Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/272e3d72-f42b-394d-a2ac-48ac3e050b6c.roa
File: 272e3d72-f42b-394d-a2ac-48ac3e050b6c.roa (raw, json)
Hash identifier: MslySRlL+2ztlGEfCqlVlr44flC4aR05dJ0grJBj0P0=
Subject key identifier: CA:D0:E6:A0:AD:F8:E4:9F:B0:38:FC:0F:0F:E9:AB:06:32:1B:FE:59
Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47
Certificate serial: 010D0C9F432858485B6AF22C28B5F36848951B00
Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/272e3d72-f42b-394d-a2ac-48ac3e050b6c.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 14500
IP address blocks: 68.70.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6a:f2:2c:28:b5:f3:68:48:95:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=ca52971a-194e-48e3-b65d-f954adc7d486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1e:9c:31:6e:0c:8f:65:31:6c:ae:f8:32:4d:
5d:e5:12:e5:36:a2:c2:9b:7a:9c:63:51:cd:8e:a3:
68:f5:78:c5:fd:b2:2e:8d:3f:e4:be:6d:33:64:b4:
8a:46:43:3f:63:b9:c9:dd:a0:66:cd:ca:6b:92:cb:
2a:7e:f9:01:85:7c:af:8d:60:9d:be:6a:f7:ef:d1:
b5:c1:99:bb:27:d3:03:f2:03:24:f8:89:b9:16:06:
db:d0:fc:64:27:e9:ae:6a:3b:81:48:3e:9e:21:d1:
a3:56:a3:59:81:cc:c0:04:f8:ab:95:09:9e:b8:15:
24:17:ea:e6:77:e3:55:73:38:2d:ed:12:2f:5f:90:
21:52:80:f9:9c:f3:75:ed:ff:a7:98:3a:9a:0d:b4:
19:00:b0:46:63:49:3f:fc:69:42:c1:0e:40:69:d0:
dd:85:4b:b4:c6:53:27:eb:0a:dd:b8:74:25:03:45:
ac:98:b2:88:d8:5b:2b:ea:05:d5:79:b3:5e:7f:ad:
7d:ad:68:ae:ba:f2:55:b5:ed:f6:91:ce:fc:5e:4c:
89:d9:8e:7f:39:94:4c:ee:01:e2:d2:49:ae:88:e8:
4c:d5:66:97:b7:42:f0:4c:72:98:64:1d:ee:36:ca:
10:85:55:82:bc:3e:0c:d3:db:6e:a4:32:7e:d0:b1:
c5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D0:E6:A0:AD:F8:E4:9F:B0:38:FC:0F:0F:E9:AB:06:32:1B:FE:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/272e3d72-f42b-394d-a2ac-48ac3e050b6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl
X509v3 Authority Key Identifier:
keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer
sbgp-ipAddrBlock: critical
IPv4:
68.70.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:a9:27:57:52:6e:b4:51:4a:7b:b2:e5:ab:a8:de:8a:f4:32:
d7:00:3e:72:d3:be:4e:be:32:a2:1b:b1:3c:f8:6b:e4:45:03:
06:48:3a:07:90:12:e2:ce:2b:0f:20:8b:eb:47:d1:22:03:27:
14:ea:33:ae:3f:68:ce:e2:ff:fe:a2:30:eb:06:e1:53:c5:d3:
ff:f9:d0:f4:4e:1a:b2:70:a6:33:55:89:b7:13:f2:65:f5:1b:
7d:04:4e:92:29:79:9c:fa:af:e1:01:59:a4:3c:ca:5b:d6:db:
19:ca:81:6f:6d:44:b5:41:ec:8a:75:2f:15:fb:a0:aa:40:dd:
7c:49:51:6a:1b:9b:77:89:76:f0:1c:b1:ba:c8:8e:85:ba:06:
20:62:07:db:16:a4:6c:4f:25:fa:51:73:a6:b2:7c:e0:a4:32:
e6:7e:52:dc:d1:dc:0a:91:7a:17:ae:b0:f3:12:f9:a0:ce:8d:
64:4b:c0:48:be:2e:76:54:77:f1:65:1d:19:d0:db:8a:51:b7:
bd:0f:09:ea:15:e8:ae:38:7e:a3:08:7c:eb:6a:2e:1b:b4:ae:
46:ea:d4:0f:2c:38:40:60:7f:27:38:5f:1d:2d:a5:71:0e:fc:
ef:9b:f0:a7:a7:1d:f7:28:55:1f:d6:07:28:84:e2:7a:cf:95:
55:03:59:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhbavIsKLXzaEiVGwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2
ZDQ3MB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk
Y2E1Mjk3MWEtMTk0ZS00OGUzLWI2NWQtZjk1NGFkYzdkNDg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB6cMW4Mj2UxbK74Mk1d5RLlNqLCm3qcY1HN
jqNo9XjF/bIujT/kvm0zZLSKRkM/Y7nJ3aBmzcprkssqfvkBhXyvjWCdvmr379G1
wZm7J9MD8gMk+Im5Fgbb0PxkJ+muajuBSD6eIdGjVqNZgczABPirlQmeuBUkF+rm
d+NVczgt7RIvX5AhUoD5nPN17f+nmDqaDbQZALBGY0k//GlCwQ5AadDdhUu0xlMn
6wrduHQlA0WsmLKI2Fsr6gXVebNef619rWiuuvJVte32kc78XkyJ2Y5/OZRM7gHi
0kmuiOhM1WaXt0LwTHKYZB3uNsoQhVWCvD4M09tupDJ+0LHFzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMrQ5qCt+OSfsDj8Dw/pqwYyG/5ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5
YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvMjcyZTNkNzItZjQyYi0z
OTRkLWEyYWMtNDhhYzNlMDUwYjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3
MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk
NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk
NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREacMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFupJ1dSbrRRSnuy5auo3or0MtcAPnLTvk6+MqIbsTz4a+RFAwZIOgeQ
EuLOKw8gi+tH0SIDJxTqM64/aM7i//6iMOsG4VPF0//50PROGrJwpjNVibcT8mX1
G30ETpIpeZz6r+EBWaQ8ylvW2xnKgW9tRLVB7Ip1LxX7oKpA3XxJUWobm3eJdvAc
sbrIjoW6BiBiB9sWpGxPJfpRc6ayfOCkMuZ+UtzR3AqReheusPMS+aDOjWRLwEi+
LnZUd/FlHRnQ24pRt70PCeoV6K44fqMIfOtqLhu0rkbq1A8sOEBgfyc4Xx0tpXEO
/O+b8KenHfcoVR/WByiE4nrPlVUDWWY=
-----END CERTIFICATE-----
Generated at Tue Apr 29 22:20:14 2025 by rpki-client