Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/858fa4a0-d36b-3f3e-9f00-bf6774b3245c.roa
File: 858fa4a0-d36b-3f3e-9f00-bf6774b3245c.roa (raw, json)
Hash identifier: IPinqGH5WCgxBG71FINrPW+T0jZE97v1pKAz4zEW3n0=
Subject key identifier: BA:93:58:44:B9:CE:10:AC:CA:13:44:13:34:51:48:53:77:C1:7F:F1
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F4328584937D92FA18B2E43C148624380
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/858fa4a0-d36b-3f3e-9f00-bf6774b3245c.roa
Signing time: Mon 17 Mar 2025 13:00:52 +0000
ROA not before: Mon 17 Mar 2025 13:00:52 +0000
ROA not after: Sun 15 Jun 2025 13:00:52 +0000
asID: 13576
IP address blocks: 216.249.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:37:d9:2f:a1:8b:2e:43:c1:48:62:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Mar 17 13:00:52 2025 GMT
Not After : Jun 15 13:00:52 2025 GMT
Subject: CN=ea74931c-5f1a-4138-8d30-28180623d477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:29:52:e6:68:bc:2f:33:5a:f7:87:65:d5:9f:
3d:0f:7a:de:15:99:fd:ce:09:31:d9:57:26:3f:04:
17:9e:27:44:61:c9:71:70:24:cc:b4:16:a4:68:4c:
0f:40:92:a6:59:ae:85:35:48:41:6c:25:3e:6e:bc:
cf:e9:06:a1:f2:d6:d3:ed:94:d5:19:09:7b:24:0b:
9b:fb:a8:03:81:79:b6:87:bd:c3:f8:5f:e6:42:b8:
f1:c0:ee:aa:dd:e0:0c:34:45:b9:b0:24:96:cb:5b:
00:4d:7e:62:a7:c3:bd:dc:f1:14:de:04:79:69:bc:
90:2b:ff:8f:5f:13:4c:0a:2f:0b:1b:de:88:47:ac:
98:b4:68:c5:f7:0f:c3:c0:3f:1f:81:c6:9b:93:3e:
00:09:a9:e9:51:0f:a2:f4:48:ff:7b:47:0c:c0:88:
9d:43:22:9f:79:2f:57:0e:76:fd:69:86:88:cf:68:
dd:a7:5a:2e:df:d1:9d:75:bb:f6:d5:aa:b9:56:1b:
d2:5e:d6:f7:c9:72:14:83:6a:f4:d6:67:f9:f5:c8:
4d:2b:d9:06:d7:f8:a9:63:82:0a:f1:7b:0d:7e:b2:
a7:e3:18:2c:d4:ef:d4:e8:92:16:0f:b2:e4:aa:41:
cf:b0:95:f7:da:ab:db:83:29:32:98:b0:59:d0:00:
ba:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:93:58:44:B9:CE:10:AC:CA:13:44:13:34:51:48:53:77:C1:7F:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/858fa4a0-d36b-3f3e-9f00-bf6774b3245c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
216.249.244.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:79:0a:c7:19:ff:4d:18:da:da:b8:c1:61:b8:59:98:34:c7:
ac:12:ab:d6:ae:26:7f:6e:f4:bb:f7:8d:c5:dd:8a:1a:37:06:
2c:cf:ee:54:99:18:2c:8c:f7:9c:a5:fb:d7:aa:31:5c:2f:74:
a2:8d:94:a9:a7:c9:23:bc:07:29:1f:25:13:cf:6b:ba:71:54:
63:2f:45:e2:82:ff:d7:17:2f:a1:60:94:88:87:4d:66:9a:bb:
8b:dd:dd:6d:5d:9a:65:c4:6c:da:a5:f9:14:3d:5d:c0:53:70:
f7:53:6f:0c:43:24:be:cb:bf:fc:e6:18:07:3a:c3:2b:db:25:
62:e6:a5:8d:32:e5:34:11:64:52:00:30:a9:b1:eb:81:6a:16:
8b:1d:1f:4c:21:8a:4b:9a:ad:f3:f7:40:bb:64:fb:8e:77:f9:
07:9e:9f:8d:64:a6:db:28:df:cf:e8:4d:95:03:15:c5:a7:a7:
ce:8b:50:54:f9:f6:7d:a6:0a:ad:63:43:28:59:22:f5:9d:39:
bd:30:45:87:3b:bb:16:eb:98:e2:db:e1:8f:c9:fe:6f:18:89:
1a:76:e8:eb:13:66:a7:2a:f0:3f:e6:71:c7:7e:0c:09:62:53:
0d:60:46:c0:81:cd:d3:ab:16:5e:0f:22:c0:20:12:03:ff:84:
c3:01:3a:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk32S+hiy5DwUhiQ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4
NWVmMB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZWE3NDkzMWMtNWYxYS00MTM4LThkMzAtMjgxODA2MjNkNDc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhilS5mi8LzNa94dl1Z89D3reFZn9zgkx2Vcm
PwQXnidEYclxcCTMtBakaEwPQJKmWa6FNUhBbCU+brzP6Qah8tbT7ZTVGQl7JAub
+6gDgXm2h73D+F/mQrjxwO6q3eAMNEW5sCSWy1sATX5ip8O93PEU3gR5abyQK/+P
XxNMCi8LG96IR6yYtGjF9w/DwD8fgcabkz4ACanpUQ+i9Ej/e0cMwIidQyKfeS9X
Dnb9aYaIz2jdp1ou39Gddbv21aq5VhvSXtb3yXIUg2r01mf59chNK9kG1/ipY4IK
8XsNfrKn4xgs1O/U6JIWD7LkqkHPsJX32qvbgykymLBZ0AC66wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLqTWES5zhCsyhNEEzRRSFN3wX/xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm
YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvODU4ZmE0YTAtZDM2Yi0z
ZjNlLTlmMDAtYmY2Nzc0YjMyNDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2
ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm
ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh
ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2Pn0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAZ5CscZ/00Y2tq4wWG4WZg0x6wSq9auJn9u9Lv3jcXdiho3BizP7lSZ
GCyM95yl+9eqMVwvdKKNlKmnySO8BykfJRPPa7pxVGMvReKC/9cXL6FglIiHTWaa
u4vd3W1dmmXEbNql+RQ9XcBTcPdTbwxDJL7Lv/zmGAc6wyvbJWLmpY0y5TQRZFIA
MKmx64FqFosdH0whikuarfP3QLtk+453+Qeen41kptso38/oTZUDFcWnp86LUFT5
9n2mCq1jQyhZIvWdOb0wRYc7uxbrmOLb4Y/J/m8YiRp26OsTZqcq8D/mccd+DAli
Uw1gRsCBzdOrFl4PIsAgEgP/hMMBOoA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:26:05 2025 by rpki-client