Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/3d458b10-00d8-3f00-a0c7-2fc6c9de3114.roa
File: 3d458b10-00d8-3f00-a0c7-2fc6c9de3114.roa (raw, json)
Hash identifier: lIqnfQK6TsPo4xUXo9tnLQNn/3a/7qUPNnfikdfvWaM=
Subject key identifier: D4:06:1B:2A:9D:46:E8:EC:BC:EC:5C:D7:20:E8:75:1E:B2:82:CB:12
Certificate issuer: /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb
Certificate serial: 010D0C9F43285848C84B9F2F31C69692F0926BF0
Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/3d458b10-00d8-3f00-a0c7-2fc6c9de3114.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 33322
IP address blocks: 204.16.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:9f:2f:31:c6:96:92:f0:92:6b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=0db16bea-3be7-42de-bfbc-e0516b3c841b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c5:48:6d:77:75:c5:a7:4c:3a:51:b9:5f:6c:
c5:a3:19:20:99:a2:2f:7c:62:da:94:4c:8d:e2:b4:
84:36:0f:fa:39:2c:0b:e8:cb:b0:64:42:05:b4:1b:
9f:0f:6e:43:d4:c9:41:52:cb:84:9e:89:2f:b2:e8:
47:44:2a:5c:9c:ff:ca:c4:ae:8e:53:de:fa:7e:2b:
79:8e:bf:3c:68:57:0d:c1:51:05:6e:46:51:76:ea:
e9:dd:60:09:ec:65:da:86:71:89:46:69:78:5b:17:
3a:3b:34:ae:86:76:cc:48:2f:8d:ff:9b:10:c3:61:
db:d0:e8:62:a8:5c:5e:94:e9:67:ff:9d:51:90:7b:
6f:06:80:33:4f:3e:47:63:a8:8d:31:53:23:59:57:
78:4e:0f:ec:b2:5a:5c:ea:9d:3b:6d:67:e5:e1:73:
9c:fb:7e:4e:0b:b4:de:d0:cc:70:a0:92:fc:fe:87:
52:76:fe:9c:c7:29:b0:80:d0:70:06:11:c3:d6:ae:
11:91:a8:01:96:df:7a:84:ce:85:94:d6:4d:c9:21:
fa:61:fb:e5:cf:b9:fb:32:6f:84:32:36:2a:4f:ce:
89:7a:aa:cf:a4:ba:d2:d5:27:31:ce:01:6e:12:55:
35:c5:c8:65:89:aa:bc:0f:31:5a:98:bb:21:ec:63:
42:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:06:1B:2A:9D:46:E8:EC:BC:EC:5C:D7:20:E8:75:1E:B2:82:CB:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/3d458b10-00d8-3f00-a0c7-2fc6c9de3114.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl
X509v3 Authority Key Identifier:
keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer
sbgp-ipAddrBlock: critical
IPv4:
204.16.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:53:4e:78:90:e9:2b:35:5b:19:61:96:7d:1d:f6:d0:c3:42:
e5:56:a5:c1:64:f0:fb:96:1b:3d:8b:d5:1c:4e:0a:86:30:ca:
50:4e:0a:91:e7:f0:39:ee:83:61:05:7c:da:7d:b6:8b:75:8c:
a4:fa:72:51:5c:b2:3b:65:40:c8:46:1a:f3:29:ae:09:20:b7:
5e:4a:d1:da:c6:8b:d6:3a:79:c1:c8:da:69:c8:e8:ed:4b:4e:
8d:2f:1b:c8:f0:c7:56:bf:14:41:51:26:f7:95:98:4a:5c:d8:
b1:bd:61:6c:77:c9:62:3d:c6:e3:3f:4a:f6:f3:ba:52:e5:67:
dc:9b:57:54:a9:c6:fe:88:81:dc:8a:aa:ef:f3:ca:e3:11:d5:
04:d7:cf:9d:a7:68:67:58:96:52:b7:55:5f:d0:fa:3f:72:ac:
bc:f8:89:89:d2:16:8c:64:c4:21:25:96:1d:d8:f9:02:d5:6a:
a6:be:78:f3:f7:d1:66:b3:67:d4:9b:1b:86:94:60:22:80:51:
6a:dd:0b:6a:85:45:a3:bc:70:66:64:8c:e8:9e:b8:5e:1c:58:
ab:ce:fc:bd:73:b1:ab:0c:77:94:23:1d:cb:73:82:80:6f:8e:
46:cf:fa:73:04:5c:6a:3c:3c:43:f3:e9:83:ba:32:24:d3:44:
5e:55:c0:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS58vMcaWkvCSa/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmFkY2I4NzQtNmE5Zi00M2QzLTlmMWMtZWFjNDk4Nzkx
OGJiMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
MGRiMTZiZWEtM2JlNy00MmRlLWJmYmMtZTA1MTZiM2M4NDFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcVIbXd1xadMOlG5X2zFoxkgmaIvfGLalEyN
4rSENg/6OSwL6MuwZEIFtBufD25D1MlBUsuEnokvsuhHRCpcnP/KxK6OU976fit5
jr88aFcNwVEFbkZRdurp3WAJ7GXahnGJRml4Wxc6OzSuhnbMSC+N/5sQw2Hb0Ohi
qFxelOln/51RkHtvBoAzTz5HY6iNMVMjWVd4Tg/sslpc6p07bWfl4XOc+35OC7Te
0MxwoJL8/odSdv6cxymwgNBwBhHD1q4RkagBlt96hM6FlNZNySH6Yfvlz7n7Mm+E
MjYqT86JeqrPpLrS1ScxzgFuElU1xchliaq8DzFamLsh7GNCiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNQGGyqdRujsvOxc1yDodR6ygssSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRj
Yjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3OTE4YmIvM2Q0NThiMTAtMDBkOC0z
ZjAwLWEwYzctMmZjNmM5ZGUzMTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmFkY2I4NzQtNmE5Zi00M2QzLTlm
MWMtZWFjNDk4NzkxOGJiL2ZhZGNiODc0LTZhOWYtNDNkMy05ZjFjLWVhYzQ5ODc5
MThiYi5jcmwwHwYDVR0jBBgwFoAUjRdauYsK5jYPArBgl1RLElU+OdMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0
OTg3OTE4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzBDUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI5TTniQ6Ss1Wxlhln0d9tDDQuVWpcFk8PuWGz2L1RxOCoYwylBOCpHn
8Dnug2EFfNp9tot1jKT6clFcsjtlQMhGGvMprgkgt15K0drGi9Y6ecHI2mnI6O1L
To0vG8jwx1a/FEFRJveVmEpc2LG9YWx3yWI9xuM/SvbzulLlZ9ybV1Spxv6IgdyK
qu/zyuMR1QTXz52naGdYllK3VV/Q+j9yrLz4iYnSFoxkxCEllh3Y+QLVaqa+ePP3
0WazZ9SbG4aUYCKAUWrdC2qFRaO8cGZkjOieuF4cWKvO/L1zsasMd5QjHctzgoBv
jkbP+nMEXGo8PEPz6YO6MiTTRF5VwDQ=
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:05:33 2025 by rpki-client