Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/de7f958e-9b5b-3cec-a597-047e298cf30f.roa
File: de7f958e-9b5b-3cec-a597-047e298cf30f.roa (raw, json)
Hash identifier: GWJMSNQgICf/r6nFu18SEjMtZiYdzW02hxmc+NdlQ1Q=
Subject key identifier: A8:71:98:48:8F:14:C0:BC:12:B5:15:F5:28:D2:EF:18:70:EC:21:8A
Certificate issuer: /CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
Certificate serial: 010D0C9F4328584953C4156D6B91B3AF4FF87F00
Authority key identifier: 7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/de7f958e-9b5b-3cec-a597-047e298cf30f.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 14618
IP address blocks: 208.70.136.0/23 maxlen: 23
208.70.138.0/24 maxlen: 24
208.70.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:15:6d:6b:91:b3:af:4f:f8:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=aea663b9-972c-4006-9227-32493c891d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f9:e7:c8:98:8b:a3:f3:55:a5:37:41:12:4d:
3d:58:ef:cc:d3:88:50:e3:05:d1:07:2d:d6:fc:82:
9a:b4:a2:53:11:44:e2:41:1b:33:d6:96:b7:51:aa:
4c:8a:ca:4d:32:b8:b4:38:0c:1e:e1:e3:d1:74:9b:
2d:e0:e7:64:c9:ed:13:bb:32:d8:2e:3a:ee:63:e4:
04:82:f0:cd:8f:74:68:9b:d5:38:00:b1:3d:cf:31:
b3:08:91:01:5b:eb:29:ac:34:39:e2:52:09:5d:0f:
7c:1c:05:94:f1:5e:72:aa:c7:4f:8b:0f:1b:50:c1:
b1:28:f0:e1:9e:43:f8:67:42:f2:74:ff:64:ab:fa:
2d:9c:d7:74:39:ca:ab:56:fd:ec:d4:e0:09:b9:e8:
b2:1b:f7:a7:cd:82:79:29:17:c8:1b:bb:4c:ee:7d:
c3:c8:86:fb:2b:32:6d:ad:02:04:70:ed:88:13:a0:
e1:52:62:c6:88:16:86:2b:d0:46:5e:df:25:fc:41:
f1:0c:be:dd:95:26:bc:b1:6c:e5:77:42:32:7a:e6:
ee:e7:34:bf:a0:75:dc:15:3d:d3:15:f0:f3:09:4d:
60:27:c0:ca:95:60:dd:82:59:35:32:1b:79:d1:b1:
6e:7e:22:5d:1e:67:cf:37:8f:5f:1e:b9:d2:88:75:
68:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:71:98:48:8F:14:C0:BC:12:B5:15:F5:28:D2:EF:18:70:EC:21:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/de7f958e-9b5b-3cec-a597-047e298cf30f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl
X509v3 Authority Key Identifier:
keyid:7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
sbgp-ipAddrBlock: critical
IPv4:
208.70.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:bf:5e:35:8e:c7:10:22:3c:b1:43:14:1b:cd:21:5d:97:77:
56:ef:4d:12:ef:e1:d4:bc:44:8f:85:ac:c3:08:53:ca:c4:d2:
f3:14:9a:e5:13:88:61:b5:6a:cc:1a:9a:e4:3a:5d:2c:c5:fa:
1c:74:12:b0:05:a8:35:64:ec:b5:3b:18:fb:4d:a2:d8:c9:ab:
ec:76:b7:93:89:5d:1e:79:3f:c0:65:8f:9b:c7:11:87:12:14:
87:5c:7d:80:e4:6b:e8:f9:b8:bc:2a:4c:70:87:b5:0b:02:e1:
55:83:f6:e8:c7:c6:d5:e6:2d:af:46:8b:bb:77:b6:45:58:cf:
0d:ca:43:a2:8a:c8:83:dd:a2:06:13:50:f4:b9:42:7a:96:c2:
81:33:a7:c2:92:cc:f3:67:ef:48:64:b2:4a:b3:dc:01:fb:7c:
9b:a2:b0:56:29:60:96:e7:ce:2d:ab:a2:93:ec:69:41:5a:10:
ee:fd:26:59:c8:21:7f:6c:f8:90:1c:9e:ee:ff:46:5f:62:f1:
a2:8b:dd:88:ec:a4:f4:fa:70:e4:26:c0:a7:25:e0:26:96:76:
98:15:61:ac:34:1c:83:4f:f4:23:d0:5d:f7:31:e4:fc:38:e2:
f4:67:98:d8:51:bd:88:06:08:7f:32:e6:99:6a:b4:34:40:35:
11:1b:7d:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxBVta5Gzr0/4fwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjEzZTUzNjUtNWJlMy00MmY0LWEzZDEtN2Y3NGJiNDRk
ZjEzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
YWVhNjYzYjktOTcyYy00MDA2LTkyMjctMzI0OTNjODkxZDBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvnnyJiLo/NVpTdBEk09WO/M04hQ4wXRBy3W
/IKatKJTEUTiQRsz1pa3UapMispNMri0OAwe4ePRdJst4Odkye0TuzLYLjruY+QE
gvDNj3Rom9U4ALE9zzGzCJEBW+sprDQ54lIJXQ98HAWU8V5yqsdPiw8bUMGxKPDh
nkP4Z0LydP9kq/otnNd0OcqrVv3s1OAJueiyG/enzYJ5KRfIG7tM7n3DyIb7KzJt
rQIEcO2IE6DhUmLGiBaGK9BGXt8l/EHxDL7dlSa8sWzld0Iyeubu5zS/oHXcFT3T
FfDzCU1gJ8DKlWDdglk1Mht50bFufiJdHmfPN49fHrnSiHVogwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKhxmEiPFMC8ErUV9SjS7xhw7CGKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8yMTNl
NTM2NS01YmUzLTQyZjQtYTNkMS03Zjc0YmI0NGRmMTMvZGU3Zjk1OGUtOWI1Yi0z
Y2VjLWE1OTctMDQ3ZTI5OGNmMzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMjEzZTUzNjUtNWJlMy00MmY0LWEz
ZDEtN2Y3NGJiNDRkZjEzLzIxM2U1MzY1LTViZTMtNDJmNC1hM2QxLTdmNzRiYjQ0
ZGYxMy5jcmwwHwYDVR0jBBgwFoAUesHGDQ+FIB+5tE9s1pRMS9GI/PwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8yMTNlNTM2NS01YmUzLTQyZjQtYTNkMS03Zjc0
YmI0NGRmMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EaIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFW/XjWOxxAiPLFDFBvNIV2Xd1bvTRLv4dS8RI+FrMMIU8rE0vMUmuUT
iGG1aswamuQ6XSzF+hx0ErAFqDVk7LU7GPtNotjJq+x2t5OJXR55P8Blj5vHEYcS
FIdcfYDka+j5uLwqTHCHtQsC4VWD9ujHxtXmLa9Gi7t3tkVYzw3KQ6KKyIPdogYT
UPS5QnqWwoEzp8KSzPNn70hkskqz3AH7fJuisFYpYJbnzi2ropPsaUFaEO79JlnI
IX9s+JAcnu7/Rl9i8aKL3YjspPT6cOQmwKcl4CaWdpgVYaw0HINP9CPQXfcx5Pw4
4vRnmNhRvYgGCH8y5plqtDRANREbfbg=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:26:59 2025 by rpki-client