Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1b2b9df9-06ca-323a-b5c8-1ef1dd59694a.roa
File: 1b2b9df9-06ca-323a-b5c8-1ef1dd59694a.roa (raw, json)
Hash identifier: 4tYES+C4hWMM57xun0IjVoSP8kPoS9sNIKec9Cola0k=
Subject key identifier: 06:A9:9D:1C:C3:AF:B3:34:78:9C:5F:45:45:3A:64:61:B7:30:A2:5A
Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial: 010D0C9F4328584953C44D24A63DCD9583697000
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1b2b9df9-06ca-323a-b5c8-1ef1dd59694a.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 11290
IP address blocks: 162.212.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:4d:24:a6:3d:cd:95:83:69:70:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=0598163f-0486-4dfb-ad2c-262021127cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d7:6e:12:f5:7d:9e:6d:16:3b:e8:c6:2d:cb:
97:f1:3e:2b:92:cf:65:4a:59:48:d1:a9:68:d6:d6:
ac:f8:56:af:11:cb:d7:8e:ea:c5:ff:0e:b4:8a:7e:
7b:b5:11:0b:31:f1:92:a8:5b:49:76:fc:4d:cd:2b:
eb:29:be:ac:f0:66:51:ab:e7:f8:ae:c0:b5:cb:be:
4e:f6:34:5c:0e:9f:5e:b0:d5:49:5a:ac:22:32:c5:
90:24:65:03:b6:32:95:11:65:81:c3:a6:e9:6b:f8:
8d:3c:9d:29:94:fd:5f:84:66:1e:51:cc:2f:f3:fe:
7b:40:30:f5:c7:38:db:22:1e:b9:03:1f:6c:b1:bd:
93:94:d3:61:d1:98:c9:f9:24:f4:fd:d7:fa:1b:94:
88:2a:6c:08:10:61:e8:6b:7b:a1:01:b2:c3:47:d4:
e5:35:2d:68:c7:0a:d3:32:7a:41:65:4a:bd:60:75:
3b:36:44:c7:9e:3b:67:c9:1d:f4:d1:e8:11:a1:69:
47:59:50:97:46:23:3a:7c:7e:c4:69:0b:2a:fc:1b:
02:a8:02:c6:3a:da:c0:6d:e4:56:13:53:0d:fd:af:
8c:7a:96:7a:1b:11:3e:16:16:95:1b:70:19:4e:e2:
c3:50:3b:91:ba:43:66:4c:d9:5a:41:5f:15:7c:85:
75:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A9:9D:1C:C3:AF:B3:34:78:9C:5F:45:45:3A:64:61:B7:30:A2:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1b2b9df9-06ca-323a-b5c8-1ef1dd59694a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
X509v3 Authority Key Identifier:
keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
sbgp-ipAddrBlock: critical
IPv4:
162.212.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:40:38:fb:67:af:b0:2c:3d:05:b9:f0:a7:fd:6c:ec:f1:24:
d0:8c:f4:85:5b:0f:cf:a2:9e:58:d5:e1:c2:55:8b:0d:6c:b2:
fc:da:77:dc:5e:bd:75:0a:f1:c2:50:16:72:78:f5:97:06:4e:
2d:83:a3:7c:93:e4:c5:12:a8:f7:44:d6:bd:cd:62:f0:d1:18:
7b:cc:c8:e1:eb:8b:c1:7b:9e:45:43:31:ed:6b:de:bf:df:21:
aa:82:10:f7:91:40:8b:b0:8a:ff:ef:97:4c:40:8e:11:b2:a4:
cd:77:df:60:83:5e:b7:99:02:a7:3d:76:d2:11:d6:6f:04:00:
9c:7b:09:bd:44:f8:e0:20:ab:7b:7e:3a:62:70:42:65:b5:0d:
c6:79:8a:41:30:85:b4:40:8e:f8:83:76:b2:13:53:9f:e0:83:
76:2f:17:e8:dd:49:22:5a:51:a9:50:2b:4e:ee:83:3a:cc:4f:
86:1b:49:22:7d:a5:70:97:62:73:3d:ec:b3:22:6e:ba:a8:42:
20:7a:02:58:df:bd:2c:2f:dd:aa:6d:cb:8a:ad:13:6f:f6:3d:
a2:9d:de:54:1d:52:4f:a6:b1:d6:62:1e:67:9a:ce:2d:b6:28:
8c:b3:6d:a3:4f:e6:76:a5:65:56:a7:69:4e:07:bf:be:6e:04:
ad:09:a1:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxE0kpj3NlYNpcAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5
MDVmMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
MDU5ODE2M2YtMDQ4Ni00ZGZiLWFkMmMtMjYyMDIxMTI3Y2VhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdduEvV9nm0WO+jGLcuX8T4rks9lSllI0alo
1tas+FavEcvXjurF/w60in57tRELMfGSqFtJdvxNzSvrKb6s8GZRq+f4rsC1y75O
9jRcDp9esNVJWqwiMsWQJGUDtjKVEWWBw6bpa/iNPJ0plP1fhGYeUcwv8/57QDD1
xzjbIh65Ax9ssb2TlNNh0ZjJ+ST0/df6G5SIKmwIEGHoa3uhAbLDR9TlNS1oxwrT
MnpBZUq9YHU7NkTHnjtnyR300egRoWlHWVCXRiM6fH7EaQsq/BsCqALGOtrAbeRW
E1MN/a+MepZ6GxE+FhaVG3AZTuLDUDuRukNmTNlaQV8VfIV1mwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAapnRzDr7M0eJxfRUU6ZGG3MKJaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz
YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMWIyYjlkZjktMDZjYS0z
MjNhLWI1YzgtMWVmMWRkNTk2OTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl
YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz
OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj
ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotQIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB5AOPtnr7AsPQW58Kf9bOzxJNCM9IVbD8+inljV4cJViw1ssvzad9xe
vXUK8cJQFnJ49ZcGTi2Do3yT5MUSqPdE1r3NYvDRGHvMyOHri8F7nkVDMe1r3r/f
IaqCEPeRQIuwiv/vl0xAjhGypM1332CDXreZAqc9dtIR1m8EAJx7Cb1E+OAgq3t+
OmJwQmW1DcZ5ikEwhbRAjviDdrITU5/gg3YvF+jdSSJaUalQK07ugzrMT4YbSSJ9
pXCXYnM97LMibrqoQiB6AljfvSwv3apty4qtE2/2PaKd3lQdUk+msdZiHmeazi22
KIyzbaNP5nalZVanaU4Hv75uBK0JoUU=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:52:42 2025 by rpki-client