Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/2a3dd29d-c7c4-3c26-822a-864742fe7486.roa
File: 2a3dd29d-c7c4-3c26-822a-864742fe7486.roa (raw, json)
Hash identifier: +xmopigIPDBSiIdNx/3co+SW6uX3Nd9QN3WDHrxNOds=
Subject key identifier: 9F:5D:9D:C0:E4:77:90:40:8F:C3:D2:A9:41:10:74:AE:CD:98:D9:4A
Certificate issuer: /CN=786ab4fb-a46d-40d6-8281-3c79061676da
Certificate serial: 010D0C9F4328584957F3FDB70615BAFD8BDFEE00
Authority key identifier: A7:29:B8:4B:2E:46:D9:2A:BB:04:68:D4:3B:1D:18:A1:F8:B8:EA:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/2a3dd29d-c7c4-3c26-822a-864742fe7486.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 30263
IP address blocks: 216.7.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f3:fd:b7:06:15:ba:fd:8b:df:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=786ab4fb-a46d-40d6-8281-3c79061676da
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=c866ba71-2c94-476c-9e71-3732cabbb9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ec:e4:bf:aa:80:d4:db:89:cb:88:ba:11:cd:
a5:1c:bf:61:df:7f:3c:4f:00:ea:9e:7f:3a:ce:65:
2b:cd:5d:3a:fe:68:49:c5:91:b0:a5:b0:37:ee:2a:
46:b0:35:f1:b7:52:25:0d:5b:d5:59:d4:11:92:c6:
51:24:e6:f6:ba:a8:0b:03:6d:60:76:ba:4f:da:f3:
3c:de:7c:d6:73:c2:11:57:4b:1b:42:aa:58:9d:57:
f8:5a:07:73:0b:ce:63:06:5d:70:9f:c9:36:e3:25:
2d:b7:27:ec:d4:e3:9a:9d:08:68:04:8b:55:38:53:
2c:25:ac:d2:37:2f:3d:70:49:82:0e:5e:de:fd:6c:
c1:f7:dc:b2:7f:46:8e:3d:88:26:e4:5a:fc:b6:03:
8f:46:12:e6:6d:c3:63:4c:ef:27:8d:d9:3b:3e:88:
3b:ab:3c:16:be:29:9b:1c:75:81:e0:57:2d:53:45:
83:8b:cf:87:c8:db:85:56:3f:0a:a2:b7:f2:79:24:
d4:41:91:c1:57:13:e0:23:b9:91:3d:42:6f:02:62:
35:78:37:be:d6:27:00:7b:bf:9f:cc:9c:25:12:5a:
da:78:d2:3d:12:fd:48:22:df:d8:6a:63:30:ff:20:
db:7d:b3:0f:15:90:f3:42:a0:d9:be:ae:59:67:02:
23:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5D:9D:C0:E4:77:90:40:8F:C3:D2:A9:41:10:74:AE:CD:98:D9:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/2a3dd29d-c7c4-3c26-822a-864742fe7486.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/786ab4fb-a46d-40d6-8281-3c79061676da.crl
X509v3 Authority Key Identifier:
keyid:A7:29:B8:4B:2E:46:D9:2A:BB:04:68:D4:3B:1D:18:A1:F8:B8:EA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da.cer
sbgp-ipAddrBlock: critical
IPv4:
216.7.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c3:dd:87:da:df:3e:6a:22:24:44:d7:8d:c6:b0:77:f9:9b:4f:
17:33:9b:25:09:fa:b3:a0:83:e7:7a:ca:f9:1a:73:00:d0:24:
