Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/4e82ae5d-7c5c-3645-8221-7761cbbab068.roa
File: 4e82ae5d-7c5c-3645-8221-7761cbbab068.roa (raw, json)
Hash identifier: MYv9mUmnAzHctlEIYNjS63OQfkoIuxzOUSCxgrqS8Cc=
Subject key identifier: 4E:FE:E4:5C:60:4D:3C:FA:95:10:07:97:57:01:F8:F1:61:09:0F:3E
Certificate issuer: /CN=f5dd2f3b-d544-4a90-84a5-58af0db84dab
Certificate serial: 010D0C9F432858484945632A92EED3C55AA75FC0
Authority key identifier: 2A:21:7E:D8:28:3A:D2:41:FE:CF:E5:E9:1D:32:3F:C0:B7:8A:F7:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/4e82ae5d-7c5c-3645-8221-7761cbbab068.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 11961
IP address blocks: 64.89.208.0/20 maxlen: 24
72.250.128.0/19 maxlen: 24
108.59.112.0/20 maxlen: 24
216.228.32.0/19 maxlen: 24
2607:8380::/32 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:63:2a:92:ee:d3:c5:5a:a7:5f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5dd2f3b-d544-4a90-84a5-58af0db84dab
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=6f93873f-63e2-4c24-8670-715d5c86c4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:db:34:62:5c:a0:7e:81:40:17:4e:72:f7:1d:
5c:7a:3d:dd:f9:d5:46:24:ab:a6:c7:92:38:11:78:
d4:61:8d:16:b6:c5:46:b5:fd:aa:13:af:3d:8f:75:
a8:81:ec:96:80:6f:21:c0:6e:01:10:07:be:ab:8d:
71:8f:61:38:4c:9b:01:40:ea:8f:52:0d:f4:49:b7:
54:19:81:aa:e8:5a:76:26:e3:7e:fa:28:2b:59:22:
00:12:fc:17:7c:d4:03:2b:8b:81:16:1f:fb:a5:66:
7d:3e:f5:6c:7c:b0:a0:0b:cb:c3:b2:75:37:83:70:
dd:fd:54:58:d4:4b:8e:a9:3b:c6:be:38:1d:e4:03:
f5:7d:d6:ef:f0:c4:78:49:c4:47:3c:bc:7d:8d:50:
e0:a3:a6:a6:05:61:dc:d3:ee:40:38:5a:ae:9e:5f:
9d:00:a1:66:32:3c:ea:59:df:93:63:51:da:6b:b4:
ff:a7:ae:9f:cd:69:78:e2:17:df:ea:ed:92:18:df:
bd:59:8d:83:c1:5d:77:ce:e4:53:63:74:cd:e1:98:
ac:a2:be:f8:8f:85:cc:a1:e4:46:04:fe:d4:6c:7b:
f3:a6:c4:08:94:36:51:0f:b0:56:18:1f:59:8c:5f:
0c:ad:b5:59:68:cf:7e:70:e9:f7:29:ad:ff:88:42:
b7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FE:E4:5C:60:4D:3C:FA:95:10:07:97:57:01:F8:F1:61:09:0F:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/4e82ae5d-7c5c-3645-8221-7761cbbab068.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/f5dd2f3b-d544-4a90-84a5-58af0db84dab.crl
X509v3 Authority Key Identifier:
keyid:2A:21:7E:D8:28:3A:D2:41:FE:CF:E5:E9:1D:32:3F:C0:B7:8A:F7:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer
sbgp-ipAddrBlock: critical
IPv4:
64.89.208.0/20
72.250.128.0/19
108.59.112.0/20
216.228.32.0/19
IPv6:
2607:8380::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:c3:03:0e:06:1b:c5:13:15:f5:ac:d6:81:de:55:78:45:50:
69:fe:e5:c0:d3:48:c2:22:76:68:80:bd:eb:7c:1c:c8:62:01:
