Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/4589e70a-70dd-3cd6-af10-eb9fed130ae0.roa
File: 4589e70a-70dd-3cd6-af10-eb9fed130ae0.roa (raw, json)
Hash identifier: 43ll2jv5RTAuqH+LhlcH8BrEmlGSm2ZFQj4/4Nu//SY=
Subject key identifier: 1B:59:AE:77:E1:11:FA:4C:F3:97:B0:87:9A:3A:FF:E8:F1:8D:E9:AD
Certificate issuer: /CN=17321389-82c8-40ad-969d-f355a789f579
Certificate serial: 010D0C9F43285848100A8016C63C3A6D180D4900
Authority key identifier: F2:07:B2:81:1D:EE:20:A3:1B:D2:87:04:DA:9C:1D:80:CE:FA:B4:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/4589e70a-70dd-3cd6-af10-eb9fed130ae0.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 47002
IP address blocks: 74.114.88.0/22 maxlen: 24
158.51.60.0/22 maxlen: 24
208.80.4.0/22 maxlen: 24
2604:4f00::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:80:16:c6:3c:3a:6d:18:0d:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17321389-82c8-40ad-969d-f355a789f579
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=9a2dba64-d811-4e15-bd5c-55071be06165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ec:7f:ea:75:89:8f:04:b3:e5:c5:8c:1c:1d:
10:39:32:5a:1f:c9:8e:56:90:d0:99:cd:4d:77:ab:
ca:83:43:c3:f9:ae:6c:9a:a1:a3:1a:d2:25:e7:fc:
c0:b7:a3:8b:4b:0e:45:d8:d9:ec:1c:36:95:fe:0c:
16:84:1c:cf:53:28:72:a7:dd:fe:b1:56:fb:41:21:
71:7b:f5:19:01:ec:19:17:b9:e8:2e:70:15:e4:4b:
41:4f:33:9f:02:74:a7:bc:f8:e5:ec:3b:1e:c4:9d:
16:b8:b9:35:e4:60:de:c8:55:b4:98:0b:20:f9:22:
7d:4a:67:56:83:25:0a:c9:77:a2:68:76:0e:ce:c9:
13:61:a6:4e:40:4e:7a:d3:25:6d:46:d8:9d:d8:02:
92:80:90:68:f3:d1:41:df:d5:06:d5:dd:29:8d:e5:
28:3a:7c:e3:bd:b9:f2:c9:ac:08:9f:8b:9b:bb:db:
b4:3f:9b:ef:aa:bd:e9:ff:b1:a8:36:13:55:3d:b0:
17:9a:56:cf:e0:e3:84:8a:a2:22:e0:49:75:3e:80:
08:a4:db:0e:16:e8:0e:52:9f:6f:d7:a3:cd:2d:b2:
89:99:e2:5c:06:3e:22:21:9b:aa:56:e6:44:45:52:
87:4c:a7:d6:07:d2:da:87:43:16:40:f5:10:93:6e:
31:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:59:AE:77:E1:11:FA:4C:F3:97:B0:87:9A:3A:FF:E8:F1:8D:E9:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/4589e70a-70dd-3cd6-af10-eb9fed130ae0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/17321389-82c8-40ad-969d-f355a789f579.crl
X509v3 Authority Key Identifier:
keyid:F2:07:B2:81:1D:EE:20:A3:1B:D2:87:04:DA:9C:1D:80:CE:FA:B4:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer
sbgp-ipAddrBlock: critical
IPv4:
74.114.88.0/22
158.51.60.0/22
208.80.4.0/22
IPv6:
2604:4f00::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:b2:6c:30:b3:48:79:d2:78:55:e5:14:88:48:a5:fa:85:c3:
