Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/dc72b90c-8967-3a03-99e5-6598e2a93245.roa
File: dc72b90c-8967-3a03-99e5-6598e2a93245.roa (raw, json)
Hash identifier: p9bdRTzX9bywdr4aS29fug+IIVsT0epQ+jO5M/oosB4=
Subject key identifier: 98:06:70:E9:10:69:0D:BC:17:BB:A3:A6:43:74:10:38:B4:D9:D6:19
Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial: 010D0C9F4328584875F05AADF8A6B1FF53D7DD40
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/dc72b90c-8967-3a03-99e5-6598e2a93245.roa
Signing time: Tue 07 Jan 2025 02:00:39 +0000
ROA not before: Tue 07 Jan 2025 02:00:39 +0000
ROA not after: Mon 07 Apr 2025 01:00:39 +0000
asID: 4540
IP address blocks: 69.51.240.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:75:f0:5a:ad:f8:a6:b1:ff:53:d7:dd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Validity
Not Before: Jan 7 02:00:39 2025 GMT
Not After : Apr 7 01:00:39 2025 GMT
Subject: CN=66551fd6-be69-4c5d-bfdb-48ce1b3cd14a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:02:1e:62:b6:dc:cf:c8:10:87:18:fc:58:2f:
05:32:33:c4:07:c1:b2:0e:f5:fc:40:f2:22:9b:78:
4f:4d:31:35:67:40:da:56:0a:fe:c0:b8:a5:6d:b8:
37:84:7a:42:85:02:29:c6:40:02:29:aa:a7:76:dd:
4d:cf:d1:03:f9:88:4f:de:e6:00:5c:1d:33:12:f2:
f4:8b:e0:81:03:69:32:a7:e0:82:43:f2:c9:9e:8c:
38:9a:c1:69:09:76:c5:86:59:24:8b:b2:20:7a:69:
3b:3f:12:2a:e7:e5:08:4d:39:a1:ed:f3:d7:cb:97:
15:78:b2:ce:83:a7:cf:f5:4b:0b:7d:08:53:cd:94:
e5:2e:3d:c9:52:33:54:c1:55:51:61:7c:03:1e:a8:
96:e3:bf:2b:57:12:d3:d6:bb:c4:4c:08:01:3b:e9:
bd:cb:6b:76:46:75:4d:c4:b1:d6:3a:94:5e:3c:ab:
4f:d3:63:90:2a:32:28:6a:ea:43:dc:11:fd:a5:9e:
bb:64:67:61:b8:6e:3d:21:f7:84:88:d8:07:c3:e8:
6b:0d:63:88:14:29:72:c3:7e:d3:49:2c:20:e2:4b:
15:e5:f3:bc:56:62:71:7f:4f:73:b2:d0:aa:84:5e:
59:a4:ae:c5:7b:c8:bf:b4:04:a0:47:3d:5c:32:e3:
a4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:06:70:E9:10:69:0D:BC:17:BB:A3:A6:43:74:10:38:B4:D9:D6:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/dc72b90c-8967-3a03-99e5-6598e2a93245.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
X509v3 Authority Key Identifier:
keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
sbgp-ipAddrBlock: critical
IPv4:
69.51.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:88:e5:54:f4:84:8d:9e:63:1b:e9:aa:d4:30:5a:d7:c0:e9:
79:4e:ae:0c:2b:5c:e9:6b:46:fb:17:09:80:32:ff:b8:78:0c:
62:54:c3:38:06:f6:99:51:ce:18:51:f3:8c:3b:63:90:2c:f4:
39:80:b9:e3:6a:c2:a5:68:2d:18:a2:46:2a:ef:56:2d:42:47:
83:6b:80:5c:de:a1:b6:bb:37:9a:25:ae:7b:9f:a3:20:0e:46:
d0:97:db:83:b8:b9:4b:5a:a3:14:0c:10:e5:16:41:3c:00:87:
b9:88:91:89:16:6d:3f:96:32:61:ce:83:a1:35:28:b9:7d:22:
e6:99:59:dc:59:c3:26:f6:79:1e:a7:07:09:d6:77:36:cf:8c:
6a:0d:d3:b3:82:2b:6a:db:44:0f:7e:03:d5:7d:56:c9:29:50:
7e:d9:23:04:4a:c2:62:15:05:49:9d:b3:1b:d2:5d:2b:d5:57:
75:a6:dc:7f:4c:cc:6a:b1:1f:07:70:4d:95:b9:f5:84:d4:b2:
92:34:80:93:15:1c:f2:c1:b3:14:14:a3:2d:51:81:81:dd:42:
c9:91:29:c6:a1:18:11:a8:bc:e6:33:cf:6b:6a:9d:cb:bb:14:
49:44:3c:5c:bc:0e:fa:16:b1:dd:f7:5b:4e:f6:28:5b:32:f2:
ca:8f:e9:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh18Fqt+Kax/1PX3UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3
ZDkyMB4XDTI1MDEwNzAyMDAzOVoXDTI1MDQwNzAxMDAzOVowLzEtMCsGA1UEAxMk
NjY1NTFmZDYtYmU2OS00YzVkLWJmZGItNDhjZTFiM2NkMTRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwIeYrbcz8gQhxj8WC8FMjPEB8GyDvX8QPIi
m3hPTTE1Z0DaVgr+wLilbbg3hHpChQIpxkACKaqndt1Nz9ED+YhP3uYAXB0zEvL0
i+CBA2kyp+CCQ/LJnow4msFpCXbFhlkki7Igemk7PxIq5+UITTmh7fPXy5cVeLLO
g6fP9UsLfQhTzZTlLj3JUjNUwVVRYXwDHqiW478rVxLT1rvETAgBO+m9y2t2RnVN
xLHWOpRePKtP02OQKjIoaupD3BH9pZ67ZGdhuG49IfeEiNgHw+hrDWOIFClyw37T
SSwg4ksV5fO8VmJxf09zstCqhF5ZpK7Fe8i/tASgRz1cMuOkfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJgGcOkQaQ28F7ujpkN0EDi02dYZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx
YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvZGM3MmI5MGMtODk2Ny0z
YTAzLTk5ZTUtNjU5OGUyYTkzMjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm
NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3
N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl
NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRTPwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKyI5VT0hI2eYxvpqtQwWtfA6XlOrgwrXOlrRvsXCYAy/7h4DGJUwzgG
9plRzhhR84w7Y5As9DmAueNqwqVoLRiiRirvVi1CR4NrgFzeoba7N5olrnufoyAO
RtCX24O4uUtaoxQMEOUWQTwAh7mIkYkWbT+WMmHOg6E1KLl9IuaZWdxZwyb2eR6n
BwnWdzbPjGoN07OCK2rbRA9+A9V9VskpUH7ZIwRKwmIVBUmdsxvSXSvVV3Wm3H9M
zGqxHwdwTZW59YTUspI0gJMVHPLBsxQUoy1RgYHdQsmRKcahGBGovOYzz2tqncu7
FElEPFy8DvoWsd33W072KFsy8sqP6YM=
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:22:48 2025 by rpki-client