Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa
File: 4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa (raw, json)
Hash identifier: CA5xinfTuCWCB8dqnBVdEJYkOI7Eu+mgWHmdAzbRtZ0=
Subject key identifier: 73:FC:E5:4B:A6:30:7B:B1:0C:14:1E:2C:7C:CA:4C:09:D2:DD:9F:EA
Certificate issuer: /CN=8d60336b-4b3c-49eb-bfd7-d9803f7bad6b
Certificate serial: 010D0C9F43285848222FCCBEB1E8370F4619C540
Authority key identifier: 86:BE:7E:29:E1:7E:56:79:69:EF:A8:7B:77:3C:B8:8B:18:D3:29:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 394875
IP address blocks: 52.144.25.0/24 maxlen: 24
2620:f9:4000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:cc:be:b1:e8:37:0f:46:19:c5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d60336b-4b3c-49eb-bfd7-d9803f7bad6b
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=3b041aab-61a7-4351-9643-ab46605941ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:94:71:3a:cd:3d:00:2d:41:cd:aa:e9:86:0f:
d8:d9:c8:74:86:e6:8d:a7:a4:f9:89:17:46:d1:24:
80:11:07:05:8a:5d:3f:3d:6d:30:af:08:43:0f:28:
ac:ab:64:a5:8e:d1:fc:d8:31:e0:9e:31:82:d3:f9:
88:cc:a6:c8:d9:33:85:99:86:a0:88:2e:bb:eb:3f:
f6:51:92:35:94:05:96:dd:3c:5a:73:34:b3:2a:88:
e4:b6:a3:b1:27:de:82:55:a9:d6:bc:88:2a:13:f3:
e0:4b:15:38:56:39:ff:49:af:f3:84:3f:16:c8:7b:
1f:a2:04:6d:05:af:47:f5:18:c1:22:72:64:7c:43:
57:17:69:d9:1c:7d:21:2c:b6:77:19:ef:eb:e9:23:
54:04:07:cc:4d:5e:ac:45:5a:5f:20:3a:99:48:be:
68:5d:d4:16:14:54:ab:20:ca:35:1a:60:c0:53:c9:
00:dc:05:77:3f:25:7d:8a:87:16:71:c3:02:5a:72:
37:1c:16:72:08:44:7e:09:c3:ad:0e:e4:82:a4:e9:
7a:18:8e:95:ef:5b:c4:b8:ed:08:48:46:76:c3:40:
da:dc:00:a2:d8:d3:be:e7:07:4d:b9:15:03:59:a9:
a8:5a:78:29:49:2b:cf:64:74:43:28:db:f8:f1:fc:
55:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FC:E5:4B:A6:30:7B:B1:0C:14:1E:2C:7C:CA:4C:09:D2:DD:9F:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.crl
X509v3 Authority Key Identifier:
keyid:86:BE:7E:29:E1:7E:56:79:69:EF:A8:7B:77:3C:B8:8B:18:D3:29:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.cer
sbgp-ipAddrBlock: critical
IPv4:
52.144.25.0/24
IPv6:
2620:f9:4000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:cc:46:e5:5d:99:bf:0a:4a:81:ae:d1:31:51:82:15:24:11:
54:07:96:c1:6c:9b:03:ef:ab:04:9e:3d:de:ed:75:e7:04:24:
d4:cd:27:c8:38:53:ca:0b:3f:6b:c7:64:e8:c2:06:ab:90:0e:
b1:c4:13:40:33:fc:eb:84:21:03:9b:d6:d3:c4:f5:92:1f:b1:
