Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/b5e19845-18ec-3998-b3f9-d75ca70625ef.roa
File: b5e19845-18ec-3998-b3f9-d75ca70625ef.roa (raw, json)
Hash identifier: vndOVOHKnOIGwVqhcXMdlo15E4tQg94VTmxg5fH3fxk=
Subject key identifier: 52:01:43:0E:E1:E0:B2:13:7F:7F:D7:1E:61:9E:79:F0:E1:41:E5:BE
Certificate issuer: /CN=17321389-82c8-40ad-969d-f355a789f579
Certificate serial: 010D0C9F4328584819CFD33506390447604D8C80
Authority key identifier: F2:07:B2:81:1D:EE:20:A3:1B:D2:87:04:DA:9C:1D:80:CE:FA:B4:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/b5e19845-18ec-3998-b3f9-d75ca70625ef.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 6939
IP address blocks: 74.114.88.0/22 maxlen: 24
158.51.60.0/22 maxlen: 24
208.80.4.0/22 maxlen: 24
2604:4f00::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:d3:35:06:39:04:47:60:4d:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17321389-82c8-40ad-969d-f355a789f579
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=a7a9ba12-d121-4aff-9891-7e3ec2ffcda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:71:6a:55:2e:7e:f9:84:c6:d2:bc:23:cf:1b:
24:c7:c8:40:45:91:9b:85:a9:68:f5:83:50:f5:a6:
27:fc:74:e9:46:be:c8:b1:82:f0:f6:1f:17:90:f7:
56:c0:3b:e9:c9:aa:4f:a9:b1:4c:1e:b0:23:72:9c:
dd:1b:a4:7c:a7:c4:07:c2:2f:ec:ee:9e:75:18:45:
4a:e5:8a:26:c6:03:c8:be:15:73:90:a3:78:fb:27:
e4:f4:2a:64:ff:68:59:2c:db:de:1d:7e:05:9d:a6:
f1:8c:63:d5:0a:7e:7e:2e:15:6c:0b:ec:f3:40:ba:
d0:13:68:d3:31:c6:26:c6:d5:1a:55:44:5e:3d:14:
b4:70:5f:7a:06:f3:50:23:a8:40:ce:1c:67:0c:1e:
c7:5b:7f:85:42:ef:6b:60:13:23:43:28:fc:0a:64:
3d:f8:db:80:10:c8:08:d0:a6:fe:ae:59:37:e9:db:
80:84:7c:88:dd:14:09:6b:16:fc:e6:b1:c1:6c:09:
70:ba:ff:5c:07:0a:0d:0f:03:e7:7f:08:90:16:70:
3f:c6:0a:87:02:1f:a0:85:43:80:1a:55:11:71:99:
5a:8e:fe:f3:5a:80:47:29:97:d9:81:cb:26:ad:ae:
20:81:42:da:41:23:e5:85:5a:22:55:47:2a:ee:76:
46:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:01:43:0E:E1:E0:B2:13:7F:7F:D7:1E:61:9E:79:F0:E1:41:E5:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/b5e19845-18ec-3998-b3f9-d75ca70625ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/17321389-82c8-40ad-969d-f355a789f579.crl
X509v3 Authority Key Identifier:
keyid:F2:07:B2:81:1D:EE:20:A3:1B:D2:87:04:DA:9C:1D:80:CE:FA:B4:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer
sbgp-ipAddrBlock: critical
IPv4:
74.114.88.0/22
158.51.60.0/22
208.80.4.0/22
IPv6:
2604:4f00::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:f9:58:0e:f4:d1:e1:71:f0:5f:40:62:76:04:63:e6:0e:08:
4e:68:a2:12:0c:93:b0:20:3c:76:ec:1b:98:5e:0d:30:33:c3:
25:69:12:8d:4e:0d:9f:3a:12:bd:0d:23:d9:fa:d6:64:f9:a3:
cf:56:16:4c:8e:91:e7:33:7d:36:86:b0:70:f1:ad:dc:1d:c4:
85:04:a2:ff:e1:06:de:52:fb:1f:46:05:59:35:69:64:3b:49:
d7:5a:4f:f7:5b:73:a3:ff:aa:0e:f0:70:2c:a9:83:9b:04:a5:
08:7a:da:ba:9f:c9:cd:2b:04:23:74:74:0f:22:29:74:19:81:
0a:b4:2c:83:28:5e:ce:01:ab:25:10:50:21:92:27:a1:4c:27:
26:86:41:7a:12:da:85:3c:dc:cc:a8:8e:ca:43:7e:8e:e9:16:
68:b4:44:f3:aa:aa:8a:37:dc:38:fa:19:13:fe:1d:7a:7a:43:
14:05:5e:90:a4:90:d3:ae:d0:08:02:f5:a7:fe:4a:16:26:a0:
35:a6:3d:49:b5:af:7a:f8:28:6f:fe:c8:96:e2:ca:f9:13:0c:
8d:19:0d:76:48:65:cc:50:e1:6a:cb:70:dd:24:b3:5e:07:c9:
98:54:d6:0d:7f:1b:9c:47:7a:d1:cd:74:fb:85:2a:4d:6b:9a:
9d:43:d4:7b
-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEgZz9M1BjkER2BNjIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTczMjEzODktODJjOC00MGFkLTk2OWQtZjM1NWE3ODlm
NTc5MB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
YTdhOWJhMTItZDEyMS00YWZmLTk4OTEtN2UzZWMyZmZjZGE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXFqVS5++YTG0rwjzxskx8hARZGbhalo9YNQ
9aYn/HTpRr7IsYLw9h8XkPdWwDvpyapPqbFMHrAjcpzdG6R8p8QHwi/s7p51GEVK
5YomxgPIvhVzkKN4+yfk9Cpk/2hZLNveHX4FnabxjGPVCn5+LhVsC+zzQLrQE2jT
McYmxtUaVURePRS0cF96BvNQI6hAzhxnDB7HW3+FQu9rYBMjQyj8CmQ9+NuAEMgI
0Kb+rlk36duAhHyI3RQJaxb85rHBbAlwuv9cBwoNDwPnfwiQFnA/xgqHAh+ghUOA
GlURcZlajv7zWoBHKZfZgcsmra4ggULaQSPlhVoiVUcq7nZGtQIDAQABo4IDcDCC
A2wwHQYDVR0OBBYEFFIBQw7h4LITf3/XHmGeefDhQeW+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzMy
MTM4OS04MmM4LTQwYWQtOTY5ZC1mMzU1YTc4OWY1NzkvYjVlMTk4NDUtMThlYy0z
OTk4LWIzZjktZDc1Y2E3MDYyNWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTczMjEzODktODJjOC00MGFkLTk2
OWQtZjM1NWE3ODlmNTc5LzE3MzIxMzg5LTgyYzgtNDBhZC05NjlkLWYzNTVhNzg5
ZjU3OS5jcmwwHwYDVR0jBBgwFoAU8geygR3uIKMb0ocE2pwdgM76tF4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzMyMTM4OS04MmM4LTQwYWQtOTY5ZC1mMzU1
YTc4OWY1NzkuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCSnJYAwQC
njM8AwQC0FAEMA0EAgACMAcDBQAmBE8AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAD/5WA700eFx8F9AYnYE
Y+YOCE5oohIMk7AgPHbsG5heDTAzwyVpEo1ODZ86Er0NI9n61mT5o89WFkyOkecz
fTaGsHDxrdwdxIUEov/hBt5S+x9GBVk1aWQ7SddaT/dbc6P/qg7wcCypg5sEpQh6
2rqfyc0rBCN0dA8iKXQZgQq0LIMoXs4BqyUQUCGSJ6FMJyaGQXoS2oU83MyojspD
fo7pFmi0RPOqqoo33Dj6GRP+HXp6QxQFXpCkkNOu0AgC9af+ShYmoDWmPUm1r3r4
KG/+yJbiyvkTDI0ZDXZIZcxQ4WrLcN0ks14HyZhU1g1/G5xHetHNdPuFKk1rmp1D
1Hs=
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:40:24 2025 by rpki-client