Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9d2671b1-b9c3-3949-8fa4-9b70460dfe6f.roa
File: 9d2671b1-b9c3-3949-8fa4-9b70460dfe6f.roa (raw, json)
Hash identifier: jDQ24Dm/HpTFD98MpHGgLoqo49Qipg+7CQXUuKD5dU0=
Subject key identifier: 92:1C:D5:5A:B1:DA:02:09:70:42:7F:5F:60:E4:35:69:42:FB:49:C7
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F432858492CAE94A316FFBBAD78FEE000
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9d2671b1-b9c3-3949-8fa4-9b70460dfe6f.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 3356
IP address blocks: 20.137.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:94:a3:16:ff:bb:ad:78:fe:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=8007a02c-6eb5-49d2-b550-cea3f513b522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:99:13:d3:48:ff:4e:d9:d2:c2:87:4b:9b:98:
80:85:19:13:19:4e:5e:ea:c6:31:1d:8d:7f:94:39:
84:39:c3:46:9b:0a:77:6c:ec:39:87:27:fb:49:3b:
60:55:4b:c8:28:fe:f9:48:e0:5b:89:0f:fe:3b:b4:
18:87:c1:63:72:7d:19:f8:a3:67:f0:11:03:15:94:
0a:0a:f8:a8:5a:e7:ca:e3:b2:c2:7d:a0:32:ec:e2:
3d:9f:f4:87:8b:f6:f0:4f:b5:d9:1c:c1:99:c5:49:
27:fa:a3:5d:6e:37:de:ac:6b:5c:62:2f:65:4c:6a:
de:ef:df:ef:23:85:4d:21:68:6b:1c:e0:67:c0:bd:
55:11:a0:c4:54:b3:7b:b9:9e:15:11:d2:64:be:6c:
18:0d:48:34:3a:71:4d:74:15:41:ad:59:3d:da:8d:
86:0f:58:e8:ef:0a:be:57:7a:93:67:b0:c7:0b:f4:
8a:e1:b8:8c:09:54:b1:40:b9:b2:18:46:b8:19:22:
57:4b:1c:41:16:6c:ff:b0:94:4f:f2:b7:1e:5b:46:
f2:38:54:a3:37:7a:c9:3c:3a:b9:cf:cb:31:3f:8a:
fc:02:e5:28:4f:6e:0c:5e:cb:f4:55:eb:f5:67:1c:
f0:27:24:1d:40:5c:90:13:60:7c:02:0d:e6:b6:8c:
57:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1C:D5:5A:B1:DA:02:09:70:42:7F:5F:60:E4:35:69:42:FB:49:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/9d2671b1-b9c3-3949-8fa4-9b70460dfe6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
20.137.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:33:5b:c3:86:c2:f7:f0:83:29:ad:64:b2:c0:85:0e:e4:89:
0d:b3:fe:79:1c:c9:1e:bc:c2:26:e5:ac:53:82:a0:16:78:56:
09:e2:85:fb:88:c9:b9:b7:0b:de:1d:c8:5c:66:fa:52:b9:08:
84:f6:5f:c8:aa:13:9d:21:46:d2:03:13:06:81:c6:71:2e:dc:
b5:d5:67:ab:17:62:56:81:b7:db:fd:dc:21:7f:c2:cc:79:3b:
ec:81:c3:8f:34:b1:99:4d:0a:17:54:53:61:32:64:00:d9:9d:
cc:f2:bb:ff:cf:c7:04:41:bc:bf:9b:20:2a:2d:53:50:c2:52:
14:00:7e:87:db:7c:55:c3:85:3b:1a:c4:00:45:d1:43:f9:7e:
5a:9d:bb:e9:8c:94:2c:8a:68:cf:a4:0c:52:54:f9:a5:62:b0:
ff:c4:fe:15:c0:e4:c9:49:51:d9:f2:af:ee:01:70:01:f2:2b:
06:79:89:3f:d0:e5:b3:11:1c:dc:20:5d:27:9e:10:2b:ce:da:
b1:28:10:a7:1e:d8:59:00:40:94:d2:43:51:6a:1d:f6:9b:46:
e3:c8:6d:99:8e:2e:ac:6a:55:75:eb:55:3c:66:de:c8:0d:8b:
e9:95:de:74:0b:61:c0:0d:e0:13:4e:a1:29:ea:54:d0:78:0d:
87:38:4a:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrpSjFv+7rXj+4AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ODAwN2EwMmMtNmViNS00OWQyLWI1NTAtY2VhM2Y1MTNiNTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpkT00j/TtnSwodLm5iAhRkTGU5e6sYxHY1/
lDmEOcNGmwp3bOw5hyf7STtgVUvIKP75SOBbiQ/+O7QYh8Fjcn0Z+KNn8BEDFZQK
CvioWufK47LCfaAy7OI9n/SHi/bwT7XZHMGZxUkn+qNdbjferGtcYi9lTGre79/v
I4VNIWhrHOBnwL1VEaDEVLN7uZ4VEdJkvmwYDUg0OnFNdBVBrVk92o2GD1jo7wq+
V3qTZ7DHC/SK4biMCVSxQLmyGEa4GSJXSxxBFmz/sJRP8rceW0byOFSjN3rJPDq5
z8sxP4r8AuUoT24MXsv0Vev1ZxzwJyQdQFyQE2B8Ag3mtoxXDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJIc1Vqx2gIJcEJ/X2DkNWlC+0nHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvOWQyNjcxYjEtYjljMy0z
OTQ5LThmYTQtOWI3MDQ2MGRmZTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFInYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEszW8OGwvfwgymtZLLAhQ7kiQ2z/nkcyR68wiblrFOCoBZ4VgnihfuI
ybm3C94dyFxm+lK5CIT2X8iqE50hRtIDEwaBxnEu3LXVZ6sXYlaBt9v93CF/wsx5
O+yBw480sZlNChdUU2EyZADZnczyu//PxwRBvL+bICotU1DCUhQAfofbfFXDhTsa
xABF0UP5flqdu+mMlCyKaM+kDFJU+aVisP/E/hXA5MlJUdnyr+4BcAHyKwZ5iT/Q
5bMRHNwgXSeeECvO2rEoEKce2FkAQJTSQ1FqHfabRuPIbZmOLqxqVXXrVTxm3sgN
i+mV3nQLYcAN4BNOoSnqVNB4DYc4SiU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:02 2025 by rpki-client