Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/0d0d9704-647b-32f6-9304-e2dd0f7e7d05.roa
File: 0d0d9704-647b-32f6-9304-e2dd0f7e7d05.roa (raw, json)
Hash identifier: 8XwqmdbHmjYwnypYLaUQHXOhBqt8TsrCAdlYwCanGGA=
Subject key identifier: 0B:EA:9F:61:96:EC:ED:A1:8E:39:69:74:1B:FA:1F:83:CD:F9:C9:21
Certificate issuer: /CN=23fa747f-0e53-4654-913d-ebe4ae8f453b
Certificate serial: 010D0C9F4328584898D5FB2579A77D757044F190
Authority key identifier: 4B:07:70:44:0A:64:F7:A4:10:4A:2A:58:81:04:85:C1:C9:B1:EE:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/0d0d9704-647b-32f6-9304-e2dd0f7e7d05.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 11170
IP address blocks: 74.118.152.0/21 maxlen: 24
142.147.55.0/24 maxlen: 24
208.79.240.0/22 maxlen: 24
2607:fe70::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d5:fb:25:79:a7:7d:75:70:44:f1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23fa747f-0e53-4654-913d-ebe4ae8f453b
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=aeac3b5c-edf0-42d2-b75d-fd98f08eb76f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c9:ba:f6:e2:24:e8:6c:e0:96:1e:4a:59:a7:
7b:37:ff:c7:ad:11:50:34:53:02:28:99:51:9d:34:
a2:34:44:41:d4:78:78:d8:1c:e3:df:1c:2c:0a:b0:
dc:24:ea:22:40:13:ac:21:b3:ba:a3:e3:43:0b:d4:
9a:2e:d5:49:19:cd:a3:f6:5c:76:95:7c:9a:37:87:
62:60:9c:d7:d1:f0:dd:d2:20:22:1f:9f:bf:d4:f7:
1d:b2:a1:dc:d7:ce:d1:8a:38:9a:ad:ca:49:f7:87:
42:bc:0a:86:a8:ff:a4:c0:22:94:99:4e:3f:08:99:
20:d3:34:45:07:a6:bb:7e:17:57:d4:51:7b:a0:86:
5c:d3:09:64:a7:3a:7d:c4:07:d5:6f:88:8f:a5:37:
76:f2:cc:78:53:c7:fb:55:68:b6:cc:68:4e:cc:66:
66:2a:b0:79:95:2a:d0:70:1a:6d:87:0e:40:ee:d0:
f2:5a:8f:76:01:ab:2e:23:f8:ad:50:87:44:e7:94:
ff:c6:67:8b:40:25:f5:9e:90:2e:e3:10:91:31:98:
cf:a2:dd:89:07:95:7e:44:41:59:09:33:84:7b:a0:
e3:d2:ba:6d:8d:68:20:d3:bc:79:32:19:92:ce:fd:
23:13:d6:89:e8:6b:d1:48:89:9c:e7:a8:fe:e3:26:
bc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EA:9F:61:96:EC:ED:A1:8E:39:69:74:1B:FA:1F:83:CD:F9:C9:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/0d0d9704-647b-32f6-9304-e2dd0f7e7d05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.crl
X509v3 Authority Key Identifier:
keyid:4B:07:70:44:0A:64:F7:A4:10:4A:2A:58:81:04:85:C1:C9:B1:EE:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer
sbgp-ipAddrBlock: critical
IPv4:
74.118.152.0/21
142.147.55.0/24
208.79.240.0/22
IPv6:
2607:fe70::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:61:e5:2f:dd:87:a8:0f:e9:bd:89:55:18:ea:d0:39:d2:15:
