Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c9b8f0b1-802e-32fc-a9ce-8a216a959966.roa
File: c9b8f0b1-802e-32fc-a9ce-8a216a959966.roa (raw, json)
Hash identifier: Ijp+9E0HEDJfotWsQXBS5oqgcYAK+ytJU6RSEtY0Obk=
Subject key identifier: EA:7C:75:64:F2:A7:B8:DB:49:7C:EB:4A:FD:EA:3A:6B:C4:85:38:75
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C84BD99B406EF0684DCB6180
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c9b8f0b1-802e-32fc-a9ce-8a216a959966.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 15169
IP address blocks: 74.125.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:d9:9b:40:6e:f0:68:4d:cb:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=24b54e78-eb3e-4469-ba26-31e22e31b2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8d:32:b2:61:66:b2:8f:bc:33:2c:f0:11:11:
7a:9a:28:22:dc:01:c8:8c:49:b4:3b:52:22:ee:39:
3a:ea:e7:24:c4:91:7e:c0:01:ac:c6:9d:5d:81:19:
86:be:2e:f9:b7:fe:cc:62:5d:5e:93:86:c9:49:a2:
41:43:07:fe:fe:f4:93:b5:b0:fc:c7:03:2a:0c:7a:
75:3d:3a:cf:31:ad:ab:83:40:da:21:7e:9e:26:7b:
e6:96:2a:a8:61:da:f3:e4:73:f8:31:e5:0d:6d:a8:
b5:04:72:65:a3:aa:6f:57:4a:99:37:a5:3b:55:87:
e2:e6:cc:dc:7d:26:6c:b3:8e:85:9e:2f:53:5a:a1:
06:10:79:62:05:6b:00:c0:70:8a:df:e0:48:6e:55:
ac:7a:65:88:81:6f:e5:1f:3f:be:c8:bb:55:e0:3b:
75:22:38:fa:cd:ff:3a:56:91:35:96:f6:f6:6b:fe:
cb:71:1e:f4:2c:bc:7e:9e:64:7d:62:21:7d:db:00:
9a:ad:dd:0a:ff:f4:d7:e6:b6:4e:6d:fb:d3:3e:3d:
cd:45:bc:b9:4d:3e:53:dc:d7:d0:20:a6:38:61:97:
f8:9a:dc:a0:90:2d:6c:31:d4:59:ff:e7:8b:41:78:
c9:0a:06:05:b6:74:f1:f5:35:80:65:67:7a:fc:25:
53:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7C:75:64:F2:A7:B8:DB:49:7C:EB:4A:FD:EA:3A:6B:C4:85:38:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c9b8f0b1-802e-32fc-a9ce-8a216a959966.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:e6:a0:51:3d:fb:29:eb:b4:94:66:0c:9b:18:d0:ab:be:bf:
c9:d3:18:3c:60:d9:3f:2a:99:67:a3:e9:34:ac:f2:34:32:0e:
47:ea:04:a9:b6:31:e5:85:ac:97:9e:cc:61:bf:db:99:d3:73:
46:2d:ff:0b:16:e7:e0:ea:95:d3:4b:0a:e3:ac:ce:e2:9a:c7:
04:5b:4f:12:18:da:c0:2d:4b:27:a3:9b:ec:f4:e8:c8:a7:de:
37:81:7f:9f:85:ff:ac:dd:45:af:37:0a:02:fe:c1:fd:99:3b:
ad:f4:67:b4:10:72:e8:ac:92:85:cf:cb:62:b6:f6:ad:1f:f2:
97:6c:d3:8b:88:e2:4d:cb:2c:26:a6:5b:5d:d1:22:4d:fa:99:
3f:17:06:e6:34:62:07:79:f8:14:78:7f:c1:11:73:50:be:da:
23:89:c9:01:7d:77:31:41:f4:95:70:89:73:50:0d:af:bf:b9:
20:3d:04:f4:f7:3f:e7:b6:13:13:d0:a9:5b:d7:fa:91:35:3e:
02:e0:2d:8a:d7:f5:3b:40:bd:8f:6f:7a:11:4b:0e:fa:11:5e:
0a:0e:91:2c:30:4f:4d:fe:d9:05:82:05:79:24:50:7b:42:55:
80:77:8e:ae:60:8a:e7:06:0d:b2:c7:66:0a:8f:06:a7:a7:f7:
e0:1e:1d:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS9mbQG7waE3LYYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
MjRiNTRlNzgtZWIzZS00NDY5LWJhMjYtMzFlMjJlMzFiMmNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI0ysmFmso+8MyzwERF6migi3AHIjEm0O1Ii
7jk66uckxJF+wAGsxp1dgRmGvi75t/7MYl1ek4bJSaJBQwf+/vSTtbD8xwMqDHp1
PTrPMa2rg0DaIX6eJnvmliqoYdrz5HP4MeUNbai1BHJlo6pvV0qZN6U7VYfi5szc
fSZss46Fni9TWqEGEHliBWsAwHCK3+BIblWsemWIgW/lHz++yLtV4Dt1Ijj6zf86
VpE1lvb2a/7LcR70LLx+nmR9YiF92wCard0K//TX5rZObfvTPj3NRby5TT5T3NfQ
IKY4YZf4mtygkC1sMdRZ/+eLQXjJCgYFtnTx9TWAZWd6/CVTqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOp8dWTyp7jbSXzrSv3qOmvEhTh1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzliOGYwYjEtODAyZS0z
MmZjLWE5Y2UtOGEyMTZhOTU5OTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESn2wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJjmoFE9+ynrtJRmDJsY0Ku+v8nTGDxg2T8qmWej6TSs8jQyDkfqBKm2
MeWFrJeezGG/25nTc0Yt/wsW5+DqldNLCuOszuKaxwRbTxIY2sAtSyejm+z06Min
3jeBf5+F/6zdRa83CgL+wf2ZO630Z7QQcuiskoXPy2K29q0f8pds04uI4k3LLCam
W13RIk36mT8XBuY0Ygd5+BR4f8ERc1C+2iOJyQF9dzFB9JVwiXNQDa+/uSA9BPT3
P+e2ExPQqVvX+pE1PgLgLYrX9TtAvY9vehFLDvoRXgoOkSwwT03+2QWCBXkkUHtC
VYB3jq5giucGDbLHZgqPBqen9+AeHe8=
-----END CERTIFICATE-----
Generated at Fri Apr 4 08:27:16 2025 by rpki-client