Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7f8e8354-2acd-337f-b4e9-f444cc01e04d.roa
File: 7f8e8354-2acd-337f-b4e9-f444cc01e04d.roa (raw, json)
Hash identifier: Vf+ya6A/3it26rcRsauGuKn/dP5aPsKyImNrgvN3MKE=
Subject key identifier: 3B:EC:3C:EC:81:FA:BC:E3:8A:6F:15:AE:5A:82:86:03:8E:2D:37:53
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F43285848C650F66157D8D513427EA200
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7f8e8354-2acd-337f-b4e9-f444cc01e04d.roa
Signing time: Tue 04 Feb 2025 21:00:04 +0000
ROA not before: Tue 04 Feb 2025 21:00:04 +0000
ROA not after: Mon 05 May 2025 20:00:04 +0000
asID: 18683
IP address blocks: 204.141.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:50:f6:61:57:d8:d5:13:42:7e:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Feb 4 21:00:04 2025 GMT
Not After : May 5 20:00:04 2025 GMT
Subject: CN=f60ca786-89fa-47ba-b9c8-338032cde702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:56:29:fb:a5:16:c6:32:8d:7a:99:d4:78:
86:78:e1:25:94:af:72:8f:e4:f4:29:19:9d:79:75:
aa:64:6b:10:42:76:3f:7f:98:5b:e6:47:06:a0:4e:
23:af:0f:92:d9:db:5d:b8:dd:5d:b1:d2:ef:ed:50:
96:22:27:9b:c4:b6:34:b0:5b:a1:53:0c:3d:65:4c:
d2:09:ed:f8:97:3c:58:f1:8e:2f:d1:6c:91:d6:10:
a4:6c:8e:7f:97:05:02:10:eb:9b:a8:61:d4:42:23:
02:0c:6f:06:52:e2:14:36:16:aa:3a:f8:f3:26:98:
67:52:3d:8f:16:57:f8:c0:9a:89:ed:8d:e8:ea:9a:
b6:88:5a:5b:5d:96:c2:1b:0a:fc:d6:12:02:cb:ff:
b8:dc:c5:ab:5f:aa:29:bf:65:2d:1f:7f:69:05:28:
21:41:e4:fc:6f:60:22:6e:fc:25:36:07:22:b7:cb:
32:3a:5c:e6:80:83:31:8f:61:48:83:5e:25:ff:72:
91:e4:3a:4a:d5:66:9b:5d:b8:6f:d7:21:68:dc:36:
96:91:be:8d:fd:63:88:01:66:01:52:d3:59:b6:46:
8b:fa:23:28:d1:b3:7a:54:40:05:71:0c:c8:37:e7:
db:44:4d:4b:40:e1:fa:83:42:b4:70:94:86:f9:b2:
b4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EC:3C:EC:81:FA:BC:E3:8A:6F:15:AE:5A:82:86:03:8E:2D:37:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7f8e8354-2acd-337f-b4e9-f444cc01e04d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
204.141.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:57:32:88:80:dc:c5:07:42:51:0b:d8:78:9d:a0:a3:3d:2a:
53:b3:0a:e5:13:e4:b3:2c:d5:0b:ff:3d:74:2b:34:d2:83:c7:
0b:1b:57:3d:0b:c5:c0:d5:1d:64:6d:ae:35:94:5b:89:0b:bd:
51:27:50:3e:83:4b:fc:c7:78:92:01:98:05:38:2e:83:d5:a9:
d4:09:72:6b:81:9e:7e:d6:98:97:97:dd:6a:b6:1c:13:95:ed:
75:68:7b:75:2e:0c:1c:0f:b1:35:38:7f:08:e7:63:32:d8:e7:
4f:2b:d4:f1:4a:bf:3b:06:5c:1f:7d:01:c2:88:2b:0b:a0:4c:
f8:9b:8a:a1:be:06:bf:1a:2a:1b:3e:d9:d3:3b:81:fa:cc:73:
c2:ab:05:16:ec:e6:2e:c0:ec:01:f7:3b:ad:a5:a2:62:22:2e:
7d:f3:6a:86:18:b5:33:9c:76:48:20:43:1e:91:27:d3:dc:49:
ad:6d:9c:29:cf:aa:b5:6d:a1:d0:ec:6a:4f:10:07:c9:05:f1:
a3:ac:7d:d7:a9:bb:80:04:37:77:fd:e8:d1:98:78:25:38:ec:
a0:78:20:6c:5a:9a:65:ed:87:99:b7:d8:11:fa:8e:19:95:be:
7f:b6:cc:36:86:82:71:16:f5:41:fb:70:a9:36:35:bc:76:47:
ab:9b:b7:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjGUPZhV9jVE0J+ogAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI1MDIwNDIxMDAwNFoXDTI1MDUwNTIwMDAwNFowLzEtMCsGA1UEAxMk
ZjYwY2E3ODYtODlmYS00N2JhLWI5YzgtMzM4MDMyY2RlNzAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy9WKfulFsYyjXqZ1HiGeOEllK9yj+T0KRmd
eXWqZGsQQnY/f5hb5kcGoE4jrw+S2dtduN1dsdLv7VCWIiebxLY0sFuhUww9ZUzS
Ce34lzxY8Y4v0WyR1hCkbI5/lwUCEOubqGHUQiMCDG8GUuIUNhaqOvjzJphnUj2P
Flf4wJqJ7Y3o6pq2iFpbXZbCGwr81hICy/+43MWrX6opv2UtH39pBSghQeT8b2Ai
bvwlNgcit8syOlzmgIMxj2FIg14l/3KR5DpK1WabXbhv1yFo3DaWkb6N/WOIAWYB
UtNZtkaL+iMo0bN6VEAFcQzIN+fbRE1LQOH6g0K0cJSG+bK0PwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDvsPOyB+rzjim8VrlqChgOOLTdTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvN2Y4ZTgzNTQtMmFjZC0z
MzdmLWI0ZTktZjQ0NGNjMDFlMDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzI0QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKtXMoiA3MUHQlEL2HidoKM9KlOzCuUT5LMs1Qv/PXQrNNKDxwsbVz0L
xcDVHWRtrjWUW4kLvVEnUD6DS/zHeJIBmAU4LoPVqdQJcmuBnn7WmJeX3Wq2HBOV
7XVoe3UuDBwPsTU4fwjnYzLY508r1PFKvzsGXB99AcKIKwugTPibiqG+Br8aKhs+
2dM7gfrMc8KrBRbs5i7A7AH3O62lomIiLn3zaoYYtTOcdkggQx6RJ9PcSa1tnCnP
qrVtodDsak8QB8kF8aOsfdepu4AEN3f96NGYeCU47KB4IGxammXth5m32BH6jhmV
vn+2zDaGgnEW9UH7cKk2Nbx2R6ubtxM=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:25:14 2025 by rpki-client