Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e9a245de-1653-3a97-af87-052a6faf738c.roa
File: e9a245de-1653-3a97-af87-052a6faf738c.roa (raw, json)
Hash identifier: YvQxnSYeqcs1fg+XNcARc1tkLIrc1Zq+K6K6+negf5w=
Subject key identifier: 82:56:08:6B:53:2B:1B:8D:BD:FB:1F:AC:9E:96:71:C7:08:77:46:F9
Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial: 010D0C9F43285848A1F852EAB9E1029024885080
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e9a245de-1653-3a97-af87-052a6faf738c.roa
Signing time: Wed 22 Jan 2025 20:32:22 +0000
ROA not before: Wed 22 Jan 2025 20:32:22 +0000
ROA not after: Tue 22 Apr 2025 19:32:22 +0000
asID: 15164
IP address blocks: 74.51.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:f8:52:ea:b9:e1:02:90:24:88:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Validity
Not Before: Jan 22 20:32:22 2025 GMT
Not After : Apr 22 19:32:22 2025 GMT
Subject: CN=3de26ac3-1718-4cb8-a088-2f04c7394015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f1:fa:2f:74:19:ac:36:10:f1:76:2c:5d:a0:
59:d7:21:6f:8a:7a:d5:13:07:03:2b:cf:4a:7d:c9:
d6:1c:2a:d2:95:bb:66:61:2b:77:28:f7:8a:d6:65:
5d:9b:89:3e:56:1c:eb:a0:9f:1b:1d:a7:97:72:2b:
8f:c5:8c:25:e3:ab:9a:9b:f8:cf:91:31:45:e0:1d:
c3:7c:72:e5:be:8b:60:1b:d7:75:8e:52:6d:8f:a2:
18:16:d6:d3:a5:fb:ce:8a:b2:b8:9b:5a:5c:15:78:
99:9d:b8:79:d3:e0:76:1c:12:21:34:17:cd:5a:f3:
f2:52:73:59:5b:53:74:a7:7e:6b:c1:f4:56:ee:44:
e9:be:e3:6f:b4:49:5a:7e:ea:ea:c7:4b:5a:cb:cb:
45:11:32:55:37:33:a8:9c:23:ef:53:cb:b7:ee:e7:
e2:a4:50:97:db:4e:c0:f7:0f:5b:90:c5:11:dd:d6:
bc:01:21:9d:0e:3e:bf:b4:7d:db:4b:40:ac:72:40:
de:46:af:79:f4:51:82:9d:8a:49:58:aa:0c:d1:11:
5e:56:52:c1:b7:d2:65:01:6e:44:e4:bc:ed:09:a6:
9e:82:23:52:08:10:25:c6:57:5d:61:06:96:52:a8:
16:7c:62:aa:e0:e5:65:e6:ac:1f:2b:d5:bc:ee:c1:
ff:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:56:08:6B:53:2B:1B:8D:BD:FB:1F:AC:9E:96:71:C7:08:77:46:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e9a245de-1653-3a97-af87-052a6faf738c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
X509v3 Authority Key Identifier:
keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
sbgp-ipAddrBlock: critical
IPv4:
74.51.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:17:63:98:fd:e0:ce:1d:bf:b9:31:87:90:b7:6c:b4:5f:3e:
b5:a6:71:70:27:69:d0:0c:e6:b8:af:e4:0c:2c:9c:4b:12:7d:
ab:4a:95:4e:13:e1:e5:fd:85:65:c1:30:35:a7:33:8f:b6:05:
f9:3f:96:c7:34:af:52:ab:31:5f:6c:b0:11:ef:34:c9:fe:a7:
2e:f2:a7:2e:b5:f3:3c:df:df:39:46:5f:5f:d7:d5:30:76:84:
0b:c1:e7:36:6b:b6:38:f4:44:5f:89:ae:06:c0:76:fa:28:55:
2d:29:6a:94:cf:bb:d8:8c:89:9a:15:f7:51:c6:21:71:dc:a2:
9c:8d:5a:c0:4a:34:10:18:78:cf:e1:58:55:57:8f:ff:b8:af:
62:6b:15:17:e0:80:63:1a:82:0a:50:82:0a:cc:9f:9e:0a:70:
de:bb:0f:87:a3:0d:cf:83:53:c5:6b:c8:c6:d5:0b:76:2a:ff:
5f:fd:84:24:86:c1:40:aa:5d:bd:d4:79:aa:a0:6c:4f:4f:8d:
c7:37:46:2f:aa:b1:b6:14:14:40:46:28:dc:81:61:34:06:8f:
7f:5d:a9:2e:20:5b:8d:f3:f3:09:07:9c:c5:11:bb:9e:37:81:
7a:d1:2f:50:be:83:d8:3e:b0:22:0f:f2:a0:6e:58:61:a8:c4:
9c:33:b7:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEih+FLqueECkCSIUIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1
OTg4MB4XDTI1MDEyMjIwMzIyMloXDTI1MDQyMjE5MzIyMlowLzEtMCsGA1UEAxMk
M2RlMjZhYzMtMTcxOC00Y2I4LWEwODgtMmYwNGM3Mzk0MDE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/H6L3QZrDYQ8XYsXaBZ1yFvinrVEwcDK89K
fcnWHCrSlbtmYSt3KPeK1mVdm4k+VhzroJ8bHaeXciuPxYwl46uam/jPkTFF4B3D
fHLlvotgG9d1jlJtj6IYFtbTpfvOirK4m1pcFXiZnbh50+B2HBIhNBfNWvPyUnNZ
W1N0p35rwfRW7kTpvuNvtElafurqx0tay8tFETJVNzOonCPvU8u37ufipFCX207A
9w9bkMUR3da8ASGdDj6/tH3bS0CsckDeRq959FGCnYpJWKoM0RFeVlLBt9JlAW5E
5LztCaaegiNSCBAlxlddYQaWUqgWfGKq4OVl5qwfK9W87sH/8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIJWCGtTKxuNvfsfrJ6WcccId0b5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0
NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvZTlhMjQ1ZGUtMTY1My0z
YTk3LWFmODctMDUyYTZmYWY3MzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi
MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl
NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3
ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASjPSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKYXY5j94M4dv7kxh5C3bLRfPrWmcXAnadAM5riv5AwsnEsSfatKlU4T
4eX9hWXBMDWnM4+2Bfk/lsc0r1KrMV9ssBHvNMn+py7ypy618zzf3zlGX1/X1TB2
hAvB5zZrtjj0RF+JrgbAdvooVS0papTPu9iMiZoV91HGIXHcopyNWsBKNBAYeM/h
WFVXj/+4r2JrFRfggGMaggpQggrMn54KcN67D4ejDc+DU8VryMbVC3Yq/1/9hCSG
wUCqXb3UeaqgbE9Pjcc3Ri+qsbYUFEBGKNyBYTQGj39dqS4gW43z8wkHnMURu543
gXrRL1C+g9g+sCIP8qBuWGGoxJwzt/M=
-----END CERTIFICATE-----
Generated at Mon Apr 28 14:46:05 2025 by rpki-client