Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa
File: 9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa (raw, json)
Hash identifier: vM7isYLJul12SndaMpLm9NsQ2sOIvMWQTfkBPwCqO2M=
Subject key identifier: 01:72:A9:93:EB:7F:6B:CA:BC:7A:EB:F4:88:B1:A9:F4:F0:F3:36:C1
Certificate issuer: /CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d
Certificate serial: 010D0C9F432858483B50141945E18B92A9598180
Authority key identifier: 4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 54579
IP address blocks: 65.255.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:50:14:19:45:e1:8b:92:a9:59:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=277bef10-7742-457a-bb02-1002086655f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:32:e2:d0:9c:1e:e4:53:2a:57:13:76:62:3c:
79:32:7f:50:8c:7d:d5:6c:dd:fe:fa:c3:61:76:e7:
55:ad:38:91:27:3e:c2:f0:b0:4e:9f:5d:22:63:6e:
26:22:f0:8a:19:09:b2:b3:93:5e:32:3b:76:b1:c9:
c0:57:1c:35:b4:8e:fe:ec:da:57:57:28:de:45:07:
4a:79:34:d0:e2:3e:2c:63:b0:00:9e:1a:4c:21:27:
93:c5:7b:08:86:33:f0:81:02:70:99:10:a0:c8:79:
23:1f:c0:4d:b0:54:5a:2f:f0:2d:42:c8:68:2a:33:
ea:49:ed:3d:21:20:be:a4:ef:4f:0c:1e:2a:5b:3d:
e7:95:fa:41:44:29:d4:e1:4b:a6:08:f6:01:4f:1a:
38:d8:e6:48:5e:6b:58:30:55:82:30:a1:04:0d:c8:
8f:53:87:e9:e2:b7:a2:d3:c9:16:ce:28:15:7e:45:
6c:98:74:3e:35:4f:34:06:3f:2f:36:83:b2:99:f4:
fd:a9:cd:1a:27:83:63:35:36:68:78:89:d9:e6:3f:
c3:34:5c:bb:76:4c:fe:58:43:ad:fc:40:86:c2:a8:
e9:ad:86:f0:14:2e:b8:f4:38:18:1a:cd:0e:28:e1:
fc:29:d8:7b:e4:48:78:cc:89:9a:0c:0e:fd:7c:dc:
97:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:72:A9:93:EB:7F:6B:CA:BC:7A:EB:F4:88:B1:A9:F4:F0:F3:36:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl
X509v3 Authority Key Identifier:
keyid:4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer
sbgp-ipAddrBlock: critical
IPv4:
65.255.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:4a:17:de:d6:16:9f:0b:ad:f2:70:04:1f:e5:01:9c:d0:f8:
8f:00:be:a8:e9:60:35:14:e5:88:ad:ca:90:19:fb:d2:12:e5:
97:91:dc:17:d7:94:28:ff:41:1e:d3:85:94:e0:08:58:22:19:
03:3f:01:ca:66:ce:2c:51:09:13:cf:7b:04:84:0b:d1:bd:ae:
07:30:28:9f:7b:97:c3:fc:47:96:24:d9:be:d4:bb:d5:b7:be:
89:11:1f:2f:90:03:ee:2d:2f:06:96:1d:56:47:fa:6d:1b:ce:
f1:c5:a1:59:d1:ec:d5:b6:b4:25:54:9c:e4:8d:d7:ee:cf:bb:
d5:04:75:5d:d3:f4:8a:a2:4c:6a:92:06:53:84:16:9f:56:64:
53:1e:57:dc:6b:b4:da:4f:69:e6:d6:ad:05:f0:25:8c:d9:5c:
59:03:e6:76:f1:45:7f:36:da:71:d1:2f:22:68:88:2b:b1:90:
03:8e:a7:96:62:2f:0b:40:c7:42:5b:15:3d:6e:6c:d1:bb:02:
f9:89:3a:99:bf:d6:ce:a2:cd:69:9b:30:6c:78:94:5d:39:d9:
85:53:ad:5c:99:c8:e9:8c:73:14:16:bc:84:bb:cd:9d:c2:d9:
a1:87:9e:d0:7b:1a:ed:be:f7:6f:7e:00:b2:84:14:01:60:15:
4d:7e:6b:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg7UBQZReGLkqlZgYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGM4NWU0MmQtMjE3MS00ZjZkLTgzN2YtM2Y3YmFjOWQ5
YTNkMB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk
Mjc3YmVmMTAtNzc0Mi00NTdhLWJiMDItMTAwMjA4NjY1NWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DLi0Jwe5FMqVxN2Yjx5Mn9QjH3VbN3++sNh
dudVrTiRJz7C8LBOn10iY24mIvCKGQmys5NeMjt2scnAVxw1tI7+7NpXVyjeRQdK
eTTQ4j4sY7AAnhpMISeTxXsIhjPwgQJwmRCgyHkjH8BNsFRaL/AtQshoKjPqSe09
ISC+pO9PDB4qWz3nlfpBRCnU4UumCPYBTxo42OZIXmtYMFWCMKEEDciPU4fp4rei
08kWzigVfkVsmHQ+NU80Bj8vNoOymfT9qc0aJ4NjNTZoeInZ5j/DNFy7dkz+WEOt
/ECGwqjprYbwFC649DgYGs0OKOH8Kdh75Eh4zImaDA79fNyXrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAFyqZPrf2vKvHrr9IixqfTw8zbBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1
ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdiYWM5ZDlhM2QvOWM4ZTE3YTAtYjYyNC0z
Yjk4LTkyZTctZmJkNDBmMWY1ZWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGM4NWU0MmQtMjE3MS00ZjZkLTgz
N2YtM2Y3YmFjOWQ5YTNkLzRjODVlNDJkLTIxNzEtNGY2ZC04MzdmLTNmN2JhYzlk
OWEzZC5jcmwwHwYDVR0jBBgwFoAUTDFDQUt7GHUNpYNAQhF9TZUOowwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdi
YWM5ZDlhM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQf+CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJdKF97WFp8LrfJwBB/lAZzQ+I8AvqjpYDUU5YitypAZ+9IS5ZeR3BfX
lCj/QR7ThZTgCFgiGQM/AcpmzixRCRPPewSEC9G9rgcwKJ97l8P8R5Yk2b7Uu9W3
vokRHy+QA+4tLwaWHVZH+m0bzvHFoVnR7NW2tCVUnOSN1+7Pu9UEdV3T9IqiTGqS
BlOEFp9WZFMeV9xrtNpPaebWrQXwJYzZXFkD5nbxRX822nHRLyJoiCuxkAOOp5Zi
LwtAx0JbFT1ubNG7AvmJOpm/1s6izWmbMGx4lF052YVTrVyZyOmMcxQWvIS7zZ3C
2aGHntB7Gu2+929+ALKEFAFgFU1+a4Q=
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:40:10 2025 by rpki-client