6a:87:d5:16:5d:ea:5b:c7:f7:90:83:6d:56:f1:e3:53:25:ba:
58:6d:20:41:df:ce:a1:ef:5f:56:63:b9:d7:99:2c:cf:9b:74:
2c:35:c4:47:44:6d:dd:83:48:6c:b6:c5:f2:d6:38:fd:2b:25:
cf:56:22:70:25:ac:84:4f:9e:6e:2a:25:13:2b:e9:db:1e:19:
1c:b0:34:0c:01:ac:72:fb:e2:b9:28:a0:3e:35:b1:d6:44:ca:
4d:b4:d0:df:fb:cd:82:19:b5:7d:0f:f9:39:25:5f:13:96:35:
12:37:43:c5:f6:d4:6c:3e:60:f0:17:46:61:f6:d3:6a:2e:40:
26:6e:c6:e8:12:a6:ff:24:6f:32:08:ae:ac:3f:d2:49:bf:3c:
5a:c2:8f:fa:4b:d2:d0:96:9d:66:ac:5c:f2:e4:04:40:af:b7:
b6:18:e2:a5:96:d4:ac:0a:69:9f:0b:85:f5:6b:e5:62:37:60:
d7:56:fe:b1
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEgiL8y+seg3D0YZxUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGQ2MDMzNmItNGIzYy00OWViLWJmZDctZDk4MDNmN2Jh
ZDZiMB4XDTI0MTIwODAyMDAzOVoXDTI1MDMwODAyMDAzOVowLzEtMCsGA1UEAxMk
M2IwNDFhYWItNjFhNy00MzUxLTk2NDMtYWI0NjYwNTk0MWFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpRxOs09AC1Bzarphg/Y2ch0huaNp6T5iRdG
0SSAEQcFil0/PW0wrwhDDyisq2SljtH82DHgnjGC0/mIzKbI2TOFmYagiC676z/2
UZI1lAWW3TxaczSzKojktqOxJ96CVanWvIgqE/PgSxU4Vjn/Sa/zhD8WyHsfogRt
Ba9H9RjBInJkfENXF2nZHH0hLLZ3Ge/r6SNUBAfMTV6sRVpfIDqZSL5oXdQWFFSr
IMo1GmDAU8kA3AV3PyV9iocWccMCWnI3HBZyCER+CcOtDuSCpOl6GI6V71vEuO0I
SEZ2w0Da3ACi2NO+5wdNuRUDWamoWngpSSvPZHRDKNv48fxV8wIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFHP85UumMHuxDBQeLHzKTAnS3Z/qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZDYw
MzM2Yi00YjNjLTQ5ZWItYmZkNy1kOTgwM2Y3YmFkNmIvNGNlZDYzODYtNGRhMS0z
ZTRiLWE5MjctZGI0NGE5YWQyOGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGQ2MDMzNmItNGIzYy00OWViLWJm
ZDctZDk4MDNmN2JhZDZiLzhkNjAzMzZiLTRiM2MtNDllYi1iZmQ3LWQ5ODAzZjdi
YWQ2Yi5jcmwwHwYDVR0jBBgwFoAUhr5+KeF+Vnlp76h7dzy4ixjTKaAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZDYwMzM2Yi00YjNjLTQ5ZWItYmZkNy1kOTgw
M2Y3YmFkNmIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQANJAZMA8E
AgACMAkDBwAmIAD5QAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAG8xG5V2ZvwpKga7RMVGCFSQRVAeWwWyb
A++rBJ493u115wQk1M0nyDhTygs/a8dk6MIGq5AOscQTQDP864QhA5vW08T1kh+x
aofVFl3qW8f3kINtVvHjUyW6WG0gQd/Ooe9fVmO515ksz5t0LDXER0Rt3YNIbLbF
8tY4/Sslz1YicCWshE+ebiolEyvp2x4ZHLA0DAGscvviuSigPjWx1kTKTbTQ3/vN
ghm1fQ/5OSVfE5Y1EjdDxfbUbD5g8BdGYfbTai5AJm7G6BKm/yRvMgiurD/SSb88
WsKP+kvS0JadZqxc8uQEQK+3thjipZbUrAppnwuF9WvlYjdg11b+sQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:27:05 2025 by rpki-client