Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/aefaffa5-f3e0-3cff-b520-95718774c4ca.roa
File: aefaffa5-f3e0-3cff-b520-95718774c4ca.roa (raw, json)
Hash identifier: ZKILJN5tVOErr7w+fIA+iZrsenwAW6/B4JALpCkv9sQ=
Subject key identifier: CE:3B:05:63:84:70:3D:68:1F:6F:96:E2:4C:5E:18:41:25:B5:2F:A0
Certificate issuer: /CN=e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a
Certificate serial: 010D0C9F4328584953C415D35A0B652279E99900
Authority key identifier: 4E:6B:2C:DE:04:7A:9D:BE:6D:A4:92:3D:62:DD:65:18:18:1C:B8:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/aefaffa5-f3e0-3cff-b520-95718774c4ca.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 397745
IP address blocks: 167.100.16.0/22 maxlen: 22
216.47.38.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:15:d3:5a:0b:65:22:79:e9:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=defda5bf-d91b-4923-b895-f1f9d285f6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:95:79:42:8e:43:fa:94:55:9e:a4:fb:da:e8:
44:c4:f1:60:c3:28:8d:ac:44:91:8e:2d:68:df:7e:
b0:1b:ea:1a:83:76:6a:03:bb:23:e9:2c:f7:b8:ee:
7f:5f:5d:db:2b:97:23:4e:f1:b1:2d:6c:61:9d:1f:
d0:2d:32:05:f0:86:75:ff:39:e6:31:6f:d3:2e:82:
da:f1:75:80:0a:13:94:25:78:f3:ac:49:8a:4a:f3:
99:4e:29:b0:4b:83:dc:8f:6f:93:6d:a7:62:2e:b2:
49:d4:b8:cd:6d:ff:9d:01:fc:78:f2:d7:98:b4:22:
cd:2d:44:0f:f7:70:d5:24:87:47:c6:8d:e9:aa:fa:
d7:b2:a9:7f:86:13:cb:84:24:74:f7:0f:0c:0a:3e:
39:0e:d6:9d:48:36:f4:e9:9b:f7:66:64:fe:8a:da:
c7:48:a9:cd:38:f5:e3:67:93:97:40:96:f8:bf:98:
6e:fd:06:37:e1:33:49:c0:30:f8:71:ea:c0:c5:00:
53:d5:28:7d:62:4d:3c:38:e8:7e:5c:64:76:94:e5:
fd:40:cf:37:80:e5:19:5f:50:1e:23:18:82:03:7e:
04:84:50:e8:79:ba:2a:c7:c8:94:82:f7:fd:17:a2:
32:26:e9:11:7d:72:83:bf:45:9e:6d:f7:77:42:5c:
d8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3B:05:63:84:70:3D:68:1F:6F:96:E2:4C:5E:18:41:25:B5:2F:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/aefaffa5-f3e0-3cff-b520-95718774c4ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.crl
X509v3 Authority Key Identifier:
keyid:4E:6B:2C:DE:04:7A:9D:BE:6D:A4:92:3D:62:DD:65:18:18:1C:B8:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer
sbgp-ipAddrBlock: critical
IPv4:
167.100.16.0/22
216.47.38.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
e4:4d:5a:65:f6:ce:37:b2:a4:2e:c0:21:71:76:dd:7b:3f:05:
cd:f8:53:d3:00:e2:fa:12:91:71:85:b1:72:3d:e2:7f:e5:d5:
34:49:84:8d:52:c5:09:0e:fb:c4:14:e1:d6:b2:92:a7:b0:1b:
