Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c/658c0a8c-b51a-3721-9ba5-bd0cc80329d5.roa
File: 658c0a8c-b51a-3721-9ba5-bd0cc80329d5.roa (raw, json)
Hash identifier: z8LxCQyI9hFqiuA+CA6rGwcHdJFM+U/9D2rntwR8EPg=
Subject key identifier: BF:1A:FC:8C:9F:BD:C1:44:49:3D:9C:70:0D:06:1B:8A:40:E6:05:FA
Certificate issuer: /CN=05a4c80a-51b6-487d-a927-afcc950c360c
Certificate serial: 010D0C9F4328584854701F5EBBA107690623A710
Authority key identifier: A2:E5:5D:83:AB:ED:A3:FB:D1:4D:BD:CC:B8:B5:0D:57:1F:97:14:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c/658c0a8c-b51a-3721-9ba5-bd0cc80329d5.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 1239
IP address blocks: 74.117.114.0/23 maxlen: 23
74.117.116.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:1f:5e:bb:a1:07:69:06:23:a7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a4c80a-51b6-487d-a927-afcc950c360c
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=0ccb8522-d9f3-4f24-8282-3626460520d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cb:cf:c3:bc:3d:48:b0:8f:cf:19:b2:97:47:
62:50:b0:c7:45:50:09:f1:32:6a:b2:de:7c:a2:f3:
f9:14:22:d3:89:53:df:45:c3:27:6f:18:b1:1c:88:
34:9e:6f:2e:c7:ea:3c:c2:23:72:de:38:03:2f:b4:
6e:cb:25:43:81:08:3a:45:80:11:1c:85:dc:84:1d:
fc:a5:a6:35:df:a1:50:e2:db:8e:bc:bc:65:8c:59:
1e:6d:d3:e6:fd:4d:98:13:7a:ef:b6:4c:d8:f8:c3:
ca:14:e2:fc:f5:2b:35:d4:b3:63:6d:7b:3c:2a:73:
15:76:8f:43:c1:1d:54:37:b5:e6:fd:be:4f:ef:50:
52:e2:ca:11:1f:07:27:20:3b:36:cb:da:78:2c:77:
96:56:60:09:e3:47:11:35:39:29:89:cd:1c:cf:36:
e7:bf:b4:16:c9:3a:e8:ed:4e:1d:e7:ab:3d:fb:0c:
6c:84:7b:40:38:bf:c4:e3:3d:8e:56:b2:4c:5a:8b:
21:e2:d2:45:8c:4b:bc:d1:c3:c0:00:b3:84:ad:c0:
b2:72:3e:3d:f8:5b:a6:8c:4d:4f:53:6d:97:ec:51:
18:00:f2:76:b2:27:c7:6e:bd:a2:ff:1a:9f:a0:1c:
01:25:d7:73:23:f0:43:04:f3:2a:54:a4:c6:33:12:
fe:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1A:FC:8C:9F:BD:C1:44:49:3D:9C:70:0D:06:1B:8A:40:E6:05:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c/658c0a8c-b51a-3721-9ba5-bd0cc80329d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c/05a4c80a-51b6-487d-a927-afcc950c360c.crl
X509v3 Authority Key Identifier:
keyid:A2:E5:5D:83:AB:ED:A3:FB:D1:4D:BD:CC:B8:B5:0D:57:1F:97:14:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05a4c80a-51b6-487d-a927-afcc950c360c.cer
sbgp-ipAddrBlock: critical
IPv4:
74.117.114.0-74.117.119.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:f5:e1:49:0a:34:7d:e0:3e:86:57:91:b4:26:7e:98:42:e5:
72:5f:be:18:3d:07:fa:33:3a:b3:72:d8:11:18:f9:1b:92:b7:
bd:cb:6a:68:ba:bc:94:e9:1c:11:98:cc:3a:62:38:3f:9a:f9:
ac:e0:97:4b:51:0e:0c:c1:4f:ef:42:2d:02:1d:8b:2a:0f:46:
6b:c1:28:6c:71:b6:b0:b4:bc:b0:01:0d:8d:86:84:9e:7a:58:
cc:c9:26:31:0b:69:15:7c:d2:18:68:de:f7:be:e2:4a:2b:2a:
e1:ba:eb:72:cd:f2:bd:b9:09:8d:29:13:08:48:b3:65:15:85:
ef:86:90:76:51:53:13:2a:ae:22:6b:a8:f4:03:6b:b9:29:1d:
38:b9:c4:21:30:9a:19:66:6b:d9:44:b6:a6:b2:68:62:63:16:
97:67:ca:76:a6:b9:ee:74:5d:f5:df:00:bc:90:85:d4:ec:1b:
df:1e:54:76:a3:b2:ac:12:ed:f7:e6:d7:0b:54:c0:6f:dd:9a:
91:8e:af:c7:1a:58:31:d1:9a:e2:7f:95:de:72:18:13:e7:97:
57:e6:65:00:db:7a:de:54:91:73:a2:e2:46:bb:b0:07:12:b3:
50:b4:f6:68:a8:7e:e9:29:23:8b:33:ef:db:9f:7e:c2:b1:e1:
f2:cb:48:da
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEhUcB9eu6EHaQYjpxAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDVhNGM4MGEtNTFiNi00ODdkLWE5MjctYWZjYzk1MGMz
NjBjMB4XDTI0MTIyNjAyMDA0MFoXDTI1MDMyNjAxMDA0MFowLzEtMCsGA1UEAxMk
MGNjYjg1MjItZDlmMy00ZjI0LTgyODItMzYyNjQ2MDUyMGQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMvPw7w9SLCPzxmyl0diULDHRVAJ8TJqst58
ovP5FCLTiVPfRcMnbxixHIg0nm8ux+o8wiNy3jgDL7RuyyVDgQg6RYARHIXchB38
paY136FQ4tuOvLxljFkebdPm/U2YE3rvtkzY+MPKFOL89Ss11LNjbXs8KnMVdo9D
wR1UN7Xm/b5P71BS4soRHwcnIDs2y9p4LHeWVmAJ40cRNTkpic0czzbnv7QWyTro
7U4d56s9+wxshHtAOL/E4z2OVrJMWosh4tJFjEu80cPAALOErcCycj49+FumjE1P
U22X7FEYAPJ2sifHbr2i/xqfoBwBJddzI/BDBPMqVKTGMxL+awIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFL8a/IyfvcFEST2ccA0GG4pA5gX6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNWE0
YzgwYS01MWI2LTQ4N2QtYTkyNy1hZmNjOTUwYzM2MGMvNjU4YzBhOGMtYjUxYS0z
NzIxLTliYTUtYmQwY2M4MDMyOWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDVhNGM4MGEtNTFiNi00ODdkLWE5
MjctYWZjYzk1MGMzNjBjLzA1YTRjODBhLTUxYjYtNDg3ZC1hOTI3LWFmY2M5NTBj
MzYwYy5jcmwwHwYDVR0jBBgwFoAUouVdg6vto/vRTb3MuLUNVx+XFLEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wNWE0YzgwYS01MWI2LTQ4N2QtYTkyNy1hZmNj
OTUwYzM2MGMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFKdXID
BANKdXAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEATfXhSQo0feA+hleRtCZ+mELlcl++GD0H+jM6s3LYERj5
G5K3vctqaLq8lOkcEZjMOmI4P5r5rOCXS1EODMFP70ItAh2LKg9Ga8EobHG2sLS8
sAENjYaEnnpYzMkmMQtpFXzSGGje977iSisq4brrcs3yvbkJjSkTCEizZRWF74aQ
dlFTEyquImuo9ANruSkdOLnEITCaGWZr2US2prJoYmMWl2fKdqa57nRd9d8AvJCF
1Owb3x5UdqOyrBLt9+bXC1TAb92akY6vxxpYMdGa4n+V3nIYE+eXV+ZlANt63lSR
c6LiRruwBxKzULT2aKh+6SkjizPv259+wrHh8stI2g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:29 2025 by rpki-client