Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/deb6fb94-6e53-3c64-92b3-0b44571a1cfa.roa
File: deb6fb94-6e53-3c64-92b3-0b44571a1cfa.roa (raw, json)
Hash identifier: DubHReOHkjGpERmkEjxzG5cezGkep2Q/+YBBZ5+4kuQ=
Subject key identifier: 0A:88:48:51:99:66:92:50:14:66:7F:BA:FE:31:DA:8D:57:0B:2C:20
Certificate issuer: /CN=fd691680-2c46-4e86-8545-3e0e0c0e305a
Certificate serial: 010D0C9F43285848BFEBA1B887A50F28CE55DE00
Authority key identifier: A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/deb6fb94-6e53-3c64-92b3-0b44571a1cfa.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 23028
IP address blocks: 216.31.33.0/24 maxlen: 24
216.31.34.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:a1:b8:87:a5:0f:28:ce:55:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd691680-2c46-4e86-8545-3e0e0c0e305a
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=a71f6e0c-65c7-4236-b7c2-b8398ea3e7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ec:08:24:b0:e4:bd:3b:4d:4c:45:f2:80:00:
fd:05:e8:3f:8d:91:84:4c:06:3d:f9:eb:af:34:20:
aa:53:76:ba:97:1d:6d:51:17:f1:36:a3:68:2e:94:
02:af:64:81:4e:fc:c2:95:f7:04:db:96:1d:c6:11:
4f:0a:98:2b:f7:59:2e:7f:0a:35:a5:e8:86:1c:3e:
05:0b:b7:fe:58:32:e0:18:d1:a6:a3:93:df:29:50:
7f:f0:9d:14:ab:5a:21:98:c7:b4:32:69:ca:24:c7:
fc:3f:be:26:9f:5a:d5:e3:e9:95:68:8d:bb:a5:48:
a6:a8:de:2f:49:f4:7f:f1:42:33:0d:f6:42:32:a2:
87:7c:58:c7:c2:8a:51:b0:04:c6:d0:0a:93:1b:25:
eb:d2:ad:e6:9d:bb:74:22:21:55:9e:34:47:a7:f2:
0c:eb:bc:83:75:0e:02:60:38:94:64:0c:b7:73:28:
a4:c9:e6:c3:7d:2e:49:81:01:d8:6f:09:51:48:8f:
e5:50:55:89:3b:76:0e:f2:33:df:bc:e0:ce:fe:34:
8a:f6:83:54:5f:d5:53:02:f5:8c:80:af:a7:4e:c4:
34:61:eb:e1:0e:b8:43:90:c4:8c:51:e7:b8:71:6f:
12:f2:ab:60:48:52:01:1e:c9:e2:79:0d:50:32:07:
60:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:88:48:51:99:66:92:50:14:66:7F:BA:FE:31:DA:8D:57:0B:2C:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/deb6fb94-6e53-3c64-92b3-0b44571a1cfa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.crl
X509v3 Authority Key Identifier:
keyid:A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer
sbgp-ipAddrBlock: critical
IPv4:
216.31.33.0-216.31.35.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:9c:9e:20:b2:63:66:1d:e1:e8:af:15:01:4d:b4:af:33:e3:
c6:8f:85:63:45:c2:e0:4c:7b:b5:2b:f2:64:ef:98:a2:79:4c:
66:e2:b3:f0:4b:bc:55:23:4e:2b:31:f8:92:bf:7c:11:7f:54:
99:b8:9f:4c:f4:6e:96:71:24:b2:b9:05:4e:35:0a:3a:cd:ba:
d5:5a:63:a5:9d:56:a9:f9:d9:11:e2:ce:92:d6:55:c9:e7:20:
2d:fc:59:91:da:a0:16:c7:21:e8:97:8a:e3:24:f9:1c:b0:f8:
e9:1d:e6:e4:03:41:3e:c9:d9:9a:20:9a:38:09:44:ab:84:67:
bf:6e:65:85:81:54:53:b1:49:6d:e4:89:ad:e8:25:41:9b:47:
ac:d7:88:a7:c5:a5:81:3e:ae:37:38:b0:63:9c:5a:a7:6b:a5:
e7:32:58:aa:27:5e:eb:51:81:a7:d0:0e:6d:51:d6:7d:44:8e:
ba:01:3d:d4:c7:04:48:fc:94:b7:0d:b7:e9:d5:4a:b8:b1:00:
0a:af:0a:84:32:37:a7:44:b0:c1:80:d0:22:a6:71:96:fa:e0:
4a:27:92:7c:06:22:93:da:bc:fd:69:09:ea:66:c0:88:dc:b9:
5e:dc:bb:d3:70:10:af:0c:9d:c2:c9:e5:15:f8:00:35:23:3f:
4b:88:0b:1a
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEi/66G4h6UPKM5V3gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQ2OTE2ODAtMmM0Ni00ZTg2LTg1NDUtM2UwZTBjMGUz
MDVhMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
YTcxZjZlMGMtNjVjNy00MjM2LWI3YzItYjgzOThlYTNlN2I4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+wIJLDkvTtNTEXygAD9Beg/jZGETAY9+euv
NCCqU3a6lx1tURfxNqNoLpQCr2SBTvzClfcE25YdxhFPCpgr91kufwo1peiGHD4F
C7f+WDLgGNGmo5PfKVB/8J0Uq1ohmMe0MmnKJMf8P74mn1rV4+mVaI27pUimqN4v
SfR/8UIzDfZCMqKHfFjHwopRsATG0AqTGyXr0q3mnbt0IiFVnjRHp/IM67yDdQ4C
YDiUZAy3cyikyebDfS5JgQHYbwlRSI/lUFWJO3YO8jPfvODO/jSK9oNUX9VTAvWM
gK+nTsQ0YevhDrhDkMSMUee4cW8S8qtgSFIBHsnieQ1QMgdgAwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFAqISFGZZpJQFGZ/uv4x2o1XCywgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZDY5
MTY4MC0yYzQ2LTRlODYtODU0NS0zZTBlMGMwZTMwNWEvZGViNmZiOTQtNmU1My0z
YzY0LTkyYjMtMGI0NDU3MWExY2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmQ2OTE2ODAtMmM0Ni00ZTg2LTg1
NDUtM2UwZTBjMGUzMDVhL2ZkNjkxNjgwLTJjNDYtNGU4Ni04NTQ1LTNlMGUwYzBl
MzA1YS5jcmwwHwYDVR0jBBgwFoAUpOLLMkryoIf+v49CQPitkF4srMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mZDY5MTY4MC0yYzQ2LTRlODYtODU0NS0zZTBl
MGMwZTMwNWEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADYHyED
BALYHyAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEADZyeILJjZh3h6K8VAU20rzPjxo+FY0XC4Ex7tSvyZO+Y
onlMZuKz8Eu8VSNOKzH4kr98EX9UmbifTPRulnEksrkFTjUKOs261VpjpZ1WqfnZ
EeLOktZVyecgLfxZkdqgFsch6JeK4yT5HLD46R3m5ANBPsnZmiCaOAlEq4Rnv25l
hYFUU7FJbeSJreglQZtHrNeIp8WlgT6uNziwY5xap2ul5zJYqide61GBp9AObVHW
fUSOugE91McESPyUtw236dVKuLEACq8KhDI3p0SwwYDQIqZxlvrgSieSfAYik9q8
/WkJ6mbAiNy5Xty703AQrwydwsnlFfgANSM/S4gLGg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:05 2025 by rpki-client