Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/3c81c484-0624-3ef9-90d4-536d42c6b168.roa
File: 3c81c484-0624-3ef9-90d4-536d42c6b168.roa (raw, json)
Hash identifier: u+smxjWhvKHi28DMQbFp9XHXpiPhfCxM27MEG4Md3cI=
Subject key identifier: 05:F7:19:14:01:BA:F9:F0:34:89:05:BE:A8:17:38:A3:6C:20:DE:F0
Certificate issuer: /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial: 010D0C9F432858486695C129E390D92E05891400
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/3c81c484-0624-3ef9-90d4-536d42c6b168.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 3695
IP address blocks: 70.36.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:c1:29:e3:90:d9:2e:05:89:14:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=463c05a1-f048-4b62-94d9-834be346f743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c0:5a:1e:b1:31:a9:70:7c:dd:09:cb:36:e2:
4c:35:27:62:cc:e6:f2:8a:3d:d0:14:96:47:9d:70:
c1:3e:a7:25:47:93:05:85:65:cd:a1:73:cd:99:f1:
ed:41:2f:63:fc:5f:69:57:30:0a:1c:bc:09:f5:c7:
2f:d8:66:a8:22:35:37:2f:f7:b9:20:b0:7d:17:f5:
28:b1:83:2e:80:9e:3b:c5:21:8c:14:e7:7c:2b:eb:
94:de:dd:70:9e:72:70:0c:ec:e5:fa:a2:c3:d2:97:
58:11:07:b5:c8:87:8a:b4:54:c1:91:c7:2d:d8:2d:
fa:4c:ee:3e:d0:f5:ac:92:ce:4c:6d:23:bf:73:4b:
00:c0:e1:df:a1:4b:7c:47:a5:57:c1:45:b6:b3:31:
8b:67:5d:5e:e8:d7:46:73:c8:4e:49:5c:eb:a0:48:
b5:c7:a9:75:9d:c3:7b:46:f8:da:ad:f6:ee:fe:3a:
8c:4f:81:a9:9c:93:46:54:a0:fd:e6:eb:43:40:8f:
53:b4:29:bc:12:11:d5:a4:07:d8:a2:2b:90:a0:13:
c3:1d:08:81:d3:3f:19:52:e7:09:b7:6f:bd:ad:8b:
82:b3:e5:85:6b:7d:e8:0b:e6:39:8a:28:94:95:5b:
7f:fa:2b:85:bd:b9:65:28:ae:7a:9a:63:e1:54:22:
9a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F7:19:14:01:BA:F9:F0:34:89:05:BE:A8:17:38:A3:6C:20:DE:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/3c81c484-0624-3ef9-90d4-536d42c6b168.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
X509v3 Authority Key Identifier:
keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
sbgp-ipAddrBlock: critical
IPv4:
70.36.10.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:78:e8:61:b4:5c:9e:e3:14:a2:47:61:8a:15:fb:1f:48:d6:
d9:4b:6d:a4:f6:ca:0f:34:9d:bc:8e:08:7a:71:94:db:6e:01:
03:60:45:a4:11:61:9e:1c:20:11:42:c3:6b:1d:fa:64:ba:89:
bd:92:72:8c:0c:e6:d1:38:18:f2:98:ff:77:fc:ec:8d:e9:c9:
ab:fe:2c:c0:5d:3d:a6:ae:09:06:8c:83:c2:8f:ff:89:ae:de:
a1:36:33:80:90:33:1c:83:e0:1b:10:f7:90:84:59:52:ce:e3:
72:1d:28:8f:ee:66:00:93:6e:2e:3c:b5:30:9f:90:81:b8:01:
c4:e0:73:57:51:6e:22:68:e0:2e:2c:d5:22:3f:a7:f3:d9:c4:
42:18:40:49:1e:cd:6b:42:eb:1b:c2:ff:1b:b7:e8:cf:65:5e:
07:84:c6:0b:36:84:66:2f:65:bb:09:a9:53:15:12:0b:44:d7:
99:84:ad:77:bf:e6:51:d5:7c:cf:67:be:46:65:5e:9c:5e:fa:
56:df:95:4d:06:50:a6:de:60:6a:ad:3d:48:cb:d5:cd:b9:76:
d9:95:48:93:69:fa:1b:f9:98:2a:3e:fd:9c:87:fe:6e:2e:f2:
e5:7e:b6:f4:a7:81:dd:d5:7c:64:c4:72:41:88:73:55:cc:76:
f1:ed:92:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhmlcEp45DZLgWJFAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjljZDhiYzQtNWUzYy00Y2M4LTk0MWUtMDg0MDQzZWZi
NTIwMB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk
NDYzYzA1YTEtZjA0OC00YjYyLTk0ZDktODM0YmUzNDZmNzQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cBaHrExqXB83QnLNuJMNSdizObyij3QFJZH
nXDBPqclR5MFhWXNoXPNmfHtQS9j/F9pVzAKHLwJ9ccv2GaoIjU3L/e5ILB9F/Uo
sYMugJ47xSGMFOd8K+uU3t1wnnJwDOzl+qLD0pdYEQe1yIeKtFTBkcct2C36TO4+
0PWsks5MbSO/c0sAwOHfoUt8R6VXwUW2szGLZ11e6NdGc8hOSVzroEi1x6l1ncN7
Rvjarfbu/jqMT4GpnJNGVKD95utDQI9TtCm8EhHVpAfYoiuQoBPDHQiB0z8ZUucJ
t2+9rYuCs+WFa33oC+Y5iiiUlVt/+iuFvbllKK56mmPhVCKavwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAX3GRQBuvnwNIkFvqgXOKNsIN7wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82OWNk
OGJjNC01ZTNjLTRjYzgtOTQxZS0wODQwNDNlZmI1MjAvM2M4MWM0ODQtMDYyNC0z
ZWY5LTkwZDQtNTM2ZDQyYzZiMTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjljZDhiYzQtNWUzYy00Y2M4LTk0
MWUtMDg0MDQzZWZiNTIwLzY5Y2Q4YmM0LTVlM2MtNGNjOC05NDFlLTA4NDA0M2Vm
YjUyMC5jcmwwHwYDVR0jBBgwFoAU8u5yVm4HrBcrJBWRIoc0mDBvYIkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82OWNkOGJjNC01ZTNjLTRjYzgtOTQxZS0wODQw
NDNlZmI1MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiQKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJh46GG0XJ7jFKJHYYoV+x9I1tlLbaT2yg80nbyOCHpxlNtuAQNgRaQR
YZ4cIBFCw2sd+mS6ib2ScowM5tE4GPKY/3f87I3pyav+LMBdPaauCQaMg8KP/4mu
3qE2M4CQMxyD4BsQ95CEWVLO43IdKI/uZgCTbi48tTCfkIG4AcTgc1dRbiJo4C4s
1SI/p/PZxEIYQEkezWtC6xvC/xu36M9lXgeExgs2hGYvZbsJqVMVEgtE15mErXe/
5lHVfM9nvkZlXpxe+lbflU0GUKbeYGqtPUjL1c25dtmVSJNp+hv5mCo+/ZyH/m4u
8uV+tvSngd3VfGTEckGIc1XMdvHtklk=
-----END CERTIFICATE-----
Generated at Mon May 12 12:05:26 2025 by rpki-client