be:53:4c:12:49:43:fd:97:b8:e5:9c:06:82:6d:43:a5:19:b3:
6a:d4:0a:95:b2:41:9b:7e:9d:2c:38:b8:92:50:59:0f:93:f9:
c5:15:34:34:3f:06:62:ab:c2:7a:9f:30:4a:3f:5e:8d:f3:5e:
8d:9f:63:ae:11:14:01:1c:b4:3b:d7:bb:36:ef:d1:d5:b7:5d:
58:3c:9b:c2:b1:e7:11:14:ec:6f:df:6e:b0:25:e0:d6:12:e8:
4a:1a:21:ac:a9:f8:2a:c4:f9:e6:16:93:79:f3:e9:b7:8f:81:
41:84:74:4a:81:42:12:aa:2f:64:db:1c:b8:79:00:d3:c4:8b:
ea:70:80:35:2d:f3:da:ab:b0:3e:23:b5:a0:66:b3:ed:bb:1b:
20:d2:cf:f8:40:54:dc:e8:9e:b6:d8:55:24:d7:5e:c3:68:33:
6c:39:9d:8c:b1:79:3a:f6:7b:4d:d2:eb:a2:1e:e0:d8:ee:c7:
72:0a:f4:4a:3a:dd:c2:f2:8d:cd:fb:59:63:5f:c6:f3:0b:8d:
8d:93:49:7b:a6:6a:fa:e4:b4:14:69:45:a3:ee:a1:c0:53:b7:
13:bf:11:11
-----BEGIN CERTIFICATE-----
MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWEhJRWMqku7TxVqnX8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVkZDJmM2ItZDU0NC00YTkwLTg0YTUtNThhZjBkYjg0
ZGFiMB4XDTI0MTIyMjAyMDAzOVoXDTI1MDMyMjAxMDAzOVowLzEtMCsGA1UEAxMk
NmY5Mzg3M2YtNjNlMi00YzI0LTg2NzAtNzE1ZDVjODZjNGQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ts0YlygfoFAF05y9x1cej3d+dVGJKumx5I4
EXjUYY0WtsVGtf2qE689j3WogeyWgG8hwG4BEAe+q41xj2E4TJsBQOqPUg30SbdU
GYGq6Fp2JuN++igrWSIAEvwXfNQDK4uBFh/7pWZ9PvVsfLCgC8vDsnU3g3Dd/VRY
1EuOqTvGvjgd5AP1fdbv8MR4ScRHPLx9jVDgo6amBWHc0+5AOFqunl+dAKFmMjzq
Wd+TY1Haa7T/p66fzWl44hff6u2SGN+9WY2DwV13zuRTY3TN4Zisor74j4XMoeRG
BP7UbHvzpsQIlDZRD7BWGB9ZjF8MrbVZaM9+cOn3Ka3/iEK3BQIDAQABo4IDdjCC
A3IwHQYDVR0OBBYEFE7+5FxgTTz6lRAHl1cB+PFhCQ8+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mNWRk
MmYzYi1kNTQ0LTRhOTAtODRhNS01OGFmMGRiODRkYWIvNGU4MmFlNWQtN2M1Yy0z
NjQ1LTgyMjEtNzc2MWNiYmFiMDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjVkZDJmM2ItZDU0NC00YTkwLTg0
YTUtNThhZjBkYjg0ZGFiL2Y1ZGQyZjNiLWQ1NDQtNGE5MC04NGE1LTU4YWYwZGI4
NGRhYi5jcmwwHwYDVR0jBBgwFoAUKiF+2Cg60kH+z+XpHTI/wLeK9wswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mNWRkMmYzYi1kNTQ0LTRhOTAtODRhNS01OGFm
MGRiODRkYWIuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEQFnQAwQF
SPqAAwQEbDtwAwQF2OQgMA0EAgACMAcDBQAmB4OAMFQGA1UdIAEB/wRKMEgwRgYI
KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz
b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAB/DAw4GG8UT
FfWs1oHeVXhFUGn+5cDTSMIidmiAvet8HMhiAb5TTBJJQ/2XuOWcBoJtQ6UZs2rU
CpWyQZt+nSw4uJJQWQ+T+cUVNDQ/BmKrwnqfMEo/Xo3zXo2fY64RFAEctDvXuzbv
0dW3XVg8m8Kx5xEU7G/fbrAl4NYS6EoaIayp+CrE+eYWk3nz6bePgUGEdEqBQhKq
L2TbHLh5ANPEi+pwgDUt89qrsD4jtaBms+27GyDSz/hAVNzonrbYVSTXXsNoM2w5
nYyxeTr2e03S66Ie4Njux3IK9Eo63cLyjc37WWNfxvMLjY2TSXumavrktBRpRaPu
ocBTtxO/ERE=
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:32:33 2025 by rpki-client