Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d70420e9-c2e6-3225-9cf1-e268b1e29cc0.roa
File: d70420e9-c2e6-3225-9cf1-e268b1e29cc0.roa (raw, json)
Hash identifier: o5vWRP4SresBbAP024SUGcDsKJE5z+kMYMZhAqnUtXU=
Subject key identifier: 16:13:E4:5C:5D:29:61:ED:AD:6E:4D:57:11:C9:12:0B:00:C6:67:B4
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F432858492CAE8FE928A8AB2319619100
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d70420e9-c2e6-3225-9cf1-e268b1e29cc0.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 13576
IP address blocks: 216.249.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:8f:e9:28:a8:ab:23:19:61:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=5480fae8-0167-472b-b997-7a37759a19ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2f:a3:3c:6c:88:98:93:cc:7f:f3:9f:83:5f:
2e:4d:d9:ca:12:0e:1c:2a:a1:a3:84:80:e3:10:21:
32:32:dd:2b:08:a0:d6:8d:b1:02:2c:fe:0f:8a:c8:
9b:f1:a1:bd:92:91:46:6f:40:48:6c:44:57:e6:92:
68:8b:96:bc:58:68:81:2b:8b:96:af:97:26:54:9a:
e3:77:83:44:92:e1:da:cf:b7:ce:f7:b6:94:b4:c2:
06:6b:18:a9:05:ef:ee:54:f5:8a:c5:b9:f3:81:bf:
72:1d:1c:6a:9b:d5:c7:d9:2f:18:68:be:51:ee:24:
b8:1d:21:7e:d0:2b:f3:44:6b:03:a7:74:7b:4b:07:
b3:35:dd:21:88:dd:ab:2c:91:ee:52:94:64:ba:4b:
ae:a7:41:e6:75:1d:d2:fd:a5:98:72:0f:43:a3:74:
17:44:5a:1a:af:17:cd:ad:70:44:34:b6:7b:f6:3c:
e6:d9:db:98:8a:e7:c3:e7:92:89:a9:d9:ac:bd:95:
7f:b0:41:20:e8:84:2a:7d:23:0a:96:28:c6:c3:52:
d0:6e:42:0e:db:8d:40:ff:e3:e9:6b:a4:02:f6:0c:
2d:c0:95:54:3c:a6:17:65:c0:e4:77:9c:16:e8:c1:
51:14:9f:f7:8f:a6:d6:b0:bc:04:17:f8:5a:d9:4b:
7e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:13:E4:5C:5D:29:61:ED:AD:6E:4D:57:11:C9:12:0B:00:C6:67:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d70420e9-c2e6-3225-9cf1-e268b1e29cc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
216.249.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:c4:4f:0b:65:49:c5:62:a0:9c:08:20:81:04:0c:eb:64:bc:
04:95:52:0a:cc:16:b0:1e:99:19:d0:d6:3d:d7:87:75:37:e9:
9d:e3:fd:37:b7:3b:5c:78:f1:db:6e:c7:82:e4:03:2d:8c:ea:
66:e9:36:47:50:f2:40:13:c2:f2:1a:66:ae:f8:ef:e1:94:81:
97:ab:98:ca:7c:a0:54:3d:7b:4c:c0:1a:1e:70:11:8a:e1:07:
14:69:92:99:1c:af:2a:f4:da:19:99:1d:73:45:9c:6f:8e:1c:
90:21:80:d2:cf:2d:cb:03:42:40:c2:70:70:b4:fd:05:5d:a9:
3a:7e:9e:12:c9:53:1b:f4:37:3e:14:18:5e:26:dc:a9:87:8f:
9f:47:22:f8:9e:43:b6:32:84:fc:05:66:f2:92:73:15:ab:4d:
96:77:d7:82:41:3a:3c:57:23:87:93:ab:44:a4:c7:ed:e9:6c:
82:85:10:11:53:f3:7d:a5:44:51:f4:63:3c:b9:5b:39:62:43:
07:b4:bb:b5:c3:af:09:91:12:3e:af:78:02:a9:83:f6:d2:7e:
73:14:c4:7d:3f:c7:fb:e5:c5:b5:62:ad:57:07:26:4f:52:7d:
fe:df:01:35:fe:06:2b:93:20:e7:d7:de:bf:70:13:ca:16:8f:
07:e7:ee:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksro/pKKirIxlhkQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4
NWVmMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NTQ4MGZhZTgtMDE2Ny00NzJiLWI5OTctN2EzNzc1OWExOWVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjS+jPGyImJPMf/Ofg18uTdnKEg4cKqGjhIDj
ECEyMt0rCKDWjbECLP4Pisib8aG9kpFGb0BIbERX5pJoi5a8WGiBK4uWr5cmVJrj
d4NEkuHaz7fO97aUtMIGaxipBe/uVPWKxbnzgb9yHRxqm9XH2S8YaL5R7iS4HSF+
0CvzRGsDp3R7SwezNd0hiN2rLJHuUpRkukuup0HmdR3S/aWYcg9Do3QXRFoarxfN
rXBENLZ79jzm2duYiufD55KJqdmsvZV/sEEg6IQqfSMKlijGw1LQbkIO241A/+Pp
a6QC9gwtwJVUPKYXZcDkd5wW6MFRFJ/3j6bWsLwEF/ha2Ut+xwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBYT5FxdKWHtrW5NVxHJEgsAxme0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm
YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZDcwNDIwZTktYzJlNi0z
MjI1LTljZjEtZTI2OGIxZTI5Y2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2
ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm
ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh
ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PnTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACnETwtlScVioJwIIIEEDOtkvASVUgrMFrAemRnQ1j3Xh3U36Z3j/Te3
O1x48dtux4LkAy2M6mbpNkdQ8kATwvIaZq747+GUgZermMp8oFQ9e0zAGh5wEYrh
BxRpkpkcryr02hmZHXNFnG+OHJAhgNLPLcsDQkDCcHC0/QVdqTp+nhLJUxv0Nz4U
GF4m3KmHj59HIvieQ7YyhPwFZvKScxWrTZZ314JBOjxXI4eTq0Skx+3pbIKFEBFT
832lRFH0Yzy5WzliQwe0u7XDrwmREj6veAKpg/bSfnMUxH0/x/vlxbVirVcHJk9S
ff7fATX+BiuTIOfX3r9wE8oWjwfn7vs=
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:00:01 2025 by rpki-client