Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/4b4d699c-a075-36cf-bad2-252163d3c3d6.roa
File: 4b4d699c-a075-36cf-bad2-252163d3c3d6.roa (raw, json)
Hash identifier: LljuqNts/+M9J6wsDd9AM4pL5/zYyyTGLbRV1mEsGFk=
Subject key identifier: FB:53:6F:2D:73:3C:2D:FF:71:D2:C9:A0:51:55:93:21:80:BA:F4:FA
Certificate issuer: /CN=bf7d171d-7917-4a21-b6cc-8a27039802a5
Certificate serial: 010D0C9F43285849151158CA35D514AD8AB39BC0
Authority key identifier: AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/4b4d699c-a075-36cf-bad2-252163d3c3d6.roa
Signing time: Wed 05 Mar 2025 02:00:40 +0000
ROA not before: Wed 05 Mar 2025 02:00:40 +0000
ROA not after: Tue 03 Jun 2025 01:00:40 +0000
asID: 13415
IP address blocks: 204.15.84.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:15:11:58:ca:35:d5:14:ad:8a:b3:9b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7d171d-7917-4a21-b6cc-8a27039802a5
Validity
Not Before: Mar 5 02:00:40 2025 GMT
Not After : Jun 3 01:00:40 2025 GMT
Subject: CN=7002f772-45df-44a1-9c0f-85606d3199cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ec:c1:f3:07:54:aa:cc:9c:b4:ab:ac:43:aa:
99:7c:58:a0:84:20:b6:f9:7e:79:c6:f0:e2:a9:d2:
b5:0f:3f:31:04:d0:6c:45:3e:3e:94:c1:07:02:9a:
0b:fe:c2:d4:ed:9a:4f:9c:e0:16:4c:6b:25:c5:34:
31:ae:d2:e6:d6:99:e2:15:db:99:c0:d0:27:da:d7:
8a:f2:6b:e2:77:0a:4d:80:c2:59:d4:9d:d7:3a:fb:
26:1b:b5:1e:52:25:4c:22:5f:51:69:51:84:36:26:
f3:33:ff:37:ef:5e:76:1e:ca:67:ed:2e:45:31:e4:
c5:62:46:b7:7d:23:89:bf:31:0d:c9:2f:0f:ba:c3:
00:b9:92:a4:35:7a:ce:52:60:f3:34:aa:2d:6b:a4:
3d:ac:7c:31:d0:54:ad:3a:5f:e2:00:bd:a9:f2:ca:
09:3f:b1:b3:04:44:67:e1:97:f0:14:f8:6a:8c:18:
e9:bf:90:93:d1:78:5c:dc:eb:95:f9:41:ee:41:41:
c3:bb:25:f6:ad:f0:a4:35:6a:47:dc:0c:b3:90:98:
f7:07:40:f2:59:23:dc:4f:cc:73:64:7b:78:0e:06:
a9:95:bc:ac:a6:60:0f:7b:42:97:d1:cf:6c:2a:e7:
15:e8:0c:24:bd:2f:9e:62:4b:52:71:e4:5e:f1:11:
ca:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:53:6F:2D:73:3C:2D:FF:71:D2:C9:A0:51:55:93:21:80:BA:F4:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/4b4d699c-a075-36cf-bad2-252163d3c3d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl
X509v3 Authority Key Identifier:
keyid:AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer
sbgp-ipAddrBlock: critical
IPv4:
204.15.84.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:81:00:ec:c4:38:da:85:0e:f4:8f:16:4b:fb:82:1e:c1:04:
11:99:5c:25:78:10:7d:57:bc:59:4b:c2:c8:5b:cd:ae:a0:4c:
