Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3fa4d696-276f-36ac-9131-15dddd8bc011.roa
File: 3fa4d696-276f-36ac-9131-15dddd8bc011.roa (raw, json)
Hash identifier: L6Grg1fqNsk342xKcz5GuIM+78P3dArkpg2nroxUU5g=
Subject key identifier: 10:4F:CE:7B:78:6E:DD:63:01:3E:C7:74:2E:F9:98:9D:DE:EF:03:F1
Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial: 010D0C9F432858487AB0DA6895B21BCDBE537EF0
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3fa4d696-276f-36ac-9131-15dddd8bc011.roa
Signing time: Wed 08 Jan 2025 18:51:51 +0000
ROA not before: Wed 08 Jan 2025 18:51:51 +0000
ROA not after: Tue 08 Apr 2025 17:51:51 +0000
asID: 16509
IP address blocks: 216.224.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:b0:da:68:95:b2:1b:cd:be:53:7e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Validity
Not Before: Jan 8 18:51:51 2025 GMT
Not After : Apr 8 17:51:51 2025 GMT
Subject: CN=e81ec1af-526e-4150-a8aa-b0cbbba36034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ee:44:1f:09:21:89:92:42:9b:e1:6c:26:a2:
8e:a2:c5:b0:06:b3:33:42:21:6c:d3:7c:5f:d8:40:
37:a7:d6:64:fb:16:04:80:b5:44:98:2f:19:25:ee:
67:ae:84:d0:ad:e7:8f:a3:4e:2a:46:a4:5b:d4:78:
c2:8f:82:06:92:d6:2a:0d:80:48:31:a5:a1:af:85:
40:83:8e:c3:bd:10:55:87:dc:65:3d:35:f3:1e:15:
6d:65:37:42:74:cb:3c:e9:2d:4f:81:12:2f:27:dd:
82:1e:c6:36:ac:69:08:36:80:71:03:78:7d:47:5e:
c8:37:26:57:5d:75:3c:8e:71:3c:ed:dc:55:ef:2e:
12:87:ef:31:1a:fe:14:fa:32:c3:ca:3d:e3:b5:41:
7a:8e:0a:f0:b0:87:30:00:e1:15:ac:f5:27:58:fb:
7d:8f:06:99:1c:d9:34:24:4f:27:57:d2:ce:6d:b1:
d7:5f:20:7e:9b:6a:46:58:16:5b:fb:ff:14:bc:e2:
df:b6:1c:f4:69:26:62:a1:0d:6d:57:08:a6:f2:51:
11:34:4d:dd:7e:7a:ec:0e:39:64:26:57:04:8d:1a:
36:12:7e:9d:8f:0e:02:b6:00:6f:11:46:26:34:7a:
d9:6e:84:b5:ef:49:0d:9c:57:0e:24:93:8b:87:ae:
34:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4F:CE:7B:78:6E:DD:63:01:3E:C7:74:2E:F9:98:9D:DE:EF:03:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3fa4d696-276f-36ac-9131-15dddd8bc011.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
X509v3 Authority Key Identifier:
keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
sbgp-ipAddrBlock: critical
IPv4:
216.224.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:a6:62:89:aa:52:41:9c:a5:dd:18:62:11:3a:19:01:c9:ae:
10:8f:0a:aa:45:19:d7:21:ff:45:0e:3f:5c:f3:34:24:7b:b0:
44:b4:93:3b:e3:52:59:85:1c:77:3a:a5:2f:df:b7:8c:10:07:
c2:34:14:78:08:30:5e:a1:f9:69:14:5e:6e:62:09:78:27:f2:
12:bc:5c:6e:df:17:0c:d4:31:16:ef:85:6a:43:1a:5f:28:1f:
1c:5c:75:6e:7d:a2:d6:c6:0e:f3:92:78:d7:35:d6:0b:1e:0e:
90:24:b0:17:63:4c:95:57:ee:65:94:e3:8d:e4:dc:bb:73:da:
f8:bd:03:29:e6:9d:c1:9e:7f:9a:6f:15:ae:89:46:d2:bc:d5:
a1:b6:40:83:d2:b9:9e:b9:13:59:97:2e:15:c3:0c:01:78:c5:
e2:5a:b2:ac:2b:2d:bf:3b:83:60:5c:1a:73:c1:9d:2b:8b:c5:
fd:0b:f6:a3:0d:19:d3:ef:17:17:26:e2:27:8a:fc:80:5c:15:
4d:3e:bd:07:c6:58:f7:72:97:22:d8:06:48:76:7c:91:77:f6:
c6:da:e9:34:f2:96:19:79:b0:47:5c:7b:5d:e5:67:d6:77:b0:
d0:8f:97:60:5c:fe:04:5a:d5:38:59:32:a2:e1:06:8c:87:50:
b3:97:05:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6sNpolbIbzb5TfvAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1
MGU4MB4XDTI1MDEwODE4NTE1MVoXDTI1MDQwODE3NTE1MVowLzEtMCsGA1UEAxMk
ZTgxZWMxYWYtNTI2ZS00MTUwLWE4YWEtYjBjYmJiYTM2MDM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+5EHwkhiZJCm+FsJqKOosWwBrMzQiFs03xf
2EA3p9Zk+xYEgLVEmC8ZJe5nroTQreePo04qRqRb1HjCj4IGktYqDYBIMaWhr4VA
g47DvRBVh9xlPTXzHhVtZTdCdMs86S1PgRIvJ92CHsY2rGkINoBxA3h9R17INyZX
XXU8jnE87dxV7y4Sh+8xGv4U+jLDyj3jtUF6jgrwsIcwAOEVrPUnWPt9jwaZHNk0
JE8nV9LObbHXXyB+m2pGWBZb+/8UvOLfthz0aSZioQ1tVwim8lERNE3dfnrsDjlk
JlcEjRo2En6djw4CtgBvEUYmNHrZboS170kNnFcOJJOLh640aQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBBPznt4bt1jAT7HdC75mJ3e7wPxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0
NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvM2ZhNGQ2OTYtMjc2Zi0z
NmFjLTkxMzEtMTVkZGRkOGJjMDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk
MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz
NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3
NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGemYomqUkGcpd0YYhE6GQHJrhCPCqpFGdch/0UOP1zzNCR7sES0kzvj
UlmFHHc6pS/ft4wQB8I0FHgIMF6h+WkUXm5iCXgn8hK8XG7fFwzUMRbvhWpDGl8o
HxxcdW59otbGDvOSeNc11gseDpAksBdjTJVX7mWU443k3Ltz2vi9AynmncGef5pv
Fa6JRtK81aG2QIPSuZ65E1mXLhXDDAF4xeJasqwrLb87g2BcGnPBnSuLxf0L9qMN
GdPvFxcm4ieK/IBcFU0+vQfGWPdylyLYBkh2fJF39sba6TTylhl5sEdce13lZ9Z3
sNCPl2Bc/gRa1ThZMqLhBoyHULOXBYk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:36:42 2025 by rpki-client