Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6e290d9e-a21d-3232-9846-a94d6bbc3f12.roa
File: 6e290d9e-a21d-3232-9846-a94d6bbc3f12.roa (raw, json)
Hash identifier: WGPgHImkt1Pk0SFjApdO7pH3BbaqNR233EJ4IzE29w8=
Subject key identifier: AF:12:9A:D5:9E:4A:31:C8:FC:C6:C7:7C:4C:6E:E4:55:2A:7B:22:BA
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A56AE3392AFEEFF622820
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6e290d9e-a21d-3232-9846-a94d6bbc3f12.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 74.125.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:56:ae:33:92:af:ee:ff:62:28:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=81b288b0-f731-4e45-9b8d-113a04d10c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bb:62:67:4d:5a:10:fb:4b:01:8f:1b:4e:e0:
df:d0:3b:d0:8c:e3:a3:26:b8:a6:8c:43:ec:52:98:
a7:e0:4d:6e:4c:6f:08:d5:40:e5:aa:66:a7:d2:2a:
7e:5a:4f:e4:8a:b5:0b:cc:9a:45:08:a2:99:2c:bb:
c9:7f:b8:f2:ef:42:76:13:2e:9e:75:5e:69:39:c2:
23:88:37:ea:a8:ba:5e:c9:d2:99:8d:55:99:b9:f5:
dc:9a:c0:25:36:b2:dc:45:4d:de:bc:33:0f:ff:4a:
67:e3:4d:ce:a0:94:a1:0e:57:34:59:a2:73:e1:f3:
48:59:52:0c:91:f5:f7:b6:88:3d:63:ea:91:e3:35:
a8:46:f2:20:28:00:49:15:b7:ee:27:06:fc:ed:20:
92:40:ea:fd:5a:f5:00:f8:a7:b9:3e:64:e3:72:0b:
b5:0d:74:46:c9:40:37:8b:e1:62:c5:0e:78:ae:08:
2c:c1:8e:29:ab:8d:a7:d4:c6:3e:a9:f8:29:9f:c7:
65:ac:bd:0c:f4:2d:60:65:90:5c:a1:c4:99:19:37:
c7:d2:a3:66:eb:e7:ae:12:2f:de:36:29:90:ec:6b:
cb:76:bb:67:ec:2f:bb:10:90:58:5f:1d:3d:49:08:
ff:05:17:d8:68:53:9f:18:04:75:30:04:5f:28:13:
db:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:12:9A:D5:9E:4A:31:C8:FC:C6:C7:7C:4C:6E:E4:55:2A:7B:22:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6e290d9e-a21d-3232-9846-a94d6bbc3f12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:e0:00:71:d3:fe:35:cd:3a:d0:43:e0:6f:14:29:fb:fb:5a:
ad:bb:65:ce:a7:b8:05:9a:ad:4f:c3:63:86:f4:42:2c:b8:c3:
60:be:d3:a8:9d:eb:35:f2:14:4f:73:7d:34:53:15:f8:03:d7:
0f:90:17:dc:55:87:36:8f:08:9b:67:46:bf:4c:b7:7f:59:35:
f9:1b:e5:a7:02:28:54:de:4c:b7:f1:9c:77:aa:53:cf:a6:84:
59:ef:53:43:59:ac:03:2b:1a:68:42:58:f7:2e:3f:35:f8:02:
39:58:7a:ca:f6:04:38:d0:e1:dd:39:2e:dc:18:89:ef:a1:9c:
6a:57:fc:5b:ce:2c:7d:36:94:f7:e6:96:a4:95:61:a7:15:dc:
f1:41:9b:96:e0:94:57:a0:14:cf:38:1e:13:d1:72:d8:db:f8:
95:43:75:eb:ac:9b:78:05:49:d6:57:e8:e9:97:7c:86:ea:80:
a2:97:57:38:12:99:74:e2:4c:21:79:59:55:6e:68:2f:82:01:
87:29:e9:df:98:f1:1b:67:90:75:66:5b:f7:6f:4a:36:5d:ec:
54:26:6c:91:1c:3c:0f:67:89:ec:e2:b2:f0:d0:5f:b6:d0:aa:
d4:d6:1d:f7:46:fc:fa:ee:f0:60:59:44:2a:7c:9f:cd:b3:1b:
48:f8:6f:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf/SlauM5Kv7v9iKCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI0MTEyNTE0MDAzOVoXDTI1MDIyMzE0MDAzOVowLzEtMCsGA1UEAxMk
ODFiMjg4YjAtZjczMS00ZTQ1LTliOGQtMTEzYTA0ZDEwYzIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7tiZ01aEPtLAY8bTuDf0DvQjOOjJrimjEPs
Upin4E1uTG8I1UDlqman0ip+Wk/kirULzJpFCKKZLLvJf7jy70J2Ey6edV5pOcIj
iDfqqLpeydKZjVWZufXcmsAlNrLcRU3evDMP/0pn403OoJShDlc0WaJz4fNIWVIM
kfX3tog9Y+qR4zWoRvIgKABJFbfuJwb87SCSQOr9WvUA+Ke5PmTjcgu1DXRGyUA3
i+FixQ54rggswY4pq42n1MY+qfgpn8dlrL0M9C1gZZBcocSZGTfH0qNm6+euEi/e
NimQ7GvLdrtn7C+7EJBYXx09SQj/BRfYaFOfGAR1MARfKBPbmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK8SmtWeSjHI/MbHfExu5FUqeyK6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNmUyOTBkOWUtYTIxZC0z
MjMyLTk4NDYtYTk0ZDZiYmMzZjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASn3PMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGzgAHHT/jXNOtBD4G8UKfv7Wq27Zc6nuAWarU/DY4b0Qiy4w2C+06id
6zXyFE9zfTRTFfgD1w+QF9xVhzaPCJtnRr9Mt39ZNfkb5acCKFTeTLfxnHeqU8+m
hFnvU0NZrAMrGmhCWPcuPzX4AjlYesr2BDjQ4d05LtwYie+hnGpX/FvOLH02lPfm
lqSVYacV3PFBm5bglFegFM84HhPRctjb+JVDdeusm3gFSdZX6OmXfIbqgKKXVzgS
mXTiTCF5WVVuaC+CAYcp6d+Y8RtnkHVmW/dvSjZd7FQmbJEcPA9niezisvDQX7bQ
qtTWHfdG/Pru8GBZRCp8n82zG0j4b5s=
-----END CERTIFICATE-----
Generated at Fri May 9 18:56:53 2025 by rpki-client