Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/69d2dbc5-b24e-33f2-bfa2-2403850f04c6.roa
File: 69d2dbc5-b24e-33f2-bfa2-2403850f04c6.roa (raw, json)
Hash identifier: a9PPHv61lQiQx1l2kbztdqPcIn4UTeHimBc5PimZmcU=
Subject key identifier: 7A:7A:65:06:E7:4E:E6:06:0E:81:85:B0:36:EA:7B:03:07:02:7B:A0
Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial: 010D0C9F432858491AA6C3470CE496E35E9C4C20
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/69d2dbc5-b24e-33f2-bfa2-2403850f04c6.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 21570
IP address blocks: 216.123.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:c3:47:0c:e4:96:e3:5e:9c:4c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=fed0da3d-567e-439d-8af4-8c3602d86c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:63:3f:68:9a:d1:00:f8:d3:83:a9:8f:ac:10:
78:89:a8:02:e5:d3:3a:20:9d:ea:11:91:27:61:6e:
df:1f:9a:ac:d9:1a:b0:d0:1b:9e:f4:89:71:0e:c9:
c5:9b:a9:e5:ea:19:3f:d4:74:7e:7c:bd:ee:21:94:
66:62:7f:21:79:9f:91:d9:b0:f2:4a:c7:5c:90:f5:
68:9f:74:28:70:a3:c1:aa:08:e2:44:1f:e3:85:08:
0d:21:e0:8c:50:b5:06:eb:05:36:e7:c8:1c:ce:40:
ea:a3:82:aa:01:5b:cc:42:b3:70:de:5a:0f:ee:9e:
3d:98:bc:d3:85:fe:a9:b1:25:aa:92:8b:a7:53:9f:
88:34:f9:94:58:13:7c:50:c3:c8:05:6b:e9:28:10:
23:d5:2f:1c:2a:70:59:35:5b:c9:56:a5:14:a8:cc:
29:19:54:03:a0:bc:07:68:25:fb:a5:3f:5e:75:4b:
4b:51:4c:6e:74:ba:3c:fe:85:38:4c:73:7d:f9:9c:
dd:96:e8:80:5a:c9:fd:8b:43:31:08:29:0f:cd:6a:
42:82:4e:83:e9:1f:d7:e6:29:8a:3f:8c:66:37:da:
90:d7:52:4a:74:ab:c1:8b:1e:ef:69:36:d1:4c:8a:
9d:2e:02:c0:81:49:42:1b:e3:08:f6:88:99:71:f5:
23:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7A:65:06:E7:4E:E6:06:0E:81:85:B0:36:EA:7B:03:07:02:7B:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/69d2dbc5-b24e-33f2-bfa2-2403850f04c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
X509v3 Authority Key Identifier:
keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
sbgp-ipAddrBlock: critical
IPv4:
216.123.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:d5:b1:09:7d:8e:3e:f8:1b:7f:76:dc:85:1a:b8:74:d8:ca:
44:86:a3:1a:04:7f:62:72:e5:68:25:3d:d4:4c:31:ae:67:3e:
b7:2d:10:fe:be:e1:b8:73:e1:bc:19:00:48:ad:df:dc:7f:c0:
82:16:4b:50:55:15:3a:26:1d:17:89:44:6c:12:4c:bc:61:74:
26:b7:f5:42:19:af:eb:3c:d3:23:fd:dd:45:76:e7:05:ef:6a:
7e:f1:28:ac:26:b2:a1:46:a0:1f:5e:c2:32:53:44:07:8d:9b:
14:76:ee:4d:e7:fb:05:35:77:dd:2a:b2:3d:e3:3d:6d:24:9f:
bc:68:30:32:ac:f2:49:ee:a8:c7:f5:e3:c8:41:9f:82:f5:a8:
2e:cc:eb:9c:35:4a:8e:68:9d:b6:2e:27:5d:d5:ea:6c:32:f1:
cb:14:87:03:38:bc:e4:21:58:40:55:01:b4:7c:88:d4:dc:05:
d9:da:08:52:e1:85:44:98:4d:b2:69:54:e4:8a:dc:30:e1:cc:
ab:e3:ba:5b:53:bb:a3:56:5a:e1:b2:20:ce:d1:63:7d:01:fd:
5d:95:65:e2:aa:a5:81:52:a1:4f:15:ae:92:e2:08:2b:65:97:
0d:db:ea:4e:c8:ef:94:8d:46:6d:46:12:98:fa:20:45:ff:69:
03:19:c2:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkapsNHDOSW416cTCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz
MDY5MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk
ZmVkMGRhM2QtNTY3ZS00MzlkLThhZjQtOGMzNjAyZDg2YzQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mM/aJrRAPjTg6mPrBB4iagC5dM6IJ3qEZEn
YW7fH5qs2Rqw0Bue9IlxDsnFm6nl6hk/1HR+fL3uIZRmYn8heZ+R2bDySsdckPVo
n3QocKPBqgjiRB/jhQgNIeCMULUG6wU258gczkDqo4KqAVvMQrNw3loP7p49mLzT
hf6psSWqkounU5+INPmUWBN8UMPIBWvpKBAj1S8cKnBZNVvJVqUUqMwpGVQDoLwH
aCX7pT9edUtLUUxudLo8/oU4THN9+ZzdluiAWsn9i0MxCCkPzWpCgk6D6R/X5imK
P4xmN9qQ11JKdKvBix7vaTbRTIqdLgLAgUlCG+MI9oiZcfUj7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHp6ZQbnTuYGDoGFsDbqewMHAnugMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh
ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvNjlkMmRiYzUtYjI0ZS0z
M2YyLWJmYTItMjQwMzg1MGYwNGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3
NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4
MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw
NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Hu6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGrVsQl9jj74G3923IUauHTYykSGoxoEf2Jy5WglPdRMMa5nPrctEP6+
4bhz4bwZAEit39x/wIIWS1BVFTomHReJRGwSTLxhdCa39UIZr+s80yP93UV25wXv
an7xKKwmsqFGoB9ewjJTRAeNmxR27k3n+wU1d90qsj3jPW0kn7xoMDKs8knuqMf1
48hBn4L1qC7M65w1So5onbYuJ13V6mwy8csUhwM4vOQhWEBVAbR8iNTcBdnaCFLh
hUSYTbJpVOSK3DDhzKvjultTu6NWWuGyIM7RY30B/V2VZeKqpYFSoU8VrpLiCCtl
lw3b6k7I75SNRm1GEpj6IEX/aQMZwts=
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:58:07 2025 by rpki-client