Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/e92c285d-42ac-326f-a5f3-5d7542fc90ae.roa
File: e92c285d-42ac-326f-a5f3-5d7542fc90ae.roa (raw, json)
Hash identifier: 0Piut8hlOAj3n/3NBWu25SqLcrsI0069U7eMdFOWcBY=
Subject key identifier: 06:6D:68:48:C0:E0:0F:09:0E:5C:D8:68:A1:04:D6:71:0F:2C:EE:BE
Certificate issuer: /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial: 010D0C9F43285849350E9DEB4862BE4D23B44B00
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/e92c285d-42ac-326f-a5f3-5d7542fc90ae.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 9009
IP address blocks: 172.85.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:9d:eb:48:62:be:4d:23:b4:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=f7d0f7b1-a8b0-4ecd-9885-6a43fc3ed5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a6:d8:dd:78:09:84:62:cc:c0:d3:19:a9:08:
07:80:1d:82:a1:79:fb:8f:c5:11:fd:17:1b:eb:55:
54:db:18:47:1d:18:0b:29:e0:b7:28:75:af:3d:28:
3a:74:83:37:b2:b4:70:10:45:79:7f:37:b4:13:0a:
80:9b:9a:a5:dd:66:67:5e:06:ad:6b:11:a0:86:c3:
cf:90:3e:de:64:8b:8e:72:54:15:c4:59:0b:62:a2:
d7:af:50:7f:08:b9:d2:d8:2a:4f:30:67:48:fa:64:
7d:97:92:42:1f:98:3f:8f:3f:48:f6:a0:ac:61:ba:
25:5b:ee:06:85:29:e8:9d:50:37:33:7d:8b:4e:8a:
68:0d:4d:90:66:7b:16:f7:19:74:95:00:98:25:53:
de:66:b1:97:ff:01:b7:72:c5:42:18:e3:35:01:79:
09:e0:2f:17:b4:44:a9:82:85:78:4e:2b:8d:9e:43:
e9:e8:5d:90:18:a2:86:9d:ff:bf:df:c2:21:09:49:
e7:5e:71:84:5b:7c:1e:55:bb:79:10:2b:53:62:9c:
e2:91:12:53:23:f8:e5:22:2b:37:2f:fc:d7:de:f0:
96:33:06:d5:a8:52:2c:6c:09:13:5b:03:b3:30:bb:
ec:86:c0:26:71:aa:25:be:66:d7:6b:aa:4b:e8:43:
72:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6D:68:48:C0:E0:0F:09:0E:5C:D8:68:A1:04:D6:71:0F:2C:EE:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/e92c285d-42ac-326f-a5f3-5d7542fc90ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
X509v3 Authority Key Identifier:
keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
sbgp-ipAddrBlock: critical
IPv4:
172.85.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:d3:70:72:11:d0:7c:b8:18:6f:a8:68:d7:dd:07:99:fe:68:
3b:2f:61:f8:ca:89:d8:1f:61:40:d7:2d:d8:c1:fe:11:09:db:
f2:dd:1d:55:a2:20:9b:e8:43:a9:6e:07:2c:53:75:2a:66:80:
de:ed:f4:3a:88:8f:24:d7:10:13:1d:aa:b4:f3:d6:30:95:9f:
b3:d0:5a:e3:a8:a4:ce:d3:8c:41:1a:19:6a:c3:9a:3b:7b:24:
38:2c:9c:9e:7d:84:c4:dc:c6:32:fe:d9:df:e0:a4:50:de:f7:
1d:e7:d3:20:2f:cc:49:99:25:bc:d9:76:67:cd:fb:b8:f6:e3:
e6:ba:a4:a5:b4:00:56:86:5d:4c:bf:f6:89:9f:f3:fa:de:bd:
b6:87:3c:e7:60:c5:ed:e4:3e:44:2d:5b:f0:b9:e4:7b:58:e1:
a5:40:52:7b:5f:32:17:b7:0c:13:15:97:90:3a:51:98:87:cf:
05:9f:9d:e8:74:f1:63:8b:7a:67:f9:45:3c:32:6e:ac:0a:fc:
34:70:0e:cd:d4:a0:ed:07:41:ea:e1:0a:95:91:76:8b:8d:2d:
2f:47:87:0b:53:c4:56:b0:88:78:ed:6a:fd:f4:7f:c6:c8:38:
b4:2a:ce:2e:b8:eb:15:4f:73:bd:ed:71:d5:a0:23:a5:db:e7:
13:58:56:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1Dp3rSGK+TSO0SwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM1OThjMTktOWQ4ZS00NjUwLWFiY2UtYzM0YzUxNDY1
OTFmMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk
ZjdkMGY3YjEtYThiMC00ZWNkLTk4ODUtNmE0M2ZjM2VkNWRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6bY3XgJhGLMwNMZqQgHgB2CoXn7j8UR/Rcb
61VU2xhHHRgLKeC3KHWvPSg6dIM3srRwEEV5fze0EwqAm5ql3WZnXgataxGghsPP
kD7eZIuOclQVxFkLYqLXr1B/CLnS2CpPMGdI+mR9l5JCH5g/jz9I9qCsYbolW+4G
hSnonVA3M32LTopoDU2QZnsW9xl0lQCYJVPeZrGX/wG3csVCGOM1AXkJ4C8XtESp
goV4TiuNnkPp6F2QGKKGnf+/38IhCUnnXnGEW3weVbt5ECtTYpzikRJTI/jlIis3
L/zX3vCWMwbVqFIsbAkTWwOzMLvshsAmcaolvmbXa6pL6ENyUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAZtaEjA4A8JDlzYaKEE1nEPLO6+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kYzU5
OGMxOS05ZDhlLTQ2NTAtYWJjZS1jMzRjNTE0NjU5MWYvZTkyYzI4NWQtNDJhYy0z
MjZmLWE1ZjMtNWQ3NTQyZmM5MGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGM1OThjMTktOWQ4ZS00NjUwLWFi
Y2UtYzM0YzUxNDY1OTFmL2RjNTk4YzE5LTlkOGUtNDY1MC1hYmNlLWMzNGM1MTQ2
NTkxZi5jcmwwHwYDVR0jBBgwFoAUZJxII/ggNcM5/fDGWr3QRs2B+owwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kYzU5OGMxOS05ZDhlLTQ2NTAtYWJjZS1jMzRj
NTE0NjU5MWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFVsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD3TcHIR0Hy4GG+oaNfdB5n+aDsvYfjKidgfYUDXLdjB/hEJ2/LdHVWi
IJvoQ6luByxTdSpmgN7t9DqIjyTXEBMdqrTz1jCVn7PQWuOopM7TjEEaGWrDmjt7
JDgsnJ59hMTcxjL+2d/gpFDe9x3n0yAvzEmZJbzZdmfN+7j24+a6pKW0AFaGXUy/
9omf8/revbaHPOdgxe3kPkQtW/C55HtY4aVAUntfMhe3DBMVl5A6UZiHzwWfneh0
8WOLemf5RTwybqwK/DRwDs3UoO0HQerhCpWRdouNLS9HhwtTxFawiHjtav30f8bI
OLQqzi646xVPc73tcdWgI6Xb5xNYVkE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:27:48 2025 by rpki-client