Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1bad068c-3a7e-3488-8d50-a5e1755f7430.roa
File: 1bad068c-3a7e-3488-8d50-a5e1755f7430.roa (raw, json)
Hash identifier: HWc01+CrLTjYNLJQ6Y2B6Z5+6p0t23rJMCx/owUKgnw=
Subject key identifier: 11:64:FE:91:76:A2:F5:23:C2:91:B9:22:E0:76:3A:43:2B:87:53:85
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F43285848C580F08BE3B7D8741FD31780
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1bad068c-3a7e-3488-8d50-a5e1755f7430.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 174
IP address blocks: 216.131.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:80:f0:8b:e3:b7:d8:74:1f:d3:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=e277571f-d9b4-42ed-8910-800665e1b3b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cf:af:59:12:e8:d5:57:11:9e:b2:16:e3:b2:
f7:6a:f5:5d:7f:80:9a:cc:b5:57:dd:97:fd:41:29:
63:c2:35:24:d1:55:a1:23:5f:4d:6b:5d:05:bc:c5:
7c:97:90:b7:86:80:ab:46:8d:d3:fb:e9:aa:35:22:
4b:c4:05:79:87:3e:4c:d4:5b:c8:46:32:42:c8:28:
fa:86:e4:ab:0d:3c:ab:fa:bc:66:bc:6c:4c:fa:49:
31:c8:51:6d:90:3e:fa:32:db:38:7c:6e:00:a8:e2:
9f:66:d1:31:de:53:7c:c8:16:e3:8b:e1:18:3e:7a:
bc:d9:34:30:94:7b:cf:dc:fd:e0:de:8e:c5:d1:f3:
c1:4c:58:88:9a:04:fa:e0:91:f3:28:2f:a2:47:7d:
35:d3:41:03:5e:03:1b:62:17:9c:d0:1d:e3:b0:e4:
57:70:89:bf:6a:87:54:68:f5:ad:8b:5e:8d:f1:ca:
71:3f:1d:03:eb:77:63:5b:43:f8:84:b4:bf:9e:cd:
66:14:d9:f1:68:ea:85:29:80:e9:b1:17:94:e7:c6:
da:73:57:d1:c8:a3:63:60:c4:88:0b:01:03:df:2d:
6f:dc:0c:18:93:ac:62:7a:48:11:9e:b1:15:a6:12:
06:55:07:c9:4f:74:fd:fe:58:46:98:85:25:eb:9f:
9d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:64:FE:91:76:A2:F5:23:C2:91:B9:22:E0:76:3A:43:2B:87:53:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1bad068c-3a7e-3488-8d50-a5e1755f7430.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv4:
216.131.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:9a:94:cf:56:1b:19:e6:be:56:ef:03:8f:70:df:55:14:08:
36:8a:5f:ad:9f:2c:d0:a0:1a:c9:df:e2:e1:c5:96:61:ea:5b:
55:54:58:39:7a:13:e4:99:30:39:d9:67:b3:4a:6b:55:58:83:
6c:67:c1:c4:c7:6a:2a:d5:1e:2b:2f:f2:4d:a0:e7:be:13:d2:
be:dd:98:cd:54:8d:1b:10:8a:1b:d7:df:25:bb:e0:5d:e3:46:
48:b9:91:2d:af:75:9a:20:4d:0b:80:50:bc:a7:5c:c9:99:8b:
7f:18:de:c5:39:d8:fc:dd:b1:58:6f:ca:75:49:ba:c7:4b:20:
61:35:91:b9:b1:e8:bb:1b:f7:b3:0d:11:cc:ba:32:7e:0b:ef:
04:f6:f9:e7:a3:3f:ac:57:87:55:22:fa:ba:79:8f:71:9a:43:
f0:f9:81:67:55:4b:33:19:36:d0:9c:d8:38:c9:bc:68:5d:ec:
c0:4b:a3:30:7d:36:5d:af:e2:a5:61:2f:9a:9d:23:c3:f1:03:
ef:9d:62:a9:a2:27:1c:e5:d3:d7:dd:e4:6a:0f:5f:65:de:70:
50:65:ad:e7:84:ca:3e:a1:5c:71:68:ba:2e:c7:a9:bb:97:35:
59:c6:59:ba:b0:1f:65:02:b2:93:2a:84:8f:31:6c:d6:40:5d:
2f:ec:e4:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgPCL47fYdB/TF4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZTI3NzU3MWYtZDliNC00MmVkLTg5MTAtODAwNjY1ZTFiM2I5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2c+vWRLo1VcRnrIW47L3avVdf4CazLVX3Zf9
QSljwjUk0VWhI19Na10FvMV8l5C3hoCrRo3T++mqNSJLxAV5hz5M1FvIRjJCyCj6
huSrDTyr+rxmvGxM+kkxyFFtkD76Mts4fG4AqOKfZtEx3lN8yBbji+EYPnq82TQw
lHvP3P3g3o7F0fPBTFiImgT64JHzKC+iR30100EDXgMbYhec0B3jsORXcIm/aodU
aPWti16N8cpxPx0D63djW0P4hLS/ns1mFNnxaOqFKYDpsReU58bac1fRyKNjYMSI
CwED3y1v3AwYk6xiekgRnrEVphIGVQfJT3T9/lhGmIUl65+dyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBFk/pF2ovUjwpG5IuB2OkMrh1OFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMWJhZDA2OGMtM2E3ZS0z
NDg4LThkNTAtYTVlMTc1NWY3NDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABealM9WGxnmvlbvA49w31UUCDaKX62fLNCgGsnf4uHFlmHqW1VUWDl6
E+SZMDnZZ7NKa1VYg2xnwcTHairVHisv8k2g574T0r7dmM1UjRsQihvX3yW74F3j
Rki5kS2vdZogTQuAULynXMmZi38Y3sU52PzdsVhvynVJusdLIGE1kbmx6Lsb97MN
Ecy6Mn4L7wT2+eejP6xXh1Ui+rp5j3GaQ/D5gWdVSzMZNtCc2DjJvGhd7MBLozB9
Nl2v4qVhL5qdI8PxA++dYqmiJxzl09fd5GoPX2XecFBlreeEyj6hXHFoui7HqbuX
NVnGWbqwH2UCspMqhI8xbNZAXS/s5Do=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:13 2025 by rpki-client