Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/c80cb437-d2fa-350c-bced-7fddd2666acd.roa
File: c80cb437-d2fa-350c-bced-7fddd2666acd.roa (raw, json)
Hash identifier: /e2snS6SsRORuw5AiJ8OQ3J7kcK9AmyXAIRMoRcn7gg=
Subject key identifier: 8A:4C:0C:E4:78:65:4E:CC:22:6B:24:34:4B:43:C3:38:6B:46:B4:DD
Certificate issuer: /CN=03d20efd-729c-46b2-b268-510d1f9f7dd3
Certificate serial: 010D0C9F43285849244E7E9B7C2C28FA52F35300
Authority key identifier: EE:28:10:71:FC:4B:A1:89:5B:96:F5:A7:39:16:B2:72:08:13:DF:D4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/c80cb437-d2fa-350c-bced-7fddd2666acd.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 0
IP address blocks: 206.108.34.0/23 maxlen: 23
2001:504:1a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:7e:9b:7c:2c:28:fa:52:f3:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d20efd-729c-46b2-b268-510d1f9f7dd3
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=f066242c-c41f-4320-84d7-654b1a3ca651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a3:ed:82:e2:1f:fb:6e:be:a0:da:4e:96:cf:
96:25:b3:42:bd:49:1e:72:d3:a6:c7:59:bb:46:df:
b7:ed:f8:5d:fc:ef:22:67:9f:c0:cf:9d:31:8b:d6:
5c:13:36:13:0c:88:82:d9:13:b0:e5:ad:28:92:8d:
47:a9:3b:23:51:91:1c:08:a7:1f:0e:52:ca:1a:bb:
16:f3:1d:de:68:3b:5b:0e:6b:95:f7:69:98:92:d3:
fa:c5:3c:92:cc:46:4f:d8:28:cd:7d:08:ff:d9:88:
3b:30:f6:7e:a2:77:ff:83:63:85:84:33:c6:ab:13:
ba:c9:e6:f9:c9:7e:05:35:c3:43:b1:79:67:46:5e:
06:4f:ee:27:20:c0:d7:de:67:a9:b8:28:a2:83:3f:
98:74:24:22:f3:d8:8e:54:dd:48:65:f7:16:cb:9a:
e6:96:a0:20:bd:e7:bc:e1:7f:ba:8e:d2:79:bb:7d:
e8:52:eb:ed:67:61:f0:76:33:a6:b3:da:65:65:5e:
ef:4e:d2:4e:a9:9e:b6:87:3c:25:3b:52:31:71:0f:
de:fc:89:c3:f9:b1:b6:ad:33:67:25:c9:ee:d9:86:
ec:02:71:76:ad:40:d5:39:17:25:ff:24:38:51:16:
de:49:76:a4:ed:3a:97:e6:6c:58:d4:00:88:5d:be:
a9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4C:0C:E4:78:65:4E:CC:22:6B:24:34:4B:43:C3:38:6B:46:B4:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/c80cb437-d2fa-350c-bced-7fddd2666acd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/03d20efd-729c-46b2-b268-510d1f9f7dd3.crl
X509v3 Authority Key Identifier:
keyid:EE:28:10:71:FC:4B:A1:89:5B:96:F5:A7:39:16:B2:72:08:13:DF:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3.cer
sbgp-ipAddrBlock: critical
IPv4:
206.108.34.0/23
IPv6:
2001:504:1a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:1a:9c:01:f6:af:f5:bd:54:24:14:ce:24:71:b5:55:e1:85:
eb:f5:e9:bb:ae:f6:0b:08:32:99:f3:9b:6f:fa:db:3a:ff:6e:
db:6e:74:80:b2:24:9d:d1:dd:86:c0:13:e3:6c:4e:f3:2c:f6:
40:fa:96:07:15:2a:84:e2:68:da:4a:85:3e:40:64:87:8f:c4:
c1:f2:fa:33:63:57:68:a3:94:e5:0e:9b:ac:5b:b0:98:d4:36:
a2:62:93:62:8c:1b:5c:e0:47:17:0f:95:8f:3d:2c:75:e3:88:
4b:be:2c:8d:d0:55:ad:64:27:b9:2c:f2:c0:bf:81:53:04:01:
22:01:24:93:f1:5c:45:6f:06:2b:85:44:cb:ca:32:4a:cc:ea:
59:92:24:78:db:e9:b4:3b:28:da:49:af:69:36:c4:05:63:73:
a3:dd:f3:c8:8e:79:e0:86:a8:32:b0:d7:e9:ef:3c:79:d2:3e:
2a:37:f5:63:d7:22:b3:1d:46:1c:b3:62:49:b9:29:9b:18:96:
0d:b9:58:a5:c2:30:05:69:df:2e:c4:28:46:ee:cc:77:33:00:
1c:8f:45:70:0e:c9:60:ec:b7:b3:ea:da:21:ef:72:58:ec:52:
f0:b6:90:21:e7:83:d4:f9:b5:97:c6:be:db:4a:43:2a:d8:5f:
c1:ce:f7:85
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEkkTn6bfCwo+lLzUwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDNkMjBlZmQtNzI5Yy00NmIyLWIyNjgtNTEwZDFmOWY3
ZGQzMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk
ZjA2NjI0MmMtYzQxZi00MzIwLTg0ZDctNjU0YjFhM2NhNjUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaPtguIf+26+oNpOls+WJbNCvUkectOmx1m7
Rt+37fhd/O8iZ5/Az50xi9ZcEzYTDIiC2ROw5a0oko1HqTsjUZEcCKcfDlLKGrsW
8x3eaDtbDmuV92mYktP6xTySzEZP2CjNfQj/2Yg7MPZ+onf/g2OFhDPGqxO6yeb5
yX4FNcNDsXlnRl4GT+4nIMDX3mepuCiigz+YdCQi89iOVN1IZfcWy5rmlqAgvee8
4X+6jtJ5u33oUuvtZ2HwdjOms9plZV7vTtJOqZ62hzwlO1IxcQ/e/InD+bG2rTNn
Jcnu2YbsAnF2rUDVORcl/yQ4URbeSXak7TqX5mxY1ACIXb6pEwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFIpMDOR4ZU7MImskNEtDwzhrRrTdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Qy
MGVmZC03MjljLTQ2YjItYjI2OC01MTBkMWY5ZjdkZDMvYzgwY2I0MzctZDJmYS0z
NTBjLWJjZWQtN2ZkZGQyNjY2YWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNkMjBlZmQtNzI5Yy00NmIyLWIy
NjgtNTEwZDFmOWY3ZGQzLzAzZDIwZWZkLTcyOWMtNDZiMi1iMjY4LTUxMGQxZjlm
N2RkMy5jcmwwHwYDVR0jBBgwFoAU7igQcfxLoYlblvWnORaycggT39QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2QyMGVmZC03MjljLTQ2YjItYjI2OC01MTBk
MWY5ZjdkZDMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBzmwiMA8E
AgACMAkDBwAgAQUEABowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABxqcAfav9b1UJBTOJHG1VeGF6/Xpu672
CwgymfObb/rbOv9u2250gLIkndHdhsAT42xO8yz2QPqWBxUqhOJo2kqFPkBkh4/E
wfL6M2NXaKOU5Q6brFuwmNQ2omKTYowbXOBHFw+Vjz0sdeOIS74sjdBVrWQnuSzy
wL+BUwQBIgEkk/FcRW8GK4VEy8oySszqWZIkeNvptDso2kmvaTbEBWNzo93zyI55
4IaoMrDX6e88edI+Kjf1Y9cisx1GHLNiSbkpmxiWDblYpcIwBWnfLsQoRu7MdzMA
HI9FcA7JYOy3s+raIe9yWOxS8LaQIeeD1Pm1l8a+20pDKthfwc73hQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:02:22 2025 by rpki-client