Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263/214d7ac6-a304-3f95-bf2e-60cfb42b6bd4.roa
File: 214d7ac6-a304-3f95-bf2e-60cfb42b6bd4.roa (raw, json)
Hash identifier: 67iIeju1ZDpLQeOjgLT2dVZuTi37OpMnp6ndOyVukfg=
Subject key identifier: 6C:59:42:B5:86:6B:16:47:5B:31:25:FC:F9:C8:41:1A:C6:2C:96:27
Certificate issuer: /CN=dfb59d70-0c69-4135-b2f0-61bd4d1a8263
Certificate serial: 010D0C9F4328584909E6A6BD70A5962008A09680
Authority key identifier: 3E:F6:00:B6:1A:9D:FA:34:50:F0:1A:87:6B:57:D8:E0:CE:C5:87:27
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263/214d7ac6-a304-3f95-bf2e-60cfb42b6bd4.roa
Signing time: Sat 01 Mar 2025 02:00:39 +0000
ROA not before: Sat 01 Mar 2025 02:00:39 +0000
ROA not after: Fri 30 May 2025 01:00:39 +0000
asID: 11110
IP address blocks: 204.13.52.0/22 maxlen: 24
2604:3500::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:09:e6:a6:bd:70:a5:96:20:08:a0:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb59d70-0c69-4135-b2f0-61bd4d1a8263
Validity
Not Before: Mar 1 02:00:39 2025 GMT
Not After : May 30 01:00:39 2025 GMT
Subject: CN=b8111432-b331-4aa4-9b5d-ad8013bac360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c8:f1:08:af:eb:fc:67:70:3a:03:b0:99:16:
af:0a:2d:ea:4f:0d:a0:5c:07:e0:25:e0:b3:1f:64:
85:c7:97:44:f5:bf:c5:82:ad:a3:3d:b4:7c:64:58:
97:e3:46:79:01:c7:1d:0e:78:54:71:53:b5:35:53:
f4:a4:df:89:e1:4c:df:2a:5d:5c:17:65:5f:a5:01:
ac:26:db:90:4e:10:17:bf:1d:45:cb:77:f1:43:e4:
04:d6:10:63:2e:51:5d:6e:b7:2e:73:ac:28:ac:86:
92:1b:c0:38:68:7b:1a:bf:e0:e1:50:aa:0d:2f:61:
ea:8e:21:f3:59:79:29:22:db:d2:93:8d:84:72:eb:
38:e1:93:b4:20:22:e5:b8:03:64:18:c8:95:5b:14:
53:62:dc:2f:70:4d:89:9b:38:a9:98:15:8d:94:f1:
83:9d:fc:57:a0:cc:96:ef:71:2b:f2:c4:1e:74:20:
4d:2f:8d:76:42:c3:f8:fd:54:33:d1:49:0a:ff:01:
99:89:f1:49:f3:c2:1e:bc:ea:5f:7d:02:93:bc:0f:
34:30:2c:e7:9d:4a:bf:04:7b:cc:c3:4a:3b:bf:ef:
44:29:d3:03:65:13:81:19:9d:70:71:32:ef:3f:72:
ac:ee:9d:95:65:48:30:64:11:9c:b0:22:97:b0:20:
b1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:59:42:B5:86:6B:16:47:5B:31:25:FC:F9:C8:41:1A:C6:2C:96:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263/214d7ac6-a304-3f95-bf2e-60cfb42b6bd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263/dfb59d70-0c69-4135-b2f0-61bd4d1a8263.crl
X509v3 Authority Key Identifier:
keyid:3E:F6:00:B6:1A:9D:FA:34:50:F0:1A:87:6B:57:D8:E0:CE:C5:87:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfb59d70-0c69-4135-b2f0-61bd4d1a8263.cer
sbgp-ipAddrBlock: critical
IPv4:
204.13.52.0/22
IPv6:
2604:3500::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:18:b3:fe:77:44:71:82:cd:64:73:7d:d0:b4:75:c5:98:15:
