Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/3d224895-501e-3aed-857c-97ee5700de82.roa
File: 3d224895-501e-3aed-857c-97ee5700de82.roa (raw, json)
Hash identifier: Lf6Tv84uUpbh5nr6KNBOnxa2MQBq4xbT1vIC3r0/vKk=
Subject key identifier: B9:A1:71:1D:75:0C:63:2B:50:78:5C:36:7D:89:64:B0:E6:F7:19:C3
Certificate issuer: /CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6
Certificate serial: 010D0C9F43285849446931D24920FD1472936800
Authority key identifier: 42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/3d224895-501e-3aed-857c-97ee5700de82.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 30242
IP address blocks: 199.167.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:31:d2:49:20:fd:14:72:93:68:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=d1826218-8cff-4d57-b97f-2330130ceebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:11:0c:5c:f7:60:06:e7:c3:b8:69:0b:4e:d2:
43:25:41:c4:4d:42:a8:83:2a:8b:ae:b5:dd:0d:37:
66:c2:cb:8c:63:59:b7:82:2b:b0:db:3c:13:7c:5a:
61:7a:23:79:62:2d:06:de:4b:96:24:08:3d:31:7b:
7d:8d:f1:f8:35:13:72:42:25:12:43:21:22:00:9d:
3a:15:36:93:b6:4b:13:4e:60:21:ab:e5:48:8f:e8:
5c:b9:9c:81:b5:f8:21:80:1e:9a:10:60:fa:5c:26:
08:cd:61:25:6d:a2:ad:cf:21:15:7d:93:b7:71:58:
5e:47:4d:2d:f4:04:4b:88:e3:c0:e0:ed:db:f5:f9:
46:71:91:1e:65:71:75:c6:0e:1e:ce:65:d7:9d:24:
62:e3:3e:15:4d:86:60:fd:9b:2d:5d:73:2d:0c:2b:
c8:6e:e9:8a:5c:59:5a:fa:f5:cf:c5:e1:8a:d0:6c:
e8:30:53:cb:38:ce:f1:b4:9c:9c:90:78:de:75:4d:
f0:a0:ef:66:d1:f1:45:56:3d:69:13:c8:bb:99:c8:
33:7a:b7:30:6e:2d:13:92:8d:bd:ee:8e:5d:be:fd:
45:57:3c:72:39:d1:6d:04:85:47:11:9c:a1:e2:f2:
6c:8c:db:0f:ab:c7:ba:b9:bc:1f:46:e6:49:b0:55:
27:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A1:71:1D:75:0C:63:2B:50:78:5C:36:7D:89:64:B0:E6:F7:19:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/3d224895-501e-3aed-857c-97ee5700de82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl
X509v3 Authority Key Identifier:
keyid:42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer
sbgp-ipAddrBlock: critical
IPv4:
199.167.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:08:fd:e3:38:72:b3:20:68:81:db:33:92:29:ea:3a:7a:3f:
27:9b:2f:7a:e1:96:34:a7:c4:4e:fc:a6:56:99:94:e4:07:aa:
d0:ee:6a:c4:b3:95:52:71:76:9d:65:c9:93:95:05:52:08:16:
71:37:65:dc:41:38:f2:c4:71:d4:dc:28:ba:f6:b6:6e:fc:b5:
88:67:83:35:6b:85:7a:2a:08:ba:95:c5:9a:92:c7:9d:18:3b:
28:4c:29:fb:43:e2:97:f5:e9:65:48:89:64:18:50:5b:b5:ff:
35:fc:91:98:64:40:07:0f:91:75:c7:94:44:56:95:f1:26:7c:
de:64:da:1f:47:a9:6a:de:04:e5:a4:70:5a:29:aa:d4:70:75:
24:c3:57:ee:1b:7c:1c:9f:a6:f5:05:c6:57:94:fc:84:31:ff:
6d:9b:68:59:67:48:1c:14:b4:2e:93:76:a9:15:c0:07:e4:60:
51:77:78:6b:01:22:e4:b1:1e:d1:eb:ff:4f:2c:7a:d8:b8:a1:
15:e0:07:9f:2a:05:2f:ad:02:a9:c9:4a:ce:41:8f:96:7f:36:
99:b6:a9:3a:28:2d:d8:20:e3:6f:c1:fe:9a:d9:1f:11:6f:9d:
83:93:75:6c:3c:44:0b:a9:8b:01:37:1e:22:16:54:78:78:4a:
58:04:5a:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaTHSSSD9FHKTaAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjFkZDY4NjAtNzE5ZS00NmMwLThiN2MtODliOWU4ZDg4
ZGE2MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk
ZDE4MjYyMTgtOGNmZi00ZDU3LWI5N2YtMjMzMDEzMGNlZWJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBEMXPdgBufDuGkLTtJDJUHETUKogyqLrrXd
DTdmwsuMY1m3giuw2zwTfFpheiN5Yi0G3kuWJAg9MXt9jfH4NRNyQiUSQyEiAJ06
FTaTtksTTmAhq+VIj+hcuZyBtfghgB6aEGD6XCYIzWElbaKtzyEVfZO3cVheR00t
9ARLiOPA4O3b9flGcZEeZXF1xg4ezmXXnSRi4z4VTYZg/ZstXXMtDCvIbumKXFla
+vXPxeGK0GzoMFPLOM7xtJyckHjedU3woO9m0fFFVj1pE8i7mcgzercwbi0Tko29
7o5dvv1FVzxyOdFtBIVHEZyh4vJsjNsPq8e6ubwfRuZJsFUnBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLmhcR11DGMrUHhcNn2JZLDm9xnDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRk
Njg2MC03MTllLTQ2YzAtOGI3Yy04OWI5ZThkODhkYTYvM2QyMjQ4OTUtNTAxZS0z
YWVkLTg1N2MtOTdlZTU3MDBkZTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjFkZDY4NjAtNzE5ZS00NmMwLThi
N2MtODliOWU4ZDg4ZGE2LzIxZGQ2ODYwLTcxOWUtNDZjMC04YjdjLTg5YjllOGQ4
OGRhNi5jcmwwHwYDVR0jBBgwFoAUQnmNqghyfHSiXcmRrdvqyi78pSgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRkNjg2MC03MTllLTQ2YzAtOGI3Yy04OWI5
ZThkODhkYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6f8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ0I/eM4crMgaIHbM5Ip6jp6PyebL3rhljSnxE78plaZlOQHqtDuasSz
lVJxdp1lyZOVBVIIFnE3ZdxBOPLEcdTcKLr2tm78tYhngzVrhXoqCLqVxZqSx50Y
OyhMKftD4pf16WVIiWQYUFu1/zX8kZhkQAcPkXXHlERWlfEmfN5k2h9HqWreBOWk
cFopqtRwdSTDV+4bfByfpvUFxleU/IQx/22baFlnSBwUtC6TdqkVwAfkYFF3eGsB
IuSxHtHr/08seti4oRXgB58qBS+tAqnJSs5Bj5Z/Npm2qTooLdgg42/B/prZHxFv
nYOTdWw8RAupiwE3HiIWVHh4SlgEWnQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:05 2025 by rpki-client