Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d0a6f69b-c79e-3aa6-a29f-e16557be8984.roa
File: d0a6f69b-c79e-3aa6-a29f-e16557be8984.roa (raw, json)
Hash identifier: sK3vAXK4fcWRQxTfeb8dn7a91mcI1gIs+RJqcFrj+Hc=
Subject key identifier: B1:85:C6:E7:34:C8:68:1F:73:A6:C9:27:5D:C2:AF:54:16:ED:93:93
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848CDE1032F98139E59459D0840
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d0a6f69b-c79e-3aa6-a29f-e16557be8984.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 397197
IP address blocks: 216.168.228.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:03:2f:98:13:9e:59:45:9d:08:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=93bbdac1-d2e7-457f-bc05-7c76417bbdf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:68:a9:2d:6a:02:7f:37:5c:b4:49:93:40:36:
e5:b5:ac:7b:96:df:21:02:96:75:28:52:01:6a:43:
7b:ea:b5:d8:e4:c7:16:ec:5b:ec:ff:02:41:36:af:
40:83:fe:65:ed:4e:c9:e7:de:e2:aa:d5:f5:eb:e3:
10:44:d7:68:b1:c0:36:5a:79:2d:9d:ef:59:c2:ac:
b6:8d:52:e8:ab:cb:58:4f:8e:b1:10:6c:71:1f:97:
dc:f6:86:cb:28:b2:dc:57:de:09:b3:11:ec:0f:02:
47:aa:5e:e3:bb:54:c8:93:e4:52:ac:55:c9:e9:20:
46:ca:00:76:a2:66:27:21:1d:87:43:f0:49:43:f1:
1b:0c:ef:39:87:eb:da:12:09:09:64:de:d3:8b:40:
79:fd:f3:cd:54:3c:4c:e1:b1:1c:55:8c:14:04:ec:
d4:04:5e:63:c2:13:42:95:5d:52:73:73:1c:99:23:
c5:85:61:ff:79:4e:d4:b4:57:1e:48:40:ed:22:67:
f4:e0:e3:bf:61:a6:49:78:69:8d:25:0c:db:be:e2:
22:44:11:8e:33:f8:22:7d:db:bd:00:32:89:e1:5e:
80:5d:a9:d1:ea:9d:97:4a:34:01:58:a9:30:d0:70:
19:5e:ab:4a:d4:a4:17:31:19:68:bb:71:3c:f1:41:
e7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:85:C6:E7:34:C8:68:1F:73:A6:C9:27:5D:C2:AF:54:16:ED:93:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d0a6f69b-c79e-3aa6-a29f-e16557be8984.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.168.228.53/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:55:99:70:31:95:af:51:3f:97:69:6d:c0:ed:b8:e5:10:65:
af:02:b1:f5:ae:b0:4a:9d:7e:99:ab:72:a3:2d:78:ef:ee:9a:
e6:0c:59:18:82:7f:ca:45:9c:5f:c8:5a:64:51:70:1f:36:cc:
b4:4d:e9:8b:ba:46:6c:c0:d8:94:6e:e5:7a:cc:92:32:c8:3b:
7a:73:1e:36:c8:27:eb:fb:97:63:ee:61:f5:20:6f:89:00:b9:
6a:f4:cd:ba:14:e7:4d:ab:86:e5:5b:9d:b2:02:7d:8f:ed:b8:
df:df:fb:ee:69:13:4c:af:aa:60:2b:0c:f9:a4:0f:01:ac:0e:
a4:9d:ac:97:66:a5:e6:d0:b1:6d:1b:14:60:60:1c:85:16:79:
5e:0e:64:8b:2d:92:94:e5:a7:69:18:fd:41:e3:75:e2:83:51:
05:8d:14:e2:97:d5:39:18:90:ee:3d:26:e7:51:5a:d5:e2:95:
04:de:97:f8:30:94:88:9e:02:f3:dd:00:1e:4c:5a:86:da:d4:
96:2e:e8:3c:82:26:76:c5:45:15:b5:0b:7d:45:4b:69:01:b3:
0e:69:fc:f3:67:ed:d7:4a:1f:11:7a:aa:31:16:e2:db:22:a8:
1c:5c:54:75:45:ba:c5:6a:6c:4e:de:a9:df:1b:9c:96:59:ae:
9e:80:16:fd
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjN4QMvmBOeWUWdCEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk
OTNiYmRhYzEtZDJlNy00NTdmLWJjMDUtN2M3NjQxN2JiZGY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGipLWoCfzdctEmTQDbltax7lt8hApZ1KFIB
akN76rXY5McW7Fvs/wJBNq9Ag/5l7U7J597iqtX16+MQRNdoscA2Wnktne9Zwqy2
jVLoq8tYT46xEGxxH5fc9obLKLLcV94JsxHsDwJHql7ju1TIk+RSrFXJ6SBGygB2
omYnIR2HQ/BJQ/EbDO85h+vaEgkJZN7Ti0B5/fPNVDxM4bEcVYwUBOzUBF5jwhNC
lV1Sc3McmSPFhWH/eU7UtFceSEDtImf04OO/YaZJeGmNJQzbvuIiRBGOM/gifdu9
ADKJ4V6AXanR6p2XSjQBWKkw0HAZXqtK1KQXMRlou3E88UHnewIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLGFxuc0yGgfc6bJJ13Cr1QW7ZOTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDBhNmY2OWItYzc5ZS0z
YWE2LWEyOWYtZTE2NTU3YmU4OTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBRVZlwMZWvUT+XaW3A7bjlEGWvArH1rrBKnX6Zq3KjLXjv7prmDFkY
gn/KRZxfyFpkUXAfNsy0TemLukZswNiUbuV6zJIyyDt6cx42yCfr+5dj7mH1IG+J
ALlq9M26FOdNq4blW52yAn2P7bjf3/vuaRNMr6pgKwz5pA8BrA6knayXZqXm0LFt
GxRgYByFFnleDmSLLZKU5adpGP1B43Xig1EFjRTil9U5GJDuPSbnUVrV4pUE3pf4
MJSIngLz3QAeTFqG2tSWLug8giZ2xUUVtQt9RUtpAbMOafzzZ+3XSh8ReqoxFuLb
IqgcXFR1RbrFamxO3qnfG5yWWa6egBb9
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:50:06 2025 by rpki-client