Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d25fb3a8-25d0-4103-a2fa-c36eb6982909/d968aac2-1f7e-3a5f-bcc8-a92a5358bd66.roa
File: d968aac2-1f7e-3a5f-bcc8-a92a5358bd66.roa (raw, json)
Hash identifier: rDr1fuY1eLRbychCOXIogjw5+yD+Q6L4a68qcLxIYBg=
Subject key identifier: 21:F1:A3:70:F0:4F:5C:E2:02:C7:81:FB:BF:89:EA:65:CF:CF:F9:77
Certificate issuer: /CN=d25fb3a8-25d0-4103-a2fa-c36eb6982909
Certificate serial: 010D0C9F43285849403944D8744237CD2E9C5880
Authority key identifier: 4A:8D:F4:69:C9:18:68:F9:C5:66:99:76:71:FF:A8:51:2F:91:48:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d25fb3a8-25d0-4103-a2fa-c36eb6982909.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d25fb3a8-25d0-4103-a2fa-c36eb6982909/d968aac2-1f7e-3a5f-bcc8-a92a5358bd66.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 395824
IP address blocks: 216.87.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:44:d8:74:42:37:cd:2e:9c:58:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25fb3a8-25d0-4103-a2fa-c36eb6982909
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=d4b48cf4-a168-4a04-89ba-f88fb7503e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:32:9f:74:82:1b:0c:04:27:c3:57:3d:a2:2b:
68:42:87:d5:33:51:45:db:18:89:3b:bb:cf:6a:96:
64:6d:94:f5:37:e7:fb:86:f4:f4:22:9e:f6:f2:5e:
d9:50:4a:52:c3:ba:46:7c:33:7c:c7:8a:8e:38:72:
a3:a8:a9:a2:f5:74:76:55:be:ff:8c:69:09:30:82:
b6:b5:18:3a:9f:14:29:79:1f:f6:84:eb:de:f2:5e:
db:6d:1e:51:85:5e:db:19:c6:2d:3d:5b:28:74:c4:
7b:a3:3c:a1:b7:2a:d2:46:16:e6:1b:e5:fc:9a:60:
99:9e:19:0d:73:8a:68:02:6a:1d:bb:9c:83:32:a0:
40:b8:32:15:06:ea:24:3b:ae:3f:db:07:ef:8b:29:
16:d8:69:f2:b3:01:f8:54:b0:f2:95:42:7a:72:2d:
26:7c:56:27:05:08:35:9a:57:fd:63:1e:7e:14:4f:
08:61:f4:8d:3c:95:f7:5f:6e:1f:00:58:3e:32:fe:
f4:83:e0:58:18:9a:5e:2d:b5:a9:99:2b:da:9a:b9:
c3:21:5a:47:53:d2:ae:27:20:ee:9e:14:8d:62:40:
eb:ab:c4:10:a3:0b:61:16:e4:77:6f:52:c9:36:b3:
11:67:44:eb:af:d2:5f:d2:9e:0d:72:1a:44:d3:43:
a0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F1:A3:70:F0:4F:5C:E2:02:C7:81:FB:BF:89:EA:65:CF:CF:F9:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d25fb3a8-25d0-4103-a2fa-c36eb6982909/d968aac2-1f7e-3a5f-bcc8-a92a5358bd66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d25fb3a8-25d0-4103-a2fa-c36eb6982909/d25fb3a8-25d0-4103-a2fa-c36eb6982909.crl
X509v3 Authority Key Identifier:
keyid:4A:8D:F4:69:C9:18:68:F9:C5:66:99:76:71:FF:A8:51:2F:91:48:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d25fb3a8-25d0-4103-a2fa-c36eb6982909.cer
sbgp-ipAddrBlock: critical
IPv4:
