Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5e4247e1-29ed-3ab4-8456-1bc521a0d341.roa
File: 5e4247e1-29ed-3ab4-8456-1bc521a0d341.roa (raw, json)
Hash identifier: HCV+lZBudPyITaXeCaOHJX+LG/nejHR6tfqTPHuxYwU=
Subject key identifier: F9:04:23:B8:CC:54:14:CB:CE:CA:28:09:6B:7C:2E:6D:7F:AE:1C:0E
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584957F41171CE4DCCA0A4042E80
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5e4247e1-29ed-3ab4-8456-1bc521a0d341.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 23473
IP address blocks: 216.171.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:11:71:ce:4d:cc:a0:a4:04:2e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=77ce0d12-8aaf-43f7-b045-ae735cb6db26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:83:f0:dd:a8:c4:23:17:36:5f:46:ae:a4:c4:
b1:98:c8:0f:cd:aa:b2:78:a2:07:c4:6f:fb:85:f8:
45:27:3f:21:a8:8b:8f:0c:ec:65:32:98:fd:c5:9a:
82:da:26:ba:5d:29:b8:3c:61:49:00:5a:59:fa:87:
27:fe:d9:da:da:db:0e:8a:69:44:24:9b:9a:74:49:
8c:ad:21:58:1e:94:ff:d5:ed:2d:ae:cc:86:32:99:
4b:a8:4d:fd:fe:75:92:d7:1e:80:f4:7c:09:d8:23:
02:e7:93:aa:c3:47:23:4b:3f:8e:b4:b6:2b:73:b0:
04:12:02:9f:c7:56:63:e5:00:59:f5:08:7b:19:40:
12:24:fe:94:5a:5a:85:c1:88:06:48:1a:02:d1:63:
f8:1c:60:27:53:41:2c:52:60:5e:a0:09:8d:cc:22:
4a:91:38:3d:81:68:70:90:18:12:74:e5:dc:51:57:
f5:2c:d5:0d:bb:b1:92:df:55:4a:ab:24:37:8d:3b:
fb:10:e0:c6:64:56:4a:42:e7:d0:cf:7a:56:71:c9:
3d:6f:e8:0b:f1:59:93:80:c6:84:bf:1a:7e:93:e9:
ed:86:c5:ac:5a:ea:1a:4d:87:68:3a:05:fd:e4:a2:
ef:99:f0:7f:c9:e2:74:27:37:3d:ce:7d:52:5e:ca:
93:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:04:23:B8:CC:54:14:CB:CE:CA:28:09:6B:7C:2E:6D:7F:AE:1C:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5e4247e1-29ed-3ab4-8456-1bc521a0d341.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
216.171.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:f7:1b:fb:f9:c7:0e:82:d6:1d:ba:7e:e3:b7:c7:06:70:49:
f8:b4:14:f7:f7:c5:85:4d:69:f1:b4:67:46:da:9a:c6:fc:88:
20:eb:a7:d9:52:69:89:22:86:d1:42:b2:9c:bc:d4:81:b9:97:
44:b4:b4:8a:55:3f:d0:b4:1f:8a:62:e8:5d:0a:e1:73:30:f1:
2b:6f:cc:ac:4c:b3:2e:d1:46:3c:37:2d:2d:ac:7c:91:5b:a2:
52:ee:a3:c0:4f:b9:43:93:44:97:07:60:8c:30:f4:cb:cf:7d:
61:70:14:9f:56:f3:55:b2:2a:a9:c7:55:19:e0:de:e6:4b:d0:
72:69:84:f5:8c:53:01:19:55:2f:5e:93:27:f6:01:32:e6:08:
d6:48:bb:62:70:31:16:64:3d:6c:b3:e8:80:96:72:48:35:72:
12:77:72:b9:b2:22:f6:07:93:ef:85:c1:fd:42:ed:3f:4f:fa:
0e:a4:28:d8:64:4b:fd:c9:85:75:17:42:fc:b6:d6:18:c8:bc:
a8:9f:1e:d1:37:40:cb:1f:75:82:17:e0:1a:ed:b3:25:34:10:
b6:df:69:0d:00:69:45:d4:c5:7b:80:a3:2c:66:de:7b:33:ef:
74:88:3f:1b:b1:eb:c8:5b:b2:76:cb:f1:b4:55:2b:39:3d:f3:
c8:3f:02:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9BFxzk3MoKQELoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk
NzdjZTBkMTItOGFhZi00M2Y3LWIwNDUtYWU3MzVjYjZkYjI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoPw3ajEIxc2X0aupMSxmMgPzaqyeKIHxG/7
hfhFJz8hqIuPDOxlMpj9xZqC2ia6XSm4PGFJAFpZ+ocn/tna2tsOimlEJJuadEmM
rSFYHpT/1e0trsyGMplLqE39/nWS1x6A9HwJ2CMC55Oqw0cjSz+OtLYrc7AEEgKf
x1Zj5QBZ9Qh7GUASJP6UWlqFwYgGSBoC0WP4HGAnU0EsUmBeoAmNzCJKkTg9gWhw
kBgSdOXcUVf1LNUNu7GS31VKqyQ3jTv7EODGZFZKQufQz3pWcck9b+gL8VmTgMaE
vxp+k+nthsWsWuoaTYdoOgX95KLvmfB/yeJ0Jzc9zn1SXsqT5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPkEI7jMVBTLzsooCWt8Lm1/rhwOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNWU0MjQ3ZTEtMjllZC0z
YWI0LTg0NTYtMWJjNTIxYTBkMzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KsMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAET3G/v5xw6C1h26fuO3xwZwSfi0FPf3xYVNafG0Z0bamsb8iCDrp9lS
aYkihtFCspy81IG5l0S0tIpVP9C0H4pi6F0K4XMw8StvzKxMsy7RRjw3LS2sfJFb
olLuo8BPuUOTRJcHYIww9MvPfWFwFJ9W81WyKqnHVRng3uZL0HJphPWMUwEZVS9e
kyf2ATLmCNZIu2JwMRZkPWyz6ICWckg1chJ3crmyIvYHk++Fwf1C7T9P+g6kKNhk
S/3JhXUXQvy21hjIvKifHtE3QMsfdYIX4BrtsyU0ELbfaQ0AaUXUxXuAoyxm3nsz
73SIPxux68hbsnbL8bRVKzk988g/AiA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:11:49 2025 by rpki-client