Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/3fc49d8a-feb9-35a0-8bb5-a7655e80d287.roa
File: 3fc49d8a-feb9-35a0-8bb5-a7655e80d287.roa (raw, json)
Hash identifier: 71kflaoEIvm8gjEaoxTWIvbnA9Vn4Nu91aQXHv+7w7w=
Subject key identifier: 2E:80:13:B9:1E:83:6F:8E:B8:2F:F8:47:DA:E3:AB:2A:FE:0A:48:3E
Certificate issuer: /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial: 010D0C9F432858486D905C3BB6FE339AD8590380
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/3fc49d8a-feb9-35a0-8bb5-a7655e80d287.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 20473
IP address blocks: 207.148.0.0/19 maxlen: 32
207.246.64.0/18 maxlen: 32
208.167.224.0/19 maxlen: 32
209.222.0.0/19 maxlen: 32
216.155.128.0/19 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:5c:3b:b6:fe:33:9a:d8:59:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=ac2ae684-6521-47b6-a715-d1233b6bdc61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ee:46:a3:41:70:2e:bd:2f:1c:e9:b7:45:1b:
fa:79:d1:cd:d2:04:c4:eb:a3:4f:19:48:6b:30:91:
fd:32:0c:d1:bb:76:81:79:c3:8a:8b:59:a1:e4:5d:
38:03:fa:bb:32:d9:8c:df:a0:11:97:62:5d:2f:89:
3b:e6:fc:dc:e1:53:be:e5:9e:f3:94:7c:7c:a2:c4:
c4:fc:e3:ed:b8:70:04:c7:05:8d:a8:fa:1b:64:0b:
e2:0a:62:f1:68:89:57:86:4d:e9:9d:51:1e:33:5e:
d9:62:7d:19:6d:09:f6:b6:b7:41:b6:85:74:52:71:
54:4e:5d:0c:64:3d:e1:f6:32:58:6e:12:73:f4:2e:
6d:ec:31:01:da:59:a4:95:39:a7:ba:1a:6a:24:7f:
65:58:d1:68:99:19:b1:73:e6:13:20:dd:dc:80:16:
d2:79:f2:3c:50:c9:f0:d1:5b:03:59:8e:e5:e1:d9:
af:28:16:47:71:86:87:a8:be:4d:6b:23:72:47:18:
ba:13:39:af:a6:ff:8b:b0:27:44:e1:a0:77:05:f6:
32:cd:00:91:cb:b7:c8:35:33:4b:3d:40:f1:ca:e1:
a4:dd:1b:4e:cc:df:cf:c9:ca:0c:10:f4:ec:01:56:
ae:bb:84:1a:a6:0d:f1:49:7e:c2:54:71:f1:df:44:
72:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:80:13:B9:1E:83:6F:8E:B8:2F:F8:47:DA:E3:AB:2A:FE:0A:48:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/3fc49d8a-feb9-35a0-8bb5-a7655e80d287.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
X509v3 Authority Key Identifier:
keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
sbgp-ipAddrBlock: critical
IPv4:
207.148.0.0/19
207.246.64.0/18
208.167.224.0/19
209.222.0.0/19
216.155.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:66:fb:74:33:ef:00:48:27:5e:41:e5:f0:c1:3b:cd:59:b5:
d6:57:d0:99:06:a8:26:bb:76:9c:d0:e3:98:95:69:b9:65:6f:
c9:f9:6e:87:9c:60:67:28:5c:00:60:a5:97:01:c4:58:e8:94:
