Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/229868f1-eb31-3582-80a9-f52bf540be6d.roa
File: 229868f1-eb31-3582-80a9-f52bf540be6d.roa (raw, json)
Hash identifier: QRsj6DeTwogetw94S97BBpuGIEExgL7w8TtWJLfpRGk=
Subject key identifier: 8D:74:57:E9:74:D7:25:60:85:8A:95:2B:E9:69:3E:A2:0C:B2:32:0F
Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial: 010D0C9F43285848F4F6910AA9D71495AAD7F040
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/229868f1-eb31-3582-80a9-f52bf540be6d.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 16509
IP address blocks: 2001:4f8:b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:91:0a:a9:d7:14:95:aa:d7:f0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=464158ea-ba90-4a22-9fe9-0de670fb5cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:93:7e:4e:55:ea:2d:97:1c:9b:82:87:0e:59:
e5:62:73:a9:17:75:15:c0:33:d0:05:48:92:5b:fa:
be:f6:ef:99:7a:f0:98:d0:fc:02:1b:5a:01:98:c0:
f1:3d:85:62:93:cb:04:72:9c:24:78:08:89:26:cf:
dd:80:06:74:03:ea:fa:1d:1b:7d:b9:15:0d:b5:18:
18:fc:e5:dc:e8:2b:7e:5e:98:dd:37:53:83:19:71:
77:56:f2:d4:9c:52:92:db:c2:de:59:ae:45:ef:60:
3d:f1:71:29:1a:38:aa:81:6b:b6:b8:56:2c:cc:b6:
1e:4f:49:5d:c1:b3:30:a7:4e:ae:de:bf:45:38:46:
96:83:7d:b4:db:ac:4c:0f:bb:53:9a:7c:26:4c:22:
ed:a2:ea:31:54:2b:72:ab:79:a1:d2:f5:5b:71:54:
d6:9c:36:16:af:e7:5b:76:1b:7f:4a:4a:66:79:ec:
3f:5e:26:86:3b:de:3f:a7:d5:a2:5c:4e:0c:f4:35:
58:f9:41:ab:c6:d9:c4:bd:29:04:93:b8:8e:ee:a7:
8a:80:8e:cc:cb:e6:d1:52:58:7b:e1:dc:c5:f7:6c:
89:06:74:89:39:de:f3:2d:8e:f3:db:c6:63:65:1b:
77:2b:b5:13:12:cc:9a:26:db:80:bd:8e:f0:92:78:
c6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:74:57:E9:74:D7:25:60:85:8A:95:2B:E9:69:3E:A2:0C:B2:32:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/229868f1-eb31-3582-80a9-f52bf540be6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
X509v3 Authority Key Identifier:
keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4f8:b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:ad:27:e7:19:4a:4c:60:fc:43:cb:40:60:1f:0b:ce:d6:49:
86:ae:4d:93:f3:e6:03:ec:f4:e7:f0:b4:c8:7f:1f:b6:34:d6:
b4:d8:3c:59:b1:54:a6:67:78:4a:0a:41:66:85:5d:b1:94:13:
f8:c0:fc:1e:c3:6d:73:17:28:98:e1:b4:1c:ae:5c:f0:7b:3a:
37:d9:d1:d8:2e:24:0a:d2:c5:c4:cb:59:f1:f8:99:30:39:ac:
64:93:c7:ff:ba:29:cb:06:ff:54:dd:59:e1:84:dd:ad:5c:2a:
5b:92:96:bb:59:f9:b8:75:66:71:c5:1a:8f:de:e1:39:6a:88:
67:17:f9:80:dc:49:9d:fa:85:30:0d:6d:a9:65:ad:80:92:4a:
ca:b0:c0:15:1f:e7:0c:15:6e:6e:28:0c:2a:50:2a:e0:e0:1b:
6a:63:19:ec:59:39:89:c6:74:2c:74:26:65:58:1a:f0:19:4f:
db:42:40:6b:23:72:50:2c:a1:cf:b1:2d:e6:65:59:c5:0f:c8:
37:1d:25:8f:fa:b6:ee:05:49:c3:c5:43:76:0b:5b:68:f6:22:
ac:1f:9d:f6:de:89:ba:95:a2:36:d6:1c:2c:b3:9c:64:c9:66:
b6:7f:8b:98:68:a5:72:f7:e4:02:ba:80:98:4c:9c:49:ee:fd:
1c:8a:00:a3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj09pEKqdcUlarX8EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk
MTc3MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
NDY0MTU4ZWEtYmE5MC00YTIyLTlmZTktMGRlNjcwZmI1Y2QxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJN+TlXqLZccm4KHDlnlYnOpF3UVwDPQBUiS
W/q+9u+ZevCY0PwCG1oBmMDxPYVik8sEcpwkeAiJJs/dgAZ0A+r6HRt9uRUNtRgY
/OXc6Ct+XpjdN1ODGXF3VvLUnFKS28LeWa5F72A98XEpGjiqgWu2uFYszLYeT0ld
wbMwp06u3r9FOEaWg32026xMD7tTmnwmTCLtouoxVCtyq3mh0vVbcVTWnDYWr+db
dht/Skpmeew/XiaGO94/p9WiXE4M9DVY+UGrxtnEvSkEk7iO7qeKgI7My+bRUlh7
4dzF92yJBnSJOd7zLY7z28ZjZRt3K7UTEsyaJtuAvY7wknjGhwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFI10V+l01yVghYqVK+lpPqIMsjIPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1
NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvMjI5ODY4ZjEtZWIzMS0z
NTgyLTgwYTktZjUyYmY1NDBiZTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4
ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw
ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5
MDQ4MGQxNzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEE+AAL
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADmtJ+cZSkxg/EPLQGAfC87WSYauTZPz5gPs9OfwtMh/H7Y01rTY
PFmxVKZneEoKQWaFXbGUE/jA/B7DbXMXKJjhtByuXPB7OjfZ0dguJArSxcTLWfH4
mTA5rGSTx/+6KcsG/1TdWeGE3a1cKluSlrtZ+bh1ZnHFGo/e4TlqiGcX+YDcSZ36
hTANballrYCSSsqwwBUf5wwVbm4oDCpQKuDgG2pjGexZOYnGdCx0JmVYGvAZT9tC
QGsjclAsoc+xLeZlWcUPyDcdJY/6tu4FScPFQ3YLW2j2IqwfnfbeibqVojbWHCyz
nGTJZrZ/i5hopXL35AK6gJhMnEnu/RyKAKM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:45 2025 by rpki-client