39:8c:90:02:e6:a4:7c:36:a5:30:a8:a2:26:1b:04:c7:25:e6:
df:24:be:ac:ea:e1:72:7b:b6:04:7c:6b:bf:dd:85:43:67:fd:
bf:56:e1:03:6c:63:d0:d7:25:02:a7:23:1f:dd:8a:0c:ea:af:
66:82:11:2c:46:8b:10:00:9e:19:7d:bf:bf:9a:44:e9:76:a8:
87:90:df:de:14:d4:f8:02:1a:b6:63:14:c5:97:49:de:f9:6c:
4c:1d:b5:83:c3:2f:1d:0f:23:b5:6d:60:fd:82:12:40:33:7f:
1c:f2:8b:b9:0c:86:4c:3c:bc:2d:83:8f:53:80:c9:d9:76:4b:
48:a0:a0:f7:7d:0f:49:cb:71:9e:77:d7:c9:2f:2e:f3:f9:f4:
41:97:76:76:ef:af:52:c1:21:4e:8e:c1:2c:22:ec:98:39:7a:
ab:a2:d9:47:87:06:78:4f:28:a5:70:3b:6f:b0:f4:f9:26:7c:
76:bd:47:ef:95:29:43:c6:ce:9e:c6:d6:40:e7:a7:a6:b7:fa:
c7:99:a2:ce:f0:34:d8:d0:da:b0:04:ce:a9:8d:91:ce:04:a9:
36:aa:c0:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkVEVjKNdUUrYqzm8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmY3ZDE3MWQtNzkxNy00YTIxLWI2Y2MtOGEyNzAzOTgw
MmE1MB4XDTI1MDMwNTAyMDA0MFoXDTI1MDYwMzAxMDA0MFowLzEtMCsGA1UEAxMk
NzAwMmY3NzItNDVkZi00NGExLTljMGYtODU2MDZkMzE5OWNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+zB8wdUqsyctKusQ6qZfFighCC2+X55xvDi
qdK1Dz8xBNBsRT4+lMEHApoL/sLU7ZpPnOAWTGslxTQxrtLm1pniFduZwNAn2teK
8mvidwpNgMJZ1J3XOvsmG7UeUiVMIl9RaVGENibzM/837152Hspn7S5FMeTFYka3
fSOJvzENyS8PusMAuZKkNXrOUmDzNKota6Q9rHwx0FStOl/iAL2p8soJP7GzBERn
4ZfwFPhqjBjpv5CT0Xhc3OuV+UHuQUHDuyX2rfCkNWpH3AyzkJj3B0DyWSPcT8xz
ZHt4DgaplbyspmAPe0KX0c9sKucV6AwkvS+eYktSceRe8RHKsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPtTby1zPC3/cdLJoFFVkyGAuvT6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iZjdk
MTcxZC03OTE3LTRhMjEtYjZjYy04YTI3MDM5ODAyYTUvNGI0ZDY5OWMtYTA3NS0z
NmNmLWJhZDItMjUyMTYzZDNjM2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmY3ZDE3MWQtNzkxNy00YTIxLWI2
Y2MtOGEyNzAzOTgwMmE1L2JmN2QxNzFkLTc5MTctNGEyMS1iNmNjLThhMjcwMzk4
MDJhNS5jcmwwHwYDVR0jBBgwFoAUrfa9+KlGwDdFy21HxWzSxxXvijswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iZjdkMTcxZC03OTE3LTRhMjEtYjZjYy04YTI3
MDM5ODAyYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzA9UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJCBAOzEONqFDvSPFkv7gh7BBBGZXCV4EH1XvFlLwshbza6gTDmMkALm
pHw2pTCooiYbBMcl5t8kvqzq4XJ7tgR8a7/dhUNn/b9W4QNsY9DXJQKnIx/digzq
r2aCESxGixAAnhl9v7+aROl2qIeQ394U1PgCGrZjFMWXSd75bEwdtYPDLx0PI7Vt
YP2CEkAzfxzyi7kMhkw8vC2Dj1OAydl2S0igoPd9D0nLcZ5318kvLvP59EGXdnbv
r1LBIU6OwSwi7Jg5equi2UeHBnhPKKVwO2+w9PkmfHa9R++VKUPGzp7G1kDnp6a3
+seZos7wNNjQ2rAEzqmNkc4EqTaqwNc=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:52 2025 by rpki-client