Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e23efbf3-1ee2-3a52-9216-06303e8949fd.roa
File: e23efbf3-1ee2-3a52-9216-06303e8949fd.roa (raw, json)
Hash identifier: CPTqUQK/CG0RIo2zQJkbQm7q9LmwS2oBOocnsG9H5hU=
Subject key identifier: 22:D8:20:99:3C:3C:0B:80:0F:53:74:2B:C5:16:1F:C9:CF:99:8E:B9
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926B999A255087D26B31500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e23efbf3-1ee2-3a52-9216-06303e8949fd.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 36103
IP address blocks: 65.49.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:b9:99:a2:55:08:7d:26:b3:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=5be04b2e-76a7-4c74-ae0f-b46978294e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c3:8d:72:d4:b3:37:b7:df:fd:d8:26:98:70:
21:44:80:3e:1b:7d:ea:ba:32:e2:31:c0:1a:fb:70:
8d:10:91:f4:b7:be:8f:a3:f4:33:31:da:4a:09:72:
11:9c:05:fc:3a:5c:c5:55:f9:26:fa:8a:a1:0f:88:
cc:02:19:cb:cd:b5:26:42:1b:02:77:31:51:4b:fc:
e3:d2:81:81:f9:7a:d4:14:ce:c0:47:73:c6:31:7b:
f4:32:f2:41:a6:68:0a:98:d4:8d:24:23:e0:f0:13:
fb:1c:6d:50:2a:1f:65:7b:e7:7f:6c:15:89:73:91:
49:94:19:c1:02:6f:4f:65:a8:13:55:d8:38:53:e8:
c6:8c:19:ce:bf:73:ba:2c:12:01:aa:f6:a3:ec:26:
92:b2:ef:4f:46:dc:96:42:11:83:4a:75:07:6f:d8:
1e:b5:73:e1:18:1b:b2:d6:4b:68:b9:f5:ce:e2:8c:
c0:88:ae:2f:bb:0f:8b:82:9e:44:cf:b8:35:14:0d:
5a:21:38:94:87:33:93:ff:01:2b:4f:c1:7b:aa:e8:
84:ed:af:02:13:c0:29:55:99:de:0e:a2:a2:68:11:
1e:b9:a3:38:b0:f8:d5:0e:0c:20:d3:a5:f9:f5:d2:
e6:7a:31:2e:86:12:5e:48:80:57:84:41:56:a9:d7:
c6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D8:20:99:3C:3C:0B:80:0F:53:74:2B:C5:16:1F:C9:CF:99:8E:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e23efbf3-1ee2-3a52-9216-06303e8949fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
65.49.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:1b:aa:5a:73:e8:45:42:56:64:8b:a5:df:8a:26:50:70:27:
b8:e1:8f:5b:94:18:9d:2f:74:5b:ae:74:c0:df:2a:3d:72:fd:
fc:ff:b6:db:c7:84:86:82:6d:ca:d5:1f:dc:3c:1c:ab:81:52:
13:fc:f4:c2:fd:c2:f7:c5:9c:26:35:ca:2e:1f:77:ea:f1:31:
ea:16:e4:ad:11:e8:0b:a5:2d:34:fe:91:f2:33:3a:5b:41:5a:
ae:10:bd:0c:99:53:c1:be:b2:a5:fd:ce:a6:12:d2:7e:cc:ee:
e0:07:33:66:d5:ad:72:a5:08:e2:b9:64:f1:36:13:d2:39:6f:
96:e9:7c:70:b7:f7:a9:86:f8:5c:03:b5:c4:0b:ed:91:b0:88:
1e:3a:03:4e:70:14:ce:8a:f3:9a:22:06:64:4a:4f:65:0a:f6:
6b:4a:77:5d:47:50:7d:1a:61:3e:85:e0:d1:eb:7f:da:3d:ea:
e4:bc:38:63:0e:9a:fc:41:4d:af:94:3a:49:66:3a:4a:9d:57:
f1:33:84:6f:75:d8:e3:89:2e:66:64:5f:79:0d:a1:e7:e4:fd:
04:c6:99:3f:05:e2:0a:94:52:f5:15:de:ff:ce:47:6c:d3:cc:
ec:a2:6d:65:51:55:e6:ec:57:90:b7:40:de:17:0b:5a:f0:6c:
94:96:db:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JrmZolUIfSazFQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
NWJlMDRiMmUtNzZhNy00Yzc0LWFlMGYtYjQ2OTc4Mjk0ZTk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMONctSzN7ff/dgmmHAhRIA+G33qujLiMcAa
+3CNEJH0t76Po/QzMdpKCXIRnAX8OlzFVfkm+oqhD4jMAhnLzbUmQhsCdzFRS/zj
0oGB+XrUFM7AR3PGMXv0MvJBpmgKmNSNJCPg8BP7HG1QKh9le+d/bBWJc5FJlBnB
Am9PZagTVdg4U+jGjBnOv3O6LBIBqvaj7CaSsu9PRtyWQhGDSnUHb9getXPhGBuy
1ktoufXO4ozAiK4vuw+Lgp5Ez7g1FA1aITiUhzOT/wErT8F7quiE7a8CE8ApVZne
DqKiaBEeuaM4sPjVDgwg06X59dLmejEuhhJeSIBXhEFWqdfGbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCLYIJk8PAuAD1N0K8UWH8nPmY65MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTIzZWZiZjMtMWVlMi0z
YTUyLTkyMTYtMDYzMDNlODk0OWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQTFgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD0bqlpz6EVCVmSLpd+KJlBwJ7jhj1uUGJ0vdFuudMDfKj1y/fz/ttvH
hIaCbcrVH9w8HKuBUhP89ML9wvfFnCY1yi4fd+rxMeoW5K0R6AulLTT+kfIzOltB
Wq4QvQyZU8G+sqX9zqYS0n7M7uAHM2bVrXKlCOK5ZPE2E9I5b5bpfHC396mG+FwD
tcQL7ZGwiB46A05wFM6K85oiBmRKT2UK9mtKd11HUH0aYT6F4NHrf9o96uS8OGMO
mvxBTa+UOklmOkqdV/EzhG912OOJLmZkX3kNoefk/QTGmT8F4gqUUvUV3v/OR2zT
zOyibWVRVebsV5C3QN4XC1rwbJSW21I=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:53:09 2025 by rpki-client