Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/200332e9-4687-3e0c-a256-5908fe3b00a7.roa
File: 200332e9-4687-3e0c-a256-5908fe3b00a7.roa (raw, json)
Hash identifier: Q12Q4MDpGFDoNnfkg2j5W9f06QghLpjX+Tsh8l3VMw8=
Subject key identifier: 66:95:17:31:02:95:19:92:F8:FD:60:42:36:85:2E:D5:06:F5:DB:B9
Certificate issuer: /CN=826ab4ee-b6aa-4222-ae26-8bc58c9b742a
Certificate serial: 010D0C9F4328584915115A440D39D699E4479A00
Authority key identifier: 5B:7C:6C:55:80:AC:19:EC:C0:BF:7D:79:D4:2C:EF:DF:2D:B7:C1:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/200332e9-4687-3e0c-a256-5908fe3b00a7.roa
Signing time: Wed 05 Mar 2025 02:00:40 +0000
ROA not before: Wed 05 Mar 2025 02:00:40 +0000
ROA not after: Tue 03 Jun 2025 01:00:40 +0000
asID: 11700
IP address blocks: 204.225.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:15:11:5a:44:0d:39:d6:99:e4:47:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826ab4ee-b6aa-4222-ae26-8bc58c9b742a
Validity
Not Before: Mar 5 02:00:40 2025 GMT
Not After : Jun 3 01:00:40 2025 GMT
Subject: CN=e2b049ed-32a1-4a35-af53-55b3af73949f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2c:63:bf:ba:ff:76:c2:ed:07:3f:0b:cb:80:
20:22:69:45:8d:71:c0:69:cc:35:1a:d6:c5:66:d7:
a6:e8:9f:4a:d6:03:96:72:a1:3b:0b:54:b3:7c:ce:
48:12:d1:59:df:9c:69:af:86:7d:5d:06:22:e5:3f:
e8:6e:08:2b:b2:9a:25:77:da:ba:c7:72:38:ec:12:
6f:55:5d:53:19:8b:c6:a4:d7:c5:2d:4e:19:ae:e2:
df:be:55:4a:3b:dd:99:e3:26:44:ae:7f:95:31:20:
b3:a5:1a:93:0c:a9:1b:e8:28:d0:c7:91:64:be:ff:
91:d2:4d:82:d1:aa:69:52:3e:ef:7f:c5:41:2e:e4:
8b:eb:62:0f:cc:38:04:d3:3b:f2:e9:c1:45:c0:65:
ff:53:13:8f:e7:f5:e0:34:b8:0c:e5:3e:80:83:dc:
28:79:e6:5b:5b:de:da:67:85:08:d1:09:ad:4f:61:
c8:1b:d0:97:e4:08:c1:1e:5b:49:3d:88:0b:ce:62:
38:8e:13:5b:71:2f:0d:05:db:0b:38:2a:8b:6f:f4:
10:ee:5b:1e:0f:5f:27:b1:ac:32:5b:c8:35:7a:8e:
4b:15:3f:88:a7:88:1c:20:4a:fc:76:93:e6:ce:f1:
ea:7a:6b:c3:d4:c0:bf:64:7f:db:8e:02:d3:90:d1:
76:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:95:17:31:02:95:19:92:F8:FD:60:42:36:85:2E:D5:06:F5:DB:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/200332e9-4687-3e0c-a256-5908fe3b00a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.crl
X509v3 Authority Key Identifier:
keyid:5B:7C:6C:55:80:AC:19:EC:C0:BF:7D:79:D4:2C:EF:DF:2D:B7:C1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.225.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:67:61:30:7d:8b:b4:3d:d1:77:3d:2f:2a:a4:c7:97:8f:2f:
32:0e:79:2f:67:34:fa:2f:e7:e0:b6:78:b1:1a:bb:c5:ab:a0:
fe:b2:95:88:a0:fc:3d:93:e0:e3:74:c9:f6:d1:7c:a8:94:87:
b3:70:cd:29:6a:1e:8c:f4:74:36:38:df:48:54:6f:22:ec:31:
65:ff:6d:e5:1b:ff:39:8e:3e:15:9a:8e:45:6a:04:73:fc:02:
0c:c7:12:df:44:4e:f6:c9:97:87:98:c6:8b:c0:de:c6:f3:ea:
04:13:39:20:69:4f:0f:64:0a:08:0c:83:b2:57:f3:5b:a4:25:
d5:ee:cf:b0:e1:04:1f:c0:57:e4:fb:81:8c:32:cd:29:5c:85:
35:63:ab:95:6f:3d:ba:ed:c1:b7:45:a6:82:ad:f5:f5:bc:fa:
f4:4b:93:51:d3:b0:1c:c8:89:42:c7:15:9b:45:ba:c4:b2:52:
8f:43:45:95:c7:6a:9e:37:38:a5:8d:fa:77:33:07:b6:4e:60:
8c:45:24:46:7d:42:c7:fc:1e:59:1e:21:a2:64:51:54:3c:9e:
f9:6c:a1:11:16:52:0e:75:73:ee:41:93:72:ce:e6:79:9e:3e:
7a:e2:ba:4a:22:36:6e:c3:3c:ea:e8:d2:35:65:91:d1:fb:b0:
05:51:2c:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkVEVpEDTnWmeRHmgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODI2YWI0ZWUtYjZhYS00MjIyLWFlMjYtOGJjNThjOWI3
NDJhMB4XDTI1MDMwNTAyMDA0MFoXDTI1MDYwMzAxMDA0MFowLzEtMCsGA1UEAxMk
ZTJiMDQ5ZWQtMzJhMS00YTM1LWFmNTMtNTViM2FmNzM5NDlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCxjv7r/dsLtBz8Ly4AgImlFjXHAacw1GtbF
Ztem6J9K1gOWcqE7C1SzfM5IEtFZ35xpr4Z9XQYi5T/obggrspold9q6x3I47BJv
VV1TGYvGpNfFLU4ZruLfvlVKO92Z4yZErn+VMSCzpRqTDKkb6CjQx5Fkvv+R0k2C
0appUj7vf8VBLuSL62IPzDgE0zvy6cFFwGX/UxOP5/XgNLgM5T6Ag9woeeZbW97a
Z4UI0QmtT2HIG9CX5AjBHltJPYgLzmI4jhNbcS8NBdsLOCqLb/QQ7lseD18nsawy
W8g1eo5LFT+Ip4gcIEr8dpPmzvHqemvD1MC/ZH/bjgLTkNF2zQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGaVFzEClRmS+P1gQjaFLtUG9du5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84MjZh
YjRlZS1iNmFhLTQyMjItYWUyNi04YmM1OGM5Yjc0MmEvMjAwMzMyZTktNDY4Ny0z
ZTBjLWEyNTYtNTkwOGZlM2IwMGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODI2YWI0ZWUtYjZhYS00MjIyLWFl
MjYtOGJjNThjOWI3NDJhLzgyNmFiNGVlLWI2YWEtNDIyMi1hZTI2LThiYzU4Yzli
NzQyYS5jcmwwHwYDVR0jBBgwFoAUW3xsVYCsGezAv3151Czv3y23wcMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84MjZhYjRlZS1iNmFhLTQyMjItYWUyNi04YmM1
OGM5Yjc0MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzOEHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGxnYTB9i7Q90Xc9Lyqkx5ePLzIOeS9nNPov5+C2eLEau8WroP6ylYig
/D2T4ON0yfbRfKiUh7NwzSlqHoz0dDY430hUbyLsMWX/beUb/zmOPhWajkVqBHP8
AgzHEt9ETvbJl4eYxovA3sbz6gQTOSBpTw9kCggMg7JX81ukJdXuz7DhBB/AV+T7
gYwyzSlchTVjq5VvPbrtwbdFpoKt9fW8+vRLk1HTsBzIiULHFZtFusSyUo9DRZXH
ap43OKWN+nczB7ZOYIxFJEZ9Qsf8HlkeIaJkUVQ8nvlsoREWUg51c+5Bk3LO5nme
PnriukoiNm7DPOro0jVlkdH7sAVRLE8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:28:44 2025 by rpki-client