Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/b31f8880-9daf-3934-8200-09c9b0c1e35f.roa
File: b31f8880-9daf-3934-8200-09c9b0c1e35f.roa (raw, json)
Hash identifier: 96CCAtbKSJe+XcBDKhS4Ef8BsC2VDyMcii7xgIGJf1g=
Subject key identifier: C8:2E:37:A6:E7:9D:06:B5:2F:AE:75:01:EF:C3:DF:C8:CC:68:9A:12
Certificate issuer: /CN=32262fda-73b9-4875-8f83-9733217ce893
Certificate serial: 010D0C9F432858491AF564570F2CFFD7BC530D40
Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/b31f8880-9daf-3934-8200-09c9b0c1e35f.roa
Signing time: Fri 07 Mar 2025 04:39:17 +0000
ROA not before: Fri 07 Mar 2025 04:39:17 +0000
ROA not after: Thu 05 Jun 2025 03:39:17 +0000
asID: 8888
IP address blocks: 96.9.211.0/24 maxlen: 24
96.9.212.0/24 maxlen: 24
96.9.213.0/24 maxlen: 24
172.93.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:f5:64:57:0f:2c:ff:d7:bc:53:0d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893
Validity
Not Before: Mar 7 04:39:17 2025 GMT
Not After : Jun 5 03:39:17 2025 GMT
Subject: CN=0c1b8621-950f-4d23-ad74-e88de5d9e3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d7:f5:b4:df:78:ca:e5:f7:e0:bb:76:9b:2c:
3d:a3:c8:e3:cb:53:35:46:1f:7c:35:bd:9b:19:b2:
70:44:26:21:41:93:46:db:17:e8:cd:8a:15:18:89:
8d:c6:51:9f:e8:a2:2f:ba:4b:0b:97:a3:21:30:2a:
36:40:cb:4b:6c:f9:7d:3e:0e:44:dd:d5:1d:47:f4:
99:70:11:eb:75:79:91:32:af:13:8f:0f:ef:9f:0d:
b7:95:db:32:8f:74:07:c9:77:4f:00:69:47:08:db:
3a:46:e5:87:33:dd:02:03:ce:47:b7:4e:29:87:e1:
48:01:9e:03:a2:56:8f:77:a0:af:b7:b1:70:76:82:
7e:95:8b:3a:2e:40:a4:78:2c:62:52:e8:23:a5:f8:
63:19:12:f3:84:41:dc:ea:f7:2f:8b:ec:7f:92:09:
a9:5d:58:66:dc:3e:8d:4c:78:87:7b:dc:1c:e7:7c:
b2:85:bd:19:fa:42:aa:7d:75:3a:36:0b:65:9d:62:
02:18:40:d5:8a:d5:d8:ae:2f:5e:2e:7a:64:60:60:
76:a0:ee:60:0d:e2:8c:27:db:59:74:d8:42:22:65:
b3:ba:b7:9d:75:f9:11:a3:60:fe:c3:31:3c:39:6b:
ce:f9:3b:15:ba:2d:00:4a:73:8b:13:8b:bd:e3:5f:
8f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2E:37:A6:E7:9D:06:B5:2F:AE:75:01:EF:C3:DF:C8:CC:68:9A:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/b31f8880-9daf-3934-8200-09c9b0c1e35f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl
X509v3 Authority Key Identifier:
keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
sbgp-ipAddrBlock: critical
IPv4:
96.9.211.0-96.9.213.255
172.93.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:a5:11:5d:c6:16:ea:bf:c1:d0:de:3d:c0:21:4f:4c:74:b6:
96:cd:a2:29:fe:88:19:bb:cf:e3:65:ad:aa:36:04:0a:61:41:
8b:db:61:3a:fe:8b:ea:55:26:92:1b:8e:f5:d7:9a:73:e0:96:
33:e8:c3:53:bc:96:13:5a:1b:c4:a8:f3:3d:99:39:66:02:48:
f8:b4:e9:d5:78:fa:8b:b5:d8:9f:29:75:94:09:ed:80:64:9a:
0a:4a:76:71:10:e5:44:d1:e6:f2:80:7d:57:d0:00:ca:0b:1f:
8a:33:9b:de:20:e6:02:3e:4d:f3:cf:0f:0f:9b:24:6a:ce:a9:
83:72:28:22:0f:b5:82:2e:b8:20:bc:57:1b:ef:71:a2:2f:88:
93:6e:02:df:ce:12:6b:79:fa:51:d3:35:52:45:74:b1:1d:80:
e1:6e:3e:83:34:e0:eb:34:63:f8:6e:c5:dc:a7:88:43:5a:ca:
e3:ff:92:32:8e:fd:b0:87:3f:25:41:9a:0d:57:57:97:c2:11:
73:a7:ff:ed:c4:0e:ac:6e:70:66:94:7f:6e:77:d1:72:9d:48:
51:7c:b1:21:a8:3e:5f:3d:fd:e4:5c:08:04:43:f1:fa:14:23:
2f:10:54:1b:05:2c:ca:8a:95:2d:8f:86:8c:42:70:95:f0:2e:
03:6d:bc:49
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEka9WRXDyz/17xTDUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl
ODkzMB4XDTI1MDMwNzA0MzkxN1oXDTI1MDYwNTAzMzkxN1owLzEtMCsGA1UEAxMk
MGMxYjg2MjEtOTUwZi00ZDIzLWFkNzQtZTg4ZGU1ZDllM2M4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdf1tN94yuX34Lt2myw9o8jjy1M1Rh98Nb2b
GbJwRCYhQZNG2xfozYoVGImNxlGf6KIvuksLl6MhMCo2QMtLbPl9Pg5E3dUdR/SZ
cBHrdXmRMq8Tjw/vnw23ldsyj3QHyXdPAGlHCNs6RuWHM90CA85Ht04ph+FIAZ4D
olaPd6Cvt7FwdoJ+lYs6LkCkeCxiUugjpfhjGRLzhEHc6vcvi+x/kgmpXVhm3D6N
THiHe9wc53yyhb0Z+kKqfXU6NgtlnWICGEDVitXYri9eLnpkYGB2oO5gDeKMJ9tZ
dNhCImWzureddfkRo2D+wzE8OWvO+TsVui0ASnOLE4u941+PewIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFMguN6bnnQa1L651Ae/D38jMaJoSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2
MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvYjMxZjg4ODAtOWRhZi0z
OTM0LTgyMDAtMDljOWIwYzFlMzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm
ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj
ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz
MjE3Y2U4OTMuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABgCdMD
BAFgCdQDBACsXbowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEANqURXcYW6r/B0N49wCFPTHS2ls2iKf6IGbvP
42WtqjYECmFBi9thOv6L6lUmkhuO9deac+CWM+jDU7yWE1obxKjzPZk5ZgJI+LTp
1Xj6i7XYnyl1lAntgGSaCkp2cRDlRNHm8oB9V9AAygsfijOb3iDmAj5N888PD5sk
as6pg3IoIg+1gi64ILxXG+9xoi+Ik24C384Sa3n6UdM1UkV0sR2A4W4+gzTg6zRj
+G7F3KeIQ1rK4/+SMo79sIc/JUGaDVdXl8IRc6f/7cQOrG5wZpR/bnfRcp1IUXyx
Iag+Xz395FwIBEPx+hQjLxBUGwUsyoqVLY+GjEJwlfAuA228SQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:19:42 2025 by rpki-client