Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/352215aa-f91f-3436-aa17-1678b2863246.roa
File: 352215aa-f91f-3436-aa17-1678b2863246.roa (raw, json)
Hash identifier: JknVWT0D5M6Wb85BU0LnVMAihIAvcjwXOYzFDCaHjAE=
Subject key identifier: CC:01:FF:FC:B6:8D:E2:6E:E6:E1:69:CC:F3:1A:47:37:98:62:42:65
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F432858486695B98E16580E7F0DA61300
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/352215aa-f91f-3436-aa17-1678b2863246.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 13414
IP address blocks: 64.63.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:b9:8e:16:58:0e:7f:0d:a6:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=37d8089e-4180-4a36-b683-6bc4dcee9f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:04:3c:4a:f2:9d:c8:cc:f4:ee:0f:08:8b:8c:
00:e4:70:bd:ed:ef:db:95:0c:d7:79:5c:15:de:68:
1a:2c:b1:fd:24:b9:37:31:bd:3e:a8:57:11:8b:1d:
ba:ef:1a:44:f3:62:e4:cf:31:14:c1:cb:00:9b:e1:
2e:a9:dc:80:59:de:68:a4:b6:a6:db:17:d6:78:75:
4f:c9:a1:52:8f:98:12:cf:e6:f8:f5:14:ea:a4:5b:
6b:94:0a:fd:4d:94:4e:86:24:ad:30:96:be:ca:c1:
43:f5:5a:f5:81:0d:6e:03:51:36:8e:39:5f:e1:47:
fb:73:83:a6:24:d3:ae:a5:d2:8d:9b:52:24:70:45:
bf:09:30:0c:a1:dd:ff:da:ff:65:78:34:41:c6:40:
ea:66:4f:0e:e2:74:33:7b:c7:e2:34:39:36:f2:98:
9d:22:29:d9:f0:a6:5b:1b:97:41:d7:b9:af:ba:9c:
cc:57:52:b8:d0:34:58:9c:4b:b9:8d:f2:66:fb:88:
4b:75:0e:a0:53:66:66:2d:d3:a7:2d:47:ad:0a:f9:
ad:08:06:e3:07:76:0e:b4:55:1a:cb:b7:4e:7e:a9:
52:d9:87:cc:8e:02:be:18:1b:91:db:d6:ee:07:6a:
0d:94:3a:1c:2d:41:c5:d4:ec:83:d1:cc:aa:55:fa:
30:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:01:FF:FC:B6:8D:E2:6E:E6:E1:69:CC:F3:1A:47:37:98:62:42:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/352215aa-f91f-3436-aa17-1678b2863246.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
64.63.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:ff:3d:46:c6:92:c2:41:92:e6:9e:61:2d:a9:67:f3:d2:b0:
09:92:d2:bd:bf:1c:cb:5f:2f:5d:a5:91:fb:3a:10:57:8a:e6:
f0:d5:7d:a5:4e:43:fd:10:34:39:2a:ee:b1:2f:77:a0:86:78:
99:9b:2e:f4:bd:fb:65:a1:47:5e:ca:b8:59:3f:ce:f0:07:27:
10:77:ad:0d:b6:c6:a7:b3:ad:67:58:73:48:21:50:9e:01:76:
44:83:ea:ca:a6:51:4f:bb:37:93:7d:c0:4e:60:dd:95:c9:26:
68:45:f6:02:fa:15:49:04:45:cb:14:ac:b7:11:f3:96:77:e4:
4d:92:d6:39:ad:fb:70:9a:98:51:1a:6c:7a:0b:d4:f0:89:ee:
8e:02:98:6e:59:27:8a:22:81:83:90:3d:ae:7f:e3:22:f9:7c:
af:d4:bd:43:f3:3b:af:f4:15:ad:4f:dc:21:55:0e:35:9d:d8:
c9:d9:f8:38:ae:28:26:b3:d2:05:ed:48:0f:a9:67:27:35:24:
f3:75:81:c2:23:45:82:11:65:6a:f6:a4:a0:4c:de:29:98:38:
99:56:74:ef:44:99:11:16:32:53:0b:d2:d8:17:90:7d:8f:97:
1d:ed:bd:51:49:f8:67:b9:12:e0:df:59:a0:13:19:ff:9a:a7:
3f:09:b0:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhmlbmOFlgOfw2mEwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy
NTc2MB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk
MzdkODA4OWUtNDE4MC00YTM2LWI2ODMtNmJjNGRjZWU5ZjY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgQ8SvKdyMz07g8Ii4wA5HC97e/blQzXeVwV
3mgaLLH9JLk3Mb0+qFcRix267xpE82LkzzEUwcsAm+EuqdyAWd5opLam2xfWeHVP
yaFSj5gSz+b49RTqpFtrlAr9TZROhiStMJa+ysFD9Vr1gQ1uA1E2jjlf4Uf7c4Om
JNOupdKNm1IkcEW/CTAMod3/2v9leDRBxkDqZk8O4nQze8fiNDk28pidIinZ8KZb
G5dB17mvupzMV1K40DRYnEu5jfJm+4hLdQ6gU2ZmLdOnLUetCvmtCAbjB3YOtFUa
y7dOfqlS2YfMjgK+GBuR29buB2oNlDocLUHF1OyD0cyqVfowHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMwB//y2jeJu5uFpzPMaRzeYYkJlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3
YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvMzUyMjE1YWEtZjkxZi0z
NDM2LWFhMTctMTY3OGIyODYzMjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3
YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi
MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh
NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD8DMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL3/PUbGksJBkuaeYS2pZ/PSsAmS0r2/HMtfL12lkfs6EFeK5vDVfaVO
Q/0QNDkq7rEvd6CGeJmbLvS9+2WhR17KuFk/zvAHJxB3rQ22xqezrWdYc0ghUJ4B
dkSD6sqmUU+7N5N9wE5g3ZXJJmhF9gL6FUkERcsUrLcR85Z35E2S1jmt+3CamFEa
bHoL1PCJ7o4CmG5ZJ4oigYOQPa5/4yL5fK/UvUPzO6/0Fa1P3CFVDjWd2MnZ+Diu
KCaz0gXtSA+pZyc1JPN1gcIjRYIRZWr2pKBM3imYOJlWdO9EmREWMlML0tgXkH2P
lx3tvVFJ+Ge5EuDfWaATGf+apz8JsIs=
-----END CERTIFICATE-----
Generated at Tue Apr 29 13:14:11 2025 by rpki-client