96:a9:b3:50:b9:fb:bf:38:03:d2:64:b2:4b:45:3b:94:6b:df:
bb:3a:4e:5d:6a:e6:d5:b3:3e:67:49:cb:e6:50:40:6e:f4:8b:
b3:3f:d7:01:57:13:75:de:21:6e:00:74:76:29:3e:2e:43:1a:
5c:16:ff:de:f9:32:55:57:c7:ed:37:b6:29:b4:09:7f:a4:1c:
60:8c:0c:68:aa:00:27:89:72:d3:0a:88:a4:03:68:a7:98:88:
67:93:52:df:0b:76:db:8d:dd:0f:8f:4d:2a:4a:9c:b6:cc:c4:
86:48:f1:2a:f4:b3:5d:6d:1d:64:40:e6:e8:07:f3:fc:98:6e:
3b:6a:a5:63:4d:3e:c2:f6:fe:06:5d:ec:83:27:3a:8a:cb:d2:
ba:e0:94:e7:75:47:27:c8:0f:bf:15:1a:c0:c5:cc:92:bf:ba:
e0:b8:a7:8e:13:de:ec:92:89:1f:53:91:4e:68:8f:76:c3:a7:
06:47:09:a1:36:3b:1e:49:5a:56:4b:d5:c4:c6:60:2c:cd:42:
54:da:97:10:ef:0e:a1:e5:7e:97:ed:f8:fd:1c:30:46:77:15:
ee:38:94:7b:d2:9d:38:46:ef:94:02:ce:31:93:41:fa:c5:95:
27:29:a7:6e
-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEiY1fslead9dXBE8ZAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNmYTc0N2YtMGU1My00NjU0LTkxM2QtZWJlNGFlOGY0
NTNiMB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk
YWVhYzNiNWMtZWRmMC00MmQyLWI3NWQtZmQ5OGYwOGViNzZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcm69uIk6Gzglh5KWad7N//HrRFQNFMCKJlR
nTSiNERB1Hh42Bzj3xwsCrDcJOoiQBOsIbO6o+NDC9SaLtVJGc2j9lx2lXyaN4di
YJzX0fDd0iAiH5+/1PcdsqHc187RijiarcpJ94dCvAqGqP+kwCKUmU4/CJkg0zRF
B6a7fhdX1FF7oIZc0wlkpzp9xAfVb4iPpTd28sx4U8f7VWi2zGhOzGZmKrB5lSrQ
cBpthw5A7tDyWo92AasuI/itUIdE55T/xmeLQCX1npAu4xCRMZjPot2JB5V+REFZ
CTOEe6Dj0rptjWgg07x5MhmSzv0jE9aJ6GvRSImc56j+4ya8PwIDAQABo4IDcDCC
A2wwHQYDVR0OBBYEFAvqn2GW7O2hjjlpdBv6H4PN+ckhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Zh
NzQ3Zi0wZTUzLTQ2NTQtOTEzZC1lYmU0YWU4ZjQ1M2IvMGQwZDk3MDQtNjQ3Yi0z
MmY2LTkzMDQtZTJkZDBmN2U3ZDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNmYTc0N2YtMGU1My00NjU0LTkx
M2QtZWJlNGFlOGY0NTNiLzIzZmE3NDdmLTBlNTMtNDY1NC05MTNkLWViZTRhZThm
NDUzYi5jcmwwHwYDVR0jBBgwFoAUSwdwRApk96QQSipYgQSFwcmx7kUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2ZhNzQ3Zi0wZTUzLTQ2NTQtOTEzZC1lYmU0
YWU4ZjQ1M2IuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDSnaYAwQA
jpM3AwQC0E/wMA0EAgACMAcDBQAmB/5wMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFZh5S/dh6gP6b2JVRjq
0DnSFZaps1C5+784A9JksktFO5Rr37s6Tl1q5tWzPmdJy+ZQQG70i7M/1wFXE3Xe
IW4AdHYpPi5DGlwW/975MlVXx+03tim0CX+kHGCMDGiqACeJctMKiKQDaKeYiGeT
Ut8LdtuN3Q+PTSpKnLbMxIZI8Sr0s11tHWRA5ugH8/yYbjtqpWNNPsL2/gZd7IMn
OorL0rrglOd1RyfID78VGsDFzJK/uuC4p44T3uySiR9TkU5oj3bDpwZHCaE2Ox5J
WlZL1cTGYCzNQlTalxDvDqHlfpft+P0cMEZ3Fe44lHvSnThG75QCzjGTQfrFlScp
p24=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:12:23 2025 by rpki-client