Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/d7bceaef-03cf-3290-b626-eeb3b9301f3c.roa
File: d7bceaef-03cf-3290-b626-eeb3b9301f3c.roa (raw, json)
Hash identifier: LHCYMm0UrvDqltTBXmYbAlNZa7Rsxv8eBk34u6HxI1U=
Subject key identifier: 78:B8:EA:B6:10:11:14:3B:41:50:D7:0A:C1:2B:58:C5:CF:60:0B:5A
Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial: 010D0C9F4328584944694994A200CECDC6D01FE0
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/d7bceaef-03cf-3290-b626-eeb3b9301f3c.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 4922
IP address blocks: 216.30.144.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:49:94:a2:00:ce:cd:c6:d0:1f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=63d8cf5c-44a1-4d33-ba85-f5a3e25e4941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:11:f4:f8:cb:7d:e2:bc:ec:9f:76:77:c6:a2:
41:e6:b4:c3:fc:d1:37:92:00:d3:37:d8:de:74:3c:
6f:4d:c1:86:be:55:fd:b3:3c:f8:81:23:c8:47:69:
93:23:46:16:7b:cb:34:ad:89:e8:a5:c6:f9:88:6a:
25:34:b1:3c:50:73:e6:39:db:30:3f:ca:15:d4:c8:
ae:29:87:b8:2c:29:6e:4f:02:41:37:f0:24:84:0f:
d8:6a:34:2a:81:2a:9d:8e:9e:69:20:77:c6:a9:6e:
65:17:7e:9c:a2:4f:1b:a6:77:db:fc:e1:88:a5:5c:
d2:6d:2b:a7:90:67:07:d0:1b:a5:ae:74:4e:25:04:
d0:73:f6:9c:da:51:9c:53:54:9f:a8:f7:66:25:cf:
18:79:67:60:54:06:76:52:09:eb:53:9c:77:a3:ad:
36:04:6c:90:6e:d9:cb:27:33:f2:06:b5:49:e0:b2:
a2:9a:1e:f6:26:70:02:0b:f5:97:3e:e8:63:cd:56:
e2:54:27:eb:08:e4:a2:dc:7a:23:52:de:93:ed:5e:
1e:1d:78:ad:06:0f:54:fd:43:b1:5f:ea:9b:af:4d:
96:fa:ff:ae:9d:e6:d5:4b:17:9f:8e:55:6e:b4:4d:
20:df:2b:b3:50:d8:e3:5d:8a:6d:8c:35:5f:56:5a:
4d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B8:EA:B6:10:11:14:3B:41:50:D7:0A:C1:2B:58:C5:CF:60:0B:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/d7bceaef-03cf-3290-b626-eeb3b9301f3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
X509v3 Authority Key Identifier:
keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
sbgp-ipAddrBlock: critical
IPv4:
216.30.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:7a:d9:aa:b8:bd:a6:45:4a:1b:e3:44:fe:b7:05:21:ef:93:
cc:34:e3:08:3d:bb:10:0e:ff:f4:e3:0a:8b:de:aa:c4:41:f4:
83:3a:41:96:ce:ea:29:bc:cf:3e:5b:e9:c7:f0:b2:42:16:e1:
5b:e3:be:6b:58:38:bc:fa:97:16:bd:b5:76:53:83:e4:81:bb:
ec:43:e9:87:f0:8e:90:34:ff:96:30:25:84:3e:a6:25:b7:51:
ac:38:24:a5:24:3b:f3:24:8d:8e:ff:13:2f:81:d4:7f:b6:b7:
07:c3:84:d5:71:94:73:76:98:38:4b:89:e4:a5:58:b2:6a:a0:
29:f3:f7:12:d8:2e:ad:02:95:50:c9:ba:28:23:db:d5:45:66:
b7:59:7b:60:27:8d:09:68:d5:db:93:80:9c:6d:ea:33:a9:f7:
95:22:0d:3e:a2:3d:32:26:fe:f9:3d:53:c7:23:05:9a:69:c7:
22:65:78:12:a9:fc:d3:d5:e2:24:43:9d:6d:a8:c1:ac:56:88:
20:a4:55:00:66:d9:e9:29:9b:1b:4d:ed:66:3e:e1:45:ca:37:
fa:1f:b0:55:32:62:3d:2b:08:2b:66:b3:7b:c9:39:77:52:b1:
7e:12:51:0d:3d:05:9a:93:e6:bd:da:2d:8b:a6:c9:db:f4:a9:
b7:26:5e:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaUmUogDOzcbQH+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz
MTA5MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk
NjNkOGNmNWMtNDRhMS00ZDMzLWJhODUtZjVhM2UyNWU0OTQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRH0+Mt94rzsn3Z3xqJB5rTD/NE3kgDTN9je
dDxvTcGGvlX9szz4gSPIR2mTI0YWe8s0rYnopcb5iGolNLE8UHPmOdswP8oV1Miu
KYe4LCluTwJBN/AkhA/YajQqgSqdjp5pIHfGqW5lF36cok8bpnfb/OGIpVzSbSun
kGcH0BulrnROJQTQc/ac2lGcU1SfqPdmJc8YeWdgVAZ2UgnrU5x3o602BGyQbtnL
JzPyBrVJ4LKimh72JnACC/WXPuhjzVbiVCfrCOSi3HojUt6T7V4eHXitBg9U/UOx
X+qbr02W+v+unebVSxefjlVutE0g3yuzUNjjXYptjDVfVlpNaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHi46rYQERQ7QVDXCsErWMXPYAtaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm
MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvZDdiY2VhZWYtMDNjZi0z
MjkwLWI2MjYtZWViM2I5MzAxZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm
NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh
MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3
MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2B6QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACR62aq4vaZFShvjRP63BSHvk8w04wg9uxAO//TjCoveqsRB9IM6QZbO
6im8zz5b6cfwskIW4VvjvmtYOLz6lxa9tXZTg+SBu+xD6YfwjpA0/5YwJYQ+piW3
Uaw4JKUkO/MkjY7/Ey+B1H+2twfDhNVxlHN2mDhLieSlWLJqoCnz9xLYLq0ClVDJ
uigj29VFZrdZe2AnjQlo1duTgJxt6jOp95UiDT6iPTIm/vk9U8cjBZppxyJleBKp
/NPV4iRDnW2owaxWiCCkVQBm2ekpmxtN7WY+4UXKN/ofsFUyYj0rCCtms3vJOXdS
sX4SUQ09BZqT5r3aLYumydv0qbcmXr8=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:05 2025 by rpki-client