Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa
File: 3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa (raw, json)
Hash identifier: NgFuCtYcFDN8jFps7H56sBn/wXioEelMKvdjik2QkDo=
Subject key identifier: 80:06:AA:77:8A:88:9B:49:58:42:3F:FD:BC:6F:36:88:61:2D:BB:BC
Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9
Certificate serial: 010D0C9F43285848222FDB4B792E091FB02604C0
Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 14618
IP address blocks: 64.52.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:db:4b:79:2e:09:1f:b0:26:04:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=7981d4e7-7b27-48e4-9d3e-084af8e78942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ad:1f:ad:30:23:ef:6a:99:81:e5:e9:60:de:
10:e9:f4:3c:44:50:09:9b:2a:47:26:db:2e:e1:2a:
c0:e5:90:c7:08:c7:47:0a:a2:4c:24:6b:70:35:6c:
08:17:98:6c:04:a1:32:71:9e:ae:a7:19:aa:4d:53:
18:b5:65:50:74:1e:10:0a:18:10:7e:55:e5:a9:18:
00:d9:52:46:15:61:55:55:c2:1a:3e:ca:9d:13:3e:
cd:31:ab:9d:77:55:a8:95:29:ea:01:3d:22:a0:9a:
dc:3f:a4:fb:d9:66:8e:89:76:8f:81:ee:58:d2:bb:
15:ff:e0:ec:8d:c6:62:f8:01:cd:23:1d:01:f3:76:
48:36:6c:28:28:de:ff:08:c8:15:b6:61:43:e8:41:
85:be:4e:0f:f0:77:11:1e:cb:f5:45:02:6f:6e:da:
15:24:98:94:bc:1d:56:de:30:ea:24:b1:17:30:c8:
e8:f6:15:a7:4f:64:9b:17:e9:ef:19:cd:61:46:da:
2b:fa:e5:18:65:57:24:c3:be:29:45:0a:d9:cc:9e:
0e:9e:b0:2b:1d:f9:31:7a:b2:d8:34:9e:67:eb:d5:
cd:a9:e0:e0:b4:66:25:df:b1:56:79:72:f9:b0:9f:
40:f7:22:a0:1a:25:3c:dc:36:fa:01:37:f1:85:e0:
56:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:06:AA:77:8A:88:9B:49:58:42:3F:FD:BC:6F:36:88:61:2D:BB:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl
X509v3 Authority Key Identifier:
keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer
sbgp-ipAddrBlock: critical
IPv4:
64.52.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:a1:5c:fa:d6:be:1f:32:47:f1:ee:c3:2c:f0:ae:fc:19:cf:
3e:9b:2e:c7:f8:c3:10:98:a4:f6:34:17:e8:0b:1b:91:45:e8:
3d:9e:35:85:8e:9c:67:a4:a0:70:8a:d6:ac:26:72:c0:12:1a:
94:90:50:2a:bb:23:2e:bd:2f:d2:7d:a6:cc:48:96:1d:fc:bb:
98:05:e8:57:fb:b5:5b:54:bd:08:19:96:85:f7:d0:0a:b1:4e:
88:d7:4a:11:e8:df:2a:2e:ff:43:09:73:ba:6b:bb:95:05:fd:
af:18:4f:70:66:7d:fb:d6:ee:0d:95:5c:35:9a:1d:7f:df:1e:
59:dd:e9:74:8f:18:b4:ba:ed:0e:b1:2b:2f:7f:3b:37:6e:69:
6d:f1:58:ba:66:f7:df:31:ea:10:45:4c:82:c5:9f:52:d9:1f:
bb:69:ca:52:b9:b6:5a:b9:fc:72:25:21:4d:6f:8a:0e:17:8b:
7f:a0:a2:1a:e8:6e:31:cb:5f:95:83:47:80:83:ac:2e:de:b3:
1b:52:66:37:d5:44:b1:e2:0d:7f:95:7b:4d:d7:54:63:af:b5:
43:5d:68:da:bb:2f:b1:e4:f6:7f:21:bd:83:92:de:36:3e:d6:
51:17:bf:96:ed:ba:f3:3f:12:fe:ee:ae:76:33:fb:1e:8c:cc:
af:ca:c9:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgiL9tLeS4JH7AmBMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3
NWY5MB4XDTI0MTIwODAyMDAzOVoXDTI1MDMwODAyMDAzOVowLzEtMCsGA1UEAxMk
Nzk4MWQ0ZTctN2IyNy00OGU0LTlkM2UtMDg0YWY4ZTc4OTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa0frTAj72qZgeXpYN4Q6fQ8RFAJmypHJtsu
4SrA5ZDHCMdHCqJMJGtwNWwIF5hsBKEycZ6upxmqTVMYtWVQdB4QChgQflXlqRgA
2VJGFWFVVcIaPsqdEz7NMaudd1WolSnqAT0ioJrcP6T72WaOiXaPge5Y0rsV/+Ds
jcZi+AHNIx0B83ZINmwoKN7/CMgVtmFD6EGFvk4P8HcRHsv1RQJvbtoVJJiUvB1W
3jDqJLEXMMjo9hWnT2SbF+nvGc1hRtor+uUYZVckw74pRQrZzJ4OnrArHfkxerLY
NJ5n69XNqeDgtGYl37FWeXL5sJ9A9yKgGiU83Db6ATfxheBWoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIAGqneKiJtJWEI//bxvNohhLbu8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx
MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvM2YxZDVlMDgtOWE1Ny0z
YjFmLWEyZDktOWRhMDNjZDhhYWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5
M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx
NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0
Zjk0MTc1ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDRvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEShXPrWvh8yR/HuwyzwrvwZzz6bLsf4wxCYpPY0F+gLG5FF6D2eNYWO
nGekoHCK1qwmcsASGpSQUCq7Iy69L9J9psxIlh38u5gF6Ff7tVtUvQgZloX30Aqx
TojXShHo3you/0MJc7pru5UF/a8YT3BmffvW7g2VXDWaHX/fHlnd6XSPGLS67Q6x
Ky9/OzduaW3xWLpm998x6hBFTILFn1LZH7tpylK5tlq5/HIlIU1vig4Xi3+gohro
bjHLX5WDR4CDrC7esxtSZjfVRLHiDX+Ve03XVGOvtUNdaNq7L7Hk9n8hvYOS3jY+
1lEXv5btuvM/Ev7urnYz+x6MzK/KySg=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:26:29 2025 by rpki-client