216.87.63.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:4f:f6:86:5f:3b:46:67:a7:7a:c7:24:03:47:30:b0:ff:36:
4d:73:ae:32:85:b3:cf:f1:9d:0f:c0:5d:b6:c3:42:e0:6e:45:
61:ad:20:ef:e3:77:d7:69:d2:8f:5d:19:27:5c:46:af:e3:54:
0b:7d:15:1d:48:41:c0:2d:85:e6:e3:79:96:71:d1:25:56:f9:
6c:71:5a:f9:a1:8d:ff:01:f1:a4:ee:55:e4:a2:54:53:bb:7f:
e9:55:f4:e3:f8:1a:79:07:e5:dc:eb:d5:8f:00:3a:93:4a:3a:
bd:e6:eb:70:09:9f:05:0f:16:80:cc:5d:d2:69:22:9c:7b:f7:
58:a3:99:e9:56:7b:4c:35:c7:94:f9:0c:d0:0b:df:9c:6b:0a:
f0:ae:9c:ba:74:14:12:6b:d4:96:b4:08:fd:36:d1:ac:42:c1:
60:0f:e9:44:06:5b:f7:20:7b:cd:90:aa:c6:79:c1:02:e8:f6:
a6:0e:63:8f:e2:ff:36:1e:da:8b:da:6a:84:86:4f:98:f6:a6:
78:2b:fe:7f:50:3f:0f:77:d8:39:77:fc:04:87:16:a6:32:10:
b5:72:35:e1:fb:75:d7:f0:f4:1f:ed:7b:ee:97:50:4f:bb:dd:
9d:d0:c2:76:62:f6:51:26:a7:19:99:8d:9d:af:17:0c:c3:94:
78:c2:a0:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOUTYdEI3zS6cWIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDI1ZmIzYTgtMjVkMC00MTAzLWEyZmEtYzM2ZWI2OTgy
OTA5MB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk
ZDRiNDhjZjQtYTE2OC00YTA0LTg5YmEtZjg4ZmI3NTAzZTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzKfdIIbDAQnw1c9oitoQofVM1FF2xiJO7vP
apZkbZT1N+f7hvT0Ip728l7ZUEpSw7pGfDN8x4qOOHKjqKmi9XR2Vb7/jGkJMIK2
tRg6nxQpeR/2hOve8l7bbR5RhV7bGcYtPVsodMR7ozyhtyrSRhbmG+X8mmCZnhkN
c4poAmodu5yDMqBAuDIVBuokO64/2wfviykW2GnyswH4VLDylUJ6ci0mfFYnBQg1
mlf9Yx5+FE8IYfSNPJX3X24fAFg+Mv70g+BYGJpeLbWpmSvamrnDIVpHU9KuJyDu
nhSNYkDrq8QQowthFuR3b1LJNrMRZ0Trr9Jf0p4NchpE00Og5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCHxo3DwT1ziAseB+7+J6mXPz/l3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMjVm
YjNhOC0yNWQwLTQxMDMtYTJmYS1jMzZlYjY5ODI5MDkvZDk2OGFhYzItMWY3ZS0z
YTVmLWJjYzgtYTkyYTUzNThiZDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDI1ZmIzYTgtMjVkMC00MTAzLWEy
ZmEtYzM2ZWI2OTgyOTA5L2QyNWZiM2E4LTI1ZDAtNDEwMy1hMmZhLWMzNmViNjk4
MjkwOS5jcmwwHwYDVR0jBBgwFoAUSo30ackYaPnFZpl2cf+oUS+RSJYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMjVmYjNhOC0yNWQwLTQxMDMtYTJmYS1jMzZl
YjY5ODI5MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Fc/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA5P9oZfO0Znp3rHJANHMLD/Nk1zrjKFs8/xnQ/AXbbDQuBuRWGtIO/j
d9dp0o9dGSdcRq/jVAt9FR1IQcAthebjeZZx0SVW+WxxWvmhjf8B8aTuVeSiVFO7
f+lV9OP4GnkH5dzr1Y8AOpNKOr3m63AJnwUPFoDMXdJpIpx791ijmelWe0w1x5T5
DNAL35xrCvCunLp0FBJr1Ja0CP020axCwWAP6UQGW/cge82QqsZ5wQLo9qYOY4/i
/zYe2ovaaoSGT5j2pngr/n9QPw932Dl3/ASHFqYyELVyNeH7ddfw9B/te+6XUE+7
3Z3QwnZi9lEmpxmZjZ2vFwzDlHjCoFI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:32:23 2025 by rpki-client