Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/ed98aa57-d32e-3a51-850b-fcb85c818c67.roa
File: ed98aa57-d32e-3a51-850b-fcb85c818c67.roa (raw, json)
Hash identifier: wHjiv8VP0ctXtkOZD1Jr0npcbCgy1Ntko97PM9Prtg8=
Subject key identifier: 1E:00:2A:FF:D8:94:E2:21:A7:18:2D:C5:08:48:FC:76:56:05:F1:D5
Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial: 010D0C9F43285847FF4A7D6D0E2C570B4F840C80
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/ed98aa57-d32e-3a51-850b-fcb85c818c67.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 21928
IP address blocks: 72.250.0.0/17 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:7d:6d:0e:2c:57:0b:4f:84:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=a1d81473-3719-4de4-a1c8-c87b234c9d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:df:88:7a:c7:be:b7:35:29:07:07:c8:67:06:
c8:93:a8:65:76:9e:8d:79:7a:06:3f:c0:c3:3b:e0:
c1:b0:bf:ed:93:ec:06:f9:cf:41:df:1b:48:ca:02:
1c:13:db:fe:d4:ba:38:2f:f1:13:aa:37:28:d1:fb:
d9:bd:5c:b3:3a:e1:7b:21:8d:d9:cc:54:56:dc:72:
f3:47:5c:f7:7f:37:ba:6c:9a:1c:f2:26:bd:6b:8b:
08:17:44:b9:60:de:aa:7a:ec:e4:34:51:34:86:74:
80:63:dc:3d:2a:0d:14:d9:3c:be:20:30:3c:48:e7:
7d:54:1e:a1:1b:a5:dd:32:fc:4a:b9:08:3c:8c:05:
c2:44:ee:01:89:3a:94:ba:4c:60:85:4b:50:13:ff:
44:9d:db:ee:db:d4:9c:19:46:f6:46:a5:11:81:e8:
3a:5c:26:70:68:be:ea:0f:cc:18:15:d9:96:92:5a:
e3:6b:c2:d8:16:3c:42:c0:fc:3f:19:eb:2e:93:2f:
81:23:4c:01:37:82:55:8e:97:b8:fc:cd:1a:ba:a2:
aa:66:c2:6b:ee:77:11:f1:94:57:10:cb:ee:ab:2f:
0c:3c:9a:50:ef:fb:1a:a4:60:2c:1a:d4:be:cd:6a:
8e:6f:8d:ab:94:c4:57:3c:e4:4d:d4:9e:3d:97:77:
91:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:00:2A:FF:D8:94:E2:21:A7:18:2D:C5:08:48:FC:76:56:05:F1:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/ed98aa57-d32e-3a51-850b-fcb85c818c67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
X509v3 Authority Key Identifier:
keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.250.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:4a:c8:8a:64:e2:57:0a:43:3b:ff:7c:17:70:0b:c0:3c:ee:
2b:6e:62:df:5d:01:f9:20:3c:3b:aa:c3:b0:f0:9b:06:bf:dd:
e4:69:52:fd:a3:83:ab:54:05:44:bf:38:67:fb:b0:d4:fb:aa:
09:d2:ef:41:fd:5f:28:ec:c7:8b:75:96:2f:67:20:c8:b5:1f:
91:d1:e4:57:b6:e2:c2:4a:8b:82:2c:90:21:f7:31:e3:ec:46:
2b:87:be:eb:aa:da:45:04:3f:72:fe:6e:91:5f:77:f1:59:36:
06:50:b5:47:7a:40:9f:66:59:cf:c0:f0:11:35:08:bf:45:03:
cc:68:cb:ac:98:ed:19:79:c9:56:81:1a:0f:8d:aa:46:8a:50:
2d:78:16:b6:24:df:62:2e:54:26:c0:69:be:64:81:5c:5c:b1:
00:6c:77:19:99:a2:5c:49:df:c6:4f:82:17:78:dc:26:d6:82:
c9:8b:3e:d1:22:f8:57:a2:99:ac:bd:44:fd:b3:ec:c0:ed:72:
62:50:21:73:9d:6a:dd:c8:bd:14:4b:20:0b:59:a3:8c:2d:97:
56:10:e7:e8:7c:0d:29:88:4b:67:04:47:f2:e1:8d:86:6f:61:
b1:7f:38:89:6b:fe:02:31:a0:73:be:47:ad:44:e7:bb:a5:c8:
2d:55:a3:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf/Sn1tDixXC0+EDIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm
MGMzMB4XDTI0MTEyNTE0MDAzOVoXDTI1MDIyMzE0MDAzOVowLzEtMCsGA1UEAxMk
YTFkODE0NzMtMzcxOS00ZGU0LWExYzgtYzg3YjIzNGM5ZDVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9t+Iese+tzUpBwfIZwbIk6hldp6NeXoGP8DD
O+DBsL/tk+wG+c9B3xtIygIcE9v+1Lo4L/ETqjco0fvZvVyzOuF7IY3ZzFRW3HLz
R1z3fze6bJoc8ia9a4sIF0S5YN6qeuzkNFE0hnSAY9w9Kg0U2Ty+IDA8SOd9VB6h
G6XdMvxKuQg8jAXCRO4BiTqUukxghUtQE/9Endvu29ScGUb2RqURgeg6XCZwaL7q
D8wYFdmWklrja8LYFjxCwPw/Gesuky+BI0wBN4JVjpe4/M0auqKqZsJr7ncR8ZRX
EMvuqy8MPJpQ7/sapGAsGtS+zWqOb42rlMRXPORN1J49l3eRSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB4AKv/YlOIhpxgtxQhI/HZWBfHVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm
MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvZWQ5OGFhNTctZDMyZS0z
YTUxLTg1MGItZmNiODVjODE4YzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk
OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl
ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi
ZjVjZWYwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSPoAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHZKyIpk4lcKQzv/fBdwC8A87ituYt9dAfkgPDuqw7Dwmwa/3eRpUv2j
g6tUBUS/OGf7sNT7qgnS70H9Xyjsx4t1li9nIMi1H5HR5Fe24sJKi4IskCH3MePs
RiuHvuuq2kUEP3L+bpFfd/FZNgZQtUd6QJ9mWc/A8BE1CL9FA8xoy6yY7Rl5yVaB
Gg+NqkaKUC14FrYk32IuVCbAab5kgVxcsQBsdxmZolxJ38ZPghd43CbWgsmLPtEi
+Feimay9RP2z7MDtcmJQIXOdat3IvRRLIAtZo4wtl1YQ5+h8DSmIS2cER/LhjYZv
YbF/OIlr/gIxoHO+R61E57ulyC1VoxQ=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:43:21 2025 by rpki-client