Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/b4abaf51-42e2-394d-80e1-bc63f54c0e79.roa
File: b4abaf51-42e2-394d-80e1-bc63f54c0e79.roa (raw, json)
Hash identifier: 1lrXYplUeZ2zjDattASN9C39Iz7fjmpQognIe2452Wg=
Subject key identifier: 43:B2:7C:DD:27:89:AD:D9:7B:2A:6E:0F:96:A7:11:57:C4:7F:0F:6A
Certificate issuer: /CN=04c216c1-5924-4a66-9346-a1f215800ceb
Certificate serial: 010D0C9F43285848B1F629FA856160E6E8119D80
Authority key identifier: 98:B8:4C:6C:DD:3D:9B:0A:D7:06:98:7D:61:74:95:AB:15:54:04:30
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/b4abaf51-42e2-394d-80e1-bc63f54c0e79.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 399889
IP address blocks: 216.170.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:29:fa:85:61:60:e6:e8:11:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04c216c1-5924-4a66-9346-a1f215800ceb
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=1d51ac89-e937-457e-b790-d08394328dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cf:8a:6a:3e:ef:97:91:d1:ee:d0:c5:0b:dd:
f3:b5:cb:84:71:13:f8:95:6b:d0:70:5a:1c:38:16:
69:a6:3d:cb:ae:72:a8:17:bf:ae:a5:d6:a1:1f:00:
12:8d:58:03:e8:69:e7:bc:31:2e:a8:09:ab:7d:ee:
2b:7d:e9:49:e8:96:e9:9b:79:55:bf:46:9a:48:66:
5d:da:d3:3d:19:84:88:cf:5a:01:4a:9b:46:a6:4c:
b7:c2:7f:7e:e1:af:3a:da:9e:a4:85:ac:52:a3:ac:
62:79:e5:3c:39:e8:d4:9e:01:13:d3:dd:17:f1:7c:
56:7a:fd:3e:ee:61:ba:62:f1:ec:3f:84:db:dc:81:
7d:12:bd:cc:bf:5a:dc:f9:26:27:6c:4b:47:ea:04:
62:80:ad:5c:ef:46:fe:58:a6:0e:32:7d:20:3e:2a:
b4:33:a8:65:d1:5b:5c:3b:e0:c5:44:b9:39:56:5f:
ed:75:48:87:4e:56:30:c4:55:69:eb:7c:fa:ab:e9:
99:92:2c:3a:61:2f:20:0e:35:ac:24:97:8f:c0:b0:
4c:c1:eb:b6:a4:60:83:bc:5a:62:39:2c:af:61:28:
56:ad:6c:40:73:f7:ae:b8:08:4b:16:5e:dd:53:33:
40:ca:db:8f:70:e8:41:d0:31:30:16:33:01:6e:27:
d3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B2:7C:DD:27:89:AD:D9:7B:2A:6E:0F:96:A7:11:57:C4:7F:0F:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/b4abaf51-42e2-394d-80e1-bc63f54c0e79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.crl
X509v3 Authority Key Identifier:
keyid:98:B8:4C:6C:DD:3D:9B:0A:D7:06:98:7D:61:74:95:AB:15:54:04:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer
sbgp-ipAddrBlock: critical
IPv4:
216.170.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:e8:f7:b5:78:a7:8c:3e:41:5d:89:43:c9:b6:be:34:3b:ce:
a2:56:9d:9e:85:72:16:d0:79:75:74:f6:04:55:5d:ae:06:ed:
