Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/3c6d8797-9f4c-3a12-be1a-b453781af765.roa
File: 3c6d8797-9f4c-3a12-be1a-b453781af765.roa (raw, json)
Hash identifier: qh29axjA8cW0Id2NiYUV8MAjgxgyXhu7tfoqqX+5Hr0=
Subject key identifier: 7C:B7:F9:1C:F7:C4:D2:B3:5B:DE:51:DE:25:C4:21:69:DD:2C:02:86
Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial: 010D0C9F432858483B5010F5E04461A3F21B9080
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/3c6d8797-9f4c-3a12-be1a-b453781af765.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 6401
IP address blocks: 74.216.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:50:10:f5:e0:44:61:a3:f2:1b:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=b2542430-a525-44ef-aecc-2323329677cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:87:09:0f:7d:e0:a2:57:73:18:91:8b:f4:50:
6f:e0:64:b2:c0:1e:63:eb:96:20:0b:06:a3:72:11:
fd:79:fd:6e:fe:1e:6f:82:71:bf:72:ae:e3:ba:95:
4e:18:eb:18:bf:f2:23:4c:9e:b1:dd:1f:09:2a:f4:
cf:42:ca:af:fc:31:3a:c6:a3:50:54:b0:e0:94:0d:
04:44:e5:cc:5f:c4:27:cb:c4:a8:eb:bb:54:d1:23:
9d:b0:02:7a:61:bb:09:97:22:82:71:7a:56:d8:f0:
0f:f6:61:7a:67:81:39:7c:a0:6a:a9:d3:ba:9f:50:
6c:e0:15:78:f5:2e:08:60:44:58:12:1d:42:23:73:
f4:4e:5b:97:72:17:ff:dd:3d:de:98:a9:64:dd:85:
c5:fa:64:93:2a:c8:22:21:14:74:23:eb:31:51:f9:
64:fb:6a:7d:da:c4:9f:e3:58:6c:7f:e2:db:5b:df:
c6:9e:01:62:fd:78:00:6a:49:be:78:13:5f:e0:87:
56:1c:2e:52:cb:cf:a7:f8:5c:d8:c1:5e:5e:c7:6a:
c4:9d:27:67:36:73:ab:b8:16:65:31:78:d2:a0:66:
0f:eb:23:9c:31:0c:14:7f:77:0f:39:22:04:6b:03:
37:80:ae:db:49:f3:a9:91:73:da:01:41:41:81:d4:
ea:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B7:F9:1C:F7:C4:D2:B3:5B:DE:51:DE:25:C4:21:69:DD:2C:02:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/3c6d8797-9f4c-3a12-be1a-b453781af765.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
X509v3 Authority Key Identifier:
keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
sbgp-ipAddrBlock: critical
IPv4:
74.216.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:9f:71:c6:d0:52:7b:f1:20:ea:d1:2d:59:a7:d9:c9:99:ad:
5b:d1:37:97:4d:90:91:7b:05:35:65:52:b0:3d:5c:1e:f0:f7:
e9:24:17:a9:95:cd:62:6e:ee:bf:17:a7:77:4e:e8:05:5b:3b:
b1:20:d7:ff:32:83:34:f8:da:4e:ad:6e:3a:8e:b0:4a:2c:65:
64:d2:85:08:aa:92:9c:ec:de:cc:ac:7f:74:29:a5:f0:2d:c9:
f5:64:98:57:11:ed:c8:72:ee:b1:ca:bf:b1:fb:99:d5:f7:52:
ac:42:e4:62:2a:c3:3e:21:81:0a:14:11:e6:89:90:ea:e9:40:
a1:50:b9:84:93:12:4f:e3:8b:96:7d:d8:aa:c8:c2:ca:0a:dd:
b5:4e:93:d1:c6:b3:36:d4:46:59:cd:b0:b9:a3:fb:72:e9:d9:
c7:40:a1:25:40:8e:b6:50:98:c9:bb:67:a9:a1:8a:03:83:8d:
67:52:1b:f0:b9:96:f5:bd:41:49:18:6a:82:4c:bb:23:52:9a:
c2:ea:fb:e0:e9:f9:88:6c:71:3d:2f:f9:11:c5:e0:20:9f:e5:
7f:5d:a8:68:c0:2c:08:f4:7a:fb:ba:4a:77:a1:4a:a4:fc:73:
95:52:8c:7c:9e:c4:9a:6a:b7:a1:30:84:b8:23:49:e6:3f:1e:
4d:de:95:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg7UBD14ERho/IbkIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz
MDY5MB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk
YjI1NDI0MzAtYTUyNS00NGVmLWFlY2MtMjMyMzMyOTY3N2NjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxocJD33goldzGJGL9FBv4GSywB5j65YgCwaj
chH9ef1u/h5vgnG/cq7jupVOGOsYv/IjTJ6x3R8JKvTPQsqv/DE6xqNQVLDglA0E
ROXMX8Qny8So67tU0SOdsAJ6YbsJlyKCcXpW2PAP9mF6Z4E5fKBqqdO6n1Bs4BV4
9S4IYERYEh1CI3P0TluXchf/3T3emKlk3YXF+mSTKsgiIRR0I+sxUflk+2p92sSf
41hsf+LbW9/GngFi/XgAakm+eBNf4IdWHC5Sy8+n+FzYwV5ex2rEnSdnNnOruBZl
MXjSoGYP6yOcMQwUf3cPOSIEawM3gK7bSfOpkXPaAUFBgdTqpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHy3+Rz3xNKzW95R3iXEIWndLAKGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh
ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvM2M2ZDg3OTctOWY0Yy0z
YTEyLWJlMWEtYjQ1Mzc4MWFmNzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3
NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4
MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw
NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASthsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADSfccbQUnvxIOrRLVmn2cmZrVvRN5dNkJF7BTVlUrA9XB7w9+kkF6mV
zWJu7r8Xp3dO6AVbO7Eg1/8ygzT42k6tbjqOsEosZWTShQiqkpzs3sysf3QppfAt
yfVkmFcR7chy7rHKv7H7mdX3UqxC5GIqwz4hgQoUEeaJkOrpQKFQuYSTEk/ji5Z9
2KrIwsoK3bVOk9HGszbURlnNsLmj+3Lp2cdAoSVAjrZQmMm7Z6mhigODjWdSG/C5
lvW9QUkYaoJMuyNSmsLq++Dp+YhscT0v+RHF4CCf5X9dqGjALAj0evu6SnehSqT8
c5VSjHyexJpqt6EwhLgjSeY/Hk3elcU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:40:21 2025 by rpki-client