Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/81b1dcc6-24e4-3a6f-80f3-6e9bcd7fab62.roa
File: 81b1dcc6-24e4-3a6f-80f3-6e9bcd7fab62.roa (raw, json)
Hash identifier: 3Kzhr/pIFseaY9tIpDk61/H8wKkYGdK6PzuZBJLAzBI=
Subject key identifier: 8B:51:8E:C3:C1:23:7A:0F:21:5F:06:EA:17:0D:E2:0E:B2:C9:15:C7
Certificate issuer: /CN=f4ef9ae2-f027-4028-a705-db1e3463a382
Certificate serial: 010D0C9F432858492184045906FA767747988880
Authority key identifier: 78:43:63:5F:35:F7:A5:B6:6E:39:7B:D3:62:1B:21:CC:A2:E5:92:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/81b1dcc6-24e4-3a6f-80f3-6e9bcd7fab62.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 40339
IP address blocks: 206.71.154.0/23 maxlen: 24
208.78.208.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:04:59:06:fa:76:77:47:98:88:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ef9ae2-f027-4028-a705-db1e3463a382
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=b9c1e545-a7ac-4589-a764-db28d6ddbf0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e2:ce:09:fb:1b:9d:eb:33:02:d6:11:e0:ae:
93:d7:59:37:8d:5a:82:a9:ce:c9:04:5e:aa:cd:26:
05:e2:a2:b2:99:32:59:7f:3f:ac:ef:33:58:4c:76:
ff:fd:8e:99:ed:b5:68:11:86:3a:ab:90:62:fe:bb:
54:19:ec:e9:6b:9c:e8:84:e0:82:81:5b:a0:bc:fe:
77:48:86:f6:e9:7e:77:b9:b2:f3:f6:da:f1:1c:76:
26:7e:00:04:63:ec:81:9d:a4:9b:3f:be:89:41:79:
2c:10:c5:e4:d2:65:da:b7:4c:13:96:ec:06:67:2b:
b8:63:01:83:28:f4:f7:f7:5c:47:8c:a5:b6:e0:ff:
98:65:a6:bf:b2:85:58:b4:2d:3e:d1:16:2b:b0:7a:
77:f1:13:60:e2:38:0a:63:b2:ec:4b:f4:e1:45:8a:
c7:ac:2a:ff:4d:d9:5c:f6:d9:e4:d7:45:e0:c5:46:
0c:22:1b:96:73:2f:51:ed:30:9b:8a:f1:79:fb:2a:
34:76:59:ad:54:f4:4e:a2:32:8f:c7:64:a0:f1:07:
9e:03:9e:bb:11:46:76:db:99:21:cb:f9:bb:69:98:
75:11:e3:be:d2:67:6b:65:3e:32:09:8e:4e:08:08:
9d:e9:09:00:68:fe:43:22:90:cb:e8:85:0f:32:02:
65:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:51:8E:C3:C1:23:7A:0F:21:5F:06:EA:17:0D:E2:0E:B2:C9:15:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/81b1dcc6-24e4-3a6f-80f3-6e9bcd7fab62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/f4ef9ae2-f027-4028-a705-db1e3463a382.crl
X509v3 Authority Key Identifier:
keyid:78:43:63:5F:35:F7:A5:B6:6E:39:7B:D3:62:1B:21:CC:A2:E5:92:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382.cer
sbgp-ipAddrBlock: critical
IPv4:
206.71.154.0/23
208.78.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:5e:2a:9b:8e:49:05:fb:66:1e:02:6c:a8:c4:c4:ca:f8:c7:
43:a5:49:ec:87:f1:bc:8b:28:7c:87:58:47:fd:01:9d:70:83:
0c:c0:77:ab:38:c8:c6:16:fc:bc:a4:5a:88:04:a3:ed:72:b7:
dd:5b:ac:94:12:b4:73:d4:f5:27:cf:8a:df:5a:c6:ca:24:83:
f9:40:63:13:4e:04:9b:db:67:13:a7:57:22:02:41:bf:1f:ee:
7c:1c:37:de:7e:98:9c:0b:40:27:f5:86:83:aa:fa:6a:f1:e5:
24:bd:78:a3:35:12:73:9c:f5:fd:61:89:55:9a:73:a2:39:ad:
f6:42:17:ac:2a:80:62:54:a1:13:5c:19:80:92:a1:d6:a0:fb:
28:88:47:d4:61:2e:af:a7:2d:68:51:23:32:fe:2c:4c:80:74:
58:e2:18:ce:61:fd:d3:75:dd:c2:f8:20:0f:a2:09:06:e5:93:
a1:ac:81:5e:e1:02:54:70:b5:bf:9b:d8:12:14:f8:4c:ce:45:
ef:aa:f1:01:99:e4:4a:4e:25:a8:13:a9:f1:8f:ff:0a:c6:d9:
77:b3:c4:ca:ff:63:6a:c7:d0:04:38:0c:94:c2:04:ad:b4:dd:
d2:d9:15:58:dd:17:d6:27:71:45:8a:42:7d:fc:f4:37:fe:7e:
e4:d3:b9:57
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEkhhARZBvp2d0eYiIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjRlZjlhZTItZjAyNy00MDI4LWE3MDUtZGIxZTM0NjNh
MzgyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
YjljMWU1NDUtYTdhYy00NTg5LWE3NjQtZGIyOGQ2ZGRiZjBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+LOCfsbneszAtYR4K6T11k3jVqCqc7JBF6q
zSYF4qKymTJZfz+s7zNYTHb//Y6Z7bVoEYY6q5Bi/rtUGezpa5zohOCCgVugvP53
SIb26X53ubLz9trxHHYmfgAEY+yBnaSbP76JQXksEMXk0mXat0wTluwGZyu4YwGD
KPT391xHjKW24P+YZaa/soVYtC0+0RYrsHp38RNg4jgKY7LsS/ThRYrHrCr/Tdlc
9tnk10XgxUYMIhuWcy9R7TCbivF5+yo0dlmtVPROojKPx2Sg8QeeA567EUZ225kh
y/m7aZh1EeO+0mdrZT4yCY5OCAid6QkAaP5DIpDL6IUPMgJlfQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFItRjsPBI3oPIV8G6hcN4g6yyRXHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mNGVm
OWFlMi1mMDI3LTQwMjgtYTcwNS1kYjFlMzQ2M2EzODIvODFiMWRjYzYtMjRlNC0z
YTZmLTgwZjMtNmU5YmNkN2ZhYjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjRlZjlhZTItZjAyNy00MDI4LWE3
MDUtZGIxZTM0NjNhMzgyL2Y0ZWY5YWUyLWYwMjctNDAyOC1hNzA1LWRiMWUzNDYz
YTM4Mi5jcmwwHwYDVR0jBBgwFoAUeENjXzX3pbZuOXvTYhshzKLlkjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mNGVmOWFlMi1mMDI3LTQwMjgtYTcwNS1kYjFl
MzQ2M2EzODIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBzkeaAwQD
0E7QMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGVeKpuOSQX7Zh4CbKjExMr4x0OlSeyH8byLKHyHWEf9AZ1w
gwzAd6s4yMYW/LykWogEo+1yt91brJQStHPU9SfPit9axsokg/lAYxNOBJvbZxOn
VyICQb8f7nwcN95+mJwLQCf1hoOq+mrx5SS9eKM1EnOc9f1hiVWac6I5rfZCF6wq
gGJUoRNcGYCSodag+yiIR9RhLq+nLWhRIzL+LEyAdFjiGM5h/dN13cL4IA+iCQbl
k6GsgV7hAlRwtb+b2BIU+EzORe+q8QGZ5EpOJagTqfGP/wrG2XezxMr/Y2rH0AQ4
DJTCBK203dLZFVjdF9YncUWKQn389Df+fuTTuVc=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:34:09 2025 by rpki-client