Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4ed2bc0-90b8-394f-a948-4ee35ff19e6d.roa
File: d4ed2bc0-90b8-394f-a948-4ee35ff19e6d.roa (raw, json)
Hash identifier: 5XKRGS9wSZcaJNHTAfVBicsWeiHJsqRhzEep6A1mc+U=
Subject key identifier: A0:3D:04:7C:65:A7:D6:95:3D:4D:ED:64:88:67:72:FB:0B:13:64:B7
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C84C1DE7A03BBDC38F531880
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4ed2bc0-90b8-394f-a948-4ee35ff19e6d.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 15169
IP address blocks: 74.125.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4c:1d:e7:a0:3b:bd:c3:8f:53:18:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=3f06d416-95c4-40d4-8c63-8343e9f98492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:67:c2:e2:10:7b:0c:8e:70:41:d6:0a:36:ff:
53:66:bd:50:52:73:42:95:7f:94:e8:41:89:ef:12:
24:69:69:18:bf:ce:3d:a8:2f:f1:09:5a:d4:85:5e:
97:fd:35:49:a7:93:59:cf:c2:0b:97:dd:88:3d:74:
4a:2c:c0:07:cf:4f:74:e2:29:07:3b:51:40:26:da:
c9:b0:d3:d1:0d:ed:43:09:1e:37:34:39:d9:d5:3b:
3e:79:00:18:b5:1e:2b:6a:da:48:d8:1c:c9:02:87:
4c:3f:04:3c:de:15:d3:d0:2d:6b:78:d2:42:10:20:
72:57:c9:fe:d2:51:b1:5d:0e:32:c5:07:c4:cc:38:
87:a1:11:12:be:df:dc:e3:62:b7:d9:d5:6b:9c:b2:
ee:1f:f1:20:13:cb:53:61:85:78:50:2d:ba:a3:eb:
d2:cb:4c:09:65:ff:ef:d0:5c:e5:8f:dd:7d:a3:cf:
89:1a:5c:76:03:4b:b3:ae:2f:3c:b6:70:7e:2c:04:
ba:72:97:68:b5:1c:17:29:2a:1c:7d:7d:ec:11:47:
a6:7d:e5:80:89:be:d4:7a:ea:ca:cb:4d:45:8e:82:
d4:42:55:00:0c:b7:bc:ee:19:35:4c:7a:94:a6:df:
c3:af:5e:af:b1:55:e1:e1:2a:74:40:f7:71:ab:7d:
60:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3D:04:7C:65:A7:D6:95:3D:4D:ED:64:88:67:72:FB:0B:13:64:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4ed2bc0-90b8-394f-a948-4ee35ff19e6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:c2:1c:8a:55:56:54:68:b9:2e:70:91:32:29:fb:30:d8:a5:
be:e1:ec:e1:c3:fb:a6:51:b4:fe:d8:50:53:e3:97:d4:84:43:
a1:6f:17:e3:e9:bd:44:7e:2e:cf:68:4b:71:8e:8c:05:72:18:
ba:c3:be:3c:bd:94:b8:cb:cc:0b:60:7a:8e:0b:cf:c4:f1:6d:
f6:11:57:32:b4:47:f4:97:a0:4d:be:c9:61:4f:7c:c2:d3:47:
6f:c7:06:c9:29:f2:d1:27:43:0a:81:6c:b9:3b:88:40:d6:2d:
c9:71:6d:0c:e4:ad:cc:c5:5c:d6:3d:68:e9:5c:10:ee:85:d3:
e7:d8:82:37:f0:3a:41:d2:35:5f:b0:0b:bc:d1:37:c9:4e:27:
b1:33:3e:1e:b6:dd:ba:26:12:f6:d3:93:63:8f:4c:fd:1b:0e:
5f:f7:8c:fb:7f:1a:e4:d0:d8:67:9e:11:1a:46:11:6d:d2:8b:
ca:99:33:22:a9:f4:b5:f5:6a:08:4e:62:f8:b2:cb:de:55:33:
8e:33:43:5f:1a:b2:82:e4:42:18:d8:19:e2:f2:1e:d9:a8:df:
3c:35:f8:44:51:ca:d7:24:44:8a:85:3e:b2:03:6f:ba:46:48:
80:a3:9a:a6:a4:11:97:2f:f9:5e:74:2d:a8:db:06:89:11:3c:
ab:11:26:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITB3noDu9w49TGIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
M2YwNmQ0MTYtOTVjNC00MGQ0LThjNjMtODM0M2U5Zjk4NDkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWfC4hB7DI5wQdYKNv9TZr1QUnNClX+U6EGJ
7xIkaWkYv849qC/xCVrUhV6X/TVJp5NZz8ILl92IPXRKLMAHz0904ikHO1FAJtrJ
sNPRDe1DCR43NDnZ1Ts+eQAYtR4ratpI2BzJAodMPwQ83hXT0C1reNJCECByV8n+
0lGxXQ4yxQfEzDiHoRESvt/c42K32dVrnLLuH/EgE8tTYYV4UC26o+vSy0wJZf/v
0Fzlj919o8+JGlx2A0uzri88tnB+LAS6cpdotRwXKSocfX3sEUemfeWAib7UeurK
y01FjoLUQlUADLe87hk1THqUpt/Dr16vsVXh4Sp0QPdxq31gSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKA9BHxlp9aVPU3tZIhncvsLE2S3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDRlZDJiYzAtOTBiOC0z
OTRmLWE5NDgtNGVlMzVmZjE5ZTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn0YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE7CHIpVVlRouS5wkTIp+zDYpb7h7OHD+6ZRtP7YUFPjl9SEQ6FvF+Pp
vUR+Ls9oS3GOjAVyGLrDvjy9lLjLzAtgeo4Lz8TxbfYRVzK0R/SXoE2+yWFPfMLT
R2/HBskp8tEnQwqBbLk7iEDWLclxbQzkrczFXNY9aOlcEO6F0+fYgjfwOkHSNV+w
C7zRN8lOJ7EzPh623bomEvbTk2OPTP0bDl/3jPt/GuTQ2GeeERpGEW3Si8qZMyKp
9LX1aghOYviyy95VM44zQ18asoLkQhjYGeLyHtmo3zw1+ERRytckRIqFPrIDb7pG
SICjmqakEZcv+V50LajbBokRPKsRJmw=
-----END CERTIFICATE-----
Generated at Fri Apr 4 08:25:10 2025 by rpki-client