Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/d44197cb-f8ac-3fa4-b8ba-9009f9256e0d.roa
File: d44197cb-f8ac-3fa4-b8ba-9009f9256e0d.roa (raw, json)
Hash identifier: JDzuSe+vVYebC5IPc2fB0r/KbVPm9wINV3RegJQWFCg=
Subject key identifier: 3B:64:31:36:12:8E:7E:1A:C4:2C:AA:40:73:E4:F4:4A:08:36:A6:E3
Certificate issuer: /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial: 010D0C9F4328584948E341FDD05C43EF60501B00
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/d44197cb-f8ac-3fa4-b8ba-9009f9256e0d.roa
Signing time: Sun 23 Mar 2025 15:29:55 +0000
ROA not before: Sun 23 Mar 2025 15:29:55 +0000
ROA not after: Sat 21 Jun 2025 15:29:55 +0000
asID: 26842
IP address blocks: 12.171.137.0/24 maxlen: 24
12.189.192.0/24 maxlen: 24
12.189.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:48:e3:41:fd:d0:5c:43:ef:60:50:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Validity
Not Before: Mar 23 15:29:55 2025 GMT
Not After : Jun 21 15:29:55 2025 GMT
Subject: CN=8afd465b-c379-4520-a586-ba5fc9219893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d6:f2:d6:6b:68:01:b5:52:d1:a0:71:3e:73:
66:e1:77:46:5d:5b:fe:d6:12:4a:1f:65:62:44:ec:
bc:49:f8:97:ff:2e:75:bc:2d:07:51:7a:24:44:25:
98:f9:3b:c0:a2:a9:43:1c:65:23:96:d8:e2:8e:38:
a6:fe:ed:b8:21:56:49:f1:86:60:dd:d8:a7:e4:21:
62:83:63:b2:77:92:c0:45:1b:07:40:e0:53:2a:d1:
9f:70:73:a2:43:f4:0f:78:30:19:82:ee:0a:41:77:
72:05:3b:c6:f9:a3:d0:69:29:71:4e:29:c4:51:ef:
d9:87:0e:eb:8f:4b:17:06:e3:b9:16:0e:48:bd:a9:
84:b6:f8:3f:eb:e6:c8:26:fb:26:2a:02:cc:58:1d:
b7:46:d7:dc:83:e3:cc:b8:7c:1c:87:28:6f:e4:6c:
05:8e:ee:e1:77:a0:72:52:be:3e:0b:c2:8d:96:4c:
ab:39:c1:27:3d:5a:48:1d:12:b0:d6:81:fa:5c:1e:
9c:19:a6:77:cf:21:50:e3:1e:ce:b6:07:c0:a7:6e:
74:c3:f0:d5:f4:d6:90:92:c9:42:57:7e:95:fd:17:
47:6a:a9:ab:0b:a0:6c:ed:92:64:8b:24:8c:98:8c:
af:00:e3:15:3d:13:fc:df:2b:77:a4:c0:3f:66:7a:
04:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:64:31:36:12:8E:7E:1A:C4:2C:AA:40:73:E4:F4:4A:08:36:A6:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/d44197cb-f8ac-3fa4-b8ba-9009f9256e0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
X509v3 Authority Key Identifier:
keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
sbgp-ipAddrBlock: critical
IPv4:
12.171.137.0/24
12.189.192.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:00:47:22:f4:42:3c:f0:c5:58:3f:3e:62:1d:db:41:92:9e:
1b:87:3a:63:65:c2:4f:27:b7:95:12:13:8a:48:6d:01:69:9e:
