Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/417fabdc-4777-363e-8d86-e1024785259b.roa
File: 417fabdc-4777-363e-8d86-e1024785259b.roa (raw, json)
Hash identifier: ZZxceoq3XwQjbdL9Ixy4mUegAZC8aufx+89dMfH91TU=
Subject key identifier: 57:25:7A:73:81:D8:00:AC:81:09:A0:EA:4C:12:AD:B5:E4:ED:A3:FE
Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial: 010D0C9F43285848828088C0AE038FA9A6877F80
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/417fabdc-4777-363e-8d86-e1024785259b.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 20166
IP address blocks: 63.239.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:88:c0:ae:03:8f:a9:a6:87:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=64fb3549-6238-4fed-ad40-a603e0de9318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:12:28:80:32:3c:72:f4:df:46:0e:1e:c8:f1:
0a:56:4c:ac:24:a3:e1:b6:d8:c0:40:1d:59:ab:98:
ef:b5:8b:6e:4c:ae:0a:f8:4f:60:63:50:51:f4:79:
3c:ea:56:a7:aa:79:79:c2:96:51:9d:dd:df:cb:23:
60:0d:40:e2:d3:69:c8:31:6c:25:4a:ac:90:37:05:
5b:4a:72:d7:ef:60:80:69:b2:b5:07:fb:98:f8:ba:
d7:1f:36:a8:b0:ca:de:75:aa:08:48:2a:d6:2e:51:
eb:ac:37:32:58:a3:00:fd:96:cc:43:21:07:9e:1a:
0e:0e:10:3d:d2:87:aa:bb:a0:51:e1:fc:4d:69:a1:
72:1a:67:cf:0e:ec:de:23:e0:bb:f0:47:48:de:6c:
a1:92:a9:6b:1d:fa:10:f2:e4:9c:df:48:64:8a:f5:
04:00:6e:d7:34:f4:de:89:95:ab:28:25:dd:a5:30:
c8:74:23:8f:4a:8a:1b:c2:9d:de:51:d9:eb:49:51:
75:aa:1c:82:c8:84:94:87:10:e1:b5:03:42:05:90:
fa:50:3a:3c:c3:ba:1f:be:d9:41:29:eb:ce:6e:97:
c7:9b:09:73:82:b2:48:4f:ed:6f:d0:45:18:0e:b8:
4a:9d:a2:97:5b:07:ea:02:3d:b4:47:59:34:a6:7d:
59:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:25:7A:73:81:D8:00:AC:81:09:A0:EA:4C:12:AD:B5:E4:ED:A3:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/417fabdc-4777-363e-8d86-e1024785259b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
X509v3 Authority Key Identifier:
keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
sbgp-ipAddrBlock: critical
IPv4:
63.239.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:1c:fd:c5:ac:21:4e:c8:97:31:e8:bc:6e:5a:1b:ca:cd:93:
60:21:5e:0e:bd:72:f6:3c:af:3e:21:df:63:00:ed:c3:df:13:
1c:03:74:1a:e1:6e:47:47:83:ca:5c:2a:08:b2:b2:48:c9:74:
1c:87:a0:9d:cb:0a:06:63:5a:6e:c7:ea:da:cb:41:c3:36:e1:
83:00:da:8e:25:13:61:5c:99:92:df:41:42:93:a1:be:c7:3b:
bb:1b:b1:a4:13:10:88:0c:74:79:02:f6:93:a2:dc:db:6b:31:
09:3a:a7:b0:ae:d4:92:79:74:23:17:bc:ca:a5:79:40:26:38:
25:e6:d6:df:89:8e:bc:c1:bf:92:df:17:cc:e1:a1:24:b1:d9:
4e:4a:0e:d5:87:aa:1c:b3:79:42:26:05:5e:ef:0d:30:d8:2f:
32:03:a2:e6:ef:61:49:57:fb:46:4c:49:1e:58:8d:ed:04:23:
8b:05:71:73:16:ef:86:95:cc:fd:ac:a3:a7:3e:d3:02:3e:45:
3e:bc:5f:a0:6d:e9:71:24:88:8f:e8:c5:79:39:9f:20:3a:ec:
88:13:d5:b7:c0:c5:f9:33:06:37:b9:65:b4:c7:0d:0f:f3:fa:
0a:a8:8e:e4:09:31:71:2e:b9:07:ea:56:17:87:56:5c:ef:34:
68:22:df:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiCgIjArgOPqaaHf4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm
M2VjMB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NjRmYjM1NDktNjIzOC00ZmVkLWFkNDAtYTYwM2UwZGU5MzE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRIogDI8cvTfRg4eyPEKVkysJKPhttjAQB1Z
q5jvtYtuTK4K+E9gY1BR9Hk86lanqnl5wpZRnd3fyyNgDUDi02nIMWwlSqyQNwVb
SnLX72CAabK1B/uY+LrXHzaosMredaoISCrWLlHrrDcyWKMA/ZbMQyEHnhoODhA9
0oequ6BR4fxNaaFyGmfPDuzeI+C78EdI3myhkqlrHfoQ8uSc30hkivUEAG7XNPTe
iZWrKCXdpTDIdCOPSoobwp3eUdnrSVF1qhyCyISUhxDhtQNCBZD6UDo8w7ofvtlB
KevObpfHmwlzgrJIT+1v0EUYDrhKnaKXWwfqAj20R1k0pn1ZOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFclenOB2ACsgQmg6kwSrbXk7aP+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3
YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvNDE3ZmFiZGMtNDc3Ny0z
NjNlLThkODYtZTEwMjQ3ODUyNTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5
MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0
ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm
ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP+9GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB0c/cWsIU7IlzHovG5aG8rNk2AhXg69cvY8rz4h32MA7cPfExwDdBrh
bkdHg8pcKgiyskjJdByHoJ3LCgZjWm7H6trLQcM24YMA2o4lE2FcmZLfQUKTob7H
O7sbsaQTEIgMdHkC9pOi3NtrMQk6p7Cu1JJ5dCMXvMqleUAmOCXm1t+JjrzBv5Lf
F8zhoSSx2U5KDtWHqhyzeUImBV7vDTDYLzIDoubvYUlX+0ZMSR5Yje0EI4sFcXMW
74aVzP2so6c+0wI+RT68X6Bt6XEkiI/oxXk5nyA67IgT1bfAxfkzBje5ZbTHDQ/z
+gqojuQJMXEuuQfqVheHVlzvNGgi3/k=
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:47:30 2025 by rpki-client