Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/5a30a9fe-c741-3fe7-9896-4f516805f784.roa
File: 5a30a9fe-c741-3fe7-9896-4f516805f784.roa (raw, json)
Hash identifier: 8Lce5mToU1CCO2yZCBfRBWWqKzNkqQR9/Bmf1rsHS5I=
Subject key identifier: C7:A3:E8:F9:B5:69:49:5A:77:8A:B1:19:1F:E5:55:B1:46:AA:E4:3B
Certificate issuer: /CN=ee74c799-7d4c-4df3-b711-296c34338ef5
Certificate serial: 010D0C9F432858487A207C244F83D2B5802B5190
Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/5a30a9fe-c741-3fe7-9896-4f516805f784.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 1299
IP address blocks: 68.67.64.0/20 maxlen: 24
198.205.112.0/20 maxlen: 24
199.102.64.0/22 maxlen: 24
216.238.144.0/20 maxlen: 24
2605:d100::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:7c:24:4f:83:d2:b5:80:2b:51:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=2416f48f-cee2-40e0-b39d-2fb1d61e7fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ce:b8:44:49:58:ef:d9:64:22:8e:6e:97:ae:
6b:be:2a:71:9d:a2:9b:68:80:e8:46:ea:b6:99:0e:
04:06:6f:7e:8b:ec:4a:fa:57:2e:71:31:c6:de:6d:
77:a6:49:83:32:3f:0f:63:8b:45:b2:8e:cc:1b:9f:
2d:87:1c:9b:fe:c8:3d:28:f5:be:f7:5c:fa:4d:f9:
12:bc:ce:4f:55:42:a6:dd:f1:52:71:25:a8:c1:62:
6d:38:a6:3a:41:a2:cc:31:6b:c6:95:88:5e:c9:6d:
ad:cf:16:53:f6:6b:f6:4f:4e:46:3b:34:14:50:83:
de:3c:e2:a9:39:39:c5:80:8a:14:fe:e6:6e:f2:5e:
ca:b9:44:fa:71:a4:90:dc:16:4c:fa:b3:8e:b6:f6:
10:50:a8:33:94:2c:88:2e:d5:b7:28:5c:d3:30:5a:
3b:08:a6:8a:71:fe:8b:d3:46:74:cb:e4:fc:07:c3:
5a:b1:43:7c:05:26:cb:7c:2d:56:52:c1:11:c6:da:
4c:6e:5f:d3:93:d9:8a:7e:d0:2b:28:6f:e0:4b:84:
3c:c6:65:3c:4e:bd:2e:8b:bf:6c:b6:57:d7:47:24:
07:73:41:8b:a9:67:4a:5f:32:27:d6:ec:55:02:66:
84:68:f1:96:b6:d8:d3:6f:54:41:a1:a3:fa:94:b9:
21:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A3:E8:F9:B5:69:49:5A:77:8A:B1:19:1F:E5:55:B1:46:AA:E4:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/5a30a9fe-c741-3fe7-9896-4f516805f784.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl
X509v3 Authority Key Identifier:
keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
sbgp-ipAddrBlock: critical
IPv4:
68.67.64.0/20
198.205.112.0/20
199.102.64.0/22
216.238.144.0/20
IPv6:
2605:d100::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:0b:74:95:91:f1:c0:f3:23:66:0e:c1:2b:f7:52:1a:e9:34:
53:98:5e:0d:15:91:d6:c3:0c:c4:3e:ac:2a:38:29:e5:08:db:
2e:ec:53:11:87:da:53:d6:b3:96:06:d7:de:8d:60:e6:da:9b:
41:2d:77:b5:87:6a:03:03:32:fa:ab:d1:72:c8:23:4e:d8:82:
