Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f15ef9f7-f2ef-319b-b8bf-9a280155f03f.roa
File: f15ef9f7-f2ef-319b-b8bf-9a280155f03f.roa (raw, json)
Hash identifier: pAz/onW63M71o0w/dyc1VGbl+wlWkaL3f1txcExN1QI=
Subject key identifier: 59:CC:71:A7:AC:C8:3A:73:CA:D9:51:AC:3F:9E:A7:F5:F1:79:7A:E7
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F432858486695BABC0A1F6346DBFD4600
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f15ef9f7-f2ef-319b-b8bf-9a280155f03f.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 13414
IP address blocks: 64.63.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:ba:bc:0a:1f:63:46:db:fd:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=cfca6506-bad6-4888-a14c-b99c71973975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:56:cf:43:5a:f8:64:a3:3d:2f:2b:25:e7:5e:
b9:c4:41:32:a6:c6:ef:1d:e8:aa:ae:ce:47:54:87:
e6:72:0a:78:18:d4:75:98:6f:1d:06:4c:a4:b9:d9:
0a:90:40:4c:ea:0f:d9:66:f7:3c:5e:10:79:fe:71:
43:3b:bc:ec:04:d4:9d:10:c8:59:12:bd:aa:61:b7:
be:e3:46:7e:f1:24:45:05:60:51:f0:1f:fb:b8:cd:
60:37:88:48:31:52:c1:4a:94:a9:54:c8:5e:ae:68:
6a:26:d4:32:01:38:ab:3c:43:48:10:0b:53:87:70:
df:c3:d4:44:46:5d:d4:2a:29:42:cd:15:43:fd:41:
8a:1a:10:7f:9d:d8:de:e0:28:7a:c2:ef:dd:68:e1:
57:8d:30:05:ab:b2:a7:71:bb:44:17:7b:73:44:6b:
5f:f3:bd:53:9b:00:fa:3a:6d:f9:fc:d3:bc:85:67:
e6:99:9f:1a:4b:f7:54:19:55:b0:7e:f9:26:44:44:
5c:c4:98:cf:28:30:06:b6:25:46:c3:1b:b7:7e:4d:
50:bc:de:c3:63:57:4a:96:ee:c3:fa:f3:e1:52:c7:
bf:f5:79:0c:10:fd:a5:5c:94:c5:6a:f4:ab:e7:38:
81:61:30:21:e3:d8:43:22:dd:05:5f:73:5a:27:26:
d4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CC:71:A7:AC:C8:3A:73:CA:D9:51:AC:3F:9E:A7:F5:F1:79:7A:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f15ef9f7-f2ef-319b-b8bf-9a280155f03f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
64.63.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:93:db:66:02:54:10:eb:64:79:da:00:4d:e4:aa:ba:af:e7:
dc:09:e0:63:ac:6e:42:43:16:ad:75:a2:4f:14:01:59:51:17:
d2:f7:0c:d4:e0:d3:35:d7:0d:d1:5d:3f:75:18:07:ea:06:c3:
1b:8d:b9:0c:4f:68:f6:7e:56:05:c3:57:8e:d2:e8:df:71:a4:
31:81:4b:e0:2e:40:e8:95:e9:75:69:6d:0a:c9:48:7f:e7:ae:
9a:00:1e:e7:51:17:7d:92:cf:98:00:85:96:7d:ac:35:28:fa:
ed:22:40:27:f7:61:37:ee:6a:8b:19:1a:33:ff:75:3b:85:63:
63:5f:7c:b8:2c:23:59:b9:81:e7:a1:b5:fb:d2:f4:98:32:24:
fa:81:f0:c7:de:06:c0:4e:21:0e:ba:fe:ca:ca:04:5a:1b:95:
be:c8:2f:6d:4b:4b:3d:c6:c9:9c:f6:dd:8f:59:7b:88:8a:67:
52:1a:48:fa:25:2f:63:4c:eb:a3:87:7e:d9:b2:c8:bf:60:c3:
3f:13:c2:45:ec:66:42:00:ee:23:82:38:ab:95:bf:4d:a3:2b:
a6:8a:77:e2:d6:f4:e0:ed:25:ab:15:f3:6a:91:a6:39:7d:e0:
fa:1d:cb:40:ea:21:3e:20:df:73:cf:41:39:13:46:8c:d2:11:
fb:74:4b:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhmlbq8Ch9jRtv9RgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy
NTc2MB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk
Y2ZjYTY1MDYtYmFkNi00ODg4LWExNGMtYjk5YzcxOTczOTc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlbPQ1r4ZKM9Lysl5165xEEypsbvHeiqrs5H
VIfmcgp4GNR1mG8dBkykudkKkEBM6g/ZZvc8XhB5/nFDO7zsBNSdEMhZEr2qYbe+
40Z+8SRFBWBR8B/7uM1gN4hIMVLBSpSpVMhermhqJtQyATirPENIEAtTh3Dfw9RE
Rl3UKilCzRVD/UGKGhB/ndje4Ch6wu/daOFXjTAFq7KncbtEF3tzRGtf871TmwD6
Om35/NO8hWfmmZ8aS/dUGVWwfvkmRERcxJjPKDAGtiVGwxu3fk1QvN7DY1dKlu7D
+vPhUse/9XkMEP2lXJTFavSr5ziBYTAh49hDIt0FX3NaJybUzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFnMcaesyDpzytlRrD+ep/XxeXrnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3
YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvZjE1ZWY5ZjctZjJlZi0z
MTliLWI4YmYtOWEyODAxNTVmMDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3
YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi
MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh
NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD8XMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALOT22YCVBDrZHnaAE3kqrqv59wJ4GOsbkJDFq11ok8UAVlRF9L3DNTg
0zXXDdFdP3UYB+oGwxuNuQxPaPZ+VgXDV47S6N9xpDGBS+AuQOiV6XVpbQrJSH/n
rpoAHudRF32Sz5gAhZZ9rDUo+u0iQCf3YTfuaosZGjP/dTuFY2NffLgsI1m5geeh
tfvS9JgyJPqB8MfeBsBOIQ66/srKBFoblb7IL21LSz3GyZz23Y9Ze4iKZ1IaSPol
L2NM66OHftmyyL9gwz8TwkXsZkIA7iOCOKuVv02jK6aKd+LW9ODtJasV82qRpjl9
4Pody0DqIT4g33PPQTkTRozSEft0S6M=
-----END CERTIFICATE-----
Generated at Tue Apr 29 17:50:04 2025 by rpki-client