0b:78:fb:5f:7a:91:cc:b0:70:58:43:28:5a:90:54:bf:02:da:
85:53:d8:73:e0:32:cf:2c:df:79:52:2b:2c:a4:25:24:7c:d6:
da:64:75:77:b6:ca:50:25:aa:dd:d1:b9:0b:fd:a2:ba:0c:ec:
95:14:c3:84:6d:45:7a:14:cf:d8:c6:b6:c9:17:2b:ac:58:5c:
c9:69:1c:31:02:c3:ee:5c:18:7f:da:33:2b:85:e0:6e:3a:eb:
47:49:7b:38:b5:56:f5:01:2d:6f:10:76:5e:63:9d:34:ba:e5:
74:d5:1c:89:ee:be:80:46:43:31:1d:1e:3c:ea:0f:82:1c:8a:
8b:7f:04:74:c2:a7:a3:ce:39:90:42:82:b6:2f:11:67:0b:84:
db:4d:96:94:be:ee:5c:1a:d0:7a:67:10:4c:1d:7c:65:21:19:
21:13:53:2d:4d:2a:48:f7:58:4c:ba:29:ae:1e:1b:48:35:d2:
5b:3b:8d:60:2a:46:a9:b3:14:11:a2:a8:1e:de:82:93:40:b7:
bc:fb:d7:b5:d6:43:88:aa:c2:54:a0:1b:1f:22:e5:20:29:12:
14:b6:d6:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX8/23BhW6/Yvf7gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg2YWI0ZmItYTQ2ZC00MGQ2LTgyODEtM2M3OTA2MTY3
NmRhMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk
Yzg2NmJhNzEtMmM5NC00NzZjLTllNzEtMzczMmNhYmJiOWE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+zkv6qA1NuJy4i6Ec2lHL9h3388TwDqnn86
zmUrzV06/mhJxZGwpbA37ipGsDXxt1IlDVvVWdQRksZRJOb2uqgLA21gdrpP2vM8
3nzWc8IRV0sbQqpYnVf4WgdzC85jBl1wn8k24yUttyfs1OOanQhoBItVOFMsJazS
Ny89cEmCDl7e/WzB99yyf0aOPYgm5Fr8tgOPRhLmbcNjTO8njdk7Pog7qzwWvimb
HHWB4FctU0WDi8+HyNuFVj8KorfyeSTUQZHBVxPgI7mRPUJvAmI1eDe+1icAe7+f
zJwlElraeNI9Ev1IIt/YamMw/yDbfbMPFZDzQqDZvq5ZZwIjlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ9dncDkd5BAj8PSqUEQdK7NmNlKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83ODZh
YjRmYi1hNDZkLTQwZDYtODI4MS0zYzc5MDYxNjc2ZGEvMmEzZGQyOWQtYzdjNC0z
YzI2LTgyMmEtODY0NzQyZmU3NDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzg2YWI0ZmItYTQ2ZC00MGQ2LTgy
ODEtM2M3OTA2MTY3NmRhLzc4NmFiNGZiLWE0NmQtNDBkNi04MjgxLTNjNzkwNjE2
NzZkYS5jcmwwHwYDVR0jBBgwFoAUpym4Sy5G2Sq7BGjUOx0Yofi46tYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83ODZhYjRmYi1hNDZkLTQwZDYtODI4MS0zYzc5
MDYxNjc2ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2AdwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMPdh9rfPmoiJETXjcawd/mbTxczmyUJ+rOgg+d6yvkacwDQJAt4+196
kcywcFhDKFqQVL8C2oVT2HPgMs8s33lSKyykJSR81tpkdXe2ylAlqt3RuQv9oroM
7JUUw4RtRXoUz9jGtskXK6xYXMlpHDECw+5cGH/aMyuF4G4660dJezi1VvUBLW8Q
dl5jnTS65XTVHInuvoBGQzEdHjzqD4Iciot/BHTCp6POOZBCgrYvEWcLhNtNlpS+
7lwa0HpnEEwdfGUhGSETUy1NKkj3WEy6Ka4eG0g10ls7jWAqRqmzFBGiqB7egpNA
t7z717XWQ4iqwlSgGx8i5SApEhS21jY=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:47:31 2025 by rpki-client