Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2dc8644f-88a8-3d7d-9a4e-1b1abb47f791.roa
File: 2dc8644f-88a8-3d7d-9a4e-1b1abb47f791.roa (raw, json)
Hash identifier: 1vkEy6ND0g02dWmGvUFurHaePb4NNiCWDHmQ+enNuNw=
Subject key identifier: 17:DE:7B:42:CF:94:BC:2B:B3:D2:E5:DC:E5:01:E8:52:B6:8D:19:4F
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F432858485CD02DECBF27A5AA1F611180
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2dc8644f-88a8-3d7d-9a4e-1b1abb47f791.roa
Signing time: Sun 29 Dec 2024 02:00:39 +0000
ROA not before: Sun 29 Dec 2024 02:00:39 +0000
ROA not after: Sat 29 Mar 2025 01:00:39 +0000
asID: 15204
IP address blocks: 64.33.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5c:d0:2d:ec:bf:27:a5:aa:1f:61:11:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Dec 29 02:00:39 2024 GMT
Not After : Mar 29 01:00:39 2025 GMT
Subject: CN=efd762a8-5c3d-43d6-a5e5-82b9aca0a869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d4:c1:13:18:c2:34:21:63:0f:1e:c0:ce:49:
d8:5e:41:47:e8:4e:4e:90:57:a8:11:42:f4:3d:c3:
17:3e:59:18:09:20:81:80:e1:44:cc:ea:19:d9:2b:
06:db:68:e5:ae:34:8c:94:dc:e7:ad:cc:17:40:f4:
c5:3b:27:c6:e3:1c:17:54:3c:66:8f:dd:b2:e9:6d:
68:88:85:a8:69:ac:00:ef:e9:4b:e6:02:21:e9:13:
63:37:c4:bf:92:7d:c1:7a:9e:ea:45:5b:c0:c4:fe:
da:d2:67:9c:0d:ca:e6:f5:90:ce:cf:74:05:e6:af:
1b:10:ba:0b:33:7b:14:60:b4:f2:0c:ff:f3:a5:2d:
ce:37:b7:ac:6b:e3:99:b7:39:17:ed:41:bc:86:64:
10:6a:c2:49:e7:5e:23:1c:53:f2:50:bf:44:83:c1:
e8:af:eb:58:79:44:5a:c8:2a:77:4c:1e:81:1d:ec:
82:8b:c9:08:e9:c5:0f:55:70:0d:8b:34:cc:e7:89:
08:11:9e:f4:02:9e:46:19:83:83:1d:99:2e:ac:12:
26:3c:fd:c8:43:eb:47:01:a3:f8:aa:6d:85:0a:4b:
70:d2:8f:d6:43:30:4b:64:f1:70:ad:fb:66:91:60:
a5:38:61:3b:52:a3:ea:87:2a:27:39:76:7e:9f:2d:
4f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DE:7B:42:CF:94:BC:2B:B3:D2:E5:DC:E5:01:E8:52:B6:8D:19:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2dc8644f-88a8-3d7d-9a4e-1b1abb47f791.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
64.33.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:88:b9:8f:69:34:f4:76:66:fe:23:c1:8a:80:62:47:04:29:
49:c2:96:75:f1:3d:23:a3:5f:06:56:a8:4c:2f:62:e0:d3:92:
2d:43:f1:6d:e3:77:cc:d4:ab:82:57:c6:11:2a:f9:70:72:51:
72:37:1c:40:35:71:dd:3d:8a:32:ef:8a:0e:9e:15:d2:8a:73:
c3:1f:55:ad:11:97:65:ac:fd:85:ad:07:23:9c:2a:c7:23:95:
70:0b:4b:4f:5b:74:d0:04:33:70:2f:5f:fd:4c:6e:eb:14:1d:
f5:4f:57:35:04:d8:91:0f:8c:7d:c2:e4:97:3f:dd:b3:fd:10:
59:61:80:e7:a7:b7:45:6a:02:9a:9d:f0:0f:03:01:12:26:e1:
fe:63:3e:1d:bb:60:a3:d1:46:9d:87:bf:26:8c:dd:ca:15:ab:
dd:04:2b:69:c4:16:62:8c:6a:7d:59:e4:00:0f:b2:ea:50:40:
88:cc:06:53:38:c8:b9:3c:f0:18:95:2b:ec:68:3f:f9:80:89:
89:2e:f8:47:17:d0:f5:67:3d:2c:dd:5b:ec:d7:59:2d:e8:a0:
69:96:66:70:34:8c:49:e1:92:a7:a9:24:4b:6d:62:b3:78:a0:
95:66:ac:75:57:31:d5:61:46:ea:50:11:b5:ab:48:7f:0e:de:
01:a6:6e:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhc0C3svyelqh9hEYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4
NWVmMB4XDTI0MTIyOTAyMDAzOVoXDTI1MDMyOTAxMDAzOVowLzEtMCsGA1UEAxMk
ZWZkNzYyYTgtNWMzZC00M2Q2LWE1ZTUtODJiOWFjYTBhODY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9TBExjCNCFjDx7AzknYXkFH6E5OkFeoEUL0
PcMXPlkYCSCBgOFEzOoZ2SsG22jlrjSMlNznrcwXQPTFOyfG4xwXVDxmj92y6W1o
iIWoaawA7+lL5gIh6RNjN8S/kn3Bep7qRVvAxP7a0mecDcrm9ZDOz3QF5q8bELoL
M3sUYLTyDP/zpS3ON7esa+OZtzkX7UG8hmQQasJJ514jHFPyUL9Eg8Hor+tYeURa
yCp3TB6BHeyCi8kI6cUPVXANizTM54kIEZ70Ap5GGYODHZkurBImPP3IQ+tHAaP4
qm2FCktw0o/WQzBLZPFwrftmkWClOGE7UqPqhyonOXZ+ny1P/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBfee0LPlLwrs9Ll3OUB6FK2jRlPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm
YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMmRjODY0NGYtODhhOC0z
ZDdkLTlhNGUtMWIxYWJiNDdmNzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2
ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm
ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh
ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQCHgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAiIuY9pNPR2Zv4jwYqAYkcEKUnClnXxPSOjXwZWqEwvYuDTki1D8W3j
d8zUq4JXxhEq+XByUXI3HEA1cd09ijLvig6eFdKKc8MfVa0Rl2Ws/YWtByOcKscj
lXALS09bdNAEM3AvX/1MbusUHfVPVzUE2JEPjH3C5Jc/3bP9EFlhgOent0VqApqd
8A8DARIm4f5jPh27YKPRRp2HvyaM3coVq90EK2nEFmKMan1Z5AAPsupQQIjMBlM4
yLk88BiVK+xoP/mAiYku+EcX0PVnPSzdW+zXWS3ooGmWZnA0jEnhkqepJEttYrN4
oJVmrHVXMdVhRupQEbWrSH8O3gGmbnc=
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:11:56 2025 by rpki-client