Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/e65865d4-5f44-3316-802f-7aa0ec28365b.roa
File: e65865d4-5f44-3316-802f-7aa0ec28365b.roa (raw, json)
Hash identifier: foZ9UiH84jZ/sj5gYKc/aosiAqXEb7DIY7fx9ZYnDSM=
Subject key identifier: 21:E5:74:92:2E:F4:42:B3:0B:A2:8A:04:F9:53:CE:28:4B:1B:7A:9B
Certificate issuer: /CN=3ed3e995-4cff-4a3d-af9b-7728ddaff70d
Certificate serial: 010D0C9F432858488AE09873F822E7C6602D6040
Authority key identifier: F3:75:96:E2:1C:D8:1C:9A:D5:67:D1:E9:54:49:B0:A4:32:C1:A4:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/e65865d4-5f44-3316-802f-7aa0ec28365b.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 62915
IP address blocks: 72.172.76.0/22 maxlen: 22
137.83.30.0/24 maxlen: 24
141.193.194.0/23 maxlen: 23
161.38.254.0/24 maxlen: 24
185.147.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:98:73:f8:22:e7:c6:60:2d:60:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed3e995-4cff-4a3d-af9b-7728ddaff70d
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=e7216141-5272-40b4-877c-31b6260183b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:59:b0:b8:d1:02:c1:89:81:5f:97:5d:54:87:
f9:6e:cb:45:2a:56:00:a2:4f:73:72:39:e7:b3:52:
b0:56:e8:08:74:26:f3:20:76:fe:e8:a4:70:7c:4f:
83:98:a5:97:a8:62:e6:e0:05:27:4d:46:e9:df:99:
dd:ba:96:f3:24:d0:95:a2:8b:09:e9:57:0a:39:e1:
48:b7:17:c6:56:43:1d:8f:cc:96:0d:a3:9f:9f:b9:
e9:9b:cb:9c:3c:8a:be:9b:08:ec:03:95:f8:f4:79:
16:bb:fd:c8:f9:99:dc:22:7b:b2:15:dc:9c:47:e8:
a5:a8:44:85:55:3e:31:45:f8:62:50:2f:56:35:9c:
14:b0:08:a6:68:e5:ac:1e:ee:a8:71:02:3f:29:4a:
04:35:b6:c8:94:b0:7a:67:58:30:05:8b:d2:f9:8d:
4f:5d:e7:36:1a:e7:4a:af:01:1f:f1:30:6a:30:64:
94:ff:a8:60:01:1f:bb:48:6d:dd:03:20:3e:d0:d4:
cd:40:3c:6a:5c:33:6e:24:bb:16:8c:19:60:ab:32:
53:43:13:e3:16:99:b6:ad:cb:6f:fc:99:c6:5b:eb:
98:8a:57:50:5b:4f:12:1b:a0:16:a0:54:21:73:28:
86:57:dd:f8:b5:7f:2c:03:47:c3:db:f4:45:03:a6:
51:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E5:74:92:2E:F4:42:B3:0B:A2:8A:04:F9:53:CE:28:4B:1B:7A:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/e65865d4-5f44-3316-802f-7aa0ec28365b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl
X509v3 Authority Key Identifier:
keyid:F3:75:96:E2:1C:D8:1C:9A:D5:67:D1:E9:54:49:B0:A4:32:C1:A4:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer
sbgp-ipAddrBlock: critical
IPv4:
72.172.76.0/22
137.83.30.0/24
141.193.194.0/23
161.38.254.0/24
185.147.192.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:3a:36:7f:d1:b1:6f:91:5a:7e:13:9b:5d:cf:1d:dc:c0:5c:
3c:66:31:27:94:b4:6d:2c:f6:7f:4e:18:c0:92:5f:f9:23:c7:
9e:dc:42:c6:e3:53:05:c0:94:9d:18:29:8a:33:68:70:a7:ba:
e8:a1:50:1d:af:78:b5:fb:9b:b3:56:fc:ad:b9:b1:b5:c8:df:
15:ed:5d:0d:23:9c:9f:64:14:6b:9d:76:4d:fa:45:13:80:d9:
2f:03:19:4f:bd:06:8f:b7:c4:e2:26:ce:d2:9d:60:12:a4:09:
84:a4:4b:aa:92:4e:d9:30:34:33:56:35:2c:74:27:25:21:74:
f7:3c:26:84:6a:1d:30:e1:4c:01:45:eb:c6:d2:d4:d0:e1:58:
37:86:ca:06:23:52:a0:48:02:74:fd:34:7c:c3:f7:74:95:17:
a9:a3:2a:c1:c5:9b:86:dc:14:7a:d4:08:89:cf:1e:54:e7:10:
55:94:6d:90:6b:ca:75:32:fa:95:91:89:94:f0:b3:87:88:bf:
f9:3c:e4:19:af:a1:d3:36:52:e4:7f:b3:db:f9:a9:33:f6:de:
f6:0b:e5:c8:97:6d:0a:38:f0:3c:10:01:84:ad:05:2f:9e:cc:
5d:41:4c:4c:91:5e:58:34:45:69:63:a5:cf:81:d3:7f:fb:85:
a9:e0:cf:bd
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEiK4Jhz+CLnxmAtYEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2VkM2U5OTUtNGNmZi00YTNkLWFmOWItNzcyOGRkYWZm
NzBkMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk
ZTcyMTYxNDEtNTI3Mi00MGI0LTg3N2MtMzFiNjI2MDE4M2I2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1mwuNECwYmBX5ddVIf5bstFKlYAok9zcjnn
s1KwVugIdCbzIHb+6KRwfE+DmKWXqGLm4AUnTUbp35ndupbzJNCVoosJ6VcKOeFI
txfGVkMdj8yWDaOfn7npm8ucPIq+mwjsA5X49HkWu/3I+ZncInuyFdycR+ilqESF
VT4xRfhiUC9WNZwUsAimaOWsHu6ocQI/KUoENbbIlLB6Z1gwBYvS+Y1PXec2GudK
rwEf8TBqMGSU/6hgAR+7SG3dAyA+0NTNQDxqXDNuJLsWjBlgqzJTQxPjFpm2rctv
/JnGW+uYildQW08SG6AWoFQhcyiGV934tX8sA0fD2/RFA6ZRQQIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFCHldJIu9EKzC6KKBPlTzihLG3qbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZWQz
ZTk5NS00Y2ZmLTRhM2QtYWY5Yi03NzI4ZGRhZmY3MGQvZTY1ODY1ZDQtNWY0NC0z
MzE2LTgwMmYtN2FhMGVjMjgzNjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2VkM2U5OTUtNGNmZi00YTNkLWFm
OWItNzcyOGRkYWZmNzBkLzNlZDNlOTk1LTRjZmYtNGEzZC1hZjliLTc3MjhkZGFm
ZjcwZC5jcmwwHwYDVR0jBBgwFoAU83WW4hzYHJrVZ9HpVEmwpDLBpIYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8zZWQzZTk5NS00Y2ZmLTRhM2QtYWY5Yi03NzI4
ZGRhZmY3MGQuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCSKxMAwQA
iVMeAwQBjcHCAwQAoSb+AwQCuZPAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJI6Nn/RsW+RWn4Tm13PHdzA
XDxmMSeUtG0s9n9OGMCSX/kjx57cQsbjUwXAlJ0YKYozaHCnuuihUB2veLX7m7NW
/K25sbXI3xXtXQ0jnJ9kFGuddk36RROA2S8DGU+9Bo+3xOImztKdYBKkCYSkS6qS
TtkwNDNWNSx0JyUhdPc8JoRqHTDhTAFF68bS1NDhWDeGygYjUqBIAnT9NHzD93SV
F6mjKsHFm4bcFHrUCInPHlTnEFWUbZBrynUy+pWRiZTws4eIv/k85BmvodM2UuR/
s9v5qTP23vYL5ciXbQo48DwQAYStBS+ezF1BTEyRXlg0RWljpc+B03/7hangz70=
-----END CERTIFICATE-----
Generated at Tue Apr 29 22:23:58 2025 by rpki-client