Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d882c9dd-3234-34a8-8cc4-0d6f9903b764.roa
File: d882c9dd-3234-34a8-8cc4-0d6f9903b764.roa (raw, json)
Hash identifier: a1Zspd30M9TOhM8Z6Wl8I+VmOxAq4t4DEaCDdzp0zVE=
Subject key identifier: A3:3A:3C:C9:05:4A:A2:A5:81:EF:E5:39:35:4C:04:2F:F0:2A:B4:84
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C84BBC5F0035D899D41CF780
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d882c9dd-3234-34a8-8cc4-0d6f9903b764.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 15169
IP address blocks: 64.233.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:bc:5f:00:35:d8:99:d4:1c:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=2eecd3e5-f00c-4a52-8bb2-05b60266a5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b8:f6:41:13:ac:90:d2:f8:df:4d:b3:07:75:
f1:32:de:dc:63:e9:2e:56:ed:42:df:0e:43:2a:c9:
33:35:0d:c3:dd:67:4b:c4:50:f6:49:42:31:ec:1f:
80:a8:d6:85:99:bb:8c:80:64:6a:1f:02:c0:18:a3:
57:d9:53:aa:5b:e2:3c:21:18:a8:41:ab:b2:00:b8:
93:4c:0a:44:80:db:36:1a:42:20:7c:21:4f:89:d3:
63:7e:6e:e9:66:0f:b1:49:31:b0:b0:ef:3c:37:84:
24:b7:9f:92:ea:82:ed:66:e9:09:24:ef:87:6b:0b:
7e:ca:1e:cc:62:71:64:94:3d:af:26:d5:09:6f:72:
e0:46:c9:4f:c5:0b:c7:5e:b3:7f:39:7f:c8:9f:c9:
55:70:e7:36:60:3c:05:b4:3f:eb:2e:63:a3:81:e0:
8c:9c:8a:83:6a:30:1b:d1:a9:b4:6e:aa:3f:91:68:
90:17:50:63:a8:3c:e3:96:90:3c:58:24:fd:52:5a:
86:3b:d1:37:f6:37:97:c6:b8:cd:aa:a3:ac:f6:b4:
8b:e2:4c:54:15:e5:fd:bc:07:74:5c:fa:e7:7f:4e:
35:19:d9:ea:16:13:84:d7:c3:61:6c:bd:a5:c8:74:
53:76:24:d3:34:25:6d:f9:58:bc:d3:8e:71:0f:d7:
8e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3A:3C:C9:05:4A:A2:A5:81:EF:E5:39:35:4C:04:2F:F0:2A:B4:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d882c9dd-3234-34a8-8cc4-0d6f9903b764.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
64.233.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:ca:3e:b3:ca:6a:b4:af:52:40:ec:71:2f:4b:3c:2a:0f:72:
bb:c1:e8:fa:85:98:93:0d:74:71:81:34:4f:4f:ac:86:0e:b8:
cd:f0:8e:88:be:b7:9e:5b:98:8f:69:bd:24:b7:ef:74:53:b9:
05:dd:05:6c:b8:be:92:97:9b:3e:da:1e:3f:e1:cc:d2:15:90:
80:4b:9e:8f:f7:e8:c1:8a:15:70:c8:48:05:6a:74:ee:68:86:
61:e2:72:01:32:e7:c5:36:89:42:c0:9f:81:e3:98:91:9a:43:
92:f2:3d:0a:b4:08:72:68:83:b3:dd:f6:93:b2:0a:32:61:7f:
96:ee:89:24:dc:65:f9:4d:7e:57:d7:f3:c4:99:d1:7d:ba:a3:
a4:74:71:2e:84:49:10:e6:ea:b4:19:a4:0a:23:54:21:cf:71:
33:41:43:fd:48:11:31:79:15:9e:77:a0:8c:6f:fb:03:ca:48:
9d:43:b7:87:28:32:7c:f7:89:61:af:e7:89:64:12:eb:30:fe:
03:8e:fc:7d:3e:39:fe:97:3a:51:97:3e:4b:f5:af:27:45:fc:
32:ab:93:bd:16:d3:9a:65:8b:a4:e6:eb:75:7a:e0:a7:f9:c0:
6b:29:96:b3:4e:57:d8:a3:23:6f:74:fb:43:80:c8:42:d8:be:
d9:e3:d7:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS7xfADXYmdQc94AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
MmVlY2QzZTUtZjAwYy00YTUyLThiYjItMDViNjAyNjZhNWNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrj2QROskNL4302zB3XxMt7cY+kuVu1C3w5D
KskzNQ3D3WdLxFD2SUIx7B+AqNaFmbuMgGRqHwLAGKNX2VOqW+I8IRioQauyALiT
TApEgNs2GkIgfCFPidNjfm7pZg+xSTGwsO88N4Qkt5+S6oLtZukJJO+Hawt+yh7M
YnFklD2vJtUJb3LgRslPxQvHXrN/OX/In8lVcOc2YDwFtD/rLmOjgeCMnIqDajAb
0am0bqo/kWiQF1BjqDzjlpA8WCT9UlqGO9E39jeXxrjNqqOs9rSL4kxUFeX9vAd0
XPrnf041GdnqFhOE18NhbL2lyHRTdiTTNCVt+Vi8045xD9eOOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKM6PMkFSqKlge/lOTVMBC/wKrSEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDg4MmM5ZGQtMzIzNC0z
NGE4LThjYzQtMGQ2Zjk5MDNiNzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOmwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABXKPrPKarSvUkDscS9LPCoPcrvB6PqFmJMNdHGBNE9PrIYOuM3wjoi+
t55bmI9pvSS373RTuQXdBWy4vpKXmz7aHj/hzNIVkIBLno/36MGKFXDISAVqdO5o
hmHicgEy58U2iULAn4HjmJGaQ5LyPQq0CHJog7Pd9pOyCjJhf5buiSTcZflNflfX
88SZ0X26o6R0cS6ESRDm6rQZpAojVCHPcTNBQ/1IETF5FZ53oIxv+wPKSJ1Dt4co
Mnz3iWGv54lkEusw/gOO/H0+Of6XOlGXPkv1rydF/DKrk70W05pli6Tm63V64Kf5
wGsplrNOV9ijI290+0OAyELYvtnj19Q=
-----END CERTIFICATE-----
Generated at Fri Apr 4 08:26:16 2025 by rpki-client