Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/dbccd6ac-04fa-3813-bcb5-b1effa5f1ef0.roa
File: dbccd6ac-04fa-3813-bcb5-b1effa5f1ef0.roa (raw, json)
Hash identifier: bAQ+uBl8Emo8+jgygg8VgqVqDzV2lODG/Syor0SsQJA=
Subject key identifier: 0B:59:E2:84:83:CE:8D:90:77:B7:FC:94:25:B7:52:62:49:F1:D7:64
Certificate issuer: /CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd
Certificate serial: 010D0C9F4328584858A05A481002ECCDE3A640C0
Authority key identifier: 0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/dbccd6ac-04fa-3813-bcb5-b1effa5f1ef0.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 40684
IP address blocks: 64.90.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:5a:48:10:02:ec:cd:e3:a6:40:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=180983b1-7d08-405b-86d9-78cee215bb48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:49:c4:51:62:45:10:38:ef:9a:87:67:c2:40:
de:eb:dc:cb:34:21:ca:e2:8b:84:a5:5f:b0:3d:45:
82:84:da:e1:8c:c4:90:5c:6e:32:f7:8f:c5:c7:7e:
42:05:a6:92:df:1d:9c:50:74:21:a4:05:fa:08:a0:
67:24:46:55:be:74:46:54:27:a6:53:fd:b7:70:53:
84:10:36:ca:3d:42:3d:78:a7:30:af:84:d0:a6:99:
84:8a:b5:39:e8:1c:de:33:1b:19:b4:12:da:31:82:
60:a8:7c:c1:7e:c5:60:18:8c:16:af:5f:6d:99:44:
c5:e2:7a:ee:05:45:8d:21:f7:1b:e3:8c:b9:d0:1a:
04:17:4f:7c:57:5e:cc:5c:52:4d:26:f6:ee:76:a5:
ac:56:a2:26:6c:57:7b:fc:88:a1:7e:cf:ac:d0:e0:
41:e3:30:16:5f:58:68:93:b0:56:c4:e1:12:ff:ee:
cc:69:ea:57:4e:e6:2d:2a:16:31:eb:9f:ea:4d:84:
fa:a6:85:cb:d6:df:ab:2a:52:8b:59:4c:b0:04:4d:
93:42:72:50:e5:59:2e:bb:9d:3c:9b:b6:da:73:91:
37:d6:2e:61:26:aa:5c:cc:e8:de:92:a0:b0:2f:37:
43:2e:92:da:00:66:7f:18:5e:22:73:ed:a8:9f:f3:
25:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:59:E2:84:83:CE:8D:90:77:B7:FC:94:25:B7:52:62:49:F1:D7:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/dbccd6ac-04fa-3813-bcb5-b1effa5f1ef0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl
X509v3 Authority Key Identifier:
keyid:0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer
sbgp-ipAddrBlock: critical
IPv4:
64.90.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:9e:62:18:30:c6:0d:4c:e9:39:70:42:11:60:f5:a3:53:a7:
fb:f2:ff:cc:83:a9:bf:8e:1e:e2:cd:89:d2:1f:0d:3d:cc:e2:
d1:fa:0f:31:2c:b7:85:9f:38:69:47:27:7e:1e:c3:c5:36:b0:
a8:ca:a3:6f:e4:50:fa:1e:fc:be:62:77:e5:31:0a:24:c4:de:
c9:55:9c:94:84:7c:d4:ac:d8:cb:4e:86:36:ee:fd:7c:ac:02:
85:f4:39:4b:98:ac:60:d4:3c:5c:e5:e6:c8:90:cf:dd:71:ba:
fd:21:e8:15:31:a1:a5:28:ff:35:cc:68:55:1a:f4:52:eb:82:
3f:25:f5:48:6c:58:97:3d:25:0e:f2:84:ff:d3:c0:b0:3b:c1:
7c:68:8a:71:a7:2b:f0:c8:a9:55:d6:8e:57:9b:88:46:02:e6:
ca:e8:da:2b:95:4d:1e:e0:98:23:c5:38:9e:d1:68:87:9d:26:
e9:99:95:49:af:38:59:11:cf:0d:6b:e5:95:de:2e:17:39:69:
bb:84:d8:fa:f9:b7:75:fc:52:db:1e:0a:ce:13:78:6e:5e:3b:
e7:71:c1:2e:a1:f8:38:ff:bc:0a:b2:b5:af:3b:37:06:09:84:
21:33:e9:44:3b:7e:28:21:65:1c:1a:a0:40:be:6b:0d:ad:d8:
9c:11:57:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhYoFpIEALszeOmQMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMwMmRjOWMtMTJlOS00YjY2LThjNmQtZTI5OTRhMjFh
MWJkMB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk
MTgwOTgzYjEtN2QwOC00MDViLTg2ZDktNzhjZWUyMTViYjQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UnEUWJFEDjvmodnwkDe69zLNCHK4ouEpV+w
PUWChNrhjMSQXG4y94/Fx35CBaaS3x2cUHQhpAX6CKBnJEZVvnRGVCemU/23cFOE
EDbKPUI9eKcwr4TQppmEirU56BzeMxsZtBLaMYJgqHzBfsVgGIwWr19tmUTF4nru
BUWNIfcb44y50BoEF098V17MXFJNJvbudqWsVqImbFd7/Iihfs+s0OBB4zAWX1ho
k7BWxOES/+7MaepXTuYtKhYx65/qTYT6poXL1t+rKlKLWUywBE2TQnJQ5Vkuu508
m7bac5E31i5hJqpczOjekqCwLzdDLpLaAGZ/GF4ic+2on/MlFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAtZ4oSDzo2Qd7f8lCW3UmJJ8ddkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAy
ZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5NGEyMWExYmQvZGJjY2Q2YWMtMDRmYS0z
ODEzLWJjYjUtYjFlZmZhNWYxZWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTMwMmRjOWMtMTJlOS00YjY2LThj
NmQtZTI5OTRhMjFhMWJkL2EzMDJkYzljLTEyZTktNGI2Ni04YzZkLWUyOTk0YTIx
YTFiZC5jcmwwHwYDVR0jBBgwFoAUD9wvbjNkX+N70ljHXoRo2VwdIpswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAyZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5
NGEyMWExYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFqDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHmeYhgwxg1M6TlwQhFg9aNTp/vy/8yDqb+OHuLNidIfDT3M4tH6DzEs
t4WfOGlHJ34ew8U2sKjKo2/kUPoe/L5id+UxCiTE3slVnJSEfNSs2MtOhjbu/Xys
AoX0OUuYrGDUPFzl5siQz91xuv0h6BUxoaUo/zXMaFUa9FLrgj8l9UhsWJc9JQ7y
hP/TwLA7wXxoinGnK/DIqVXWjlebiEYC5sro2iuVTR7gmCPFOJ7RaIedJumZlUmv
OFkRzw1r5ZXeLhc5abuE2Pr5t3X8UtseCs4TeG5eO+dxwS6h+Dj/vAqyta87NwYJ
hCEz6UQ7fighZRwaoEC+aw2t2JwRVxk=
-----END CERTIFICATE-----
Generated at Thu May 1 01:14:31 2025 by rpki-client