Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/a940db39-8b94-3a45-8f58-c597de6ac74a.roa
File: a940db39-8b94-3a45-8f58-c597de6ac74a.roa (raw, json)
Hash identifier: Y8YE7eAnY6ydkw4dibQbeJlSK9v1jbS08tmWq7Ma5qM=
Subject key identifier: F4:89:4A:FA:00:5F:2D:6B:8F:B4:BD:48:F3:45:85:81:0E:F6:3E:97
Certificate issuer: /CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
Certificate serial: 010D0C9F4328584827C53F232F0535516AC180B8
Authority key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/a940db39-8b94-3a45-8f58-c597de6ac74a.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 399809
IP address blocks: 64.29.138.0/24 maxlen: 24
2607:f3a0:a00a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:3f:23:2f:05:35:51:6a:c1:80:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=2e562daa-806f-4a4f-af74-3432d06f6466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:48:a4:79:ee:db:dd:08:31:65:ba:6c:58:63:
ea:ac:ac:ca:b8:54:a6:08:f4:06:82:8a:f9:4e:16:
ca:a1:92:28:10:1b:e5:0a:0d:b5:e9:03:3c:c1:5f:
a8:c4:36:e5:1f:fb:a0:2b:28:f5:36:e3:9f:55:e2:
1d:be:c2:ec:1a:69:71:d8:b8:a7:b5:56:97:93:9e:
7d:40:be:0c:68:b0:44:14:3a:9c:53:a9:b3:3b:cc:
dc:81:fe:28:64:f5:1f:01:75:a6:e7:8a:78:f3:28:
b0:a4:a7:14:ab:f4:cf:e0:91:3a:be:e2:02:3e:27:
9f:84:04:c0:be:ac:0b:cd:7a:e8:a5:1f:1b:16:00:
e0:eb:48:d1:dd:28:7c:98:ab:dd:30:1b:44:78:2b:
6b:4b:51:ed:ee:a1:58:c1:eb:4d:1d:88:b5:a1:97:
cf:4a:77:1e:9e:62:32:2f:eb:65:ef:38:6d:8f:43:
d9:45:a9:df:5f:4e:00:e4:ce:f1:e3:02:dc:c5:66:
b3:89:49:26:72:83:13:24:67:ab:5a:f2:3d:e6:be:
32:1d:41:08:88:84:24:5c:91:9a:6b:88:e8:41:ae:
e5:e5:6b:f8:36:6f:23:45:8f:04:4d:8a:34:13:cd:
9d:3d:15:fd:56:f2:ef:02:ee:9a:06:6e:be:a1:4e:
4d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:89:4A:FA:00:5F:2D:6B:8F:B4:BD:48:F3:45:85:81:0E:F6:3E:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/a940db39-8b94-3a45-8f58-c597de6ac74a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl
X509v3 Authority Key Identifier:
keyid:83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
sbgp-ipAddrBlock: critical
IPv4:
64.29.138.0/24
IPv6:
2607:f3a0:a00a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:25:c3:99:03:f7:5e:6c:55:39:fe:43:c7:82:4e:91:a7:08:
5b:dc:c8:a4:d7:de:c8:3c:20:bc:65:9f:72:83:0a:49:7a:6e:
6e:cb:ad:e4:b8:d7:32:26:15:16:ed:62:19:c3:ef:e2:4a:2e:
44:b8:21:fc:0a:66:ad:44:dc:84:2d:38:b2:9d:53:ab:ee:e7:
be:d1:4b:a1:26:e4:20:6e:e1:70:bc:87:11:ca:49:74:36:90:
b8:ab:34:b7:ec:11:df:5b:fa:1c:7c:55:0e:8d:b6:62:7c:24:
f1:b4:8f:c3:12:05:c3:25:84:1e:fc:a2:e9:eb:b9:b1:d4:b7:
ef:b6:d7:e9:bb:df:18:4c:ca:bd:ad:5a:0a:61:a1:ac:6c:f6:
b0:88:43:0b:78:2c:e3:bd:59:7c:f8:ef:a7:ac:0c:05:78:0a:
46:88:43:17:df:3f:55:02:33:91:84:ce:ea:c2:e5:df:39:48:
dc:d2:b4:9f:0f:12:c8:30:5e:2d:69:08:19:6d:46:5c:32:af:
b7:68:c5:b7:b2:bb:d4:61:81:44:52:57:c7:1a:f7:42:82:58:
f5:66:d5:e2:3c:16:45:d8:a8:3c:dd:d9:01:e7:95:7a:a3:68:
d8:96:14:e3:a1:d3:e0:16:d3:de:29:50:b7:61:2b:c3:e3:09:
08:17:98:01
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEgnxT8jLwU1UWrBgLgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODVmNzM1YjYtMGFlMi00YzJhLTgyNmItN2U4YjEyNmE0
YjczMB4XDTI0MTIxMDAyMDA0MFoXDTI1MDMxMDAxMDA0MFowLzEtMCsGA1UEAxMk
MmU1NjJkYWEtODA2Zi00YTRmLWFmNzQtMzQzMmQwNmY2NDY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUikee7b3QgxZbpsWGPqrKzKuFSmCPQGgor5
ThbKoZIoEBvlCg216QM8wV+oxDblH/ugKyj1NuOfVeIdvsLsGmlx2LintVaXk559
QL4MaLBEFDqcU6mzO8zcgf4oZPUfAXWm54p48yiwpKcUq/TP4JE6vuICPiefhATA
vqwLzXropR8bFgDg60jR3Sh8mKvdMBtEeCtrS1Ht7qFYwetNHYi1oZfPSncenmIy
L+tl7zhtj0PZRanfX04A5M7x4wLcxWaziUkmcoMTJGerWvI95r4yHUEIiIQkXJGa
a4joQa7l5Wv4Nm8jRY8ETYo0E82dPRX9VvLvAu6aBm6+oU5NHwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFPSJSvoAXy1rj7S9SPNFhYEO9j6XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NWY3
MzViNi0wYWUyLTRjMmEtODI2Yi03ZThiMTI2YTRiNzMvYTk0MGRiMzktOGI5NC0z
YTQ1LThmNTgtYzU5N2RlNmFjNzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODVmNzM1YjYtMGFlMi00YzJhLTgy
NmItN2U4YjEyNmE0YjczLzg1ZjczNWI2LTBhZTItNGMyYS04MjZiLTdlOGIxMjZh
NGI3My5jcmwwHwYDVR0jBBgwFoAUg5odAfvJBkOReL6k09QXpHyUm9QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84NWY3MzViNi0wYWUyLTRjMmEtODI2Yi03ZThi
MTI2YTRiNzMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQB2KMA8E
AgACMAkDBwAmB/OgoAowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfyXDmQP3XmxVOf5Dx4JOkacIW9zIpNfe
yDwgvGWfcoMKSXpubsut5LjXMiYVFu1iGcPv4kouRLgh/ApmrUTchC04sp1Tq+7n
vtFLoSbkIG7hcLyHEcpJdDaQuKs0t+wR31v6HHxVDo22Ynwk8bSPwxIFwyWEHvyi
6eu5sdS377bX6bvfGEzKva1aCmGhrGz2sIhDC3gs471ZfPjvp6wMBXgKRohDF98/
VQIzkYTO6sLl3zlI3NK0nw8SyDBeLWkIGW1GXDKvt2jFt7K71GGBRFJXxxr3QoJY
9WbV4jwWRdioPN3ZAeeVeqNo2JYU46HT4BbT3ilQt2Erw+MJCBeYAQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:56:51 2025 by rpki-client