Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/11aba94e-2b3f-32c9-8096-327b6498757c.roa
File: 11aba94e-2b3f-32c9-8096-327b6498757c.roa (raw, json)
Hash identifier: QGAeBKLcyqSZQl+0O75WVJKhaXoBQ1MjJ0uZkm+ZP+w=
Subject key identifier: 01:85:ED:E1:4B:72:13:B7:15:8D:0E:3A:CD:E0:8A:7A:FB:EA:52:7B
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926D90D75D57328009F1E80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/11aba94e-2b3f-32c9-8096-327b6498757c.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 54288
IP address blocks: 65.49.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:d9:0d:75:d5:73:28:00:9f:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=10fd1219-b14d-4d09-a913-7f88329175f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:21:a7:38:cc:23:d6:8b:0e:5f:7a:0b:17:c6:
f8:20:97:ba:83:2a:c3:19:02:fc:cd:8f:d8:ea:28:
86:65:c7:b8:b1:55:6d:6b:c1:6d:83:e3:2b:eb:a4:
b9:2f:a6:41:0e:e9:8a:ac:d8:7a:d8:73:4a:76:c2:
81:88:35:d4:5a:53:a7:e7:66:1a:ed:7a:f5:13:44:
df:b6:35:5a:7d:0b:82:da:89:3f:ff:77:50:7a:cc:
1f:ab:d9:15:0a:91:1a:ca:8d:b8:f6:db:95:5c:d5:
08:b3:8d:fb:b9:49:bc:de:e3:94:1c:68:5d:af:c0:
8c:b3:74:e9:3a:91:f5:a4:bf:35:1f:8c:f6:c4:13:
eb:c2:a3:b9:3d:7d:61:11:0c:d6:60:dc:b3:d6:f7:
c1:df:6b:55:67:ba:10:22:c5:da:e8:2c:7b:c4:60:
e8:b4:bb:aa:49:13:54:a8:93:65:4e:cc:54:f8:c6:
e3:45:77:57:e4:03:e9:00:c9:28:64:b4:8a:d6:46:
bc:01:bf:c7:51:59:08:41:5e:1a:92:60:13:25:3e:
d1:93:8a:5d:e9:bb:bf:33:98:b3:ab:87:69:1c:c4:
70:af:98:27:2b:6c:5b:89:91:38:d1:77:04:10:aa:
44:b5:9e:cf:2f:56:f7:b7:26:e7:0c:ba:9a:77:ce:
28:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:85:ED:E1:4B:72:13:B7:15:8D:0E:3A:CD:E0:8A:7A:FB:EA:52:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/11aba94e-2b3f-32c9-8096-327b6498757c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.41.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:93:c7:1c:ee:d7:24:21:b8:c6:80:96:92:e5:ad:5d:31:f8:
25:b9:f9:27:73:75:19:a1:9b:75:01:a4:3b:f7:6f:8f:b7:46:
2c:c4:a4:d7:4b:1f:d4:6d:55:6b:23:93:4e:f0:3a:7e:d5:af:
d5:74:48:2b:45:8d:fd:74:78:ad:6a:a6:5f:50:2f:5f:db:2b:
a3:d5:e9:50:c3:16:77:f4:9c:79:93:0f:e7:8b:81:2a:ac:13:
ac:10:30:6a:fe:1a:f6:dd:45:b5:32:61:3c:49:e3:17:31:3d:
81:47:08:d8:52:3d:69:a3:56:b8:fd:63:32:17:31:7c:fa:41:
97:bd:90:a0:b1:1f:05:13:32:9e:db:18:3f:70:96:19:1d:f7:
56:fb:af:33:81:13:f7:e5:a8:44:14:16:12:d5:b3:21:8c:e9:
ad:bc:fc:79:4b:09:6e:ff:3b:3f:c2:7d:15:32:f0:25:e1:f0:
1c:db:eb:f6:15:0c:3d:d5:63:a9:2f:4c:7b:5d:9b:31:ab:aa:
f4:c6:79:eb:c0:b8:23:82:09:39:a5:a4:77:5b:46:ed:eb:f4:
52:fd:ad:2f:eb:b5:f7:20:34:00:74:86:06:e5:47:73:fe:b9:
08:b3:79:78:c0:b7:b3:2e:cf:79:8a:ad:0c:83:af:ec:7b:76:
7a:22:37:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JtkNddVzKACfHoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
MTBmZDEyMTktYjE0ZC00ZDA5LWE5MTMtN2Y4ODMyOTE3NWY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSGnOMwj1osOX3oLF8b4IJe6gyrDGQL8zY/Y
6iiGZce4sVVta8Ftg+Mr66S5L6ZBDumKrNh62HNKdsKBiDXUWlOn52Ya7Xr1E0Tf
tjVafQuC2ok//3dQeswfq9kVCpEayo249tuVXNUIs437uUm83uOUHGhdr8CMs3Tp
OpH1pL81H4z2xBPrwqO5PX1hEQzWYNyz1vfB32tVZ7oQIsXa6Cx7xGDotLuqSRNU
qJNlTsxU+MbjRXdX5APpAMkoZLSK1ka8Ab/HUVkIQV4akmATJT7Rk4pd6bu/M5iz
q4dpHMRwr5gnK2xbiZE40XcEEKpEtZ7PL1b3tybnDLqad84onwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAGF7eFLchO3FY0OOs3ginr76lJ7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTFhYmE5NGUtMmIzZi0z
MmM5LTgwOTYtMzI3YjY0OTg3NTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTEpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFyTxxzu1yQhuMaAlpLlrV0x+CW5+SdzdRmhm3UBpDv3b4+3RizEpNdL
H9RtVWsjk07wOn7Vr9V0SCtFjf10eK1qpl9QL1/bK6PV6VDDFnf0nHmTD+eLgSqs
E6wQMGr+GvbdRbUyYTxJ4xcxPYFHCNhSPWmjVrj9YzIXMXz6QZe9kKCxHwUTMp7b
GD9wlhkd91b7rzOBE/flqEQUFhLVsyGM6a28/HlLCW7/Oz/CfRUy8CXh8Bzb6/YV
DD3VY6kvTHtdmzGrqvTGeevAuCOCCTmlpHdbRu3r9FL9rS/rtfcgNAB0hgblR3P+
uQizeXjAt7Muz3mKrQyDr+x7dnoiN7s=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:45:13 2025 by rpki-client