Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/cadfb715-8e26-3e18-83e8-8fb22e97789c.roa
File: cadfb715-8e26-3e18-83e8-8fb22e97789c.roa (raw, json)
Hash identifier: R5bXwQM3VarbwXNSBLJmdTmquzkgN6ZwZwey6sSkm/g=
Subject key identifier: BA:E1:5B:D7:37:A0:55:C3:AD:F9:7F:F7:33:BB:48:22:B6:F1:F7:69
Certificate issuer: /CN=a920645f-6928-416c-87e9-a0135e5720e4
Certificate serial: 010D0C9F432858492CAE807822C28EA444B2A900
Authority key identifier: 0E:7A:36:95:23:AE:89:31:10:84:05:B7:7D:52:6F:5F:91:94:48:29
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/cadfb715-8e26-3e18-83e8-8fb22e97789c.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 13657
IP address blocks: 67.215.192.0/20 maxlen: 24
104.242.0.0/17 maxlen: 24
216.235.0.0/20 maxlen: 24
2001:4900::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:80:78:22:c2:8e:a4:44:b2:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a920645f-6928-416c-87e9-a0135e5720e4
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=4d1d9b28-b71c-45d6-8a44-4d63a1443d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b1:fa:35:1d:b7:f6:df:93:48:14:a8:71:2a:
b8:41:44:2d:bc:07:c3:5b:5b:d0:d8:4f:d2:7c:7a:
4d:cc:de:ba:f6:e8:03:4f:30:60:fc:92:c1:2c:0b:
c9:0f:e1:6e:04:2b:21:fc:55:ba:eb:f1:6e:3d:92:
8f:1c:6c:ad:da:63:d3:9c:e5:1d:06:dc:e8:b2:a1:
72:dd:c5:0e:d2:69:ae:b7:24:42:34:1b:29:f1:6e:
af:df:23:3a:73:31:1b:fe:c6:b4:86:ee:8e:6c:c4:
82:d3:6a:64:e8:6f:4a:eb:aa:6b:10:41:81:71:11:
1f:53:bb:6a:d5:18:4e:7e:9a:10:b5:af:34:fe:16:
30:fa:d1:1b:bf:80:56:41:eb:66:8a:14:39:ca:8c:
17:28:e4:6e:6f:ce:80:58:12:49:06:46:60:50:2a:
94:ce:91:2c:d4:ef:55:e4:b2:4a:45:c2:28:55:87:
1e:53:4c:45:4a:c8:ef:e1:d2:67:1b:16:96:f9:5d:
55:71:56:3d:7a:38:57:29:49:90:41:ca:fa:2c:7d:
5c:75:6d:82:65:8b:56:88:b7:19:54:37:54:f0:1e:
a9:f5:46:ce:b9:3f:ca:20:6b:c3:2c:25:bb:3e:60:
c0:8a:5c:83:53:a0:8b:b0:15:18:81:39:d4:84:26:
0b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E1:5B:D7:37:A0:55:C3:AD:F9:7F:F7:33:BB:48:22:B6:F1:F7:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/cadfb715-8e26-3e18-83e8-8fb22e97789c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/a920645f-6928-416c-87e9-a0135e5720e4.crl
X509v3 Authority Key Identifier:
keyid:0E:7A:36:95:23:AE:89:31:10:84:05:B7:7D:52:6F:5F:91:94:48:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4.cer
sbgp-ipAddrBlock: critical
IPv4:
67.215.192.0/20
104.242.0.0/17
216.235.0.0/20
IPv6:
2001:4900::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:44:29:dd:44:f5:0a:20:81:6f:a6:76:ab:b9:f6:d1:0c:0c:
01:1e:8f:bb:3c:52:e7:5f:4e:4c:49:bc:01:e4:c7:e0:ce:43:
61:f8:97:ab:04:a5:eb:0c:0e:59:d7:b0:b3:35:eb:d1:c9:ab:
7b:75:4a:d3:1f:b3:58:99:0a:28:4b:e0:df:12:d0:65:fe:74:
75:61:fd:91:6f:d2:c9:42:d5:5d:2a:ee:67:29:2d:82:bd:76:
6d:ea:92:a0:fa:7b:c4:9c:ca:58:d3:6f:8b:f1:6b:f5:a0:ae:
64:db:45:0f:33:b3:41:c3:41:98:fa:7b:e0:f7:ff:78:56:7c:
dc:9c:1a:67:96:96:8b:6b:48:f9:c3:3a:5a:fb:59:26:65:ce:
6e:e9:d9:d2:c2:c2:ae:9b:cc:34:58:b9:5f:be:a4:8c:36:ac:
c2:33:1f:6b:66:72:2a:09:35:f4:85:a9:07:9b:da:c5:ee:e2:
2b:c4:e9:ca:a6:0f:22:7f:51:60:58:05:d8:d6:00:d9:06:6f:
9b:16:81:aa:56:19:2e:4d:db:b2:fb:1d:75:b9:b5:14:c5:50:
7a:c0:f5:89:ff:26:58:55:99:60:2b:2b:80:76:af:c8:2c:80:
30:c5:26:47:2c:10:b6:b2:60:44:7b:f4:66:64:d6:f1:13:55:
5e:2b:91:24
-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEksroB4IsKOpESyqQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTkyMDY0NWYtNjkyOC00MTZjLTg3ZTktYTAxMzVlNTcy
MGU0MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NGQxZDliMjgtYjcxYy00NWQ2LThhNDQtNGQ2M2ExNDQzZDgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbH6NR239t+TSBSocSq4QUQtvAfDW1vQ2E/S
fHpNzN669ugDTzBg/JLBLAvJD+FuBCsh/FW66/FuPZKPHGyt2mPTnOUdBtzosqFy
3cUO0mmutyRCNBsp8W6v3yM6czEb/sa0hu6ObMSC02pk6G9K66prEEGBcREfU7tq
1RhOfpoQta80/hYw+tEbv4BWQetmihQ5yowXKORub86AWBJJBkZgUCqUzpEs1O9V
5LJKRcIoVYceU0xFSsjv4dJnGxaW+V1VcVY9ejhXKUmQQcr6LH1cdW2CZYtWiLcZ
VDdU8B6p9UbOuT/KIGvDLCW7PmDAilyDU6CLsBUYgTnUhCYLzwIDAQABo4IDcDCC
A2wwHQYDVR0OBBYEFLrhW9c3oFXDrfl/9zO7SCK28fdpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hOTIw
NjQ1Zi02OTI4LTQxNmMtODdlOS1hMDEzNWU1NzIwZTQvY2FkZmI3MTUtOGUyNi0z
ZTE4LTgzZTgtOGZiMjJlOTc3ODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTkyMDY0NWYtNjkyOC00MTZjLTg3
ZTktYTAxMzVlNTcyMGU0L2E5MjA2NDVmLTY5MjgtNDE2Yy04N2U5LWEwMTM1ZTU3
MjBlNC5jcmwwHwYDVR0jBBgwFoAUDno2lSOuiTEQhAW3fVJvX5GUSCkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hOTIwNjQ1Zi02OTI4LTQxNmMtODdlOS1hMDEz
NWU1NzIwZTQuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEQ9fAAwQH
aPIAAwQE2OsAMA0EAgACMAcDBQAgAUkAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIZEKd1E9QoggW+mdqu5
9tEMDAEej7s8UudfTkxJvAHkx+DOQ2H4l6sEpesMDlnXsLM169HJq3t1StMfs1iZ
CihL4N8S0GX+dHVh/ZFv0slC1V0q7mcpLYK9dm3qkqD6e8ScyljTb4vxa/WgrmTb
RQ8zs0HDQZj6e+D3/3hWfNycGmeWlotrSPnDOlr7WSZlzm7p2dLCwq6bzDRYuV++
pIw2rMIzH2tmcioJNfSFqQeb2sXu4ivE6cqmDyJ/UWBYBdjWANkGb5sWgapWGS5N
27L7HXW5tRTFUHrA9Yn/JlhVmWArK4B2r8gsgDDFJkcsELayYER79GZk1vETVV4r
kSQ=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:33:27 2025 by rpki-client