Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/be73bf96-e5bd-337c-93e4-4955acaa2e68.roa
File: be73bf96-e5bd-337c-93e4-4955acaa2e68.roa (raw, json)
Hash identifier: a7QBLeYrht3azDWcxP9rbss+i8sAFXoGv4aVvYy53Bw=
Subject key identifier: 05:20:A3:07:71:26:77:C7:36:CC:70:8E:22:5B:19:03:60:67:DC:31
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F43285848CC7B9D25CF7A7EDB0F7E7780
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/be73bf96-e5bd-337c-93e4-4955acaa2e68.roa
Signing time: Fri 07 Feb 2025 02:00:39 +0000
ROA not before: Fri 07 Feb 2025 02:00:39 +0000
ROA not after: Thu 08 May 2025 01:00:39 +0000
asID: 11090
IP address blocks: 216.137.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cc:7b:9d:25:cf:7a:7e:db:0f:7e:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Feb 7 02:00:39 2025 GMT
Not After : May 8 01:00:39 2025 GMT
Subject: CN=6b966eef-c7ab-42d1-b248-b27047aaee43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:be:1e:c8:2b:4b:74:23:5a:25:eb:eb:12:38:
d0:d1:ec:de:05:d5:c0:59:04:94:7f:66:aa:a6:a4:
d8:15:52:aa:4a:3c:72:23:c5:21:3e:4b:a2:d6:d6:
10:72:64:d3:20:74:6c:40:bc:d4:a8:7c:06:87:db:
48:90:24:22:83:d6:10:09:26:eb:bc:87:24:d1:48:
45:c7:ca:68:01:ad:48:c3:a8:54:6b:33:6d:26:a3:
65:90:5e:54:55:5b:e3:b7:d2:c4:55:24:e9:19:89:
d3:a6:57:5a:2a:39:7c:2c:f6:5d:52:df:33:4b:48:
2c:a3:cb:ed:14:61:64:79:82:5c:a5:50:02:4d:5b:
97:cc:f5:ce:7f:57:2f:39:ed:2f:c7:56:af:02:04:
16:e3:b2:32:61:c9:d4:af:79:07:e4:88:1b:7e:be:
c3:57:10:10:75:33:cc:81:ba:f7:65:64:12:d0:a5:
43:d0:94:23:3e:e5:8e:53:fe:1a:fe:f3:d0:57:c3:
88:44:d5:01:08:14:c5:45:b1:24:da:e6:92:93:34:
2c:e9:4c:e2:b2:2e:b5:84:c0:12:d3:fe:bd:e9:b9:
f0:d2:be:0f:7d:90:67:58:ea:63:6c:09:f0:3a:f8:
26:63:06:4f:8e:81:0e:dd:5c:df:1b:2e:e4:99:05:
55:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:20:A3:07:71:26:77:C7:36:CC:70:8E:22:5B:19:03:60:67:DC:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/be73bf96-e5bd-337c-93e4-4955acaa2e68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
216.137.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:fb:55:f6:05:50:c1:c6:ea:cc:1a:fb:e1:fc:6d:c3:dc:90:
d4:a9:8e:ca:aa:b2:ed:81:10:55:06:26:79:25:2e:54:df:5c:
9f:02:76:67:44:7a:3a:50:e2:ed:39:1b:c4:68:07:b2:20:66:
4c:a4:74:33:32:01:0c:f8:ac:35:c1:51:20:5c:22:b0:34:3a:
eb:24:39:84:a3:af:98:8d:07:1d:41:90:b4:a9:11:93:65:86:
9e:e8:3d:1d:26:5a:67:f1:f9:f8:dd:80:5a:68:37:be:3e:e5:
e6:21:4c:2a:21:9b:6b:cb:72:f6:5b:21:f2:0d:36:0c:a0:9a:
00:51:d8:e9:e7:b1:c8:51:21:e3:fb:02:36:83:37:9b:bc:36:
91:24:e2:d2:cf:e2:e8:9c:36:d3:66:bc:6e:6b:ab:29:3a:44:
3c:d6:9b:c3:07:d3:ea:1d:55:23:b2:c5:15:38:ae:85:08:75:
1d:21:ca:11:ec:08:14:36:a9:0c:25:63:43:dc:e0:e4:18:2a:
13:a5:2a:fe:9f:b2:5b:3e:47:ff:15:f8:f5:89:97:7a:d1:68:
6b:c9:a6:db:dd:82:0a:08:d7:11:5e:07:93:f0:5c:7f:fb:fc:
be:68:75:bf:c7:25:76:8d:ea:c8:e6:04:6d:d0:24:cf:b8:ea:
5d:c3:3a:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe50lz3p+2w9+d4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2
OWQxMB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk
NmI5NjZlZWYtYzdhYi00MmQxLWIyNDgtYjI3MDQ3YWFlZTQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi74eyCtLdCNaJevrEjjQ0ezeBdXAWQSUf2aq
pqTYFVKqSjxyI8UhPkui1tYQcmTTIHRsQLzUqHwGh9tIkCQig9YQCSbrvIck0UhF
x8poAa1Iw6hUazNtJqNlkF5UVVvjt9LEVSTpGYnTpldaKjl8LPZdUt8zS0gso8vt
FGFkeYJcpVACTVuXzPXOf1cvOe0vx1avAgQW47IyYcnUr3kH5Igbfr7DVxAQdTPM
gbr3ZWQS0KVD0JQjPuWOU/4a/vPQV8OIRNUBCBTFRbEk2uaSkzQs6Uzisi61hMAS
0/696bnw0r4PfZBnWOpjbAnwOvgmYwZPjoEO3VzfGy7kmQVVYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAUgowdxJnfHNsxwjiJbGQNgZ9wxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk
NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvYmU3M2JmOTYtZTViZC0z
MzdjLTkzZTQtNDk1NWFjYWEyZTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw
MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh
NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0
M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2InKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALP7VfYFUMHG6swa++H8bcPckNSpjsqqsu2BEFUGJnklLlTfXJ8CdmdE
ejpQ4u05G8RoB7IgZkykdDMyAQz4rDXBUSBcIrA0OuskOYSjr5iNBx1BkLSpEZNl
hp7oPR0mWmfx+fjdgFpoN74+5eYhTCohm2vLcvZbIfINNgygmgBR2OnnschRIeP7
AjaDN5u8NpEk4tLP4uicNtNmvG5rqyk6RDzWm8MH0+odVSOyxRU4roUIdR0hyhHs
CBQ2qQwlY0Pc4OQYKhOlKv6fsls+R/8V+PWJl3rRaGvJptvdggoI1xFeB5PwXH/7
/L5odb/HJXaN6sjmBG3QJM+46l3DOnI=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:35:04 2025 by rpki-client