Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/1529c059-7633-3836-940a-f5b311f13fd2.roa
File: 1529c059-7633-3836-940a-f5b311f13fd2.roa (raw, json)
Hash identifier: OBjHOEcSfdz9QV+Bt4JfKGuQC4BKmjLst8tBQguWEUM=
Subject key identifier: A5:B9:6D:C7:90:6C:B6:B4:52:29:24:52:D6:37:E8:28:1B:7E:FA:CD
Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial: 010D0C9F43285848696067F7F9B29A11D1A4EA80
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/1529c059-7633-3836-940a-f5b311f13fd2.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 393885
IP address blocks: 64.71.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:67:f7:f9:b2:9a:11:d1:a4:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=89a2572a-3e40-48f8-8092-241c332563f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c1:90:81:2d:64:62:0a:17:e4:70:eb:30:19:
1a:0a:b0:04:84:17:2a:aa:95:af:e5:fd:2b:d2:ef:
60:9b:57:68:7e:41:8c:3f:86:56:68:cb:34:8b:ee:
99:ea:14:07:a2:ad:f4:55:a4:a6:5f:d9:0b:54:86:
cd:d7:03:f7:b5:33:7a:fb:4c:29:2c:b9:0d:eb:d9:
75:81:84:03:55:ab:ad:89:50:21:4d:67:14:43:bd:
4f:5c:a6:6d:9e:c7:31:fb:3c:6f:15:9a:13:d7:7d:
66:e1:b8:bf:10:bc:97:fc:e2:5a:d5:e3:09:33:14:
c0:df:5e:5d:03:75:fe:7f:8b:d8:c7:f9:82:2f:29:
af:ee:28:a9:8c:bc:e6:97:0e:54:4a:f9:b3:9e:f9:
b2:a7:5e:0c:53:60:82:a0:04:62:ab:14:d9:2e:77:
12:67:93:04:94:ce:73:f9:5d:4c:2c:ef:03:55:b0:
be:b3:2a:6e:c0:6c:b4:6c:73:d6:d2:e1:b8:7a:c5:
b2:50:04:29:cb:7d:64:8d:95:88:a0:32:95:29:a7:
e9:de:8b:62:04:ac:1c:5f:46:e2:7f:fa:b1:46:d7:
93:ec:12:84:db:b8:72:e2:bf:f4:3d:e4:b4:65:72:
26:d1:05:2c:f3:72:7d:7b:86:bb:e5:32:d8:0c:74:
16:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B9:6D:C7:90:6C:B6:B4:52:29:24:52:D6:37:E8:28:1B:7E:FA:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/1529c059-7633-3836-940a-f5b311f13fd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
X509v3 Authority Key Identifier:
keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
sbgp-ipAddrBlock: critical
IPv4:
64.71.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:a1:7b:01:12:93:c6:27:b9:b9:9d:5b:53:75:5f:c2:5d:0c:
5f:30:cc:d8:3a:94:75:b7:67:21:57:5d:6f:09:39:c6:8c:d7:
69:c5:ce:2f:df:2f:7b:63:d5:bc:fa:cd:e0:ff:b7:0a:8a:5d:
9b:30:cc:c5:28:85:bc:64:f1:07:d1:35:09:bf:c5:8b:43:c5:
6a:45:9c:2a:ca:f8:7f:62:e3:8b:17:83:3e:f2:cc:02:19:b8:
b1:9f:c4:ef:80:98:e6:6e:e2:1f:e0:d7:f3:36:02:77:39:a7:
71:ee:b4:a9:9e:ad:74:20:8e:58:e2:e4:bb:ca:3a:dc:15:68:
94:96:c3:f5:7d:83:30:bb:c0:8d:31:c7:fe:15:d1:32:cf:6c:
51:68:a0:36:96:df:9c:a0:3a:5c:81:50:40:a0:84:78:ad:5e:
6e:87:93:9a:54:38:11:c2:f6:10:33:34:1f:66:13:50:54:1a:
18:ea:bd:c9:10:bc:75:46:ae:dd:52:8f:ad:d3:cc:59:98:5c:
06:5d:4c:23:b8:1d:45:ce:d9:2b:ee:9a:26:2c:a3:06:d4:f3:
96:a1:9e:f4:72:42:8a:16:9e:b7:c8:ea:08:14:73:87:4b:14:
06:e8:d6:4b:53:ed:7b:64:a0:f6:5c:10:58:e1:92:6c:bb:91:
24:b8:a0:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhpYGf3+bKaEdGk6oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2Q3ZGRmZGYtMThhMC00YmQ1LWFlZmMtNGZiYTNlMzVk
NjZkMB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk
ODlhMjU3MmEtM2U0MC00OGY4LTgwOTItMjQxYzMzMjU2M2YzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMGQgS1kYgoX5HDrMBkaCrAEhBcqqpWv5f0r
0u9gm1dofkGMP4ZWaMs0i+6Z6hQHoq30VaSmX9kLVIbN1wP3tTN6+0wpLLkN69l1
gYQDVautiVAhTWcUQ71PXKZtnscx+zxvFZoT131m4bi/ELyX/OJa1eMJMxTA315d
A3X+f4vYx/mCLymv7iipjLzmlw5USvmznvmyp14MU2CCoARiqxTZLncSZ5MElM5z
+V1MLO8DVbC+sypuwGy0bHPW0uG4esWyUAQpy31kjZWIoDKVKafp3otiBKwcX0bi
f/qxRteT7BKE27hy4r/0PeS0ZXIm0QUs83J9e4a75TLYDHQW0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKW5bceQbLa0UikkUtY36CgbfvrNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdk
ZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJhM2UzNWQ2NmQvMTUyOWMwNTktNzYzMy0z
ODM2LTk0MGEtZjViMzExZjEzZmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2Q3ZGRmZGYtMThhMC00YmQ1LWFl
ZmMtNGZiYTNlMzVkNjZkL2NkN2RkZmRmLTE4YTAtNGJkNS1hZWZjLTRmYmEzZTM1
ZDY2ZC5jcmwwHwYDVR0jBBgwFoAU1YyNnKF1WAq2ChEx2EWqU/zTW0gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdkZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJh
M2UzNWQ2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQEfQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALShewESk8YnubmdW1N1X8JdDF8wzNg6lHW3ZyFXXW8JOcaM12nFzi/f
L3tj1bz6zeD/twqKXZswzMUohbxk8QfRNQm/xYtDxWpFnCrK+H9i44sXgz7yzAIZ
uLGfxO+AmOZu4h/g1/M2Anc5p3HutKmerXQgjlji5LvKOtwVaJSWw/V9gzC7wI0x
x/4V0TLPbFFooDaW35ygOlyBUECghHitXm6Hk5pUOBHC9hAzNB9mE1BUGhjqvckQ
vHVGrt1Sj63TzFmYXAZdTCO4HUXO2SvumiYsowbU85ahnvRyQooWnrfI6ggUc4dL
FAbo1ktT7XtkoPZcEFjhkmy7kSS4oD4=
-----END CERTIFICATE-----
Generated at Mon May 12 12:06:31 2025 by rpki-client