Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70e06abf-51dd-4cb1-873b-6ecca4436f98/9c616a97-4e5f-3c08-a99b-c273786acbca.roa
File: 9c616a97-4e5f-3c08-a99b-c273786acbca.roa (raw, json)
Hash identifier: ggTODpTAmVEgEnSyAg63gOXAPzy6TqS9Jme/+596+xE=
Subject key identifier: 9E:B8:EF:63:A7:BE:FB:0E:67:A1:CD:28:04:C7:CC:F5:08:39:4E:5C
Certificate issuer: /CN=70e06abf-51dd-4cb1-873b-6ecca4436f98
Certificate serial: 010D0C9F432858494CC943DEBACD9E92F671D388
Authority key identifier: AF:57:52:B8:3D:0F:2E:1D:F7:55:A3:9F:0D:65:8B:41:44:89:62:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70e06abf-51dd-4cb1-873b-6ecca4436f98.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70e06abf-51dd-4cb1-873b-6ecca4436f98/9c616a97-4e5f-3c08-a99b-c273786acbca.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 8075
IP address blocks: 192.64.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:43:de:ba:cd:9e:92:f6:71:d3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e06abf-51dd-4cb1-873b-6ecca4436f98
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=c636d268-135d-45be-85b5-34275c1d5a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3a:d5:1d:8d:bf:e0:9f:44:44:01:f8:d4:ea:
49:ca:bd:e8:a4:88:62:0d:70:0b:ad:e7:64:1a:ef:
78:46:3c:6c:98:85:10:cb:74:92:fc:6f:35:c1:41:
a3:f0:a9:4f:43:e1:c2:9e:8a:61:16:29:07:d3:34:
af:9d:19:39:11:63:b9:a1:a9:c2:45:c7:42:98:0e:
01:58:7e:aa:40:eb:05:6b:83:b9:4a:d9:d4:c6:c5:
12:f1:89:a3:5d:8b:d3:52:6c:d0:04:d0:48:db:7e:
f3:a8:ae:f3:c5:87:f8:2c:e0:fe:47:c2:d1:0d:39:
21:21:58:08:27:18:54:07:de:cd:a7:00:53:5d:73:
2d:ec:1a:0b:95:cd:01:08:c1:2e:bd:86:7c:af:40:
0c:1e:80:70:d0:3f:81:92:39:de:e8:47:a3:6a:45:
1c:23:67:7a:91:96:69:27:7f:c5:31:33:42:55:8f:
f4:57:28:5b:35:ff:75:22:e8:b2:51:72:88:38:16:
07:cf:c6:a8:14:c0:c2:6c:a4:ce:0c:d1:0e:7e:90:
ad:8f:c1:58:90:38:1f:06:d8:a0:82:b4:7f:9a:d2:
95:0b:d7:83:52:60:76:a8:dc:b2:54:07:1d:28:13:
f5:42:53:87:38:dc:e6:6a:71:18:82:80:00:bb:c5:
6a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B8:EF:63:A7:BE:FB:0E:67:A1:CD:28:04:C7:CC:F5:08:39:4E:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70e06abf-51dd-4cb1-873b-6ecca4436f98/9c616a97-4e5f-3c08-a99b-c273786acbca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70e06abf-51dd-4cb1-873b-6ecca4436f98/70e06abf-51dd-4cb1-873b-6ecca4436f98.crl
X509v3 Authority Key Identifier:
keyid:AF:57:52:B8:3D:0F:2E:1D:F7:55:A3:9F:0D:65:8B:41:44:89:62:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70e06abf-51dd-4cb1-873b-6ecca4436f98.cer
sbgp-ipAddrBlock: critical
IPv4:
