Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2c9098e1-8590-3ce4-a313-bf25729c2190.roa
File: 2c9098e1-8590-3ce4-a313-bf25729c2190.roa (raw, json)
Hash identifier: 0pRyMMgbNNX+96bqQWR9VD5fxvL6eFbdXE9S0Vu8ygM=
Subject key identifier: 7F:73:76:EB:AC:E7:E7:31:9D:18:39:57:E9:A5:17:65:3C:54:FF:22
Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Certificate serial: 010D0C9F432858489A3B4B415447A92F3B48DB00
Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2c9098e1-8590-3ce4-a313-bf25729c2190.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 398420
IP address blocks: 216.246.216.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:4b:41:54:47:a9:2f:3b:48:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=9ffbdfa4-9e4b-4890-8d5d-0097f37e5f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:76:29:84:fd:ce:43:0c:a6:63:20:1e:5a:0c:
bd:b0:62:4d:85:bd:17:11:64:e7:50:34:42:ac:10:
90:b2:4d:40:cd:73:34:ea:a9:e8:e2:ed:79:91:a1:
94:b0:5c:bd:b7:16:1b:84:ed:57:58:2e:bd:38:20:
8d:e2:e4:82:74:85:f8:94:65:25:60:8e:0a:25:22:
51:4b:13:ee:36:23:8d:4e:90:06:58:c6:c7:6d:99:
c1:d8:65:72:1a:f6:8b:54:b6:8f:ec:6b:31:1e:82:
f0:d6:4a:78:11:99:0f:4a:1b:d7:78:7a:60:9c:8c:
f6:06:ec:56:da:d4:5d:12:1e:bd:b5:94:b5:53:4e:
49:81:11:d8:a5:e9:2b:49:91:1c:fe:a0:88:f6:38:
17:4a:0f:b9:81:27:3a:b6:0e:98:19:12:ba:a7:16:
ba:22:0c:4b:69:75:6f:0e:70:78:8f:4d:64:11:92:
be:ef:d2:87:97:e4:21:9f:e3:49:ac:05:70:f5:21:
2a:22:67:94:fc:80:00:2f:a4:16:00:37:7f:08:4a:
82:32:0b:cd:c5:d7:b9:05:4f:93:0d:26:e3:80:b0:
a3:19:76:23:f1:c4:31:3c:0d:ca:c0:64:b8:69:99:
73:8f:f1:9d:6d:79:e2:46:1c:82:bb:dd:7d:9d:35:
2d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:73:76:EB:AC:E7:E7:31:9D:18:39:57:E9:A5:17:65:3C:54:FF:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2c9098e1-8590-3ce4-a313-bf25729c2190.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl
X509v3 Authority Key Identifier:
keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
sbgp-ipAddrBlock: critical
IPv4:
216.246.216.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:f3:4a:4a:de:94:e4:eb:98:a8:2c:ed:f1:3d:d3:99:63:c1:
9f:af:1c:98:b5:ac:66:22:91:9e:28:f4:03:f9:f2:3c:15:85:
6a:00:6f:fa:f0:0e:71:0d:7d:78:40:4e:8d:bf:bd:ef:79:cf:
50:ce:9e:0e:b8:33:10:b8:6e:ad:89:29:41:72:0d:95:65:21:
d3:89:76:df:bb:08:1c:07:21:be:55:35:02:3d:86:34:81:84:
67:e0:56:88:05:71:22:72:f1:43:13:d4:6b:a3:fb:ad:b5:71:
e4:a9:e3:42:d9:6c:0e:c7:64:c6:fe:8d:67:16:3e:b9:20:76:
df:8e:da:b9:b6:4e:05:8e:54:cb:4a:85:e3:7f:a0:b9:52:65:
e8:32:97:77:7a:11:7a:9c:fd:d9:4d:51:d1:8f:7d:2e:34:e1:
f1:e9:c6:bd:7c:d3:40:e8:80:02:c8:18:77:73:6e:f8:ed:ea:
b2:28:af:ec:c5:63:c2:b1:39:4a:53:09:92:ec:ce:63:9c:06:
9d:f7:bd:38:ee:15:44:6d:88:1f:80:0b:c3:c2:c6:92:5b:64:
4a:b5:00:1d:f9:d3:ce:ae:c7:a5:7b:7d:32:2a:5a:bb:cd:30:
7a:64:2b:62:7c:1d:32:31:4f:25:67:70:71:6e:d0:13:f4:67:
27:09:b1:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiaO0tBVEepLztI2wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3
OTU5MB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk
OWZmYmRmYTQtOWU0Yi00ODkwLThkNWQtMDA5N2YzN2U1ZjYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3YphP3OQwymYyAeWgy9sGJNhb0XEWTnUDRC
rBCQsk1AzXM06qno4u15kaGUsFy9txYbhO1XWC69OCCN4uSCdIX4lGUlYI4KJSJR
SxPuNiONTpAGWMbHbZnB2GVyGvaLVLaP7GsxHoLw1kp4EZkPShvXeHpgnIz2BuxW
2tRdEh69tZS1U05JgRHYpekrSZEc/qCI9jgXSg+5gSc6tg6YGRK6pxa6IgxLaXVv
DnB4j01kEZK+79KHl+Qhn+NJrAVw9SEqImeU/IAAL6QWADd/CEqCMgvNxde5BU+T
DSbjgLCjGXYj8cQxPA3KwGS4aZlzj/GdbXniRhyCu919nTUtWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH9zduus5+cxnRg5V+mlF2U8VP8iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz
ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvMmM5MDk4ZTEtODU5MC0z
Y2U0LWEzMTMtYmYyNTcyOWMyMTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0
ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0
Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw
M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2PbYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAbzSkrelOTrmKgs7fE905ljwZ+vHJi1rGYikZ4o9AP58jwVhWoAb/rw
DnENfXhATo2/ve95z1DOng64MxC4bq2JKUFyDZVlIdOJdt+7CBwHIb5VNQI9hjSB
hGfgVogFcSJy8UMT1Guj+621ceSp40LZbA7HZMb+jWcWPrkgdt+O2rm2TgWOVMtK
heN/oLlSZegyl3d6EXqc/dlNUdGPfS404fHpxr1800DogALIGHdzbvjt6rIor+zF
Y8KxOUpTCZLszmOcBp33vTjuFURtiB+AC8PCxpJbZEq1AB35086ux6V7fTIqWrvN
MHpkK2J8HTIxTyVncHFu0BP0ZycJsQE=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:53:30 2025 by rpki-client