24:e8:8b:3e:9e:4f:2d:c5:85:2d:67:fe:d8:20:e3:ac:c6:47:
04:e7:e0:c8:fa:a9:af:40:54:a9:de:a8:d1:3a:ed:e0:8a:47:
01:a1:f2:76:54:8c:52:45:69:10:c8:d3:8c:cd:9a:e5:8e:55:
21:cb:30:6e:fd:f9:0d:8e:80:9e:43:2c:cb:66:41:2b:72:3f:
04:5e:62:5f:b1:5b:b4:66:49:36:dd:af:2f:dd:a6:ee:e1:9f:
62:71:20:3a:6b:7b:0b:29:f0:8e:1d:f4:58:b9:25:c7:bc:5c:
1b:c5:18:4b:73:18:75:2c:11:70:22:74:82:e1:35:ae:22:8d:
bb:cf:fd:34:31:a5:8b:c2:7a:16:65:10:ec:2c:ee:a7:e1:22:
ad:d7:b2:84:69:05:10:45:c9:d5:40:a9:b5:fc:7f:38:77:6d:
c1:7d:40:31:a7:83:ba:00:88:ed:9b:b4:00:c8:7a:26:4a:86:
f3:65:3b:78
-----BEGIN CERTIFICATE-----
MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWEh6IHwkT4PStYArUZAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWU3NGM3OTktN2Q0Yy00ZGYzLWI3MTEtMjk2YzM0MzM4
ZWY1MB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk
MjQxNmY0OGYtY2VlMi00MGUwLWIzOWQtMmZiMWQ2MWU3ZmE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc64RElY79lkIo5ul65rvipxnaKbaIDoRuq2
mQ4EBm9+i+xK+lcucTHG3m13pkmDMj8PY4tFso7MG58thxyb/sg9KPW+91z6TfkS
vM5PVUKm3fFScSWowWJtOKY6QaLMMWvGlYheyW2tzxZT9mv2T05GOzQUUIPePOKp
OTnFgIoU/uZu8l7KuUT6caSQ3BZM+rOOtvYQUKgzlCyILtW3KFzTMFo7CKaKcf6L
00Z0y+T8B8NasUN8BSbLfC1WUsERxtpMbl/Tk9mKftArKG/gS4Q8xmU8Tr0ui79s
tlfXRyQHc0GLqWdKXzIn1uxVAmaEaPGWttjTb1RBoaP6lLkh5wIDAQABo4IDdjCC
A3IwHQYDVR0OBBYEFMej6Pm1aUlad4qxGR/lVbFGquQ7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0
Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZjMzQzMzhlZjUvNWEzMGE5ZmUtYzc0MS0z
ZmU3LTk4OTYtNGY1MTY4MDVmNzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWU3NGM3OTktN2Q0Yy00ZGYzLWI3
MTEtMjk2YzM0MzM4ZWY1L2VlNzRjNzk5LTdkNGMtNGRmMy1iNzExLTI5NmMzNDMz
OGVmNS5jcmwwHwYDVR0jBBgwFoAUbNfgDzg2OujJMgu3w5YFtxms98QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZj
MzQzMzhlZjUuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQERENAAwQE
xs1wAwQCx2ZAAwQE2O6QMA0EAgACMAcDBQAmBdEAMFQGA1UdIAEB/wRKMEgwRgYI
KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz
b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADALdJWR8cDz
I2YOwSv3UhrpNFOYXg0VkdbDDMQ+rCo4KeUI2y7sUxGH2lPWs5YG196NYObam0Et
d7WHagMDMvqr0XLII07YgiToiz6eTy3FhS1n/tgg46zGRwTn4Mj6qa9AVKneqNE6
7eCKRwGh8nZUjFJFaRDI04zNmuWOVSHLMG79+Q2OgJ5DLMtmQStyPwReYl+xW7Rm
STbdry/dpu7hn2JxIDprewsp8I4d9Fi5Jce8XBvFGEtzGHUsEXAidILhNa4ijbvP
/TQxpYvCehZlEOws7qfhIq3XsoRpBRBFydVAqbX8fzh3bcF9QDGng7oAiO2btADI
eiZKhvNlO3g=
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:12:04 2025 by rpki-client