Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/842b2b95-69cd-3132-906b-8646d4f789e4.roa
File: 842b2b95-69cd-3132-906b-8646d4f789e4.roa (raw, json)
Hash identifier: JJcmRQyKxPdRXQESG5dFsgJ4KPPLJ5AL7Vmmfqkt9Bg=
Subject key identifier: 40:5B:77:A8:61:5F:FF:03:F2:CC:7F:E2:FB:3C:7E:36:E8:A8:5E:9B
Certificate issuer: /CN=34b715b9-211f-4bf7-ace9-03b3446775ab
Certificate serial: 010D0C9F43285848EF6142481F0E8880E609CD80
Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/842b2b95-69cd-3132-906b-8646d4f789e4.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 10317
IP address blocks: 204.155.116.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:42:48:1f:0e:88:80:e6:09:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=f0d2258d-9ffa-4db8-a50d-db78e77fba2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:48:62:03:d3:38:83:a1:0b:de:7c:d7:14:09:
75:ac:31:83:a0:8a:a0:78:cb:3d:7e:14:05:a5:9d:
92:15:d5:8c:48:46:cf:9b:ed:b9:3d:5d:55:a0:ab:
24:78:3a:3d:eb:d2:60:85:4e:cd:00:43:ce:e0:8f:
1a:d8:9b:39:f9:01:e9:42:ea:d4:ab:21:48:ee:46:
1d:d9:cd:bb:1b:c4:c1:03:67:b4:a2:ab:89:a3:fc:
57:1a:76:66:18:47:76:39:d7:ca:5c:a3:e2:fa:1e:
34:e6:f1:86:37:4c:f9:46:cc:b1:fa:85:05:fe:23:
64:69:4f:7f:31:bb:19:eb:eb:00:ae:c5:96:3b:3e:
de:02:e2:9a:64:96:86:b6:4f:ef:ae:17:50:12:c1:
02:79:34:87:bb:77:01:fd:56:e4:08:b8:0a:cd:2d:
7a:f6:53:26:4e:6a:be:3c:a4:33:fa:f2:22:a0:4e:
36:02:0c:39:7a:6e:3b:5b:31:e5:5c:ce:bf:0c:86:
99:dd:b4:8a:54:53:95:7f:97:6c:80:59:b9:41:00:
52:00:55:b0:97:dd:24:7c:c5:18:14:b9:8b:9a:09:
93:61:cc:59:b3:66:cf:d5:b7:fd:86:2a:f2:30:4a:
e1:ca:91:aa:17:05:c9:c4:6f:2d:b4:f9:45:2e:da:
b3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5B:77:A8:61:5F:FF:03:F2:CC:7F:E2:FB:3C:7E:36:E8:A8:5E:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/842b2b95-69cd-3132-906b-8646d4f789e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl
X509v3 Authority Key Identifier:
keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
sbgp-ipAddrBlock: critical
IPv4:
204.155.116.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:02:44:64:a1:f0:8c:16:3e:8f:99:a1:01:01:0e:78:de:a3:
f8:10:ce:8b:19:a6:1b:f1:1a:6b:14:c8:2f:b1:19:b3:4a:0d:
95:4b:55:ce:ff:68:c7:77:21:c9:48:ab:1a:16:56:4d:25:56:
49:07:77:00:e4:f6:24:2a:7e:e7:1e:a1:e4:8e:6f:82:27:a0:
64:ad:b9:07:5c:30:2c:60:ba:6d:7e:d3:a5:fd:0b:98:53:c4:
51:1b:f8:4a:20:c9:34:36:b6:3c:ef:f4:d3:fe:f7:01:ba:ae:
51:e8:a6:09:5c:78:6e:b4:3c:a8:86:2c:e3:cd:ca:e7:5f:69:
81:08:02:19:ac:03:72:68:33:e8:eb:c1:b0:54:fd:04:05:00:
b6:98:74:87:f2:56:88:1d:b4:e1:6b:93:23:d4:52:0d:85:57:
17:28:52:02:d4:6b:c7:48:28:95:d8:b3:a9:5e:dd:5e:73:38:
04:77:a9:04:d7:7d:45:0d:47:5b:9d:86:52:7d:89:3d:ed:4f:
42:43:72:5a:f6:7c:ee:c2:a5:8e:8d:ee:1d:b3:7b:19:ec:3a:
a0:0a:20:bc:d6:f3:f7:20:a6:e2:01:a8:be:c3:73:66:9a:87:
da:d0:db:e3:cb:e9:b2:79:1c:78:1d:19:36:b6:8c:76:0b:3e:
7e:92:7f:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYUJIHw6IgOYJzYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzRiNzE1YjktMjExZi00YmY3LWFjZTktMDNiMzQ0Njc3
NWFiMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
ZjBkMjI1OGQtOWZmYS00ZGI4LWE1MGQtZGI3OGU3N2ZiYTJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EhiA9M4g6EL3nzXFAl1rDGDoIqgeMs9fhQF
pZ2SFdWMSEbPm+25PV1VoKskeDo969JghU7NAEPO4I8a2Js5+QHpQurUqyFI7kYd
2c27G8TBA2e0oquJo/xXGnZmGEd2OdfKXKPi+h405vGGN0z5Rsyx+oUF/iNkaU9/
MbsZ6+sArsWWOz7eAuKaZJaGtk/vrhdQEsECeTSHu3cB/VbkCLgKzS169lMmTmq+
PKQz+vIioE42Agw5em47WzHlXM6/DIaZ3bSKVFOVf5dsgFm5QQBSAFWwl90kfMUY
FLmLmgmTYcxZs2bP1bf9hiryMErhypGqFwXJxG8ttPlFLtqz6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEBbd6hhX/8D8sx/4vs8fjboqF6bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3
MTViOS0yMTFmLTRiZjctYWNlOS0wM2IzNDQ2Nzc1YWIvODQyYjJiOTUtNjljZC0z
MTMyLTkwNmItODY0NmQ0Zjc4OWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzRiNzE1YjktMjExZi00YmY3LWFj
ZTktMDNiMzQ0Njc3NWFiLzM0YjcxNWI5LTIxMWYtNGJmNy1hY2U5LTAzYjM0NDY3
NzVhYi5jcmwwHwYDVR0jBBgwFoAUogYtjI8Exo63AC0EODp3n4zrZ6wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3MTViOS0yMTFmLTRiZjctYWNlOS0wM2Iz
NDQ2Nzc1YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzJt0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFsCRGSh8IwWPo+ZoQEBDnjeo/gQzosZphvxGmsUyC+xGbNKDZVLVc7/
aMd3IclIqxoWVk0lVkkHdwDk9iQqfuceoeSOb4InoGStuQdcMCxgum1+06X9C5hT
xFEb+EogyTQ2tjzv9NP+9wG6rlHopglceG60PKiGLOPNyudfaYEIAhmsA3JoM+jr
wbBU/QQFALaYdIfyVogdtOFrkyPUUg2FVxcoUgLUa8dIKJXYs6le3V5zOAR3qQTX
fUUNR1udhlJ9iT3tT0JDclr2fO7CpY6N7h2zexnsOqAKILzW8/cgpuIBqL7Dc2aa
h9rQ2+PL6bJ5HHgdGTa2jHYLPn6Sf3g=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:19:59 2025 by rpki-client