d7:0f:4d:f2:5a:bd:94:7a:c3:76:28:1f:e2:4e:3c:ae:23:5e:
51:aa:b8:6f:3b:d2:70:7a:ae:5d:6b:2f:74:06:14:d2:32:8c:
d0:15:53:62:d3:47:8e:3d:46:22:84:bb:5f:e2:4b:67:ba:1a:
60:ee:48:02:dd:f0:ef:a8:62:0f:62:25:b3:42:44:ec:58:28:
a2:4a:70:ae:a1:30:ca:fd:08:b7:fd:7f:3e:51:9a:81:dc:ca:
c1:8d:43:5a:9e:fb:76:9c:bd:f5:7b:b7:15:58:85:31:d9:27:
ab:4b:46:7f:83:0b:9a:09:a6:dc:bf:6d:26:a4:ec:96:6e:b9:
42:50:82:2f:a1:e1:7d:2f:df:6d:7b:52:c3:6e:d2:10:54:5a:
1d:62:58:64:a3:3e:f4:07:7f:91:bd:2a:c4:b7:00:5f:2b:9b:
7d:08:7f:f9:d1:27:7a:20:46:8f:19:19:ee:98:50:f9:23:14:
26:24:97:28:c9:a9:30:2a:e0:cf:d0:92:b0:20:5b:f2:44:58:
7b:13:e3:93:e5:f5:8d:b3:f2:99:56:f5:97:0b:c4:e8:fd:82:
83:f2:33:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9in6hWFg5ugRnYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDRjMjE2YzEtNTkyNC00YTY2LTkzNDYtYTFmMjE1ODAw
Y2ViMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk
MWQ1MWFjODktZTkzNy00NTdlLWI3OTAtZDA4Mzk0MzI4ZGNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc+Kaj7vl5HR7tDFC93ztcuEcRP4lWvQcFoc
OBZppj3LrnKoF7+updahHwASjVgD6GnnvDEuqAmrfe4rfelJ6Jbpm3lVv0aaSGZd
2tM9GYSIz1oBSptGpky3wn9+4a862p6khaxSo6xieeU8OejUngET090X8XxWev0+
7mG6YvHsP4Tb3IF9Er3Mv1rc+SYnbEtH6gRigK1c70b+WKYOMn0gPiq0M6hl0Vtc
O+DFRLk5Vl/tdUiHTlYwxFVp63z6q+mZkiw6YS8gDjWsJJePwLBMweu2pGCDvFpi
OSyvYShWrWxAc/euuAhLFl7dUzNAytuPcOhB0DEwFjMBbifTKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEOyfN0nia3ZeypuD5anEVfEfw9qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wNGMy
MTZjMS01OTI0LTRhNjYtOTM0Ni1hMWYyMTU4MDBjZWIvYjRhYmFmNTEtNDJlMi0z
OTRkLTgwZTEtYmM2M2Y1NGMwZTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDRjMjE2YzEtNTkyNC00YTY2LTkz
NDYtYTFmMjE1ODAwY2ViLzA0YzIxNmMxLTU5MjQtNGE2Ni05MzQ2LWExZjIxNTgw
MGNlYi5jcmwwHwYDVR0jBBgwFoAUmLhMbN09mwrXBph9YXSVqxVUBDAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8wNGMyMTZjMS01OTI0LTRhNjYtOTM0Ni1hMWYy
MTU4MDBjZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2KpoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHjo97V4p4w+QV2JQ8m2vjQ7zqJWnZ6FchbQeXV09gRVXa4G7dcPTfJa
vZR6w3YoH+JOPK4jXlGquG870nB6rl1rL3QGFNIyjNAVU2LTR449RiKEu1/iS2e6
GmDuSALd8O+oYg9iJbNCROxYKKJKcK6hMMr9CLf9fz5RmoHcysGNQ1qe+3acvfV7
txVYhTHZJ6tLRn+DC5oJpty/bSak7JZuuUJQgi+h4X0v3217UsNu0hBUWh1iWGSj
PvQHf5G9KsS3AF8rm30If/nRJ3ogRo8ZGe6YUPkjFCYklyjJqTAq4M/QkrAgW/JE
WHsT45Pl9Y2z8plW9ZcLxOj9goPyMzI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:35:11 2025 by rpki-client