Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/1b2b05f4-2df1-3ec4-8897-6f456902ef2f.roa
File: 1b2b05f4-2df1-3ec4-8897-6f456902ef2f.roa (raw, json)
Hash identifier: 1lX/20cg68EvPh/R80MCjeo4gE2sehGqecz6ys8+2IE=
Subject key identifier: 91:3E:83:5A:09:23:D4:56:C1:D4:09:20:E9:C6:DE:F5:9C:02:98:32
Certificate issuer: /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial: 010D0C9F43285847E78F546F424A02BD1E273540
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/1b2b05f4-2df1-3ec4-8897-6f456902ef2f.roa
Signing time: Sun 17 Nov 2024 02:00:28 +0000
ROA not before: Sun 17 Nov 2024 02:00:28 +0000
ROA not after: Sat 15 Feb 2025 02:00:28 +0000
asID: 401307
IP address blocks: 204.25.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e7:8f:54:6f:42:4a:02:bd:1e:27:35:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
Validity
Not Before: Nov 17 02:00:28 2024 GMT
Not After : Feb 15 02:00:28 2025 GMT
Subject: CN=dbab610d-d6e7-42cb-8696-6c9fad994467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4b:ce:09:08:74:07:bf:b1:b7:49:e9:80:90:
d9:46:1d:c3:11:f8:c7:27:93:55:e5:1a:57:4b:a3:
8f:40:3b:99:10:7c:81:5e:c0:ce:ca:87:87:68:17:
51:11:c8:f9:20:4a:53:75:96:d1:c1:5a:26:06:e6:
05:ae:1d:a9:f6:c1:be:2c:f8:9b:c3:62:71:d3:99:
d5:7a:e3:50:b2:83:c3:71:d4:5b:3a:c0:c6:5e:d5:
e0:52:bb:8e:a2:8a:4e:3d:d1:c3:30:8e:67:5f:a2:
59:f6:e0:9b:d2:76:6f:84:c2:0c:5a:29:47:1c:22:
d1:bf:76:c2:18:60:52:07:e6:cf:c3:74:3b:fd:47:
53:2f:e8:9f:3d:4e:29:6a:d6:fa:d3:9d:a9:0d:5a:
e4:31:0d:f0:af:81:6b:da:29:6d:bc:62:72:b6:5a:
5c:0d:35:c3:d1:6e:87:5c:5f:28:4a:58:c8:f4:34:
9b:84:de:54:99:e3:29:83:a4:03:2d:b8:2e:55:f3:
69:8e:35:81:ba:55:64:25:cc:dc:82:bb:0f:21:4c:
85:3c:ae:17:32:11:da:b8:61:34:6d:0e:f5:cd:17:
4e:8e:d5:ef:ca:fe:3a:dc:61:77:b9:3a:69:e7:be:
dc:92:c3:d1:ce:54:ca:36:6a:86:84:49:cd:96:b9:
e0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3E:83:5A:09:23:D4:56:C1:D4:09:20:E9:C6:DE:F5:9C:02:98:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/1b2b05f4-2df1-3ec4-8897-6f456902ef2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
X509v3 Authority Key Identifier:
keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
sbgp-ipAddrBlock: critical
IPv4:
204.25.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:65:3c:92:b7:2a:2a:21:ed:c9:88:7e:7e:8f:f5:70:0f:66:
1a:b8:d1:65:85:5b:df:b8:2e:75:55:35:f5:a6:e5:64:d0:d8:
6b:f8:76:e6:2e:46:c8:55:04:69:fa:72:7e:cc:9a:b9:2c:31:
6c:c6:dd:b6:aa:44:f2:9f:72:f6:a7:b0:c6:20:a8:ec:2a:fb:
11:6e:6d:7d:ae:e1:40:8c:59:b4:ba:ec:d5:d6:20:0b:32:2f:
0c:d6:da:df:ef:0f:55:01:60:28:e3:74:ca:96:53:6b:5b:f9:
22:91:f4:9c:6e:5a:60:5c:eb:67:3d:d1:de:c2:2d:18:51:15:
b4:3e:5c:c6:dc:2d:9c:61:f5:3a:4a:0c:9a:21:c1:54:83:ae:
bf:e4:bb:9c:bc:90:cf:68:19:a8:67:ff:d4:60:2b:ec:74:4b:
00:50:d9:b1:67:f9:17:b4:d2:10:98:7a:1b:e8:06:7c:f8:2c:
89:3f:d9:03:ce:92:ea:54:4c:6b:1c:29:d4:df:15:1a:2d:a4:
11:49:7d:68:19:c8:22:57:34:95:f8:0a:df:de:cb:aa:76:c9:
b9:e7:23:ff:5b:4f:71:d1:a6:b2:c5:3c:3d:c5:68:43:e9:29:
ea:95:33:26:7c:a2:50:4f:5a:2a:2b:4d:e7:9f:c0:d2:6b:30:
80:70:9b:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfnj1RvQkoCvR4nNUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjA2MzgxNGQtNTE4My00OWRlLTkwZWUtODRjYmJlY2Rl
NDIyMB4XDTI0MTExNzAyMDAyOFoXDTI1MDIxNTAyMDAyOFowLzEtMCsGA1UEAxMk
ZGJhYjYxMGQtZDZlNy00MmNiLTg2OTYtNmM5ZmFkOTk0NDY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkvOCQh0B7+xt0npgJDZRh3DEfjHJ5NV5RpX
S6OPQDuZEHyBXsDOyoeHaBdREcj5IEpTdZbRwVomBuYFrh2p9sG+LPibw2Jx05nV
euNQsoPDcdRbOsDGXtXgUruOoopOPdHDMI5nX6JZ9uCb0nZvhMIMWilHHCLRv3bC
GGBSB+bPw3Q7/UdTL+ifPU4patb6052pDVrkMQ3wr4Fr2iltvGJytlpcDTXD0W6H
XF8oSljI9DSbhN5UmeMpg6QDLbguVfNpjjWBulVkJczcgrsPIUyFPK4XMhHauGE0
bQ71zRdOjtXvyv463GF3uTpp577cksPRzlTKNmqGhEnNlrngQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJE+g1oJI9RWwdQJIOnG3vWcApgyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82MDYz
ODE0ZC01MTgzLTQ5ZGUtOTBlZS04NGNiYmVjZGU0MjIvMWIyYjA1ZjQtMmRmMS0z
ZWM0LTg4OTctNmY0NTY5MDJlZjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjA2MzgxNGQtNTE4My00OWRlLTkw
ZWUtODRjYmJlY2RlNDIyLzYwNjM4MTRkLTUxODMtNDlkZS05MGVlLTg0Y2JiZWNk
ZTQyMi5jcmwwHwYDVR0jBBgwFoAU+oFKWYuHd/AMGvqgYA7Dhlv3AcAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82MDYzODE0ZC01MTgzLTQ5ZGUtOTBlZS04NGNi
YmVjZGU0MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzBnYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABplPJK3Kioh7cmIfn6P9XAPZhq40WWFW9+4LnVVNfWm5WTQ2Gv4duYu
RshVBGn6cn7MmrksMWzG3baqRPKfcvansMYgqOwq+xFubX2u4UCMWbS67NXWIAsy
LwzW2t/vD1UBYCjjdMqWU2tb+SKR9JxuWmBc62c90d7CLRhRFbQ+XMbcLZxh9TpK
DJohwVSDrr/ku5y8kM9oGahn/9RgK+x0SwBQ2bFn+Re00hCYehvoBnz4LIk/2QPO
kupUTGscKdTfFRotpBFJfWgZyCJXNJX4Ct/ey6p2ybnnI/9bT3HRprLFPD3FaEPp
KeqVMyZ8olBPWiorTeefwNJrMIBwm3w=
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:52:50 2025 by rpki-client