192.64.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:b7:31:0c:ab:71:9d:46:7c:eb:24:c3:7b:46:9f:16:cc:40:
c3:c4:fb:7a:da:db:00:0b:af:f3:ad:6d:36:0b:27:e6:a6:78:
ee:84:9e:06:c2:4e:73:76:55:26:00:c2:f3:4d:d8:e9:ec:07:
3c:39:f0:cb:58:ef:be:4f:d4:39:ba:6d:c8:0a:3c:d3:8d:92:
5c:8b:47:8b:75:15:47:9d:ae:f0:b6:5b:a8:b6:15:b8:9e:8e:
be:16:71:2c:b5:81:b8:dc:77:94:69:eb:bd:ac:62:31:8d:43:
2d:10:ba:9e:3e:c7:42:f9:1f:35:fe:19:1a:ea:98:2e:09:df:
c7:b4:fc:0b:8a:bc:f4:e7:19:a8:7a:55:a8:27:0e:12:71:5f:
c9:41:21:cf:07:0e:80:df:b8:dc:f5:90:ab:e8:2f:1a:3b:8e:
cc:d3:0b:c7:12:b5:16:60:60:bf:28:ef:f2:a1:88:7b:75:f7:
1c:84:14:42:fb:8d:da:67:5e:fb:f9:39:36:1e:5b:74:09:86:
03:c8:01:02:f0:a4:34:6d:15:73:af:2d:a9:2d:ca:bc:39:7d:
fa:86:59:1f:12:ef:09:3c:b7:28:66:29:9d:2c:7d:95:2a:e0:
3d:c6:d9:ad:b0:d5:a9:57:64:56:97:89:fc:33:d4:7d:28:58:
08:74:83:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUPeus2ekvZx04gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzBlMDZhYmYtNTFkZC00Y2IxLTg3M2ItNmVjY2E0NDM2
Zjk4MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk
YzYzNmQyNjgtMTM1ZC00NWJlLTg1YjUtMzQyNzVjMWQ1YTk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jrVHY2/4J9ERAH41OpJyr3opIhiDXALredk
Gu94RjxsmIUQy3SS/G81wUGj8KlPQ+HCnophFikH0zSvnRk5EWO5oanCRcdCmA4B
WH6qQOsFa4O5StnUxsUS8YmjXYvTUmzQBNBI237zqK7zxYf4LOD+R8LRDTkhIVgI
JxhUB97NpwBTXXMt7BoLlc0BCMEuvYZ8r0AMHoBw0D+Bkjne6EejakUcI2d6kZZp
J3/FMTNCVY/0VyhbNf91IuiyUXKIOBYHz8aoFMDCbKTODNEOfpCtj8FYkDgfBtig
grR/mtKVC9eDUmB2qNyyVAcdKBP1QlOHONzmanEYgoAAu8VqmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ6472OnvvsOZ6HNKATHzPUIOU5cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83MGUw
NmFiZi01MWRkLTRjYjEtODczYi02ZWNjYTQ0MzZmOTgvOWM2MTZhOTctNGU1Zi0z
YzA4LWE5OWItYzI3Mzc4NmFjYmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzBlMDZhYmYtNTFkZC00Y2IxLTg3
M2ItNmVjY2E0NDM2Zjk4LzcwZTA2YWJmLTUxZGQtNGNiMS04NzNiLTZlY2NhNDQz
NmY5OC5jcmwwHwYDVR0jBBgwFoAUr1dSuD0PLh33VaOfDWWLQUSJYmQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83MGUwNmFiZi01MWRkLTRjYjEtODczYi02ZWNj
YTQ0MzZmOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEDJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIu3MQyrcZ1GfOskw3tGnxbMQMPE+3ra2wALr/OtbTYLJ+ameO6EngbC
TnN2VSYAwvNN2OnsBzw58MtY775P1Dm6bcgKPNONklyLR4t1FUedrvC2W6i2Fbie
jr4WcSy1gbjcd5Rp672sYjGNQy0Qup4+x0L5HzX+GRrqmC4J38e0/AuKvPTnGah6
VagnDhJxX8lBIc8HDoDfuNz1kKvoLxo7jszTC8cStRZgYL8o7/KhiHt19xyEFEL7
jdpnXvv5OTYeW3QJhgPIAQLwpDRtFXOvLaktyrw5ffqGWR8S7wk8tyhmKZ0sfZUq
4D3G2a2w1alXZFaXifwz1H0oWAh0g5g=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:55 2025 by rpki-client