77:99:10:d0:76:21:36:21:e2:ff:7b:55:bb:ff:79:9d:c3:5f:
ef:86:76:e6:40:30:f0:cc:be:8e:6f:93:18:17:5c:24:09:28:
b2:06:45:78:5d:92:9f:aa:e1:16:60:c8:41:15:39:6c:43:0e:
73:79:83:8a:5d:c3:3f:99:13:b9:8a:7a:71:1a:64:16:2d:f4:
48:ee:7b:ef:ca:a3:a3:ea:c1:2e:fa:4a:b9:a0:bc:1c:e1:11:
d7:9c:7b:da:37:8e:41:36:d1:76:26:60:eb:1a:08:04:d5:ea:
0e:66:9c:5d:be:d9:af:b6:54:26:7b:66:de:d2:67:04:5f:f4:
74:a8:71:9f:42:eb:7e:e5:23:a4:9a:e7:87:5e:2c:52:4e:83:
4d:ed:e1:1f:cd:fa:25:14:88:4f:23:4e:fe:33:42:0d:54:8f:
53:cc:72:b5:ab:b7:ae:cc:4f:eb:d5:6f:cd:3c:04:35:82:b1:
9f:54:ce:11:f3:55:67:26:b1:b6:ce:06:a2:9c:1d:3c:00:e7:
83:24:13:31:4d:95:8c:f2:6b:b0:e6:d1:08:9e:41:13:7e:32:
1e:00:bf:4f
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWElI40H90FxD72BQGwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzE0MTg2ZGYtODdiYS00ZGQ1LWFkYmYtMWM2YzJiYmUw
NGE4MB4XDTI1MDMyMzE1Mjk1NVoXDTI1MDYyMTE1Mjk1NVowLzEtMCsGA1UEAxMk
OGFmZDQ2NWItYzM3OS00NTIwLWE1ODYtYmE1ZmM5MjE5ODkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdby1mtoAbVS0aBxPnNm4XdGXVv+1hJKH2Vi
ROy8SfiX/y51vC0HUXokRCWY+TvAoqlDHGUjltjijjim/u24IVZJ8YZg3din5CFi
g2Oyd5LARRsHQOBTKtGfcHOiQ/QPeDAZgu4KQXdyBTvG+aPQaSlxTinEUe/Zhw7r
j0sXBuO5Fg5IvamEtvg/6+bIJvsmKgLMWB23Rtfcg+PMuHwchyhv5GwFju7hd6By
Ur4+C8KNlkyrOcEnPVpIHRKw1oH6XB6cGaZ3zyFQ4x7OtgfAp250w/DV9NaQkslC
V36V/RdHaqmrC6Bs7ZJkiySMmIyvAOMVPRP83yt3pMA/ZnoEvQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFDtkMTYSjn4axCyqQHPk9EoINqbjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMTQx
ODZkZi04N2JhLTRkZDUtYWRiZi0xYzZjMmJiZTA0YTgvZDQ0MTk3Y2ItZjhhYy0z
ZmE0LWI4YmEtOTAwOWY5MjU2ZTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzE0MTg2ZGYtODdiYS00ZGQ1LWFk
YmYtMWM2YzJiYmUwNGE4LzMxNDE4NmRmLTg3YmEtNGRkNS1hZGJmLTFjNmMyYmJl
MDRhOC5jcmwwHwYDVR0jBBgwFoAUUhXIm1E3DpTxq8Kvfcj2u+Hy5W8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMTQxODZkZi04N2JhLTRkZDUtYWRiZi0xYzZj
MmJiZTA0YTguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQADKuJAwQB
DL3AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBADUARyL0QjzwxVg/PmId20GSnhuHOmNlwk8nt5USE4pIbQFp
nneZENB2ITYh4v97Vbv/eZ3DX++GduZAMPDMvo5vkxgXXCQJKLIGRXhdkp+q4RZg
yEEVOWxDDnN5g4pdwz+ZE7mKenEaZBYt9Ejue+/Ko6PqwS76SrmgvBzhEdece9o3
jkE20XYmYOsaCATV6g5mnF2+2a+2VCZ7Zt7SZwRf9HSocZ9C637lI6Sa54deLFJO
g03t4R/N+iUUiE8jTv4zQg1Uj1PMcrWrt67MT+vVb808BDWCsZ9UzhHzVWcmsbbO
BqKcHTwA54MkEzFNlYzya7Dm0QieQRN+Mh4Av08=
-----END CERTIFICATE-----
Generated at Wed Apr 9 17:14:00 2025 by rpki-client