Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3a0e1808-f375-3733-9d2c-7657d22fcdf5.roa
File: 3a0e1808-f375-3733-9d2c-7657d22fcdf5.roa (raw, json)
Hash identifier: gn8Z7LTGXW+zCZaQ9/keBTj0i3FCnH2oR5Efk4+V1Lg=
Subject key identifier: D4:FA:26:8B:C1:40:1A:EA:4C:B2:D1:A6:91:2E:91:CD:F8:01:1A:F5
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B7CB19FDEABDD0243614C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3a0e1808-f375-3733-9d2c-7657d22fcdf5.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 14112
IP address blocks: 216.6.204.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:cb:19:fd:ea:bd:d0:24:36:14:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=d29a384c-deec-4aa0-b68f-055f5ac2cb28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b6:50:04:57:db:14:ad:36:ac:67:3a:81:df:
5a:82:58:a0:b7:40:fa:d1:ab:0e:e5:bd:18:09:b6:
ec:ae:c3:48:66:b9:f7:bb:9e:c4:94:04:62:59:be:
a5:46:ff:1f:2b:42:74:f2:cb:26:d4:7e:ae:63:ea:
26:b7:56:64:6a:ea:f8:88:59:8a:43:70:f0:cb:02:
6a:af:d3:ef:b1:43:b8:e9:e6:88:ae:1d:71:5f:0a:
bb:e7:e7:03:c6:de:d2:d4:97:36:0e:88:dc:92:ca:
ea:87:8d:b5:80:09:4c:01:67:54:c6:14:11:7f:63:
b4:bb:a1:86:2f:0e:16:b1:ed:12:6d:0f:2a:ec:88:
3f:68:cb:74:a0:c4:5f:e1:0c:87:35:66:9b:c0:36:
6e:27:02:3e:78:f8:4f:87:4f:51:11:1e:ae:be:41:
3a:81:9c:1c:a0:fe:d0:e2:88:1f:ad:5f:5b:03:03:
11:af:5d:30:f2:a7:d4:66:7c:05:b1:2f:c8:9a:66:
fd:86:cb:e0:88:53:46:c4:c6:bb:41:6a:7b:0d:18:
c9:c1:61:93:50:20:b3:72:c7:7b:45:68:e1:77:11:
81:64:ca:e1:ca:21:df:e3:05:15:e0:1d:8b:d2:e5:
39:86:31:c3:d8:70:0a:1d:7a:d0:45:f6:a8:fc:0e:
95:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FA:26:8B:C1:40:1A:EA:4C:B2:D1:A6:91:2E:91:CD:F8:01:1A:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3a0e1808-f375-3733-9d2c-7657d22fcdf5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.6.204.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:9a:cf:97:8b:c3:91:fa:6d:90:3b:14:d7:0c:25:8f:aa:4c:
76:2c:60:90:f5:56:c1:a5:7f:e3:60:65:7c:8f:dc:9f:bd:c9:
74:9c:94:fc:7e:6e:fb:b2:7f:0b:6c:59:56:60:fe:55:96:a4:
bc:7a:a1:5d:5f:17:d6:64:c9:68:10:ad:74:b6:63:cc:29:df:
9e:94:2f:2a:2f:df:6e:e2:c6:2b:56:0c:f6:4d:5f:3d:6c:33:
34:20:f1:ba:68:6f:54:7e:c4:36:e2:3a:e5:91:c8:61:1f:e7:
0f:b6:a3:ae:26:ed:4f:20:e7:e8:2e:44:b0:ff:bd:bc:4b:9f:
6f:1c:b0:98:09:75:2e:71:d1:bc:3a:c6:97:02:da:a1:21:c8:
af:1e:66:a4:1e:b6:4a:e5:dd:5e:be:d3:f6:f6:ed:ef:d5:67:
2f:f6:1e:5d:71:e6:5a:90:82:ac:64:9c:b3:9e:dc:12:19:02:
e0:c2:d6:b3:79:29:56:3f:51:40:a5:7f:af:0c:2a:80:20:ff:
49:22:0a:af:9a:1f:94:35:6f:cc:5d:e2:42:cf:9d:4e:0d:ae:
46:e0:8b:06:8a:ae:1b:2a:78:bf:3f:c7:31:31:1f:f2:01:a7:
57:f7:f4:86:c5:7f:af:d6:13:ba:3f:78:81:a8:f6:ac:1a:eb:
16:6c:18:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgmt8sZ/eq90CQ2FMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MTIwODEyMDAwMFoXDTI1MDMxMDA0MDAwMFowLzEtMCsGA1UEAxMk
ZDI5YTM4NGMtZGVlYy00YWEwLWI2OGYtMDU1ZjVhYzJjYjI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbZQBFfbFK02rGc6gd9agligt0D60asO5b0Y
CbbsrsNIZrn3u57ElARiWb6lRv8fK0J08ssm1H6uY+omt1Zkaur4iFmKQ3DwywJq
r9PvsUO46eaIrh1xXwq75+cDxt7S1Jc2Dojcksrqh421gAlMAWdUxhQRf2O0u6GG
Lw4Wse0SbQ8q7Ig/aMt0oMRf4QyHNWabwDZuJwI+ePhPh09RER6uvkE6gZwcoP7Q
4ogfrV9bAwMRr10w8qfUZnwFsS/Immb9hsvgiFNGxMa7QWp7DRjJwWGTUCCzcsd7
RWjhdxGBZMrhyiHf4wUV4B2L0uU5hjHD2HAKHXrQRfao/A6VhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNT6JovBQBrqTLLRppEukc34ARr1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvM2EwZTE4MDgtZjM3NS0z
NzMzLTlkMmMtNzY1N2QyMmZjZGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2AbMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHiaz5eLw5H6bZA7FNcMJY+qTHYsYJD1VsGlf+NgZXyP3J+9yXSclPx+
bvuyfwtsWVZg/lWWpLx6oV1fF9ZkyWgQrXS2Y8wp356ULyov327ixitWDPZNXz1s
MzQg8bpob1R+xDbiOuWRyGEf5w+2o64m7U8g5+guRLD/vbxLn28csJgJdS5x0bw6
xpcC2qEhyK8eZqQetkrl3V6+0/b27e/VZy/2Hl1x5lqQgqxknLOe3BIZAuDC1rN5
KVY/UUClf68MKoAg/0kiCq+aH5Q1b8xd4kLPnU4NrkbgiwaKrhsqeL8/xzExH/IB
p1f39IbFf6/WE7o/eIGo9qwa6xZsGMs=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:24:03 2025 by rpki-client