Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5ff4cac2-1c06-3652-a574-da5c2f31b183.roa
File: 5ff4cac2-1c06-3652-a574-da5c2f31b183.roa (raw, json)
Hash identifier: HcifmEqBVjNzBuZRipZa4UqsEimt8jV29Ph6Slz9580=
Subject key identifier: CD:BF:13:73:F4:2E:47:FD:46:94:4C:4C:6C:D2:4D:D1:0E:FE:EB:7B
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F43285848C582137C430FAB94CE39DB80
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5ff4cac2-1c06-3652-a574-da5c2f31b183.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 36492
IP address blocks: 136.22.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:13:7c:43:0f:ab:94:ce:39:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=13822d6d-dbf1-40c5-9938-6e838fd7967f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c1:67:c2:71:d9:6d:20:c3:68:01:d4:4d:0a:
a3:57:76:ff:a4:52:ae:ce:db:4b:8c:eb:05:c6:86:
e1:eb:41:f7:4b:c8:72:20:79:ce:42:c8:6e:b1:86:
42:52:3b:45:a2:e6:95:e4:ba:08:b4:b9:11:ab:c7:
8f:4d:6b:0d:ce:cb:a3:3a:47:31:e6:0d:b8:08:e9:
60:1e:d7:a9:3b:68:af:c4:ad:f2:ae:5f:d1:6f:39:
8a:65:67:72:e8:6a:7d:b5:fe:d8:4f:65:3f:a1:6e:
2f:9e:47:1f:1f:96:9d:95:81:04:9b:dc:04:7e:2e:
ed:fe:ab:a0:81:8b:bd:4e:cd:5a:2e:e2:f5:87:7c:
f6:5e:4b:a9:3f:08:91:97:6d:97:85:fd:3c:ba:af:
97:24:92:4d:7c:6b:70:02:68:0f:92:ca:82:41:6c:
26:28:aa:40:65:53:aa:47:29:cd:45:87:34:0d:0d:
b4:2c:4b:12:c4:9c:59:ff:ef:73:79:d2:e6:16:7a:
f8:45:c4:84:4d:80:12:2d:9c:fe:c4:62:7b:00:80:
a1:b5:e4:6c:f2:51:0d:b3:ee:5b:fb:dd:43:25:74:
34:72:09:51:27:fe:3b:b1:2f:ad:18:7f:19:c9:c7:
6e:bc:14:37:f6:d3:61:21:75:7a:b0:64:f4:d4:a6:
b8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BF:13:73:F4:2E:47:FD:46:94:4C:4C:6C:D2:4D:D1:0E:FE:EB:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5ff4cac2-1c06-3652-a574-da5c2f31b183.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:a4:a6:02:63:b1:70:ac:56:5a:bf:c4:cf:0c:08:e0:7f:a8:
8d:cf:80:24:d6:ff:86:78:b4:ac:cf:39:d4:60:85:bf:76:0a:
4c:27:54:da:91:9d:ec:bf:6d:9a:b4:3a:a5:5b:81:c0:40:68:
5b:c1:c5:d8:d6:ce:81:30:37:72:38:0a:45:d9:fd:e3:01:b9:
4a:7d:5b:e1:ce:7f:81:66:35:f8:bd:cc:b5:dd:eb:c1:60:e6:
3d:93:9f:ee:ac:92:d6:86:76:f6:d4:d8:c3:d2:56:6a:3b:a2:
31:fb:24:92:f1:4c:e6:70:5c:cf:29:e0:a8:32:62:37:5e:8a:
75:37:14:0a:27:39:eb:05:31:44:eb:7f:54:c0:6f:e9:72:99:
27:37:7f:ae:35:c8:e2:1c:70:ed:ea:45:33:4f:f9:c2:8b:d4:
02:b4:c1:7b:a6:59:6a:23:2b:4e:4f:f3:6a:e4:40:83:a6:70:
fd:fd:27:35:35:c4:b8:d8:53:7c:c3:df:dd:d8:43:62:7f:e7:
6a:34:f2:de:01:5e:50:4b:66:e3:d8:07:bc:24:90:4d:f9:a8:
f6:63:0d:9f:50:03:c9:64:ce:b7:a2:e6:18:6a:b7:e1:b6:47:
c8:46:9f:e6:69:84:0e:b5:9a:c6:96:83:8f:1d:28:c5:16:05:
59:b7:87:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFghN8Qw+rlM4524AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
MTM4MjJkNmQtZGJmMS00MGM1LTk5MzgtNmU4MzhmZDc5NjdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8FnwnHZbSDDaAHUTQqjV3b/pFKuzttLjOsF
xobh60H3S8hyIHnOQshusYZCUjtFouaV5LoItLkRq8ePTWsNzsujOkcx5g24COlg
HtepO2ivxK3yrl/RbzmKZWdy6Gp9tf7YT2U/oW4vnkcfH5adlYEEm9wEfi7t/qug
gYu9Ts1aLuL1h3z2XkupPwiRl22Xhf08uq+XJJJNfGtwAmgPksqCQWwmKKpAZVOq
RynNRYc0DQ20LEsSxJxZ/+9zedLmFnr4RcSETYASLZz+xGJ7AIChteRs8lENs+5b
+91DJXQ0cglRJ/47sS+tGH8ZycduvBQ39tNhIXV6sGT01Ka4wQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM2/E3P0Lkf9RpRMTGzSTdEO/ut7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNWZmNGNhYzItMWMwNi0z
NjUyLWE1NzQtZGE1YzJmMzFiMTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBboMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACakpgJjsXCsVlq/xM8MCOB/qI3PgCTW/4Z4tKzPOdRghb92CkwnVNqR
ney/bZq0OqVbgcBAaFvBxdjWzoEwN3I4CkXZ/eMBuUp9W+HOf4FmNfi9zLXd68Fg
5j2Tn+6sktaGdvbU2MPSVmo7ojH7JJLxTOZwXM8p4KgyYjdeinU3FAonOesFMUTr
f1TAb+lymSc3f641yOIccO3qRTNP+cKL1AK0wXumWWojK05P82rkQIOmcP39JzU1
xLjYU3zD393YQ2J/52o08t4BXlBLZuPYB7wkkE35qPZjDZ9QA8lkzrei5hhqt+G2
R8hGn+ZphA61msaWg48dKMUWBVm3h+M=
-----END CERTIFICATE-----
Generated at Wed Apr 9 22:15:05 2025 by rpki-client