Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8235dfbe-b3ab-3735-aab7-c2955069fad0.roa
File: 8235dfbe-b3ab-3735-aab7-c2955069fad0.roa (raw, json)
Hash identifier: qlU7QpT8vJHhgkPlV6bFyQmckBtvFw2EiCaAHvsizt4=
Subject key identifier: B8:37:ED:13:0A:8B:12:FB:72:85:09:F3:BB:B6:A5:D1:5F:55:A5:C9
Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
Certificate serial: 010D0C9F432858492CAE89EEC9D801E6E61D95C0
Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8235dfbe-b3ab-3735-aab7-c2955069fad0.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 16509
IP address blocks: 68.71.228.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:89:ee:c9:d8:01:e6:e6:1d:95:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=8a3f07f7-f27e-4572-89c7-f8e4fd574ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5b:52:45:31:49:65:4b:8f:0d:58:d9:bb:b5:
a7:7e:ef:24:82:1b:5b:a3:3d:68:f2:8b:7e:24:d6:
a0:4d:1f:60:32:1e:b9:2d:d2:b2:80:60:cb:99:cb:
cb:bd:16:a7:62:58:2b:2c:88:8d:1d:e1:ee:4d:db:
f5:c8:fb:21:08:6a:da:0d:b9:e3:d1:9c:e2:ab:d7:
24:40:1c:c8:dc:ae:43:dc:e6:b9:36:6c:ee:7f:d0:
09:36:9e:51:07:62:21:62:56:01:0c:d1:2c:fd:c1:
ac:3e:9c:98:8b:09:8d:3a:91:93:5b:93:33:e2:be:
2b:74:80:7e:81:5c:bc:4e:b2:1d:ed:b0:92:3d:fc:
bb:11:6d:83:8c:1f:27:63:8e:dd:84:f8:ce:27:ad:
9e:92:a1:93:16:f9:12:67:52:e7:c5:61:c7:26:34:
67:7a:1f:f3:bb:c9:4a:1c:25:71:1d:84:3f:ca:62:
cf:f2:38:3d:73:aa:01:aa:9a:76:30:d2:23:8e:52:
8b:59:77:5f:45:90:c5:07:72:2d:17:1c:62:4a:0f:
da:99:23:46:e9:85:f7:2e:81:ef:78:6d:70:d2:df:
8f:38:a2:be:b0:bd:0d:36:df:8d:0a:90:31:26:eb:
60:97:31:83:e8:b4:7e:d4:9f:96:90:62:51:5f:2b:
20:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:37:ED:13:0A:8B:12:FB:72:85:09:F3:BB:B6:A5:D1:5F:55:A5:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8235dfbe-b3ab-3735-aab7-c2955069fad0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl
X509v3 Authority Key Identifier:
keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
sbgp-ipAddrBlock: critical
IPv4:
68.71.228.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:3b:b9:14:ed:c5:bd:47:d3:87:c2:3a:86:87:0a:ad:00:ea:
3b:2f:1d:cd:d9:93:54:77:81:0b:28:36:0e:25:6d:88:aa:f0:
ab:ba:c1:f5:f1:c5:61:8f:44:b8:5a:fc:f5:ea:0a:4f:17:61:
c0:f0:1b:31:07:b1:20:e7:ba:82:0f:79:bb:c7:36:f9:ef:ba:
f7:66:e9:cf:ad:6b:67:97:8e:00:e4:5c:95:de:48:b9:97:2b:
b2:df:af:e4:53:c4:6a:bd:7e:fd:e5:f6:41:6c:20:1f:3c:b0:
52:d8:b1:eb:cd:c6:30:73:5b:66:1b:6c:9c:71:26:43:f6:e1:
f8:b2:de:49:d7:ef:65:ab:5a:e6:21:75:ba:b9:94:aa:c5:bb:
49:35:09:a3:b6:e1:45:3b:3a:15:3d:9c:9a:ef:3a:82:95:c2:
81:be:d7:bb:64:c6:f8:f0:26:b0:64:a3:32:30:05:08:14:c5:
c4:d3:d6:95:1b:3a:18:ca:52:e1:0e:be:b3:de:2b:d9:01:0f:
f5:62:2b:e9:3e:12:a4:4e:cd:5c:19:48:06:dc:26:8d:a9:1c:
74:17:c1:a1:56:d0:5f:ca:c8:80:06:f1:40:fd:4b:f7:6d:1b:
d8:56:2e:08:95:b8:d6:d4:6e:ae:7e:2b:2d:4e:10:07:1f:18:
4e:03:2f:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksronuydgB5uYdlcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh
YmRlMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
OGEzZjA3ZjctZjI3ZS00NTcyLTg5YzctZjhlNGZkNTc0YWMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVtSRTFJZUuPDVjZu7Wnfu8kghtboz1o8ot+
JNagTR9gMh65LdKygGDLmcvLvRanYlgrLIiNHeHuTdv1yPshCGraDbnj0Zziq9ck
QBzI3K5D3Oa5Nmzuf9AJNp5RB2IhYlYBDNEs/cGsPpyYiwmNOpGTW5Mz4r4rdIB+
gVy8TrId7bCSPfy7EW2DjB8nY47dhPjOJ62ekqGTFvkSZ1LnxWHHJjRneh/zu8lK
HCVxHYQ/ymLP8jg9c6oBqpp2MNIjjlKLWXdfRZDFB3ItFxxiSg/amSNG6YX3LoHv
eG1w0t+POKK+sL0NNt+NCpAxJutglzGD6LR+1J+WkGJRXysg4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLg37RMKixL7coUJ87u2pdFfVaXJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk
YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvODIzNWRmYmUtYjNhYi0z
NzM1LWFhYjctYzI5NTUwNjlmYWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0
YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4
YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl
NjVlOGFiZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBREfkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACU7uRTtxb1H04fCOoaHCq0A6jsvHc3Zk1R3gQsoNg4lbYiq8Ku6wfXx
xWGPRLha/PXqCk8XYcDwGzEHsSDnuoIPebvHNvnvuvdm6c+ta2eXjgDkXJXeSLmX
K7Lfr+RTxGq9fv3l9kFsIB88sFLYsevNxjBzW2YbbJxxJkP24fiy3knX72WrWuYh
dbq5lKrFu0k1CaO24UU7OhU9nJrvOoKVwoG+17tkxvjwJrBkozIwBQgUxcTT1pUb
OhjKUuEOvrPeK9kBD/ViK+k+EqROzVwZSAbcJo2pHHQXwaFW0F/KyIAG8UD9S/dt
G9hWLgiVuNbUbq5+Ky1OEAcfGE4DL/w=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:59 2025 by rpki-client