Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/cb6a98a0-a2b7-3d0f-8172-e2d3a13f531c.roa
File: cb6a98a0-a2b7-3d0f-8172-e2d3a13f531c.roa (raw, json)
Hash identifier: 4Nbvm/ADfr3Pn0P9jpJnbBrH/a0Oy/WRdQfyNIwm8xQ=
Subject key identifier: A2:03:4E:D4:2A:68:63:A7:39:37:E9:65:28:12:46:A2:BE:65:02:22
Certificate issuer: /CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
Certificate serial: 010D0C9F43285848AF2B88C30755D1679F577700
Authority key identifier: 26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/cb6a98a0-a2b7-3d0f-8172-e2d3a13f531c.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 32554
IP address blocks: 216.162.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:88:c3:07:55:d1:67:9f:57:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=2d2b5c69-a877-4187-a6a9-13f8f4e096cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:de:2e:7c:c6:4c:a2:51:53:d9:d1:91:0d:
b5:df:21:18:79:4b:11:b7:93:71:79:33:d7:a4:00:
93:cb:61:61:50:ce:ff:2c:6e:4d:f2:f5:9c:d1:c4:
aa:28:11:f7:59:13:ec:f5:8c:fa:24:be:7e:1f:6d:
ef:38:29:e1:e8:40:01:80:90:06:08:d0:78:57:ff:
a3:88:b2:97:0a:56:9d:84:aa:aa:fb:b1:3f:b8:ab:
7b:47:86:a9:d3:f5:f8:65:13:cf:e0:c4:ed:da:e8:
b8:18:ef:94:83:62:b1:d3:88:62:c8:63:bc:49:04:
fb:fc:09:50:b6:60:16:a2:15:b3:d9:39:f4:9c:04:
50:e5:1b:39:98:d9:b1:9c:31:d3:bd:b1:de:df:21:
16:e9:48:fe:77:5e:51:b1:99:07:d6:43:9c:f4:1c:
9e:7a:e5:b8:28:e5:54:b3:bc:55:ec:17:67:16:d4:
94:4f:f8:40:b9:9d:a3:9d:08:d8:68:cb:ce:f3:2f:
46:d0:ec:14:72:23:68:e1:fd:08:71:02:94:2a:63:
ec:90:cc:50:46:8f:d7:d1:cf:93:7e:1e:f5:c2:6b:
4b:7a:f3:5a:39:b8:d9:ce:bd:d3:11:99:33:29:40:
e0:3b:02:bb:bf:ad:f9:4a:ad:4a:3e:6b:6a:74:33:
8d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:03:4E:D4:2A:68:63:A7:39:37:E9:65:28:12:46:A2:BE:65:02:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/cb6a98a0-a2b7-3d0f-8172-e2d3a13f531c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl
X509v3 Authority Key Identifier:
keyid:26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
sbgp-ipAddrBlock: critical
IPv4:
216.162.93.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:90:cf:58:77:e2:3d:25:34:60:b7:6d:f3:a3:2c:df:78:50:
80:21:1b:37:2d:3f:25:a0:0e:c4:e7:c6:3c:b9:ba:5f:9e:79:
30:ef:8c:c1:e1:37:bd:cd:4b:e4:13:ad:ba:41:1c:3a:73:c0:
df:93:15:85:b5:63:0b:c1:81:6d:05:84:76:19:35:c2:37:94:
00:8b:c9:57:24:a5:88:46:b7:9b:8a:a2:5c:c2:df:01:d9:7b:
b9:21:69:ed:0b:84:bd:a5:35:d4:ab:7b:0f:40:07:d2:f4:64:
70:05:03:00:fc:bb:0b:a1:9c:2d:c5:ed:b1:e9:49:23:55:92:
4b:7f:36:50:13:9b:fe:6f:cf:cf:1e:bb:14:51:30:ee:dc:8b:
bd:ca:3f:0e:24:ed:72:ef:b5:e0:64:00:a6:a4:06:be:01:d2:
f6:14:cd:ce:1d:6c:f3:c1:a1:72:08:a3:fb:63:35:1a:96:ef:
b5:2a:96:0e:d3:f2:26:cf:c3:89:f1:9e:63:c4:96:37:c8:c2:
04:19:3b:da:f4:83:fe:b2:b1:9b:16:68:69:b9:04:16:eb:ec:
5c:d7:44:34:95:49:13:1c:28:7f:a1:cc:6e:a3:e3:68:68:1d:
23:9f:bb:5a:44:c2:db:96:59:01:7d:62:99:4c:a9:16:b5:e0:
22:52:dc:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK4jDB1XRZ59XdwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDg0ZjljMmMtMjM4Yi00ZDIzLThlOGItYWIyZjVhMDE0
N2MxMB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk
MmQyYjVjNjktYTg3Ny00MTg3LWE2YTktMTNmOGY0ZTA5NmNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB3eLnzGTKJRU9nRkQ213yEYeUsRt5NxeTPX
pACTy2FhUM7/LG5N8vWc0cSqKBH3WRPs9Yz6JL5+H23vOCnh6EABgJAGCNB4V/+j
iLKXCladhKqq+7E/uKt7R4ap0/X4ZRPP4MTt2ui4GO+Ug2Kx04hiyGO8SQT7/AlQ
tmAWohWz2Tn0nARQ5Rs5mNmxnDHTvbHe3yEW6Uj+d15RsZkH1kOc9ByeeuW4KOVU
s7xV7BdnFtSUT/hAuZ2jnQjYaMvO8y9G0OwUciNo4f0IcQKUKmPskMxQRo/X0c+T
fh71wmtLevNaObjZzr3TEZkzKUDgOwK7v635Sq1KPmtqdDONSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKIDTtQqaGOnOTfpZSgSRqK+ZQIiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ODRm
OWMyYy0yMzhiLTRkMjMtOGU4Yi1hYjJmNWEwMTQ3YzEvY2I2YTk4YTAtYTJiNy0z
ZDBmLTgxNzItZTJkM2ExM2Y1MzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDg0ZjljMmMtMjM4Yi00ZDIzLThl
OGItYWIyZjVhMDE0N2MxLzQ4NGY5YzJjLTIzOGItNGQyMy04ZThiLWFiMmY1YTAx
NDdjMS5jcmwwHwYDVR0jBBgwFoAUJvYUx7M4uObYmWgDAdqyOnczs9AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80ODRmOWMyYy0yMzhiLTRkMjMtOGU4Yi1hYjJm
NWEwMTQ3YzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KJdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE6Qz1h34j0lNGC3bfOjLN94UIAhGzctPyWgDsTnxjy5ul+eeTDvjMHh
N73NS+QTrbpBHDpzwN+TFYW1YwvBgW0FhHYZNcI3lACLyVckpYhGt5uKolzC3wHZ
e7khae0LhL2lNdSrew9AB9L0ZHAFAwD8uwuhnC3F7bHpSSNVkkt/NlATm/5vz88e
uxRRMO7ci73KPw4k7XLvteBkAKakBr4B0vYUzc4dbPPBoXIIo/tjNRqW77Uqlg7T
8ibPw4nxnmPEljfIwgQZO9r0g/6ysZsWaGm5BBbr7FzXRDSVSRMcKH+hzG6j42ho
HSOfu1pEwtuWWQF9YplMqRa14CJS3OA=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:49:43 2025 by rpki-client