e9:7f:c8:ac:55:69:4c:ca:13:84:7a:c9:23:1b:be:8e:f6:cb:
78:af:d7:56:d5:f3:e2:f9:e3:71:f1:d7:1e:5b:10:92:2a:3d:
62:6d:80:1b:c9:39:40:ff:6d:94:4d:2b:af:b3:cb:ce:60:ac:
b0:af:2f:dd:7d:0b:28:3f:7d:3c:e8:8f:ca:5d:ff:8b:b6:36:
5d:d6:ed:da:49:72:23:df:77:85:f3:fb:86:c8:64:16:d1:62:
bf:ef:b4:75:0e:e0:eb:02:52:8f:3e:4f:58:8b:53:23:3f:0a:
b4:a4:63:5d:ad:94:52:3b:01:93:56:62:6f:fa:58:67:89:7e:
e9:84:fa:8b:64:25:74:83:e8:42:79:d2:66:a9:df:12:23:a3:
43:17:9b:f5:8b:a9:0a:ee:8a:b0:bd:1e:51:80:83:12:c5:c9:
d1:86:52:4b:1d:2b:27:98:4e:32:33:a7:26:c4:67:18:4a:9a:
4e:52:97:04:6d:9a:65:2a:75:ef:49:3f:5b:08:7c:a1:1f:26:
ae:68:e6:54:22:3a:02:5c:23:c3:4d:99:31:7c:56:dd:a4:15:
49:8d:60:e2:43:41:5a:e0:eb:2e:1a:c1:bf:a7:c3:3f:91:f8:
07:17:8d:51
-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEgQCoAWxjw6bRgNSQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTczMjEzODktODJjOC00MGFkLTk2OWQtZjM1NWE3ODlm
NTc5MB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk
OWEyZGJhNjQtZDgxMS00ZTE1LWJkNWMtNTUwNzFiZTA2MTY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwex/6nWJjwSz5cWMHB0QOTJaH8mOVpDQmc1N
d6vKg0PD+a5smqGjGtIl5/zAt6OLSw5F2NnsHDaV/gwWhBzPUyhyp93+sVb7QSFx
e/UZAewZF7noLnAV5EtBTzOfAnSnvPjl7DsexJ0WuLk15GDeyFW0mAsg+SJ9SmdW
gyUKyXeiaHYOzskTYaZOQE560yVtRtid2AKSgJBo89FB39UG1d0pjeUoOnzjvbny
yawIn4ubu9u0P5vvqr3p/7GoNhNVPbAXmlbP4OOEiqIi4El1PoAIpNsOFugOUp9v
16PNLbKJmeJcBj4iIZuqVuZERVKHTKfWB9Lah0MWQPUQk24xSQIDAQABo4IDcDCC
A2wwHQYDVR0OBBYEFBtZrnfhEfpM85ewh5o6/+jxjemtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzMy
MTM4OS04MmM4LTQwYWQtOTY5ZC1mMzU1YTc4OWY1NzkvNDU4OWU3MGEtNzBkZC0z
Y2Q2LWFmMTAtZWI5ZmVkMTMwYWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTczMjEzODktODJjOC00MGFkLTk2
OWQtZjM1NWE3ODlmNTc5LzE3MzIxMzg5LTgyYzgtNDBhZC05NjlkLWYzNTVhNzg5
ZjU3OS5jcmwwHwYDVR0jBBgwFoAU8geygR3uIKMb0ocE2pwdgM76tF4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzMyMTM4OS04MmM4LTQwYWQtOTY5ZC1mMzU1
YTc4OWY1NzkuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCSnJYAwQC
njM8AwQC0FAEMA0EAgACMAcDBQAmBE8AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGqybDCzSHnSeFXlFIhI
pfqFw+l/yKxVaUzKE4R6ySMbvo72y3iv11bV8+L543Hx1x5bEJIqPWJtgBvJOUD/
bZRNK6+zy85grLCvL919Cyg/fTzoj8pd/4u2Nl3W7dpJciPfd4Xz+4bIZBbRYr/v
tHUO4OsCUo8+T1iLUyM/CrSkY12tlFI7AZNWYm/6WGeJfumE+otkJXSD6EJ50map
3xIjo0MXm/WLqQruirC9HlGAgxLFydGGUksdKyeYTjIzpybEZxhKmk5SlwRtmmUq
de9JP1sIfKEfJq5o5lQiOgJcI8NNmTF8Vt2kFUmNYOJDQVrg6y4awb+nwz+R+AcX
jVE=
-----END CERTIFICATE-----
Generated at Mon Apr 28 18:00:02 2025 by rpki-client