Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/58e967a1-a69a-3c71-b8fe-4c50cf7a15da.roa
File: 58e967a1-a69a-3c71-b8fe-4c50cf7a15da.roa (raw, json)
Hash identifier: jsphkY4qErSwYRRfxGdbyDIkmEIrwLWtIu4YaHuue/M=
Subject key identifier: 11:98:3C:13:DC:A2:49:5A:01:F0:AF:07:02:C6:AB:97:51:B4:90:A7
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926C22C0A1EE4967AA5F3C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/58e967a1-a69a-3c71-b8fe-4c50cf7a15da.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 11653
IP address blocks: 65.49.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:c2:2c:0a:1e:e4:96:7a:a5:f3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=bcd095ab-c276-4e4f-9baa-6b364024eaa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6a:dd:ea:a8:37:e2:c0:dc:28:f4:f0:c1:1f:
71:3a:2b:e7:1a:7e:ea:ab:f9:76:0c:ea:af:60:d5:
c7:c8:53:09:2b:b8:38:7c:c2:7c:02:c4:2a:ee:fe:
ba:82:93:7e:46:29:98:6e:0d:e4:cf:ea:69:1a:89:
89:b5:63:2c:aa:86:23:8b:08:e7:b4:84:0e:50:98:
24:1e:98:bb:cf:b2:94:6f:42:24:4f:2a:49:a6:0d:
6f:53:04:d0:c8:e6:bb:66:d8:12:b8:07:1b:a0:a2:
ac:c9:8f:35:af:cd:9f:4c:28:db:2c:4c:f2:c4:ff:
f9:2a:a8:2d:06:4b:be:79:27:20:5d:50:3c:97:dc:
85:39:17:e5:8c:13:11:75:cf:9b:ec:b4:63:97:28:
f2:8f:38:dc:37:64:aa:b1:1d:87:cc:e2:fa:fe:45:
5e:2a:11:fe:52:97:a1:74:7a:be:cc:b5:29:ea:84:
03:4a:8e:4f:94:cc:1a:40:08:41:1a:89:af:db:83:
0e:12:ff:62:32:44:3a:e8:e9:d1:2c:43:27:49:e0:
21:9e:11:41:72:36:59:fc:df:9f:02:7e:61:7c:57:
af:32:16:b6:52:64:b6:44:0b:df:93:88:4d:b3:12:
bc:17:c0:10:c4:5c:a5:35:7d:23:23:f2:0a:10:f0:
a8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:98:3C:13:DC:A2:49:5A:01:F0:AF:07:02:C6:AB:97:51:B4:90:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/58e967a1-a69a-3c71-b8fe-4c50cf7a15da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:c4:1d:a9:ab:39:53:e3:19:70:b0:ce:a5:c1:3b:ff:69:93:
d5:12:99:b1:53:9a:a0:87:58:13:4b:20:f3:44:91:8b:6a:62:
1a:dd:12:3a:e9:23:70:84:5a:06:a7:b8:0c:37:69:20:c5:7c:
09:21:e2:a3:8c:d7:85:c6:9e:b1:48:74:e2:ae:e7:7c:e6:0d:
16:1c:f0:0f:6b:15:51:62:e8:2f:c0:de:45:f4:bd:f1:04:96:
2a:16:bc:75:ac:ff:7c:32:cb:bd:76:3e:e5:64:c2:bd:25:00:
4c:34:95:17:06:52:6f:a0:28:32:73:a3:6e:3a:f7:2f:f4:a2:
5f:5a:01:d1:da:5e:92:f1:b5:2c:c8:8a:c4:32:fc:62:f4:a9:
2f:a8:ee:85:d0:d3:ab:5d:1d:fe:43:b7:c4:99:ff:df:19:04:
0b:e2:c1:8b:5d:27:d3:e3:16:c0:7e:72:ab:58:9d:c8:00:10:
38:8f:fe:0a:f1:32:76:36:2c:33:e0:27:2b:73:c2:6f:ba:1a:
bd:ec:f7:c9:86:33:35:7c:cd:55:4b:f1:e4:bb:c2:2b:bd:76:
98:5c:99:3e:c3:64:99:e9:24:16:2b:b7:85:30:2d:a3:cd:9b:
c3:e5:b5:f1:f5:a1:07:18:f9:04:0f:ce:05:ce:28:e2:7d:ad:
33:86:2d:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JsIsCh7klnql88AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
YmNkMDk1YWItYzI3Ni00ZTRmLTliYWEtNmIzNjQwMjRlYWEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Grd6qg34sDcKPTwwR9xOivnGn7qq/l2DOqv
YNXHyFMJK7g4fMJ8AsQq7v66gpN+RimYbg3kz+ppGomJtWMsqoYjiwjntIQOUJgk
Hpi7z7KUb0IkTypJpg1vUwTQyOa7ZtgSuAcboKKsyY81r82fTCjbLEzyxP/5Kqgt
Bku+eScgXVA8l9yFORfljBMRdc+b7LRjlyjyjzjcN2SqsR2HzOL6/kVeKhH+Upeh
dHq+zLUp6oQDSo5PlMwaQAhBGomv24MOEv9iMkQ66OnRLEMnSeAhnhFBcjZZ/N+f
An5hfFevMha2UmS2RAvfk4hNsxK8F8AQxFylNX0jI/IKEPCoKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBGYPBPcoklaAfCvBwLGq5dRtJCnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNThlOTY3YTEtYTY5YS0z
YzcxLWI4ZmUtNGM1MGNmN2ExNWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTEVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIPEHamrOVPjGXCwzqXBO/9pk9USmbFTmqCHWBNLIPNEkYtqYhrdEjrp
I3CEWganuAw3aSDFfAkh4qOM14XGnrFIdOKu53zmDRYc8A9rFVFi6C/A3kX0vfEE
lioWvHWs/3wyy712PuVkwr0lAEw0lRcGUm+gKDJzo2469y/0ol9aAdHaXpLxtSzI
isQy/GL0qS+o7oXQ06tdHf5Dt8SZ/98ZBAviwYtdJ9PjFsB+cqtYncgAEDiP/grx
MnY2LDPgJytzwm+6Gr3s98mGMzV8zVVL8eS7wiu9dphcmT7DZJnpJBYrt4UwLaPN
m8PltfH1oQcY+QQPzgXOKOJ9rTOGLWc=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:42:20 2025 by rpki-client