Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/07f2eaa3-89ff-32a2-919a-8647e1b1eceb.roa
File: 07f2eaa3-89ff-32a2-919a-8647e1b1eceb.roa (raw, json)
Hash identifier: rwGXjJNzlnfGIj6TdUHHrqCnCSQmejNMZ3I56sWXdnw=
Subject key identifier: EF:F3:8D:4D:B5:2D:79:35:8C:F1:B7:23:B3:B5:26:2A:3D:E2:6F:45
Certificate issuer: /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial: 010D0C9F432858486D905BAF514BF01C87794840
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/07f2eaa3-89ff-32a2-919a-8647e1b1eceb.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 20473
IP address blocks: 65.20.64.0/18 maxlen: 32
66.135.0.0/19 maxlen: 32
67.219.96.0/20 maxlen: 32
137.220.32.0/19 maxlen: 32
139.84.128.0/17 maxlen: 32
208.83.232.0/21 maxlen: 32
208.85.16.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:5b:af:51:4b:f0:1c:87:79:48:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=4cef9d0b-0e09-41de-b813-eb4ce3d501d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:85:ad:e5:f7:75:b5:87:04:9b:1e:8d:fc:2d:
42:e1:f6:81:b6:ff:38:56:f7:3a:45:de:04:55:02:
fb:15:95:c0:ab:35:a8:18:39:42:a9:e2:92:1d:6c:
6b:a3:f8:64:3b:b2:71:8c:07:e1:71:e6:91:de:e6:
74:f7:85:34:3a:d8:56:99:25:4e:ce:a9:b3:28:7f:
d9:e0:13:02:2a:14:a1:06:88:94:13:46:d6:75:2d:
14:00:da:8a:84:4b:f3:50:64:db:04:7f:4c:6f:3e:
c9:eb:bd:4f:57:f0:ec:33:ee:28:9b:43:2d:bf:21:
c5:49:0d:cf:52:e2:ba:e5:33:34:74:a1:fd:d5:f9:
50:dd:6f:e4:07:c6:65:01:1b:00:69:26:29:b9:e0:
a4:c7:39:cb:70:41:84:f8:76:b6:88:fa:b3:76:30:
f8:8b:60:9b:e9:1a:2d:04:e1:e4:cf:82:84:7c:80:
e0:f7:11:2d:7d:e2:12:93:42:05:43:86:f2:20:ca:
89:b7:35:59:fa:bf:68:ce:9b:f3:d0:07:51:be:40:
d3:29:96:e8:42:62:61:1c:07:13:c4:c6:34:f8:8c:
83:07:4e:b1:7d:ea:0d:f2:1e:4c:8c:5e:0f:5c:d7:
64:22:02:f3:5c:05:f7:82:4b:25:06:c2:e1:99:31:
6d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F3:8D:4D:B5:2D:79:35:8C:F1:B7:23:B3:B5:26:2A:3D:E2:6F:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/07f2eaa3-89ff-32a2-919a-8647e1b1eceb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
X509v3 Authority Key Identifier:
keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
sbgp-ipAddrBlock: critical
IPv4:
65.20.64.0/18
66.135.0.0/19
67.219.96.0/20
137.220.32.0/19
139.84.128.0/17
208.83.232.0/21
208.85.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:ac:04:d4:1f:42:8c:69:bc:d8:a4:3e:b8:9a:c2:ac:77:29:
39:6b:d6:63:c9:1a:01:89:28:1d:f2:b1:49:29:a7:68:3b:cd:
38:57:ab:ea:8a:93:15:2c:eb:1e:8a:25:f8:70:7b:4b:cb:47:
fc:aa:9c:1d:03:e3:3e:f5:1e:b9:0a:8d:70:99:e2:99:82:e7:
3b:8d:ad:24:33:f3:cd:9f:c2:4c:b6:a6:01:55:87:cc:44:64:
69:c2:aa:7e:48:d3:dc:1b:bb:89:0c:7c:d9:32:c2:68:95:3e:
fa:90:a2:b2:45:81:64:1c:64:58:26:49:d1:ac:ca:e3:11:5b:
e5:56:85:2e:b4:d4:cc:e9:d7:0d:0c:32:9a:0d:b9:6f:75:aa:
fc:f8:01:29:1c:ee:0f:a6:b5:83:cb:b9:a8:e3:5e:e6:8c:5b:
b3:1e:66:6c:6d:3c:8c:79:b4:cd:36:04:b8:66:c6:cc:91:a2:
e0:a9:d4:e3:a6:c9:fc:06:90:0a:d4:07:57:50:04:aa:0d:65:
08:1d:51:44:60:4b:ba:3e:b8:3a:ef:79:4a:8e:b8:59:db:e1:
cc:bf:ce:d9:5c:e7:b5:8d:2d:1a:f2:c7:53:d2:6c:10:5c:85:
f8:14:26:67:dd:f9:fd:d5:c2:58:46:18:7d:ee:fa:fb:e2:ad:
34:eb:dc:e8
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWEhtkFuvUUvwHId5SEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjM4MTc3MzYtN2U1ZS00NzQwLThlZTEtYWM2ZjIzMTdm
MDhkMB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk
NGNlZjlkMGItMGUwOS00MWRlLWI4MTMtZWI0Y2UzZDUwMWQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYWt5fd1tYcEmx6N/C1C4faBtv84Vvc6Rd4E
VQL7FZXAqzWoGDlCqeKSHWxro/hkO7JxjAfhceaR3uZ094U0OthWmSVOzqmzKH/Z
4BMCKhShBoiUE0bWdS0UANqKhEvzUGTbBH9Mbz7J671PV/DsM+4om0MtvyHFSQ3P
UuK65TM0dKH91flQ3W/kB8ZlARsAaSYpueCkxznLcEGE+Ha2iPqzdjD4i2Cb6Rot
BOHkz4KEfIDg9xEtfeISk0IFQ4byIMqJtzVZ+r9ozpvz0AdRvkDTKZboQmJhHAcT
xMY0+IyDB06xfeoN8h5MjF4PXNdkIgLzXAX3gkslBsLhmTFtDQIDAQABo4IDeTCC
A3UwHQYDVR0OBBYEFO/zjU21LXk1jPG3I7O1Jio94m9FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82Mzgx
NzczNi03ZTVlLTQ3NDAtOGVlMS1hYzZmMjMxN2YwOGQvMDdmMmVhYTMtODlmZi0z
MmEyLTkxOWEtODY0N2UxYjFlY2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjM4MTc3MzYtN2U1ZS00NzQwLThl
ZTEtYWM2ZjIzMTdmMDhkLzYzODE3NzM2LTdlNWUtNDc0MC04ZWUxLWFjNmYyMzE3
ZjA4ZC5jcmwwHwYDVR0jBBgwFoAUtfT/gcvgoCb1EjWns0Rz0IlP/HcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82MzgxNzczNi03ZTVlLTQ3NDAtOGVlMS1hYzZm
MjMxN2YwOGQuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQGQRRAAwQF
QocAAwQEQ9tgAwQFidwgAwQHi1SAAwQD0FPoAwQD0FUQMFQGA1UdIAEB/wRKMEgw
RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv
cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJGsBNQf
QoxpvNikPriawqx3KTlr1mPJGgGJKB3ysUkpp2g7zThXq+qKkxUs6x6KJfhwe0vL
R/yqnB0D4z71HrkKjXCZ4pmC5zuNrSQz882fwky2pgFVh8xEZGnCqn5I09wbu4kM
fNkywmiVPvqQorJFgWQcZFgmSdGsyuMRW+VWhS601Mzp1w0MMpoNuW91qvz4ASkc
7g+mtYPLuajjXuaMW7MeZmxtPIx5tM02BLhmxsyRouCp1OOmyfwGkArUB1dQBKoN
ZQgdUURgS7o+uDrveUqOuFnb4cy/ztlc57WNLRryx1PSbBBchfgUJmfd+f3VwlhG
GH3u+vvirTTr3Og=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:59:04 2025 by rpki-client