Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/f6f4087f-bee1-3214-8fd7-dc6a6f0e88f9.roa
File: f6f4087f-bee1-3214-8fd7-dc6a6f0e88f9.roa (raw, json)
Hash identifier: R9juO1A/nfpYTh7F4JP16p3vvRvBylESfdHIfQXSaN4=
Subject key identifier: 70:83:C9:63:E0:93:89:BA:DB:F2:3F:19:62:BF:F2:F1:2E:09:52:3F
Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial: 010D0C9F432858494469477F3BFCCD78BBA6B700
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/f6f4087f-bee1-3214-8fd7-dc6a6f0e88f9.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 4922
IP address blocks: 204.111.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:47:7f:3b:fc:cd:78:bb:a6:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=6c31eb73-73b0-449d-bdae-974c8c04d2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5e:46:ce:31:d5:79:a3:53:ce:7e:be:f6:45:
cd:d3:0b:13:a1:ff:22:1e:7c:b8:03:33:e5:6f:3b:
fd:4a:f5:34:fa:f4:68:ea:3a:4b:68:9e:8e:9f:f5:
43:e3:a5:ff:9c:d1:b4:a5:25:49:c0:36:4d:b8:24:
b5:18:ee:18:df:00:1f:f7:29:af:69:ad:a7:dc:c6:
e7:0e:10:63:f2:b9:c5:e9:f0:02:a5:93:52:42:ec:
52:c4:61:8c:7f:63:8b:bf:c3:b6:0a:84:4d:c0:d0:
08:bf:00:8e:52:e5:27:63:11:6a:0a:fd:40:0a:e0:
99:98:86:12:45:34:97:78:9b:d8:a6:27:06:f7:ac:
de:0e:4b:7e:d9:2c:09:12:43:79:6e:e6:b5:6f:f1:
62:38:a2:28:39:20:4c:eb:3d:3a:da:18:5f:b9:5b:
67:96:73:5b:0b:da:ef:d7:d3:cd:9b:8a:b1:26:7d:
02:42:59:0f:43:09:14:0c:24:5a:98:f9:07:06:68:
6a:ba:da:5f:5d:e6:de:f9:88:db:63:42:9f:31:0e:
cb:7d:45:2e:f4:ad:a6:35:da:c9:06:8b:f8:f6:f0:
05:fb:95:42:c8:19:f4:62:97:8b:e8:79:9c:34:37:
f6:d1:c0:a2:c2:69:4b:3c:f6:d1:eb:55:9a:05:65:
ef:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:83:C9:63:E0:93:89:BA:DB:F2:3F:19:62:BF:F2:F1:2E:09:52:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/f6f4087f-bee1-3214-8fd7-dc6a6f0e88f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
X509v3 Authority Key Identifier:
keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
sbgp-ipAddrBlock: critical
IPv4:
204.111.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:3b:b8:c9:59:67:d4:fd:a1:6c:10:6b:ad:53:e1:89:b0:ba:
3b:77:95:d5:60:05:99:30:61:35:eb:e4:11:27:f4:55:0c:2e:
01:10:0f:b5:2e:70:cd:1a:05:ce:22:d2:ad:e0:f6:c1:ab:db:
b4:4c:32:15:57:6b:bb:b8:c5:ab:5a:11:3e:b2:f2:c1:c7:97:
d2:9b:b9:2e:e6:88:6a:45:15:e2:1c:6a:97:cf:13:70:5a:4a:
d1:36:fa:c6:09:79:fe:ba:fd:91:a4:47:ab:61:11:09:55:85:
59:27:4d:fc:5d:57:79:34:3f:d9:8f:d3:04:a0:bd:58:47:03:
12:0c:a2:f0:26:d4:d0:a6:8a:fb:86:a9:3b:f3:3e:a6:45:0c:
b6:ed:c0:34:7f:27:93:42:3f:e6:a2:07:9d:1a:df:ad:9e:24:
97:df:8a:cb:4e:7e:d8:66:fa:fc:4f:2b:f0:94:ac:3b:51:47:
67:89:79:67:85:a8:7d:40:9a:ae:d7:d8:a3:cb:4b:8b:d8:f1:
ff:9c:f7:a6:45:43:c8:88:8a:a8:8e:b0:af:e9:e9:88:20:64:
35:23:ef:ec:70:0e:12:b7:54:b5:4d:8e:6d:87:77:76:86:ba:
e8:d5:ed:2b:b9:58:d6:44:05:78:3e:1f:f0:69:2e:55:cb:57:
74:f2:5e:46
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWElEaUd/O/zNeLumtwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz
MTA5MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk
NmMzMWViNzMtNzNiMC00NDlkLWJkYWUtOTc0YzhjMDRkMmJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0F5GzjHVeaNTzn6+9kXN0wsTof8iHny4AzPl
bzv9SvU0+vRo6jpLaJ6On/VD46X/nNG0pSVJwDZNuCS1GO4Y3wAf9ymvaa2n3Mbn
DhBj8rnF6fACpZNSQuxSxGGMf2OLv8O2CoRNwNAIvwCOUuUnYxFqCv1ACuCZmIYS
RTSXeJvYpicG96zeDkt+2SwJEkN5bua1b/FiOKIoOSBM6z062hhfuVtnlnNbC9rv
19PNm4qxJn0CQlkPQwkUDCRamPkHBmhqutpfXebe+YjbY0KfMQ7LfUUu9K2mNdrJ
Bov49vAF+5VCyBn0YpeL6HmcNDf20cCiwmlLPPbR61WaBWXvpQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHCDyWPgk4m62/I/GWK/8vEuCVI/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm
MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvZjZmNDA4N2YtYmVlMS0z
MjE0LThmZDctZGM2YTZmMGU4OGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm
NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh
MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3
MTVlYTMxMDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzG8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAHju4yVln1P2hbBBrrVPhibC6O3eV1WAFmTBhNevkESf0VQwuARAPtS5w
zRoFziLSreD2wavbtEwyFVdru7jFq1oRPrLywceX0pu5LuaIakUV4hxql88TcFpK
0Tb6xgl5/rr9kaRHq2ERCVWFWSdN/F1XeTQ/2Y/TBKC9WEcDEgyi8CbU0KaK+4ap
O/M+pkUMtu3ANH8nk0I/5qIHnRrfrZ4kl9+Ky05+2Gb6/E8r8JSsO1FHZ4l5Z4Wo
fUCartfYo8tLi9jx/5z3pkVDyIiKqI6wr+npiCBkNSPv7HAOErdUtU2ObYd3doa6
6NXtK7lY1kQFeD4f8GkuVctXdPJeRg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:21:50 2025 by rpki-client