Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/347bd85e-86c7-3d36-ab37-e1a101ccae5b.roa
File: 347bd85e-86c7-3d36-ab37-e1a101ccae5b.roa (raw, json)
Hash identifier: qySBPQSNBMlEfVHNBf6lClBuMSGPcFm1P3p9dqU7cy0=
Subject key identifier: 84:0C:B0:7F:28:17:4C:CD:8C:25:47:16:CE:D4:55:F4:1B:D6:BE:DB
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F432858492CAE9858D9F377326D8BBF80
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/347bd85e-86c7-3d36-ab37-e1a101ccae5b.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 30238
IP address blocks: 68.232.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:98:58:d9:f3:77:32:6d:8b:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=0200ca0a-af13-4e51-857f-070dffc3eceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6f:81:58:3f:9f:31:0e:be:44:07:0c:e8:9e:
3a:51:d3:1e:03:49:c6:b3:f7:10:7b:1b:1c:28:e4:
7e:e6:a8:39:14:cf:36:bb:c5:04:f3:5d:10:ee:71:
e4:c1:df:6b:49:eb:29:5e:c5:8f:39:3c:5f:c9:81:
e8:74:86:49:d9:b8:34:a6:af:f9:96:58:6c:87:f6:
b3:0b:a0:00:ae:a2:08:cf:fd:a4:64:2d:cb:66:a0:
6a:03:ae:15:15:76:2c:40:b2:3d:97:a4:3d:73:58:
49:8c:08:72:4d:85:9d:af:b2:39:81:4b:c4:cb:1d:
31:0f:de:79:04:41:a8:8b:88:1a:cd:17:0b:dc:9e:
12:ee:7a:59:fe:b9:c1:0b:62:a8:2c:72:66:94:3a:
16:ec:85:98:42:87:ac:ce:7f:25:ce:ea:20:a1:82:
ed:42:aa:74:5f:d1:b5:7c:05:17:c1:3c:e9:04:62:
14:eb:c3:ae:51:73:7f:8d:52:18:c7:02:fe:5f:37:
a0:e0:29:8f:47:5a:c7:ab:ac:71:17:7d:74:42:7b:
a4:5b:f7:ca:b0:f3:5f:21:bd:8b:85:b1:a0:ba:c4:
56:37:e6:85:36:4d:ed:26:02:da:6c:2a:f3:b2:93:
ad:a8:6f:54:de:c8:17:27:49:bd:f4:94:37:8b:b0:
bd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0C:B0:7F:28:17:4C:CD:8C:25:47:16:CE:D4:55:F4:1B:D6:BE:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/347bd85e-86c7-3d36-ab37-e1a101ccae5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
68.232.150.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:c3:63:a8:0c:cd:19:b6:0c:00:c2:90:d6:52:6d:d2:7f:45:
f3:1e:54:83:ba:b6:3b:d6:c7:b6:e7:0d:a0:3e:2f:7c:43:ba:
c1:83:44:a4:d3:4a:9c:de:91:34:f1:92:f4:51:ce:c5:25:9c:
9f:e4:50:6c:96:28:a7:b8:10:e7:00:1c:12:81:08:a3:ee:10:
e1:5c:ad:eb:66:88:5a:15:d5:08:4e:42:35:bb:45:0c:44:52:
8a:67:d0:cc:64:50:d2:e7:f7:2a:e5:c5:f4:c3:ec:56:ea:c8:
fa:b7:c3:70:c1:be:0b:85:a3:2b:fd:55:34:1b:2f:52:d6:41:
db:cb:76:a3:56:45:76:28:93:91:28:5e:8d:83:f7:32:b0:5c:
7c:e6:09:50:77:ac:b1:32:e2:cb:90:4e:86:c3:09:3d:ba:e1:
da:14:4a:a4:c2:3e:f0:88:60:db:4d:a7:99:93:be:aa:f5:78:
a7:be:37:9f:3f:4e:12:7b:f2:e4:79:c9:b0:68:c9:50:a4:1c:
79:c0:c8:86:c7:06:55:94:16:fe:3a:d8:4d:ff:26:85:c3:c2:
e0:53:bf:a7:6b:7e:a9:6f:63:d7:18:3d:fe:9f:29:a3:e4:a6:
3e:bf:28:43:ae:ad:c7:46:a9:3f:08:17:48:0b:43:8b:f3:41:
83:89:14:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrphY2fN3Mm2Lv4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm
NGM5MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
MDIwMGNhMGEtYWYxMy00ZTUxLTg1N2YtMDcwZGZmYzNlY2ViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2+BWD+fMQ6+RAcM6J46UdMeA0nGs/cQexsc
KOR+5qg5FM82u8UE810Q7nHkwd9rSespXsWPOTxfyYHodIZJ2bg0pq/5llhsh/az
C6AArqIIz/2kZC3LZqBqA64VFXYsQLI9l6Q9c1hJjAhyTYWdr7I5gUvEyx0xD955
BEGoi4gazRcL3J4S7npZ/rnBC2KoLHJmlDoW7IWYQoeszn8lzuogoYLtQqp0X9G1
fAUXwTzpBGIU68OuUXN/jVIYxwL+Xzeg4CmPR1rHq6xxF310QnukW/fKsPNfIb2L
hbGgusRWN+aFNk3tJgLabCrzspOtqG9U3sgXJ0m99JQ3i7C9nwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIQMsH8oF0zNjCVHFs7UVfQb1r7bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4
OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMzQ3YmQ4NWUtODZjNy0z
ZDM2LWFiMzctZTFhMTAxY2NhZTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4
NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm
ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0
ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROiWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHzDY6gMzRm2DADCkNZSbdJ/RfMeVIO6tjvWx7bnDaA+L3xDusGDRKTT
SpzekTTxkvRRzsUlnJ/kUGyWKKe4EOcAHBKBCKPuEOFcretmiFoV1QhOQjW7RQxE
Uopn0MxkUNLn9yrlxfTD7FbqyPq3w3DBvguFoyv9VTQbL1LWQdvLdqNWRXYok5Eo
Xo2D9zKwXHzmCVB3rLEy4suQTobDCT264doUSqTCPvCIYNtNp5mTvqr1eKe+N58/
ThJ78uR5ybBoyVCkHHnAyIbHBlWUFv462E3/JoXDwuBTv6drfqlvY9cYPf6fKaPk
pj6/KEOurcdGqT8IF0gLQ4vzQYOJFJ8=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:39:34 2025 by rpki-client