Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/016473cc-01cd-3366-bfcf-35691cae283c.roa
File: 016473cc-01cd-3366-bfcf-35691cae283c.roa (raw, json)
Hash identifier: krGvOAYF5u3O09aUvF/P2ajQ+bDAJNAY8nC9OJZYKAo=
Subject key identifier: 77:E0:38:8B:76:6A:E5:2D:DD:72:C3:B9:A6:4C:29:16:5D:4E:D2:81
Certificate issuer: /CN=9a696f17-cb36-4b2b-be82-47f0c467096d
Certificate serial: 010D0C9F43285848E9CBE90DE8D362588E3F0D00
Authority key identifier: 38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/016473cc-01cd-3366-bfcf-35691cae283c.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 46632
IP address blocks: 199.33.104.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:e9:0d:e8:d3:62:58:8e:3f:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a696f17-cb36-4b2b-be82-47f0c467096d
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=4e896afa-0f6f-4d21-aed6-3d8981007e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a2:0b:13:bc:87:07:1d:75:c6:74:57:88:64:
d9:94:3f:3a:e7:c4:f6:5e:4f:8e:1d:04:81:88:47:
09:01:86:ee:82:19:bf:dd:02:2a:c2:50:71:04:36:
a3:d6:21:67:0c:3f:71:ef:ef:d3:b1:e3:1b:9c:1a:
33:8a:06:79:f5:97:10:32:88:06:e3:1e:51:e5:f7:
74:08:66:b0:49:c6:9f:ce:97:c8:4b:72:18:4c:f7:
26:c5:15:b1:10:67:f9:81:96:6e:95:9e:4c:5f:34:
a6:f6:8f:43:c2:1c:00:94:68:ce:e5:f2:c3:4f:68:
32:b9:96:6e:89:4a:f6:ab:12:8a:fa:52:b9:14:3e:
0d:f6:6e:35:c5:6c:24:bb:31:f8:81:86:27:9d:5e:
f7:0d:32:ef:08:75:6b:6a:20:f0:86:a0:eb:18:26:
30:26:03:72:a7:62:bd:b0:27:f6:55:d0:25:07:71:
de:49:f0:82:4f:69:e7:64:37:3d:14:f8:20:96:c5:
24:df:5d:6a:87:a4:65:e6:43:75:43:0c:a1:f2:5e:
39:12:f0:07:d9:10:0d:22:50:fa:11:e5:43:06:82:
fd:49:08:87:ed:43:e4:7c:68:fb:6e:81:43:f6:1f:
e4:64:fb:ed:7f:e5:69:8e:a7:c2:e4:80:f7:bf:2b:
21:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E0:38:8B:76:6A:E5:2D:DD:72:C3:B9:A6:4C:29:16:5D:4E:D2:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/016473cc-01cd-3366-bfcf-35691cae283c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl
X509v3 Authority Key Identifier:
keyid:38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer
sbgp-ipAddrBlock: critical
IPv4:
199.33.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:0e:47:63:e2:42:fc:b8:cb:79:0c:f3:c6:2d:f1:ed:1a:10:
e5:dc:64:c6:79:ec:1e:26:4b:5a:90:e4:1b:4e:0c:ee:43:ab:
7a:72:57:91:c1:31:6c:e7:58:c0:94:99:fe:af:aa:c8:04:9b:
73:75:4a:b5:ef:e6:f6:00:59:f1:58:40:5f:ef:06:69:3a:d5:
a3:c8:c7:e8:95:cb:99:f3:db:bf:96:30:5e:84:49:c1:a9:02:
d9:96:d5:8c:e0:f6:f7:e2:5e:8c:8b:6f:76:ea:a9:81:c3:cd:
7b:17:e2:cd:5a:8c:fd:34:f1:d6:47:30:f5:50:26:70:20:c6:
28:a2:78:51:fd:6b:51:f3:2e:58:0b:d0:3a:77:79:65:7f:92:
cc:47:fb:52:95:78:1f:47:ad:44:03:ea:44:89:91:7b:91:12:
66:32:45:0a:00:4a:46:ff:57:b0:23:7d:c5:5a:1b:5a:8a:bb:
4b:93:18:a3:84:e4:dc:cd:02:8c:e9:a2:5f:67:50:e0:95:40:
84:01:62:c3:6d:1a:9a:be:73:65:32:5e:db:98:77:bc:a6:0b:
e1:45:4b:cf:4c:05:61:c3:37:69:56:48:da:b9:e6:4c:a5:7a:
8b:6b:85:04:f8:a7:4a:5b:17:a1:ca:23:99:94:1d:f5:88:16:
b7:a7:27:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy+kN6NNiWI4/DQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWE2OTZmMTctY2IzNi00YjJiLWJlODItNDdmMGM0Njcw
OTZkMB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk
NGU4OTZhZmEtMGY2Zi00ZDIxLWFlZDYtM2Q4OTgxMDA3ZTYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqILE7yHBx11xnRXiGTZlD8658T2Xk+OHQSB
iEcJAYbughm/3QIqwlBxBDaj1iFnDD9x7+/TseMbnBozigZ59ZcQMogG4x5R5fd0
CGawScafzpfIS3IYTPcmxRWxEGf5gZZulZ5MXzSm9o9DwhwAlGjO5fLDT2gyuZZu
iUr2qxKK+lK5FD4N9m41xWwkuzH4gYYnnV73DTLvCHVraiDwhqDrGCYwJgNyp2K9
sCf2VdAlB3HeSfCCT2nnZDc9FPgglsUk311qh6Rl5kN1Qwyh8l45EvAH2RANIlD6
EeVDBoL9SQiH7UPkfGj7boFD9h/kZPvtf+VpjqfC5ID3vysh9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHfgOIt2auUt3XLDuaZMKRZdTtKBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85YTY5
NmYxNy1jYjM2LTRiMmItYmU4Mi00N2YwYzQ2NzA5NmQvMDE2NDczY2MtMDFjZC0z
MzY2LWJmY2YtMzU2OTFjYWUyODNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWE2OTZmMTctY2IzNi00YjJiLWJl
ODItNDdmMGM0NjcwOTZkLzlhNjk2ZjE3LWNiMzYtNGIyYi1iZTgyLTQ3ZjBjNDY3
MDk2ZC5jcmwwHwYDVR0jBBgwFoAUOGVDxKSXi/HM12fBUAL+77zUroAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy85YTY5NmYxNy1jYjM2LTRiMmItYmU4Mi00N2Yw
YzQ2NzA5NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxyFoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHgOR2PiQvy4y3kM88Yt8e0aEOXcZMZ57B4mS1qQ5BtODO5Dq3pyV5HB
MWznWMCUmf6vqsgEm3N1SrXv5vYAWfFYQF/vBmk61aPIx+iVy5nz27+WMF6EScGp
AtmW1Yzg9vfiXoyLb3bqqYHDzXsX4s1ajP008dZHMPVQJnAgxiiieFH9a1HzLlgL
0Dp3eWV/ksxH+1KVeB9HrUQD6kSJkXuREmYyRQoASkb/V7AjfcVaG1qKu0uTGKOE
5NzNAozpol9nUOCVQIQBYsNtGpq+c2UyXtuYd7ymC+FFS89MBWHDN2lWSNq55kyl
eotrhQT4p0pbF6HKI5mUHfWIFrenJ3s=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:16:38 2025 by rpki-client