05:69:d2:55:8b:25:92:73:c7:74:aa:bd:27:23:33:a5:a9:15:
04:bc:9c:70:ca:be:a7:88:cd:fd:b2:5a:b7:26:88:f3:de:bc:
bb:e2:19:85:66:dd:bf:72:08:93:b7:28:ba:07:c1:cb:7f:a8:
bd:d9:8d:48:06:0f:be:6a:06:e9:4c:e9:f1:5e:19:8a:88:5e:
20:78:ca:7d:90:b0:d9:38:1a:dc:44:fd:0c:9e:89:d2:8f:d9:
c4:ab:a2:40:69:97:1b:f9:57:ab:94:d5:ad:16:ae:44:86:7f:
c0:39:12:ff:01:ac:1a:5c:84:37:2b:39:d9:1f:9f:16:3e:ae:
4f:ad:1f:83:cc:81:3c:8d:48:b2:ad:85:79:a9:d6:0b:cd:5a:
8c:22:73:be:7d:64:33:d3:d9:3b:60:d4:3e:19:e5:7f:37:a7:
9f:06:ee:95:c1:1e:fc:3a:31:5a:51:0b:4e:19:0a:d4:ca:4d:
67:0d:a9:90:a1:fe:90:27:27:9c:bc:87:bd:38:e8:58:ba:c1:
31:15:43:24
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWElTxBXTWgtlInnpmQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYzM2I0YjEtYzJiMi00NGQ1LWExZWMtM2ZlOGUxZjk3
NzNhMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZGVmZGE1YmYtZDkxYi00OTIzLWI4OTUtZjFmOWQyODVmNmYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZV5Qo5D+pRVnqT72uhExPFgwyiNrESRji1o
336wG+oag3ZqA7sj6Sz3uO5/X13bK5cjTvGxLWxhnR/QLTIF8IZ1/znmMW/TLoLa
8XWAChOUJXjzrEmKSvOZTimwS4Pcj2+TbadiLrJJ1LjNbf+dAfx48teYtCLNLUQP
93DVJIdHxo3pqvrXsql/hhPLhCR09w8MCj45DtadSDb06Zv3ZmT+itrHSKnNOPXj
Z5OXQJb4v5hu/QY34TNJwDD4cerAxQBT1Sh9Yk08OOh+XGR2lOX9QM83gOUZX1Ae
IxiCA34EhFDoeboqx8iUgvf9F6IyJukRfXKDv0Webfd3QlzYSQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFM47BWOEcD1oH2+W4kxeGEEltS+gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNjMz
YjRiMS1jMmIyLTQ0ZDUtYTFlYy0zZmU4ZTFmOTc3M2EvYWVmYWZmYTUtZjNlMC0z
Y2ZmLWI1MjAtOTU3MTg3NzRjNGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTYzM2I0YjEtYzJiMi00NGQ1LWEx
ZWMtM2ZlOGUxZjk3NzNhL2U2MzNiNGIxLWMyYjItNDRkNS1hMWVjLTNmZThlMWY5
NzczYS5jcmwwHwYDVR0jBBgwFoAUTmss3gR6nb5tpJI9Yt1lGBgcuKowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lNjMzYjRiMS1jMmIyLTQ0ZDUtYTFlYy0zZmU4
ZTFmOTc3M2EuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCp2QQAwQB
2C8mMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAORNWmX2zjeypC7AIXF23Xs/Bc34U9MA4voSkXGFsXI94n/l
1TRJhI1SxQkO+8QU4daykqewGwVp0lWLJZJzx3SqvScjM6WpFQS8nHDKvqeIzf2y
WrcmiPPevLviGYVm3b9yCJO3KLoHwct/qL3ZjUgGD75qBulM6fFeGYqIXiB4yn2Q
sNk4GtxE/QyeidKP2cSrokBplxv5V6uU1a0WrkSGf8A5Ev8BrBpchDcrOdkfnxY+
rk+tH4PMgTyNSLKthXmp1gvNWowic759ZDPT2Ttg1D4Z5X83p58G7pXBHvw6MVpR
C04ZCtTKTWcNqZCh/pAnJ5y8h7046Fi6wTEVQyQ=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:45:20 2025 by rpki-client