Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4802e522-5bb2-3b86-968a-cce8b7aa1942.roa
File: 4802e522-5bb2-3b86-968a-cce8b7aa1942.roa (raw, json)
Hash identifier: GiWwNpxgjWKagGvZ1xYjH1JJFbW9FwjTrxJPayK0zp8=
Subject key identifier: 74:B1:97:24:87:ED:97:59:11:C2:62:31:A6:8D:8C:D9:FE:FD:21:47
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921344AB8F27B067533B38960
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4802e522-5bb2-3b86-968a-cce8b7aa1942.roa
Signing time: Sun 09 Mar 2025 10:20:52 +0000
ROA not before: Sun 09 Mar 2025 10:20:52 +0000
ROA not after: Sat 07 Jun 2025 10:20:52 +0000
asID: 21552
IP address blocks: 206.47.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:4a:b8:f2:7b:06:75:33:b3:89:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:52 2025 GMT
Not After : Jun 7 10:20:52 2025 GMT
Subject: CN=3369fcf5-db74-4e84-a8a7-74aad3bf12aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:82:1e:fb:30:f1:e6:6d:e1:54:11:2d:08:5e:
e9:9b:a1:4d:bb:24:96:b9:54:1f:39:08:02:a4:de:
b7:4c:4f:c8:19:d5:88:1b:4c:3a:72:10:e7:e0:cf:
a4:21:c8:e9:36:5a:54:3b:ac:e8:f5:1f:2f:a8:41:
af:f4:8b:1e:b4:6b:89:43:60:18:76:06:6c:ff:65:
62:c6:b9:71:f6:12:68:8a:19:fc:d4:92:22:96:b1:
eb:f4:1a:fe:bd:97:69:b7:13:ca:b6:17:cf:69:b8:
fc:0a:ab:67:61:d1:e4:02:74:f3:b2:4f:fe:bc:72:
09:b0:00:37:21:ec:ce:41:17:34:4d:e1:9b:c1:ec:
5a:ee:77:9d:3d:a6:46:47:a7:54:f2:90:c9:56:0c:
ab:96:cd:a4:08:eb:ec:5a:94:f1:8b:09:60:0c:91:
6f:55:c1:31:a5:93:8c:55:22:9b:89:02:a9:d1:96:
82:0e:40:28:98:db:8a:54:d9:1f:b0:db:a5:91:ac:
df:4a:4f:62:d3:1b:67:f5:8c:29:87:f4:7d:e0:6d:
d4:14:ba:ba:f1:dd:31:7e:bf:9d:b2:cb:96:6d:ce:
0b:41:e2:29:5f:95:f1:cf:10:cf:21:22:bc:13:db:
1a:44:f6:e1:0e:c1:dd:b3:23:5d:e0:d8:c4:5c:8f:
31:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B1:97:24:87:ED:97:59:11:C2:62:31:A6:8D:8C:D9:FE:FD:21:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4802e522-5bb2-3b86-968a-cce8b7aa1942.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.47.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:52:26:fc:83:72:ef:d9:a9:f2:27:35:18:78:09:a6:21:ff:
08:e0:bb:b8:2b:cc:b6:f4:2b:92:fb:98:95:42:b8:36:51:a9:
d2:cb:75:8a:3f:94:d1:08:0b:b4:d6:9a:7e:a9:30:f5:1c:4e:
d9:aa:41:95:c0:08:3a:53:19:03:37:a6:bc:95:40:06:c7:61:
1f:74:f1:d0:67:33:3e:1f:64:62:a1:81:c1:ef:6b:30:f5:20:
25:fb:b9:5c:28:5a:26:5c:53:84:4c:dd:2d:88:5e:3f:91:53:
88:f3:97:9a:c6:8f:06:cc:e9:5d:f1:97:a1:2d:54:e2:db:96:
63:f9:de:a0:3b:d6:78:c6:49:80:19:a1:25:a2:29:f4:a2:7e:
9d:8b:c3:84:fa:91:5c:92:1f:9d:2b:fb:65:f9:d2:32:7b:82:
75:ce:29:5f:f5:22:a7:06:ea:03:dd:cb:c7:9f:3c:9a:04:8f:
a5:2b:dd:4c:88:d1:28:2b:68:bc:39:8c:db:5e:f8:60:66:20:
48:0f:aa:2e:37:f6:71:e5:0c:ed:ca:bb:ff:b6:73:8e:c5:e5:
32:97:60:c3:3b:51:f7:90:f5:bf:df:59:84:7e:62:89:c6:e8:
ff:5a:f4:14:7f:34:ba:de:a0:48:51:ad:42:c5:a5:32:64:38:
af:89:1e:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhNEq48nsGdTOziWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDMwOTEwMjA1MloXDTI1MDYwNzEwMjA1MlowLzEtMCsGA1UEAxMk
MzM2OWZjZjUtZGI3NC00ZTg0LWE4YTctNzRhYWQzYmYxMmFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIIe+zDx5m3hVBEtCF7pm6FNuySWuVQfOQgC
pN63TE/IGdWIG0w6chDn4M+kIcjpNlpUO6zo9R8vqEGv9IsetGuJQ2AYdgZs/2Vi
xrlx9hJoihn81JIilrHr9Br+vZdptxPKthfPabj8CqtnYdHkAnTzsk/+vHIJsAA3
IezOQRc0TeGbwexa7nedPaZGR6dU8pDJVgyrls2kCOvsWpTxiwlgDJFvVcExpZOM
VSKbiQKp0ZaCDkAomNuKVNkfsNulkazfSk9i0xtn9Ywph/R94G3UFLq68d0xfr+d
ssuWbc4LQeIpX5XxzxDPISK8E9saRPbhDsHdsyNd4NjEXI8xJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHSxlySH7ZdZEcJiMaaNjNn+/SFHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNDgwMmU1MjItNWJiMi0z
Yjg2LTk2OGEtY2NlOGI3YWExOTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzi+dMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHZSJvyDcu/ZqfInNRh4CaYh/wjgu7grzLb0K5L7mJVCuDZRqdLLdYo/
lNEIC7TWmn6pMPUcTtmqQZXACDpTGQM3pryVQAbHYR908dBnMz4fZGKhgcHvazD1
ICX7uVwoWiZcU4RM3S2IXj+RU4jzl5rGjwbM6V3xl6EtVOLblmP53qA71njGSYAZ
oSWiKfSifp2Lw4T6kVySH50r+2X50jJ7gnXOKV/1IqcG6gPdy8efPJoEj6Ur3UyI
0SgraLw5jNte+GBmIEgPqi439nHlDO3Ku/+2c47F5TKXYMM7UfeQ9b/fWYR+YonG
6P9a9BR/NLreoEhRrULFpTJkOK+JHoA=
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:29 2025 by rpki-client