Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/f2f5b3c0-92c1-3332-9faf-1a8a9e78d23c.roa
File: f2f5b3c0-92c1-3332-9faf-1a8a9e78d23c.roa (raw, json)
Hash identifier: gIYiIGcIwNFnqPUU5UjqPKTGPQoaDJWClHkkZ1eUUUc=
Subject key identifier: 24:C0:BD:88:D0:04:7B:CC:FD:60:A2:C1:A6:65:78:AA:76:B0:BA:70
Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial: 010D0C9F4328584875F055597BECA66EF17797F8
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/f2f5b3c0-92c1-3332-9faf-1a8a9e78d23c.roa
Signing time: Tue 07 Jan 2025 02:00:39 +0000
ROA not before: Tue 07 Jan 2025 02:00:39 +0000
ROA not after: Mon 07 Apr 2025 01:00:39 +0000
asID: 4540
IP address blocks: 74.126.96.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:75:f0:55:59:7b:ec:a6:6e:f1:77:97:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Validity
Not Before: Jan 7 02:00:39 2025 GMT
Not After : Apr 7 01:00:39 2025 GMT
Subject: CN=0d8541cd-027a-4418-aa86-938f6d671687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:10:ca:d6:ee:11:42:11:bf:12:76:20:e3:da:
5b:2c:fd:e9:c0:ad:53:fa:d4:49:39:b0:c0:d3:f8:
45:e2:2a:ab:a1:c7:e4:3b:00:90:1d:8f:61:3f:13:
23:63:49:a3:e9:92:ee:a2:e3:01:f9:09:c4:35:fc:
a6:84:19:e8:8f:1b:dc:77:0c:d0:c6:52:5a:29:6a:
af:d5:3b:a1:e8:5a:df:46:33:4f:17:16:47:c3:b3:
6a:81:57:0c:2a:c3:90:ae:ff:24:a8:5d:0a:17:ae:
88:a1:02:4e:77:a0:ba:83:ff:e9:27:76:01:13:0d:
57:1f:9e:b1:55:03:57:ac:73:0b:28:5d:2e:a8:c9:
94:84:83:a3:35:5a:29:6a:37:6a:41:98:1c:b2:3f:
d3:09:f0:62:66:ae:85:91:e4:22:79:ca:c8:9e:35:
c6:be:e9:92:f4:ea:48:81:0d:be:16:96:56:e6:49:
8e:8b:46:fb:5d:7a:bc:6f:20:85:c1:d3:f4:b4:d8:
53:9e:ba:2a:90:98:50:00:d0:ec:55:c3:79:c9:38:
55:e6:8d:6f:d7:23:b8:35:7f:61:ce:82:fe:c9:30:
2e:cd:9c:9d:17:40:f3:1e:d3:02:d8:df:63:1c:de:
6b:9a:2e:8a:85:b6:9b:74:95:76:66:4e:be:76:dc:
a4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C0:BD:88:D0:04:7B:CC:FD:60:A2:C1:A6:65:78:AA:76:B0:BA:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/f2f5b3c0-92c1-3332-9faf-1a8a9e78d23c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
X509v3 Authority Key Identifier:
keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
sbgp-ipAddrBlock: critical
IPv4:
74.126.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:f3:f9:9e:4d:2a:01:07:61:34:1a:ae:9a:e3:d4:9b:5f:32:
84:6a:01:66:26:26:06:f6:7e:5e:2c:23:81:10:a7:98:97:9a:
fc:73:7f:24:70:5e:94:e8:64:de:d4:4c:f9:45:64:46:7c:f9:
88:9f:3d:38:6a:3f:6f:17:e5:b8:a5:ae:1d:0f:e3:bc:b9:2f:
7d:fe:d4:b4:0e:21:3b:3e:7d:1c:7f:08:16:e5:a4:21:75:a7:
ba:27:79:ce:f8:c7:ec:17:d6:1f:47:3c:2e:be:6b:84:1b:b8:
05:0b:84:88:e2:ba:0f:02:97:b4:67:fa:7b:09:65:6b:17:fd:
7f:5d:c7:65:d0:c7:45:79:c5:1a:ea:0d:f2:9b:23:3c:8e:50:
21:35:52:9e:14:47:a0:1d:b0:e8:a7:ee:9d:d5:df:db:f3:58:
ef:4c:fe:41:41:c6:11:9e:fa:b4:71:30:8e:3b:ea:8b:35:61:
c9:78:8c:06:71:0e:a0:c6:90:49:f2:f2:5b:ce:87:19:e0:2e:
e8:7c:ea:55:7c:c7:1b:16:fc:38:de:ff:53:9d:a5:c8:76:69:
a2:c3:69:b3:5a:75:90:cc:e3:60:5b:a9:f0:cb:57:db:a3:91:
30:de:c0:e2:a0:0a:cb:1a:1d:c8:d1:01:b0:fc:dc:94:c8:6e:
89:c1:1e:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh18FVZe+ymbvF3l/gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3
ZDkyMB4XDTI1MDEwNzAyMDAzOVoXDTI1MDQwNzAxMDAzOVowLzEtMCsGA1UEAxMk
MGQ4NTQxY2QtMDI3YS00NDE4LWFhODYtOTM4ZjZkNjcxNjg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBDK1u4RQhG/EnYg49pbLP3pwK1T+tRJObDA
0/hF4iqrocfkOwCQHY9hPxMjY0mj6ZLuouMB+QnENfymhBnojxvcdwzQxlJaKWqv
1Tuh6FrfRjNPFxZHw7NqgVcMKsOQrv8kqF0KF66IoQJOd6C6g//pJ3YBEw1XH56x
VQNXrHMLKF0uqMmUhIOjNVopajdqQZgcsj/TCfBiZq6FkeQiecrInjXGvumS9OpI
gQ2+FpZW5kmOi0b7XXq8byCFwdP0tNhTnroqkJhQANDsVcN5yThV5o1v1yO4NX9h
zoL+yTAuzZydF0DzHtMC2N9jHN5rmi6KhbabdJV2Zk6+dtykawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCTAvYjQBHvM/WCiwaZleKp2sLpwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx
YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvZjJmNWIzYzAtOTJjMS0z
MzMyLTlmYWYtMWE4YTllNzhkMjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm
NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3
N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl
NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSn5gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE7z+Z5NKgEHYTQarprj1JtfMoRqAWYmJgb2fl4sI4EQp5iXmvxzfyRw
XpToZN7UTPlFZEZ8+YifPThqP28X5bilrh0P47y5L33+1LQOITs+fRx/CBblpCF1
p7onec74x+wX1h9HPC6+a4QbuAULhIjiug8Cl7Rn+nsJZWsX/X9dx2XQx0V5xRrq
DfKbIzyOUCE1Up4UR6AdsOin7p3V39vzWO9M/kFBxhGe+rRxMI476os1Ycl4jAZx
DqDGkEny8lvOhxngLuh86lV8xxsW/Dje/1Odpch2aaLDabNadZDM42BbqfDLV9uj
kTDewOKgCssaHcjRAbD83JTIbonBHn4=
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:26:21 2025 by rpki-client