Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97916c1f-c888-441b-ba14-786bf9f69cfb/c0a28294-1d63-3b20-a63e-87954a0cc75c.roa
File: c0a28294-1d63-3b20-a63e-87954a0cc75c.roa (raw, json)
Hash identifier: JvrYPAStrgHqVP0P4aABFhd5c/EZ58sIKziHqIxXffg=
Subject key identifier: 00:A9:3A:DD:A5:C0:7C:6A:62:B6:0F:65:C8:5D:57:71:11:B9:CD:EA
Certificate issuer: /CN=97916c1f-c888-441b-ba14-786bf9f69cfb
Certificate serial: 010D0C9F432858487CEB2E28E282BCE5506AE200
Authority key identifier: E8:AC:7A:7B:F7:3D:66:E7:D8:0F:8F:FD:34:04:0D:D3:F4:33:DC:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97916c1f-c888-441b-ba14-786bf9f69cfb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97916c1f-c888-441b-ba14-786bf9f69cfb/c0a28294-1d63-3b20-a63e-87954a0cc75c.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 8075
IP address blocks: 216.73.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:2e:28:e2:82:bc:e5:50:6a:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97916c1f-c888-441b-ba14-786bf9f69cfb
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=bb17ac72-9eec-409a-bdb9-ffd11f76e582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c9:b6:23:8f:6e:3a:ee:32:32:0e:16:2b:32:
2c:7a:e8:7c:0b:e3:2a:1b:0a:9a:0c:99:5b:89:48:
c5:c3:04:05:c1:ef:46:63:07:b1:e8:6a:0f:0a:6c:
08:f7:05:a8:ff:81:06:40:4e:8b:32:a7:13:c0:32:
22:15:1d:42:b6:05:e3:66:4c:15:e5:ca:f8:76:b6:
c3:48:12:46:75:2a:66:07:4a:d4:fc:f9:04:02:d0:
41:f8:b1:62:0a:99:8b:dd:31:06:42:68:04:ba:33:
e1:da:7f:34:ef:47:cb:0e:82:91:b8:4c:04:44:f3:
71:33:f5:ab:fa:fb:a3:60:2b:2c:d7:f7:46:e2:20:
ab:8e:d2:ae:4a:e9:36:04:ae:74:6c:df:af:4b:41:
82:ea:d2:b1:15:2e:85:58:af:8e:58:d4:10:f3:00:
26:1a:15:51:0d:a5:95:13:09:8a:f5:5d:69:45:f0:
28:de:08:10:c7:80:e2:ff:34:31:74:a9:fb:8a:89:
fd:b2:ba:44:8a:1d:a3:73:0b:33:c5:b9:b6:36:52:
8d:dd:9e:e3:b9:12:54:be:f1:c1:e8:0e:84:4f:1f:
86:4c:2d:97:3f:ea:e5:25:30:05:47:04:59:5a:07:
23:31:9b:a8:8f:6b:2a:28:c7:ec:e1:d1:64:77:3e:
0d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A9:3A:DD:A5:C0:7C:6A:62:B6:0F:65:C8:5D:57:71:11:B9:CD:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97916c1f-c888-441b-ba14-786bf9f69cfb/c0a28294-1d63-3b20-a63e-87954a0cc75c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97916c1f-c888-441b-ba14-786bf9f69cfb/97916c1f-c888-441b-ba14-786bf9f69cfb.crl
X509v3 Authority Key Identifier:
keyid:E8:AC:7A:7B:F7:3D:66:E7:D8:0F:8F:FD:34:04:0D:D3:F4:33:DC:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97916c1f-c888-441b-ba14-786bf9f69cfb.cer
sbgp-ipAddrBlock: critical
IPv4:
216.73.187.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:87:18:44:a2:71:34:ad:6d:c0:ba:0f:c5:0a:d3:fe:4b:d6:
30:ba:01:7e:0d:30:aa:4c:b3:fa:28:f2:2d:61:46:08:9c:c7:
1e:13:25:2d:09:7b:62:3e:80:37:0a:26:77:00:1f:5d:3f:f8:
04:a7:82:9d:b9:8c:39:a9:ae:89:f0:46:a2:56:1b:2c:06:65:
7b:aa:92:fa:df:87:d5:f8:1a:06:6e:d1:27:5f:f4:9e:9a:ae:
86:74:f3:43:7b:8f:f0:9e:0e:f1:c2:91:24:b7:b0:ec:53:f6:
ba:25:fa:40:56:80:5a:e9:f4:93:bf:8a:83:62:07:89:ac:0b:
4f:75:b7:e8:a6:81:4c:23:08:10:78:b1:d3:40:12:52:35:d7:
7c:77:da:c1:bb:14:05:c6:7f:d9:aa:b9:97:6d:ad:c0:88:8f:
23:9d:76:30:f8:c5:77:f5:09:a2:97:f6:11:b6:87:8c:e5:49:
db:7a:6c:71:5c:67:31:58:26:a3:76:c4:67:05:34:f8:95:aa:
7e:a7:f1:a3:3a:79:1d:fa:c9:cb:f5:67:58:ad:99:48:80:bf:
e4:9a:75:fd:01:8c:31:b8:ba:73:2d:67:1b:d3:fe:c8:5b:b7:
d0:72:df:67:eb:77:fd:3c:ca:a9:30:b8:33:c1:6b:90:6f:11:
cc:d6:a6:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh86y4o4oK85VBq4gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTc5MTZjMWYtYzg4OC00NDFiLWJhMTQtNzg2YmY5ZjY5
Y2ZiMB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk
YmIxN2FjNzItOWVlYy00MDlhLWJkYjktZmZkMTFmNzZlNTgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMm2I49uOu4yMg4WKzIseuh8C+MqGwqaDJlb
iUjFwwQFwe9GYwex6GoPCmwI9wWo/4EGQE6LMqcTwDIiFR1CtgXjZkwV5cr4drbD
SBJGdSpmB0rU/PkEAtBB+LFiCpmL3TEGQmgEujPh2n8070fLDoKRuEwERPNxM/Wr
+vujYCss1/dG4iCrjtKuSuk2BK50bN+vS0GC6tKxFS6FWK+OWNQQ8wAmGhVRDaWV
EwmK9V1pRfAo3ggQx4Di/zQxdKn7ion9srpEih2jcwszxbm2NlKN3Z7juRJUvvHB
6A6ETx+GTC2XP+rlJTAFRwRZWgcjMZuoj2sqKMfs4dFkdz4NQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFACpOt2lwHxqYrYPZchdV3ERuc3qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85Nzkx
NmMxZi1jODg4LTQ0MWItYmExNC03ODZiZjlmNjljZmIvYzBhMjgyOTQtMWQ2My0z
YjIwLWE2M2UtODc5NTRhMGNjNzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTc5MTZjMWYtYzg4OC00NDFiLWJh
MTQtNzg2YmY5ZjY5Y2ZiLzk3OTE2YzFmLWM4ODgtNDQxYi1iYTE0LTc4NmJmOWY2
OWNmYi5jcmwwHwYDVR0jBBgwFoAU6Kx6e/c9ZufYD4/9NAQN0/Qz3AcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85NzkxNmMxZi1jODg4LTQ0MWItYmExNC03ODZi
ZjlmNjljZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Em7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFiHGESicTStbcC6D8UK0/5L1jC6AX4NMKpMs/oo8i1hRgicxx4TJS0J
e2I+gDcKJncAH10/+ASngp25jDmpronwRqJWGywGZXuqkvrfh9X4GgZu0Sdf9J6a
roZ080N7j/CeDvHCkSS3sOxT9rol+kBWgFrp9JO/ioNiB4msC091t+imgUwjCBB4
sdNAElI113x32sG7FAXGf9mquZdtrcCIjyOddjD4xXf1CaKX9hG2h4zlSdt6bHFc
ZzFYJqN2xGcFNPiVqn6n8aM6eR36ycv1Z1itmUiAv+Sadf0BjDG4unMtZxvT/shb
t9By32frd/08yqkwuDPBa5BvEczWpqk=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:36:41 2025 by rpki-client