Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/1d7fb1c4-c967-34b2-b14f-95206db75b1c.roa
File: 1d7fb1c4-c967-34b2-b14f-95206db75b1c.roa (raw, json)
Hash identifier: XWfNGqHw6dYFpsCl+EruZu6LK/eEkpo2gFVGcjtFB9w=
Subject key identifier: F3:35:97:B0:1A:B2:EB:6A:94:73:7C:E7:C9:79:FA:6C:A2:5F:73:52
Certificate issuer: /CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50
Certificate serial: 010D0C9F43285849176D0D5207DF3FB96DDA9F00
Authority key identifier: 39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/1d7fb1c4-c967-34b2-b14f-95206db75b1c.roa
Signing time: Wed 05 Mar 2025 22:17:09 +0000
ROA not before: Wed 05 Mar 2025 22:17:09 +0000
ROA not after: Tue 03 Jun 2025 21:17:09 +0000
asID: 33164
IP address blocks: 172.97.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:6d:0d:52:07:df:3f:b9:6d:da:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50
Validity
Not Before: Mar 5 22:17:09 2025 GMT
Not After : Jun 3 21:17:09 2025 GMT
Subject: CN=193bd4ac-0ad8-43e6-a60c-cff56cde40af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3d:61:22:46:4c:28:c6:62:b0:32:87:f9:8e:
00:64:35:d5:88:a5:2e:10:89:ae:c9:ae:8d:a9:31:
81:af:1f:ca:d3:e7:a9:b3:f4:1b:fb:87:2f:4c:10:
15:0e:10:ad:22:a7:54:7f:34:8d:24:7c:80:54:74:
5d:ae:a0:7f:14:e1:b3:4a:71:5c:d6:62:90:77:39:
c0:ec:1e:4b:89:6c:a7:82:0f:3e:92:3d:39:42:05:
14:76:30:28:02:7c:5a:84:2f:2b:e8:d0:10:4d:63:
eb:5e:e2:1d:f8:66:6f:24:c5:6c:75:b9:46:ef:2f:
16:1d:3a:37:c4:18:be:a9:49:81:b0:bd:e6:52:79:
26:ad:a7:5d:d7:e1:fb:ab:7d:81:a0:4f:32:af:76:
5d:65:b5:4d:b5:a1:7b:fa:db:e9:9b:32:c8:55:44:
3b:4f:1c:4f:b3:cc:93:9e:31:31:81:2b:6c:3b:fa:
55:6e:f3:58:17:5f:80:4a:5c:cf:5b:19:95:86:ca:
5c:27:30:b6:a2:e5:5a:7c:0d:43:9a:6b:05:04:bc:
e0:0a:f8:41:8d:3f:2f:95:9a:62:9e:17:ff:7e:43:
1a:79:ad:3b:4b:a6:bb:05:08:d9:7c:ed:f9:f5:e6:
e3:6c:cb:5f:06:ed:1a:6a:f7:47:65:1c:84:47:c7:
8f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:35:97:B0:1A:B2:EB:6A:94:73:7C:E7:C9:79:FA:6C:A2:5F:73:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/1d7fb1c4-c967-34b2-b14f-95206db75b1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl
X509v3 Authority Key Identifier:
keyid:39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer
sbgp-ipAddrBlock: critical
IPv4:
172.97.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:7d:ac:08:ab:c6:ed:f8:fa:dc:ca:44:3f:1f:af:90:dc:14:
dc:91:39:e0:0d:ea:16:46:61:15:04:db:6f:ae:3f:41:44:a2:
63:16:6d:e9:70:53:9a:73:75:03:d7:19:08:14:e2:a5:9a:4c:
17:47:fe:e0:45:dd:ce:be:bf:44:50:f1:82:03:bc:33:9d:9d:
b7:f7:da:a3:dc:f6:44:c1:3d:cc:6d:58:f7:ed:15:aa:e9:38:
e9:d4:89:8f:2d:85:5c:e1:94:b2:c4:45:24:af:f1:16:d6:1a:
26:6b:cb:1f:f8:eb:d3:84:6a:fe:07:22:ce:d3:ab:32:34:85:
f3:cf:2d:39:5d:16:83:c0:9d:10:c7:b7:ab:4b:ae:e4:50:4f:
2b:d3:53:91:b7:d0:bf:73:a7:73:f5:1a:47:d7:ad:c8:ed:cc:
85:e9:ff:d9:72:11:be:99:63:bd:f7:d3:2b:6d:35:38:55:09:
74:9b:e1:f3:1c:bb:88:2a:de:00:94:28:b0:6d:b3:b0:e6:0a:
2c:b1:5f:bc:60:9c:2a:4d:5f:2f:c5:ff:cd:e2:25:ee:28:c6:
c5:a1:00:65:b0:86:a0:d0:23:5e:29:1a:cf:6d:92:cb:88:e2:
e7:ad:db:a6:62:f3:59:83:71:c5:2c:10:1c:37:3b:1f:98:49:
39:94:c7:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkXbQ1SB98/uW3anwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQyZWY5OWMtYzAwYy00MzFiLTg1MTktY2FiYjlkMmE0
ZDUwMB4XDTI1MDMwNTIyMTcwOVoXDTI1MDYwMzIxMTcwOVowLzEtMCsGA1UEAxMk
MTkzYmQ0YWMtMGFkOC00M2U2LWE2MGMtY2ZmNTZjZGU0MGFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4j1hIkZMKMZisDKH+Y4AZDXViKUuEImuya6N
qTGBrx/K0+eps/Qb+4cvTBAVDhCtIqdUfzSNJHyAVHRdrqB/FOGzSnFc1mKQdznA
7B5LiWyngg8+kj05QgUUdjAoAnxahC8r6NAQTWPrXuId+GZvJMVsdblG7y8WHTo3
xBi+qUmBsL3mUnkmradd1+H7q32BoE8yr3ZdZbVNtaF7+tvpmzLIVUQ7TxxPs8yT
njExgStsO/pVbvNYF1+ASlzPWxmVhspcJzC2ouVafA1DmmsFBLzgCvhBjT8vlZpi
nhf/fkMaea07S6a7BQjZfO359ebjbMtfBu0aavdHZRyER8ePuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPM1l7AasutqlHN858l5+myiX3NSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mZDJl
Zjk5Yy1jMDBjLTQzMWItODUxOS1jYWJiOWQyYTRkNTAvMWQ3ZmIxYzQtYzk2Ny0z
NGIyLWIxNGYtOTUyMDZkYjc1YjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZmQyZWY5OWMtYzAwYy00MzFiLTg1
MTktY2FiYjlkMmE0ZDUwL2ZkMmVmOTljLWMwMGMtNDMxYi04NTE5LWNhYmI5ZDJh
NGQ1MC5jcmwwHwYDVR0jBBgwFoAUOQF+i31ACX9kDx3DLqvfnnmLytUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mZDJlZjk5Yy1jMDBjLTQzMWItODUxOS1jYWJi
OWQyYTRkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrGEIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGZ9rAirxu34+tzKRD8fr5DcFNyROeAN6hZGYRUE22+uP0FEomMWbelw
U5pzdQPXGQgU4qWaTBdH/uBF3c6+v0RQ8YIDvDOdnbf32qPc9kTBPcxtWPftFarp
OOnUiY8thVzhlLLERSSv8RbWGiZryx/469OEav4HIs7TqzI0hfPPLTldFoPAnRDH
t6tLruRQTyvTU5G30L9zp3P1GkfXrcjtzIXp/9lyEb6ZY7330yttNThVCXSb4fMc
u4gq3gCUKLBts7DmCiyxX7xgnCpNXy/F/83iJe4oxsWhAGWwhqDQI14pGs9tksuI
4uet26Zi81mDccUsEBw3Ox+YSTmUx4w=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:35:38 2025 by rpki-client