7d:63:78:25:bf:aa:ce:01:82:dd:db:b3:e4:90:68:0f:02:d4:
a6:6c:2b:86:4d:13:9b:cb:f1:7c:61:a9:64:40:70:98:14:5c:
4e:01:c3:e1:6c:03:35:97:4c:4f:bc:b7:2e:93:63:f1:d9:d5:
bb:46:c6:de:0c:ff:c9:f3:df:05:02:fe:c3:7a:e5:fb:d8:12:
56:be:12:b6:ef:e0:c5:e4:00:0c:2d:a1:aa:6b:55:44:88:7b:
cb:58:d5:17:a9:45:bc:d7:c6:72:20:93:fb:48:52:f4:b3:94:
f8:c8:c2:6d:cf:af:a6:6b:04:5f:0c:d4:8a:7a:34:90:9b:31:
30:02:3c:84:1f:a5:1d:16:a0:a6:26:a9:c2:26:a1:a7:82:e7:
0c:17:30:dd:41:8e:3b:23:49:92:46:06:f2:e9:90:92:04:ea:
73:3d:b2:60:d5:a0:d3:ed:38:9d:39:a3:29:8c:4f:8b:75:18:
dd:82:60:9b:a5:33:5f:2e:b0:09:9c:1d:31:b4:02:1e:85:63:
3d:1a:a1:42
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEhtkFw7tv4zmthZA4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjM4MTc3MzYtN2U1ZS00NzQwLThlZTEtYWM2ZjIzMTdm
MDhkMB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk
YWMyYWU2ODQtNjUyMS00N2I2LWE3MTUtZDEyMzNiNmJkYzYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmO5Go0FwLr0vHOm3RRv6edHN0gTE66NPGUhr
MJH9MgzRu3aBecOKi1mh5F04A/q7MtmM36ARl2JdL4k75vzc4VO+5Z7zlHx8osTE
/OPtuHAExwWNqPobZAviCmLxaIlXhk3pnVEeM17ZYn0ZbQn2trdBtoV0UnFUTl0M
ZD3h9jJYbhJz9C5t7DEB2lmklTmnuhpqJH9lWNFomRmxc+YTIN3cgBbSefI8UMnw
0VsDWY7l4dmvKBZHcYaHqL5NayNyRxi6Ezmvpv+LsCdE4aB3BfYyzQCRy7fINTNL
PUDxyuGk3RtOzN/PycoMEPTsAVauu4Qapg3xSX7CVHHx30RyzwIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFC6AE7keg2+OuC/4R9rjqyr+Ckg+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82Mzgx
NzczNi03ZTVlLTQ3NDAtOGVlMS1hYzZmMjMxN2YwOGQvM2ZjNDlkOGEtZmViOS0z
NWEwLThiYjUtYTc2NTVlODBkMjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjM4MTc3MzYtN2U1ZS00NzQwLThl
ZTEtYWM2ZjIzMTdmMDhkLzYzODE3NzM2LTdlNWUtNDc0MC04ZWUxLWFjNmYyMzE3
ZjA4ZC5jcmwwHwYDVR0jBBgwFoAUtfT/gcvgoCb1EjWns0Rz0IlP/HcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82MzgxNzczNi03ZTVlLTQ3NDAtOGVlMS1hYzZm
MjMxN2YwOGQuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQFz5QAAwQG
z/ZAAwQF0KfgAwQF0d4AAwQF2JuAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHRm+3Qz7wBIJ15B5fDBO81Z
tdZX0JkGqCa7dpzQ45iVabllb8n5boecYGcoXABgpZcBxFjolH1jeCW/qs4Bgt3b
s+SQaA8C1KZsK4ZNE5vL8XxhqWRAcJgUXE4Bw+FsAzWXTE+8ty6TY/HZ1btGxt4M
/8nz3wUC/sN65fvYEla+Erbv4MXkAAwtoaprVUSIe8tY1RepRbzXxnIgk/tIUvSz
lPjIwm3Pr6ZrBF8M1Ip6NJCbMTACPIQfpR0WoKYmqcImoaeC5wwXMN1BjjsjSZJG
BvLpkJIE6nM9smDVoNPtOJ05oymMT4t1GN2CYJulM18usAmcHTG0Ah6FYz0aoUI=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:57:22 2025 by rpki-client