Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/4d5e8188-243c-3e1d-8dd9-99991af6feec.roa
File: 4d5e8188-243c-3e1d-8dd9-99991af6feec.roa (raw, json)
Hash identifier: etTCHhAJ+OONg7e9bwtwsIdbeBZWnicgeI0TDkCO+UQ=
Subject key identifier: 2B:68:B8:FA:7A:9C:8D:EB:DE:0E:68:06:BA:E7:18:07:8E:AB:5E:25
Certificate issuer: /CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd
Certificate serial: 010D0C9F4328584855D59C0403DBB989486034D0
Authority key identifier: 0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/4d5e8188-243c-3e1d-8dd9-99991af6feec.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 393474
IP address blocks: 64.90.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:9c:04:03:db:b9:89:48:60:34:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=8e1c114d-839f-46d4-aad1-68242e34bcdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5a:af:8c:2c:32:9c:ae:a5:0f:50:c2:46:d8:
e2:6b:db:1e:f8:2f:4e:e2:b5:95:ba:53:32:44:44:
bb:2d:b3:76:7a:10:84:3d:89:53:0b:d7:74:26:05:
97:62:68:22:42:58:bb:31:47:da:68:d6:16:ed:48:
65:8e:00:70:aa:38:0c:50:c5:b1:2b:74:98:15:b2:
c9:3e:f6:21:8a:2f:e0:e0:eb:01:2d:0b:c0:d4:3d:
ab:b2:2d:21:ab:44:ac:48:38:85:41:e6:db:53:71:
ec:00:31:6b:a0:46:22:ba:e4:67:7a:75:68:80:51:
12:78:d8:49:b3:01:8e:64:bf:1e:31:13:8f:fa:9a:
ff:55:69:47:82:ac:9b:8d:26:d9:eb:a4:70:69:ec:
f3:5c:f3:ca:a8:fb:8d:42:59:d0:b6:36:31:6a:c5:
1e:dd:ea:3d:d2:2e:22:cd:4e:34:2a:49:2b:bd:18:
0f:6d:53:53:de:56:7c:6c:87:11:d2:d8:ca:29:31:
dc:44:10:53:de:1a:df:98:f6:3b:d3:ed:d4:1a:b7:
24:9f:5a:59:dc:3c:22:aa:48:7d:ea:c1:ac:a0:9a:
72:30:5f:55:68:f0:cb:cc:fe:66:4d:63:03:40:22:
ba:3b:0d:53:6c:f1:95:21:01:d7:88:64:2a:f8:6f:
23:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:68:B8:FA:7A:9C:8D:EB:DE:0E:68:06:BA:E7:18:07:8E:AB:5E:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/4d5e8188-243c-3e1d-8dd9-99991af6feec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl
X509v3 Authority Key Identifier:
keyid:0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer
sbgp-ipAddrBlock: critical
IPv4:
64.90.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:bc:cc:2a:f8:d8:21:0a:64:0c:f0:cb:8d:01:7b:7e:93:f0:
75:84:44:b3:3d:cb:55:98:6c:0b:80:d2:fc:5d:f0:dd:4e:bb:
89:cb:85:7d:08:2b:9e:df:48:e9:ca:98:3e:06:8d:10:dd:31:
0d:02:a4:d4:f8:fa:51:ea:8a:bf:16:da:4a:ac:84:ca:d5:49:
9b:24:6e:ff:41:49:a6:a0:4b:35:39:ea:c0:19:e7:30:2f:6f:
fa:b0:f6:0c:8b:3d:30:f2:d2:1f:bc:a0:6c:74:cb:b8:4f:1d:
5f:b3:78:7c:bd:06:e3:51:ee:56:97:34:4e:17:d7:fe:f3:98:
1d:41:0e:2c:aa:87:38:03:e7:96:ee:d4:84:58:f2:16:79:f5:
34:de:53:37:07:05:5d:14:fb:64:ef:ad:ff:05:81:01:b9:13:
9a:30:7c:55:04:17:1d:ec:ea:d8:78:9e:a2:1a:2a:74:e9:13:
83:7a:9c:57:a0:96:57:28:84:36:9c:76:b5:58:a4:96:62:8f:
ad:e4:02:e3:b5:6e:d8:71:3e:c6:58:03:55:28:ca:45:10:49:
76:d1:8b:92:20:ae:cd:1d:85:95:b0:05:66:eb:01:88:ad:58:
43:78:1e:ce:4b:67:06:71:aa:58:9f:b3:a2:28:74:05:8a:dc:
97:1d:8b:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhV1ZwEA9u5iUhgNNAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMwMmRjOWMtMTJlOS00YjY2LThjNmQtZTI5OTRhMjFh
MWJkMB4XDTI0MTIyNjE0MDA1MloXDTI1MDMyNjEzMDA1MlowLzEtMCsGA1UEAxMk
OGUxYzExNGQtODM5Zi00NmQ0LWFhZDEtNjgyNDJlMzRiY2RkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VqvjCwynK6lD1DCRtjia9se+C9O4rWVulMy
RES7LbN2ehCEPYlTC9d0JgWXYmgiQli7MUfaaNYW7UhljgBwqjgMUMWxK3SYFbLJ
PvYhii/g4OsBLQvA1D2rsi0hq0SsSDiFQebbU3HsADFroEYiuuRnenVogFESeNhJ
swGOZL8eMROP+pr/VWlHgqybjSbZ66RwaezzXPPKqPuNQlnQtjYxasUe3eo90i4i
zU40KkkrvRgPbVNT3lZ8bIcR0tjKKTHcRBBT3hrfmPY70+3UGrckn1pZ3Dwiqkh9
6sGsoJpyMF9VaPDLzP5mTWMDQCK6Ow1TbPGVIQHXiGQq+G8jPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCtouPp6nI3r3g5oBrrnGAeOq14lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAy
ZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5NGEyMWExYmQvNGQ1ZTgxODgtMjQzYy0z
ZTFkLThkZDktOTk5OTFhZjZmZWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTMwMmRjOWMtMTJlOS00YjY2LThj
NmQtZTI5OTRhMjFhMWJkL2EzMDJkYzljLTEyZTktNGI2Ni04YzZkLWUyOTk0YTIx
YTFiZC5jcmwwHwYDVR0jBBgwFoAUD9wvbjNkX+N70ljHXoRo2VwdIpswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAyZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5
NGEyMWExYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACW8zCr42CEKZAzwy40Be36T8HWERLM9y1WYbAuA0vxd8N1Ou4nLhX0I
K57fSOnKmD4GjRDdMQ0CpNT4+lHqir8W2kqshMrVSZskbv9BSaagSzU56sAZ5zAv
b/qw9gyLPTDy0h+8oGx0y7hPHV+zeHy9BuNR7laXNE4X1/7zmB1BDiyqhzgD55bu
1IRY8hZ59TTeUzcHBV0U+2Tvrf8FgQG5E5owfFUEFx3s6th4nqIaKnTpE4N6nFeg
llcohDacdrVYpJZij63kAuO1bthxPsZYA1UoykUQSXbRi5Igrs0dhZWwBWbrAYit
WEN4Hs5LZwZxqlifs6IodAWK3Jcdi7w=
-----END CERTIFICATE-----
Generated at Wed Apr 30 12:38:15 2025 by rpki-client