Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/353a0b77-917f-3c34-885e-a1c22ef38c7d.roa
File: 353a0b77-917f-3c34-885e-a1c22ef38c7d.roa (raw, json)
Hash identifier: zPeNFr+c6oWljlpDL5EbHkVZ5q121dn8rY7kQv4buOo=
Subject key identifier: 8D:19:9A:A9:39:2D:66:A0:89:70:F2:57:D6:32:89:CD:6A:33:77:E6
Certificate issuer: /CN=74a9db22-8d49-4938-9c6f-e3fd428c158e
Certificate serial: 010D0C9F432858486695B45F93428BB8F10F16C0
Authority key identifier: 98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/353a0b77-917f-3c34-885e-a1c22ef38c7d.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 63399
IP address blocks: 209.127.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:b4:5f:93:42:8b:b8:f1:0f:16:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=3f76e394-d476-4915-99c4-51da372351ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:07:7d:b0:e5:ff:02:76:a4:1b:52:9f:52:
ad:ae:30:57:01:28:20:c7:05:c4:4a:4e:46:bf:bd:
fc:75:ee:14:01:8a:01:fc:21:42:73:cc:05:d6:aa:
0f:4e:aa:78:18:26:92:4f:6d:4d:34:74:d4:de:63:
b5:04:78:b2:ca:53:50:9d:3c:bd:2c:8d:85:a0:14:
94:53:48:87:37:69:e7:0c:16:5b:6b:27:f5:5c:0b:
f9:ec:df:e9:20:01:53:e5:35:83:86:4d:69:53:c3:
df:20:60:8f:b2:69:91:1b:fa:e3:e3:26:43:c8:55:
71:69:0f:55:e8:5f:dc:4f:eb:41:d3:20:4c:58:70:
75:18:12:42:cc:54:ad:4f:ab:a7:8f:6c:44:90:dc:
f9:64:2d:0b:96:82:27:bd:92:47:02:6d:c3:18:be:
5f:8f:4a:08:2e:34:5e:e0:4c:df:aa:c6:e9:3f:50:
a1:be:88:66:c2:53:c5:d1:6f:c8:91:b6:79:b0:8b:
7a:8f:8c:e9:0c:a0:d4:33:6b:27:cd:d3:ac:4e:5c:
a5:4e:47:fb:23:f7:1d:7a:8c:68:5a:d6:a9:24:d0:
8d:51:28:5f:76:26:cf:63:c2:43:54:5d:07:80:b7:
38:0b:e2:d6:f1:8f:02:6c:fb:ab:b1:0e:88:6b:bd:
55:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:19:9A:A9:39:2D:66:A0:89:70:F2:57:D6:32:89:CD:6A:33:77:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/353a0b77-917f-3c34-885e-a1c22ef38c7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl
X509v3 Authority Key Identifier:
keyid:98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer
sbgp-ipAddrBlock: critical
IPv4:
209.127.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:44:aa:7c:9c:95:54:d5:26:fe:e4:a0:6f:ae:5b:1d:ff:66:
18:c3:95:33:87:95:bd:35:51:4c:03:66:fb:ab:b6:ca:6f:e9:
7e:02:d0:0e:16:d3:c7:13:6f:f8:4b:15:02:63:e8:c5:c8:f1:
ca:58:ee:31:b3:5c:48:a4:e3:8d:0a:a5:22:85:1d:b8:22:b0:
3a:eb:94:68:43:08:ed:5b:a3:9d:8f:30:03:46:49:c0:60:a2:
86:4f:f2:a0:67:68:cb:e7:c2:4d:0b:43:75:7a:ce:53:c7:37:
9b:5d:77:ce:5a:a4:6c:72:8e:5d:ca:22:2f:e8:53:7d:4b:39:
5f:46:c0:98:4c:ae:d3:c8:bd:43:51:7d:49:00:ed:ff:5f:37:
2f:29:a6:c2:25:69:e6:e5:90:7d:ab:1e:80:6a:8e:5e:c3:a7:
c2:ed:70:e2:0b:49:d5:bc:ab:62:c6:79:14:44:2f:9f:ac:4e:
21:41:5c:1f:b0:68:1d:08:22:a6:bf:82:09:68:a0:db:a2:17:
82:5b:4a:2e:22:6f:b2:aa:09:5f:ae:d0:90:b7:38:ea:80:76:
76:df:92:08:ad:ef:ac:2a:18:c0:36:57:a3:00:79:3b:11:d1:
f2:96:71:b7:38:bf:eb:7d:8e:2d:de:62:09:dd:53:0e:89:0b:
b7:a4:1b:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhmlbRfk0KLuPEPFsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzRhOWRiMjItOGQ0OS00OTM4LTljNmYtZTNmZDQyOGMx
NThlMB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk
M2Y3NmUzOTQtZDQ3Ni00OTE1LTk5YzQtNTFkYTM3MjM1MWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8oHfbDl/wJ2pBtSn1KtrjBXASggxwXESk5G
v738de4UAYoB/CFCc8wF1qoPTqp4GCaST21NNHTU3mO1BHiyylNQnTy9LI2FoBSU
U0iHN2nnDBZbayf1XAv57N/pIAFT5TWDhk1pU8PfIGCPsmmRG/rj4yZDyFVxaQ9V
6F/cT+tB0yBMWHB1GBJCzFStT6unj2xEkNz5ZC0LloInvZJHAm3DGL5fj0oILjRe
4EzfqsbpP1ChvohmwlPF0W/IkbZ5sIt6j4zpDKDUM2snzdOsTlylTkf7I/cdeoxo
WtapJNCNUShfdibPY8JDVF0HgLc4C+LW8Y8CbPursQ6Ia71V2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI0Zmqk5LWagiXDyV9Yyic1qM3fmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5
ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2ZkNDI4YzE1OGUvMzUzYTBiNzctOTE3Zi0z
YzM0LTg4NWUtYTFjMjJlZjM4YzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzRhOWRiMjItOGQ0OS00OTM4LTlj
NmYtZTNmZDQyOGMxNThlLzc0YTlkYjIyLThkNDktNDkzOC05YzZmLWUzZmQ0Mjhj
MTU4ZS5jcmwwHwYDVR0jBBgwFoAUmPupDsV3auhpmoOFV1QuM6AcJkEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2Zk
NDI4YzE1OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0X9QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADlEqnyclVTVJv7koG+uWx3/ZhjDlTOHlb01UUwDZvurtspv6X4C0A4W
08cTb/hLFQJj6MXI8cpY7jGzXEik440KpSKFHbgisDrrlGhDCO1bo52PMANGScBg
ooZP8qBnaMvnwk0LQ3V6zlPHN5tdd85apGxyjl3KIi/oU31LOV9GwJhMrtPIvUNR
fUkA7f9fNy8ppsIlaeblkH2rHoBqjl7Dp8LtcOILSdW8q2LGeRREL5+sTiFBXB+w
aB0IIqa/gglooNuiF4JbSi4ib7KqCV+u0JC3OOqAdnbfkgit76wqGMA2V6MAeTsR
0fKWcbc4v+t9ji3eYgndUw6JC7ekG3U=
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:03:21 2025 by rpki-client