Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5ce95d88-4915-3894-be6c-f8889531841e.roa
File: 5ce95d88-4915-3894-be6c-f8889531841e.roa (raw, json)
Hash identifier: jgtJnlExjZsHrAQJUFYHc2RVmIc+Pa2frtEWGgNMbvo=
Subject key identifier: A1:5F:D1:58:E2:00:FD:59:5F:70:5F:82:B4:96:B1:E1:A9:97:D9:AC
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926D8BF5C9D422DBE2D29E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5ce95d88-4915-3894-be6c-f8889531841e.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 53813
IP address blocks: 64.62.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:d8:bf:5c:9d:42:2d:be:2d:29:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=ed523ed7-8e01-4a4c-a8b7-db5cebc5a9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7e:f5:ee:12:11:cb:05:69:70:26:ac:44:6a:
34:d1:ca:9e:13:5c:59:7c:e8:f3:df:64:a7:45:fd:
7a:52:db:4c:96:00:7d:61:c5:6e:89:49:2e:7c:38:
bd:60:1b:cc:95:56:4d:8e:2c:b5:3d:ba:48:e6:7c:
43:5c:09:a4:dd:4a:5d:e1:44:e6:42:7a:c7:7d:2e:
b3:a2:fb:c2:96:73:b2:2f:97:a5:3e:a7:e2:23:45:
cd:2b:58:73:40:5e:6d:2a:47:a4:93:44:25:83:ea:
68:32:6a:54:1d:9d:3c:f9:7e:ea:33:9d:f2:8b:db:
03:fa:72:3e:25:15:d4:6e:53:68:32:96:01:03:88:
26:c2:1e:a3:f8:1e:73:51:2a:c0:b1:c0:0b:bd:75:
38:5a:8f:c5:c6:1d:fe:60:73:b8:f3:d3:21:79:83:
65:4b:3c:2a:0a:d8:ca:43:99:cf:94:b5:9a:2e:3e:
72:79:2d:7d:f4:31:9b:68:1f:04:15:0b:e5:a1:09:
34:97:70:49:ce:bd:39:32:f2:30:76:5b:ed:51:af:
e7:65:1f:72:13:1f:b1:b0:16:4a:66:74:8e:db:e9:
d0:d4:c4:00:01:14:18:ff:82:3a:5d:e3:67:8f:c4:
f2:ff:37:09:73:07:1e:0e:d4:44:59:b9:fd:b8:58:
0d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5F:D1:58:E2:00:FD:59:5F:70:5F:82:B4:96:B1:E1:A9:97:D9:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5ce95d88-4915-3894-be6c-f8889531841e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.62.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:72:03:46:27:91:4d:ad:d1:4a:ed:62:79:67:c2:05:c5:bd:
04:a6:2a:b2:53:20:15:9d:2b:31:43:0d:a2:d9:6e:5c:b8:0c:
67:19:fc:96:98:b9:7f:f0:23:ff:14:20:95:3d:4c:b3:89:95:
83:9a:39:8c:ee:10:85:42:30:cd:42:cc:d4:cd:78:c1:33:4e:
58:f3:c6:17:c6:1a:f1:8d:4b:87:86:c9:ea:c1:2f:99:4b:1d:
e3:87:14:68:70:ca:5e:be:bf:9e:ce:44:a0:ab:f9:b3:93:fa:
98:75:93:26:3c:86:38:12:d5:cb:3a:b6:e5:1f:33:c7:46:07:
ad:5a:4c:14:ff:47:90:4b:a2:ae:08:cf:37:c0:5b:90:82:e9:
27:e9:f5:a2:18:29:8c:04:4a:c7:42:f3:9a:16:8b:41:f9:6a:
6a:ff:5e:ef:dd:b4:17:20:48:b4:0f:a0:36:39:aa:ce:b7:df:
57:93:68:bb:09:76:0a:97:ca:d4:61:83:f3:ce:8a:bc:f9:bd:
ac:c6:95:0d:08:be:aa:21:d3:8d:ad:6b:25:98:5e:ea:72:01:
33:72:5e:8f:bf:61:97:e0:71:7c:bf:3c:fc:f3:69:e5:df:4a:
0e:86:be:21:46:0a:72:f6:8d:44:29:51:60:17:88:5c:31:40:
75:27:82:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5Jti/XJ1CLb4tKeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
ZWQ1MjNlZDctOGUwMS00YTRjLWE4YjctZGI1Y2ViYzVhOWUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3717hIRywVpcCasRGo00cqeE1xZfOjz32Sn
Rf16UttMlgB9YcVuiUkufDi9YBvMlVZNjiy1PbpI5nxDXAmk3Upd4UTmQnrHfS6z
ovvClnOyL5elPqfiI0XNK1hzQF5tKkekk0Qlg+poMmpUHZ08+X7qM53yi9sD+nI+
JRXUblNoMpYBA4gmwh6j+B5zUSrAscALvXU4Wo/Fxh3+YHO489MheYNlSzwqCtjK
Q5nPlLWaLj5yeS199DGbaB8EFQvloQk0l3BJzr05MvIwdlvtUa/nZR9yEx+xsBZK
ZnSO2+nQ1MQAARQY/4I6XeNnj8Ty/zcJcwceDtREWbn9uFgN8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKFf0VjiAP1ZX3BfgrSWseGpl9msMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNWNlOTVkODgtNDkxNS0z
ODk0LWJlNmMtZjg4ODk1MzE4NDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD6pMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGdyA0YnkU2t0UrtYnlnwgXFvQSmKrJTIBWdKzFDDaLZbly4DGcZ/JaY
uX/wI/8UIJU9TLOJlYOaOYzuEIVCMM1CzNTNeMEzTljzxhfGGvGNS4eGyerBL5lL
HeOHFGhwyl6+v57ORKCr+bOT+ph1kyY8hjgS1cs6tuUfM8dGB61aTBT/R5BLoq4I
zzfAW5CC6Sfp9aIYKYwESsdC85oWi0H5amr/Xu/dtBcgSLQPoDY5qs6331eTaLsJ
dgqXytRhg/POirz5vazGlQ0Ivqoh042tayWYXupyATNyXo+/YZfgcXy/PPzzaeXf
Sg6GviFGCnL2jUQpUWAXiFwxQHUnguE=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:00:39 2025 by rpki-client