Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee/34ef6e12-2d99-322e-b6b9-72a8c16d248a.roa
File: 34ef6e12-2d99-322e-b6b9-72a8c16d248a.roa (raw, json)
Hash identifier: mVyG6ffoNb0bneIdKGQQjHYtRdvkLhLGpuwzV1QOIJ8=
Subject key identifier: 40:CE:C8:E2:2D:53:50:36:E8:94:AE:17:D3:A8:19:02:69:1A:11:DD
Certificate issuer: /CN=06adc51b-95f4-44e9-bf6d-3f9a3950feee
Certificate serial: 010D0C9F43285848A1361935DC2B85BD0D8E9480
Authority key identifier: D0:04:FE:E2:0B:C8:C6:C3:FE:2B:84:25:1C:FF:A8:B3:DA:58:60:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee/34ef6e12-2d99-322e-b6b9-72a8c16d248a.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 40690
IP address blocks: 162.251.207.0/24 maxlen: 24
2602:fa25::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:19:35:dc:2b:85:bd:0d:8e:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06adc51b-95f4-44e9-bf6d-3f9a3950feee
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=8b11c8e3-7e49-4812-b073-8f92e3e0d92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d6:bc:ec:e7:07:fc:42:ec:1b:bf:26:93:c3:
6e:5e:a8:54:78:8c:35:a8:8c:b9:4a:38:e9:98:67:
06:65:64:97:59:2f:e6:f8:79:64:68:01:f7:6d:c8:
f5:86:a2:ef:8c:4f:f8:a8:62:bb:8c:bb:a9:3e:09:
70:7c:55:70:ee:e8:19:8c:20:df:28:14:55:db:82:
17:09:9b:90:92:11:de:24:93:e1:b8:a0:e4:5c:d4:
e9:bc:44:cd:aa:c7:96:e6:fd:f3:7c:29:49:7d:2c:
a7:4f:73:32:14:17:be:d3:28:f9:11:b6:13:c5:10:
ea:33:67:ce:68:25:4d:90:4e:a8:c7:15:36:2c:bb:
b8:05:5f:43:c1:93:4f:0b:0f:3b:c4:15:a8:2c:18:
e8:f8:65:9f:d1:fa:5a:e8:1f:31:01:ac:22:4c:f8:
0d:db:8f:09:f0:3d:17:91:d2:c0:af:23:c9:92:7f:
0b:81:f0:45:08:ba:7d:8b:44:7e:48:58:9d:e9:59:
87:7f:58:f3:1e:c1:31:c6:aa:54:69:ae:76:74:a0:
5c:0a:c9:98:3a:3a:ba:4f:71:ed:d7:69:22:f4:fd:
8c:73:9a:37:c0:74:db:60:a1:37:7c:91:35:cf:14:
46:2d:54:f1:01:97:e6:9c:ac:16:c4:62:01:46:fd:
cc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CE:C8:E2:2D:53:50:36:E8:94:AE:17:D3:A8:19:02:69:1A:11:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee/34ef6e12-2d99-322e-b6b9-72a8c16d248a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee/06adc51b-95f4-44e9-bf6d-3f9a3950feee.crl
X509v3 Authority Key Identifier:
keyid:D0:04:FE:E2:0B:C8:C6:C3:FE:2B:84:25:1C:FF:A8:B3:DA:58:60:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06adc51b-95f4-44e9-bf6d-3f9a3950feee.cer
sbgp-ipAddrBlock: critical
IPv4:
162.251.207.0/24
IPv6:
2602:fa25::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:d5:c5:e0:8b:e1:bc:e7:c5:ef:ed:da:f1:91:4e:d6:1d:fa:
16:12:8b:95:87:fb:b2:7e:64:fb:9c:20:44:ff:a6:ac:18:ab:
94:7a:bc:6b:a0:27:63:4e:8c:58:0b:cf:e8:e0:b8:34:a4:ad:
c8:5f:2d:24:a3:36:60:b8:79:a0:51:4c:f2:49:a7:f3:8e:b0:
9b:90:b9:c6:d1:28:72:ad:e9:43:0e:0e:9d:bf:94:4e:47:6d:
d0:03:f8:03:5f:2c:73:50:d1:fe:9b:ae:06:b2:e3:0c:77:24:
91:01:98:85:bc:67:2b:df:8e:ea:04:6a:e8:e3:e4:ce:4a:10:
5d:ae:ce:87:fc:d6:21:5b:13:fb:e0:3b:6b:a8:5f:38:55:a7:
c4:d0:8e:aa:11:35:1e:3f:db:be:6d:ab:9c:2a:0f:e5:05:2a:
48:ae:33:87:bf:6f:cd:ce:8b:f3:52:9a:e7:e6:0a:59:a0:e0:
6b:e6:6e:5a:ad:9a:76:0f:8d:0e:ea:20:64:f3:ad:70:2e:30:
4b:48:aa:4f:01:5c:a4:d3:dd:4d:c0:11:be:5c:69:a6:e8:48:
d6:0e:7d:02:a9:41:4d:54:e6:3e:62:32:79:74:76:41:5b:13:
f5:e1:03:6b:ac:3b:f2:35:30:66:f4:7e:cd:0a:0f:7f:ff:3a:
eb:99:cc:aa
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEihNhk13CuFvQ2OlIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDZhZGM1MWItOTVmNC00NGU5LWJmNmQtM2Y5YTM5NTBm
ZWVlMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk
OGIxMWM4ZTMtN2U0OS00ODEyLWIwNzMtOGY5MmUzZTBkOTJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqta87OcH/ELsG78mk8NuXqhUeIw1qIy5Sjjp
mGcGZWSXWS/m+HlkaAH3bcj1hqLvjE/4qGK7jLupPglwfFVw7ugZjCDfKBRV24IX
CZuQkhHeJJPhuKDkXNTpvETNqseW5v3zfClJfSynT3MyFBe+0yj5EbYTxRDqM2fO
aCVNkE6oxxU2LLu4BV9DwZNPCw87xBWoLBjo+GWf0fpa6B8xAawiTPgN248J8D0X
kdLAryPJkn8LgfBFCLp9i0R+SFid6VmHf1jzHsExxqpUaa52dKBcCsmYOjq6T3Ht
12ki9P2Mc5o3wHTbYKE3fJE1zxRGLVTxAZfmnKwWxGIBRv3MDwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFEDOyOItU1A26JSuF9OoGQJpGhHdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNmFk
YzUxYi05NWY0LTQ0ZTktYmY2ZC0zZjlhMzk1MGZlZWUvMzRlZjZlMTItMmQ5OS0z
MjJlLWI2YjktNzJhOGMxNmQyNDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDZhZGM1MWItOTVmNC00NGU5LWJm
NmQtM2Y5YTM5NTBmZWVlLzA2YWRjNTFiLTk1ZjQtNDRlOS1iZjZkLTNmOWEzOTUw
ZmVlZS5jcmwwHwYDVR0jBBgwFoAU0AT+4gvIxsP+K4QlHP+os9pYYNYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wNmFkYzUxYi05NWY0LTQ0ZTktYmY2ZC0zZjlh
Mzk1MGZlZWUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAovvPMA4E
AgACMAgDBgAmAvolADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBn1cXgi+G858Xv7drxkU7WHfoWEouVh/uy
fmT7nCBE/6asGKuUerxroCdjToxYC8/o4Lg0pK3IXy0kozZguHmgUUzySafzjrCb
kLnG0ShyrelDDg6dv5ROR23QA/gDXyxzUNH+m64GsuMMdySRAZiFvGcr347qBGro
4+TOShBdrs6H/NYhWxP74DtrqF84VafE0I6qETUeP9u+baucKg/lBSpIrjOHv2/N
zovzUprn5gpZoOBr5m5arZp2D40O6iBk861wLjBLSKpPAVyk091NwBG+XGmm6EjW
Dn0CqUFNVOY+YjJ5dHZBWxP14QNrrDvyNTBm9H7NCg9//zrrmcyq
-----END CERTIFICATE-----
Generated at Fri Apr 4 15:58:30 2025 by rpki-client