Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e64e45a5-7569-3712-a2c3-88a39a6b1f39.roa
File: e64e45a5-7569-3712-a2c3-88a39a6b1f39.roa (raw, json)
Hash identifier: my4ooQbHHo+NWtu5/rUjsRkXFdwrygmABMrybi43qvY=
Subject key identifier: 3D:A3:46:F2:8E:F9:80:3E:06:C5:82:7C:EE:1C:66:6E:3E:EE:61:2E
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F43285848B5231E5F2D09F888D253A780
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e64e45a5-7569-3712-a2c3-88a39a6b1f39.roa
Signing time: Wed 29 Jan 2025 17:18:57 +0000
ROA not before: Wed 29 Jan 2025 17:18:57 +0000
ROA not after: Tue 29 Apr 2025 16:18:57 +0000
asID: 399036
IP address blocks: 216.249.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b5:23:1e:5f:2d:09:f8:88:d2:53:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Jan 29 17:18:57 2025 GMT
Not After : Apr 29 16:18:57 2025 GMT
Subject: CN=ea4c7518-159b-4f14-9acb-20cc05a8fc1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e6:df:67:75:36:d6:d6:67:34:4f:f1:94:ca:
7f:f1:76:04:9d:6e:c3:4d:69:aa:b2:9a:91:09:c3:
a0:12:fa:c4:53:f0:f3:1c:29:88:ac:9d:b6:12:2d:
1b:77:28:9e:a5:7d:e4:5b:32:74:1f:43:3c:7c:f3:
e3:40:8a:fe:55:8c:26:2f:80:d8:b1:51:33:f1:78:
db:ad:ad:43:0c:9f:80:8f:bd:0a:6b:f8:0a:78:c4:
7c:26:73:16:5d:2b:fc:aa:79:a3:25:23:31:27:7d:
b0:ce:a3:6f:db:bd:82:49:63:ae:1c:0b:ed:e2:33:
0c:96:bf:35:f6:7c:82:01:6d:d3:2f:72:91:9e:b1:
4d:50:90:05:0e:e1:b1:0d:fd:90:e5:99:8b:c1:46:
ad:55:e8:d1:b8:5f:a3:f6:f2:57:70:8c:b8:e8:04:
9e:b8:c6:cd:c4:d3:ed:e3:b9:62:c9:e4:92:84:d0:
96:2d:fa:84:30:22:9b:54:58:19:35:37:ab:eb:af:
26:2e:9c:d8:00:05:49:e8:06:96:46:7e:29:8a:82:
46:ec:7c:c7:2a:30:77:48:9f:d9:a2:7c:88:a3:ac:
a9:c9:50:05:97:95:52:ee:5f:72:93:24:6b:d4:19:
2c:da:04:0d:1f:38:d2:7b:96:63:e5:dd:b9:4f:d5:
4a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A3:46:F2:8E:F9:80:3E:06:C5:82:7C:EE:1C:66:6E:3E:EE:61:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e64e45a5-7569-3712-a2c3-88a39a6b1f39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
216.249.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:43:ba:48:48:43:74:f0:99:00:84:36:4a:2b:e4:67:f6:12:
1b:39:04:a6:51:c5:2d:3e:12:ac:66:ac:c1:ca:26:68:f4:26:
2d:6a:94:29:02:82:22:78:65:d2:c5:ce:03:be:69:79:ab:58:
ee:9e:7c:5c:80:b7:dc:1e:b7:4e:fa:67:f0:3b:76:0c:18:8b:
b2:82:24:f6:a4:fc:c2:e3:66:40:94:ed:da:3a:03:45:96:0d:
9a:5e:d5:e3:5f:38:9a:14:34:e8:8f:3f:10:24:f1:bb:53:b5:
25:bd:4a:84:cd:26:99:07:89:5b:83:7d:0b:fb:4d:27:12:09:
a8:ca:7d:a9:62:53:03:7e:e2:98:06:28:44:30:f2:6e:94:81:
33:af:5a:34:c3:29:21:a6:99:19:f2:69:6d:e0:b8:ac:88:76:
e6:8d:fc:b4:e5:f3:f1:50:22:f0:fc:35:41:0c:2d:e3:81:51:
cd:73:ac:41:c8:f1:fe:76:7a:5d:48:7c:c8:1c:27:13:e0:7f:
34:8b:3d:dc:24:f8:ac:9a:4d:b5:9d:d5:2e:08:6f:ae:70:0b:
2a:60:c9:be:5a:9b:73:ac:45:71:21:95:b4:06:97:4c:81:a7:
b6:34:5f:48:a4:0a:7f:c7:c1:ff:43:c2:cb:ce:27:32:b1:80:
5b:cf:78:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi1Ix5fLQn4iNJTp4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4
NWVmMB4XDTI1MDEyOTE3MTg1N1oXDTI1MDQyOTE2MTg1N1owLzEtMCsGA1UEAxMk
ZWE0Yzc1MTgtMTU5Yi00ZjE0LTlhY2ItMjBjYzA1YThmYzFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvubfZ3U21tZnNE/xlMp/8XYEnW7DTWmqspqR
CcOgEvrEU/DzHCmIrJ22Ei0bdyiepX3kWzJ0H0M8fPPjQIr+VYwmL4DYsVEz8Xjb
ra1DDJ+Aj70Ka/gKeMR8JnMWXSv8qnmjJSMxJ32wzqNv272CSWOuHAvt4jMMlr81
9nyCAW3TL3KRnrFNUJAFDuGxDf2Q5ZmLwUatVejRuF+j9vJXcIy46ASeuMbNxNPt
47liyeSShNCWLfqEMCKbVFgZNTer668mLpzYAAVJ6AaWRn4pioJG7HzHKjB3SJ/Z
onyIo6ypyVAFl5VS7l9ykyRr1Bks2gQNHzjSe5Zj5d25T9VK8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD2jRvKO+YA+BsWCfO4cZm4+7mEuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm
YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZTY0ZTQ1YTUtNzU2OS0z
NzEyLWEyYzMtODhhMzlhNmIxZjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2
ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm
ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh
ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PndMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACRDukhIQ3TwmQCENkor5Gf2Ehs5BKZRxS0+EqxmrMHKJmj0Ji1qlCkC
giJ4ZdLFzgO+aXmrWO6efFyAt9wet076Z/A7dgwYi7KCJPak/MLjZkCU7do6A0WW
DZpe1eNfOJoUNOiPPxAk8btTtSW9SoTNJpkHiVuDfQv7TScSCajKfaliUwN+4pgG
KEQw8m6UgTOvWjTDKSGmmRnyaW3guKyIduaN/LTl8/FQIvD8NUEMLeOBUc1zrEHI
8f52el1IfMgcJxPgfzSLPdwk+KyaTbWd1S4Ib65wCypgyb5am3OsRXEhlbQGl0yB
p7Y0X0ikCn/Hwf9DwsvOJzKxgFvPeEc=
-----END CERTIFICATE-----
Generated at Sat Apr 12 10:11:34 2025 by rpki-client