Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/985211db-3d6b-313f-ad01-983be935ee5a.roa
File: 985211db-3d6b-313f-ad01-983be935ee5a.roa (raw, json)
Hash identifier: iJiWVKlDhSTpCx/ZydsrgGI8V2lTY/c8vrxwtosovYA=
Subject key identifier: 38:D0:65:40:5D:F8:C5:11:EC:20:F6:7A:CC:38:37:94:65:FB:5D:B3
Certificate issuer: /CN=dd89d034-c049-4b11-917d-e035f703312f
Certificate serial: 010D0C9F4328584902EC2CAFFC1A1FEF47B2C540
Authority key identifier: FD:2D:36:CC:EC:EE:00:DC:29:64:26:A8:7C:2F:AC:E6:1F:0E:B1:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/985211db-3d6b-313f-ad01-983be935ee5a.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 13394
IP address blocks: 204.63.214.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:2c:af:fc:1a:1f:ef:47:b2:c5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd89d034-c049-4b11-917d-e035f703312f
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=58393ff0-489d-4da1-8c55-70a45bfc2ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:28:26:1b:42:f4:28:2b:26:ef:7a:14:52:a9:
dd:65:22:e1:de:02:63:e3:88:48:26:b1:1f:d0:12:
56:fa:d8:b6:18:41:21:31:3a:a3:c6:bf:22:8c:6b:
a9:6f:aa:dd:68:11:40:7c:03:6d:d0:07:07:48:4f:
45:b7:0a:f9:26:9e:7e:42:fa:14:8e:90:58:9e:20:
f4:a9:93:83:25:40:47:47:8d:ec:66:63:cf:f5:67:
52:b4:be:a2:7d:ce:7e:45:6b:c0:4e:55:11:d6:d7:
cb:43:01:4f:a6:7e:6b:e0:90:64:98:b3:8b:f8:eb:
6a:cb:16:59:58:58:a4:87:12:a6:25:ec:e8:42:54:
e7:f4:d3:4b:96:8d:86:24:cd:d7:e9:a0:b0:36:e9:
b1:83:c6:93:8a:50:5f:1a:47:94:be:e0:a3:aa:ff:
ec:be:92:a0:3c:1a:48:55:c1:19:39:83:90:15:d0:
34:b9:9b:c6:e6:b7:9e:ca:b9:d9:ed:7b:b2:d2:66:
ee:75:3b:89:5c:24:6c:bf:fe:c3:3a:44:ac:6c:b2:
7c:81:41:a0:6f:5f:ab:bf:9f:7c:1a:97:b8:e2:11:
9e:76:f2:f4:f1:f1:cc:bd:e7:dc:7c:eb:b1:d4:f7:
ae:c2:65:7f:e9:14:2a:09:0c:46:e0:79:80:f8:a9:
02:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D0:65:40:5D:F8:C5:11:EC:20:F6:7A:CC:38:37:94:65:FB:5D:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/985211db-3d6b-313f-ad01-983be935ee5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/dd89d034-c049-4b11-917d-e035f703312f.crl
X509v3 Authority Key Identifier:
keyid:FD:2D:36:CC:EC:EE:00:DC:29:64:26:A8:7C:2F:AC:E6:1F:0E:B1:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f.cer
sbgp-ipAddrBlock: critical
IPv4:
204.63.214.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:ef:78:02:a3:e2:b9:d0:74:0e:3f:93:ec:d8:6b:6a:06:d7:
ce:84:5e:a8:a9:a2:e8:aa:e7:e0:09:8c:f8:89:d7:f8:44:7f:
c0:e3:0f:88:f2:99:9e:d9:b9:fd:7b:92:e4:52:07:23:86:09:
48:c0:b7:50:fa:be:d4:ee:1c:ec:79:05:9c:a4:f7:2a:75:b8:
89:8a:4c:47:ed:d0:dc:52:1b:73:78:97:9b:7e:e2:b7:ad:9f:
b3:fd:5e:00:8d:da:e0:7f:be:66:00:7f:78:04:ad:1e:ec:b5:
42:09:2c:06:ef:14:2f:d0:64:80:9b:ea:60:5c:bb:4c:fa:7c:
49:03:2b:62:ab:84:a2:7c:3a:cd:2f:0c:0e:83:e9:d9:1f:3f:
35:1c:ed:71:a7:a7:9b:17:de:e6:1f:9b:2d:69:5d:d2:f0:5b:
0a:ea:7b:f8:14:65:a0:96:a2:e9:53:52:0f:fa:10:b1:09:96:
23:dc:9b:bf:b8:52:89:e6:3f:dc:0a:12:0a:c6:66:a1:23:e3:
d5:f5:a8:41:6b:55:63:08:04:e5:69:1b:c9:a3:af:07:3d:46:
c3:45:f5:16:99:53:46:c7:fa:cc:64:37:19:8b:39:b2:0a:f6:
af:17:e4:35:1c:8f:c0:63:12:1f:f5:0e:bf:9a:60:28:76:31:
ce:1d:f2:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7Cyv/Bof70eyxUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGQ4OWQwMzQtYzA0OS00YjExLTkxN2QtZTAzNWY3MDMz
MTJmMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
NTgzOTNmZjAtNDg5ZC00ZGExLThjNTUtNzBhNDViZmMyY2NjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8CgmG0L0KCsm73oUUqndZSLh3gJj44hIJrEf
0BJW+ti2GEEhMTqjxr8ijGupb6rdaBFAfANt0AcHSE9Ftwr5Jp5+QvoUjpBYniD0
qZODJUBHR43sZmPP9WdStL6ifc5+RWvATlUR1tfLQwFPpn5r4JBkmLOL+OtqyxZZ
WFikhxKmJezoQlTn9NNLlo2GJM3X6aCwNumxg8aTilBfGkeUvuCjqv/svpKgPBpI
VcEZOYOQFdA0uZvG5reeyrnZ7Xuy0mbudTuJXCRsv/7DOkSsbLJ8gUGgb1+rv598
Gpe44hGedvL08fHMvefcfOux1PeuwmV/6RQqCQxG4HmA+KkCSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDjQZUBd+MUR7CD2esw4N5Rl+12zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDg5
ZDAzNC1jMDQ5LTRiMTEtOTE3ZC1lMDM1ZjcwMzMxMmYvOTg1MjExZGItM2Q2Yi0z
MTNmLWFkMDEtOTgzYmU5MzVlZTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGQ4OWQwMzQtYzA0OS00YjExLTkx
N2QtZTAzNWY3MDMzMTJmL2RkODlkMDM0LWMwNDktNGIxMS05MTdkLWUwMzVmNzAz
MzEyZi5jcmwwHwYDVR0jBBgwFoAU/S02zOzuANwpZCaofC+s5h8OsfgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDg5ZDAzNC1jMDQ5LTRiMTEtOTE3ZC1lMDM1
ZjcwMzMxMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzD/WMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFjveAKj4rnQdA4/k+zYa2oG186EXqipouiq5+AJjPiJ1/hEf8DjD4jy
mZ7Zuf17kuRSByOGCUjAt1D6vtTuHOx5BZyk9yp1uImKTEft0NxSG3N4l5t+4ret
n7P9XgCN2uB/vmYAf3gErR7stUIJLAbvFC/QZICb6mBcu0z6fEkDK2KrhKJ8Os0v
DA6D6dkfPzUc7XGnp5sX3uYfmy1pXdLwWwrqe/gUZaCWoulTUg/6ELEJliPcm7+4
UonmP9wKEgrGZqEj49X1qEFrVWMIBOVpG8mjrwc9RsNF9RaZU0bH+sxkNxmLObIK
9q8X5DUcj8BjEh/1Dr+aYCh2Mc4d8s8=
-----END CERTIFICATE-----
Generated at Fri Apr 4 15:56:12 2025 by rpki-client