSuTspdZF
a4sZBrrvPpHQOzhlXcchI5XYqjZgZFk5umc28Y4k5SxjZOiEB50orEfFWVFjO2Kx
g40V5k2uNE+FTnCMJMa+fiusUcLlwK1bKV4p2E4cke73elPhVnyutN1KH67/31ft
l/JwCxMU7wBQjS15IQsfbWjA0pVvwzkAUNM+gADk1VBSRDLqSF6NXgBQeMQGKJB2
XN0Pp/pgVWpC5pVUOXIjvCYLiLK+IhZuBqA/IVcVj5/zxamTtMUoU2aH4Btq8pDo
1/dSTcQhh3eqaXsTMIHhyDbdSw+b41U=
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:34:48 2025 by rpki-client