32:b1:eb:e3:52:a5:31:74:88:b0:47:1f:58:22:3d:31:a0:e2:
61:39:b2:21:ca:f4:da:32:57:06:db:48:8c:43:8d:52:67:b9:
31:7e:a6:fe:6c:ef:90:5f:8c:59:4d:85:7a:78:b7:57:f6:1e:
42:05:62:c0:af:8f:0c:88:a5:86:04:6c:a2:16:f6:ec:91:ba:
bb:f9:7f:68:b0:b4:4a:37:e3:0f:2d:6a:34:85:01:91:ac:92:
bc:b8:5b:5d:5e:eb:44:f4:e9:ab:d8:d8:00:7b:94:b4:09:c3:
bf:ba:73:0e:21:e0:08:5f:7f:10:59:61:70:28:86:fb:f9:1c:
52:10:42:b3:91:41:e6:63:8f:85:55:8e:05:ae:cc:2d:34:76:
d3:48:72:01:d9:52:07:eb:72:db:30:8e:07:77:37:c2:f9:56:
e4:ad:f9:7f:29:b9:3a:0a:c6:75:70:81:48:78:58:47:c9:74:
e8:69:2c:ac:2a:f8:81:59:3c:94:5e:67:44:66:ea:f6:fc:fe:
3d:ac:8e:0f:45:7e:47:61:e6:31:23:ac:b6:24:72:40:43:18:
ff:fa:6e:3d:9a:c3:12:42:8a:3a:5d:58:2a:a1:6a:2d:fc:26:
39:d2:82:c8
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEkJ5qa9cKWWIAigloAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGZiNTlkNzAtMGM2OS00MTM1LWIyZjAtNjFiZDRkMWE4
MjYzMB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk
YjgxMTE0MzItYjMzMS00YWE0LTliNWQtYWQ4MDEzYmFjMzYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8jxCK/r/GdwOgOwmRavCi3qTw2gXAfgJeCz
H2SFx5dE9b/Fgq2jPbR8ZFiX40Z5AccdDnhUcVO1NVP0pN+J4UzfKl1cF2VfpQGs
JtuQThAXvx1Fy3fxQ+QE1hBjLlFdbrcuc6worIaSG8A4aHsav+DhUKoNL2HqjiHz
WXkpItvSk42Ecus44ZO0ICLluANkGMiVWxRTYtwvcE2JmzipmBWNlPGDnfxXoMyW
73Er8sQedCBNL412QsP4/VQz0UkK/wGZifFJ88IevOpffQKTvA80MCznnUq/BHvM
w0o7v+9EKdMDZROBGZ1wcTLvP3Ks7p2VZUgwZBGcsCKXsCCx8wIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFGxZQrWGaxZHWzEl/PnIQRrGLJYnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kZmI1
OWQ3MC0wYzY5LTQxMzUtYjJmMC02MWJkNGQxYTgyNjMvMjE0ZDdhYzYtYTMwNC0z
Zjk1LWJmMmUtNjBjZmI0MmI2YmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZGZiNTlkNzAtMGM2OS00MTM1LWIy
ZjAtNjFiZDRkMWE4MjYzL2RmYjU5ZDcwLTBjNjktNDEzNS1iMmYwLTYxYmQ0ZDFh
ODI2My5jcmwwHwYDVR0jBBgwFoAUPvYAthqd+jRQ8BqHa1fY4M7FhycwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kZmI1OWQ3MC0wYzY5LTQxMzUtYjJmMC02MWJk
NGQxYTgyNjMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCzA00MA0E
AgACMAcDBQAmBDUAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAJIYs/53RHGCzWRzfdC0dcWYFTKx6+NSpTF0
iLBHH1giPTGg4mE5siHK9NoyVwbbSIxDjVJnuTF+pv5s75BfjFlNhXp4t1f2HkIF
YsCvjwyIpYYEbKIW9uyRurv5f2iwtEo34w8tajSFAZGskry4W11e60T06avY2AB7
lLQJw7+6cw4h4AhffxBZYXAohvv5HFIQQrORQeZjj4VVjgWuzC00dtNIcgHZUgfr
ctswjgd3N8L5VuSt+X8puToKxnVwgUh4WEfJdOhpLKwq+IFZPJReZ0Rm6vb8/j2s
jg9Ffkdh5jEjrLYkckBDGP/6bj2awxJCijpdWCqhai38JjnSgsg=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:39:03 2025 by rpki-client