Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/3cf4e6b1-4ee0-339c-bb5e-ba569af0282f.roa
File: 3cf4e6b1-4ee0-339c-bb5e-ba569af0282f.roa (raw, json)
Hash identifier: BhB94JaVW0t5X1GTnmv64j9tJ7cOWwjUM+PkKS90gTU=
Subject key identifier: 13:C8:3A:6A:3E:DD:BD:53:9A:E5:33:29:07:CC:E3:F7:B0:FB:78:F2
Certificate issuer: /CN=bf862f27-363f-42ce-ab7e-31739b3660a0
Certificate serial: 010D0C9F432858483885609B6EE6C7C110BAE080
Authority key identifier: FC:C9:FE:DA:2C:4E:20:D6:E2:7B:36:27:5C:01:34:62:A4:64:DA:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/3cf4e6b1-4ee0-339c-bb5e-ba569af0282f.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 53264
IP address blocks: 216.38.228.0/24 maxlen: 24
216.38.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:60:9b:6e:e6:c7:c1:10:ba:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf862f27-363f-42ce-ab7e-31739b3660a0
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=8f9efd6d-4682-4ee1-a8d7-3575bccfec4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:32:03:a3:65:3c:91:8d:58:4d:c6:1f:fe:e5:
ae:bc:d8:a2:5a:2e:70:cd:70:aa:5f:8f:4c:54:53:
93:ce:45:1f:1d:c4:03:e2:1c:53:66:da:9b:bc:37:
69:1d:70:2f:1e:a9:03:bd:95:1c:be:dc:83:99:41:
37:0f:e9:65:c9:65:6a:78:a2:53:29:98:11:f4:98:
56:71:be:54:50:0a:79:eb:64:28:e8:89:f7:35:84:
f6:b4:40:4c:c9:91:0e:d5:f7:e4:fd:8a:2f:6e:a8:
f5:f0:39:fc:9b:b9:cf:bd:13:81:6b:ca:e4:9b:b5:
6c:39:8f:df:f4:27:a5:bd:84:cc:52:a8:4b:2c:10:
08:55:c7:47:44:d4:c9:de:c8:a3:71:77:c8:76:51:
6b:d0:b9:3d:b6:74:de:77:5d:fb:1c:a9:91:23:e8:
94:37:8a:77:79:fe:f6:76:c0:44:04:6a:70:e5:02:
bd:d0:a2:8d:15:28:38:ab:e2:03:d9:cd:cd:76:2e:
f8:0a:fd:15:9a:da:2f:13:55:df:7c:62:0a:e6:d9:
5e:e0:42:d0:3f:0b:a9:2f:b7:56:19:34:54:4d:be:
88:ad:d3:5d:71:0a:e4:1a:f0:39:62:5d:c2:fa:4c:
51:85:ed:05:b7:0f:14:94:35:a5:1f:37:b8:21:49:
44:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C8:3A:6A:3E:DD:BD:53:9A:E5:33:29:07:CC:E3:F7:B0:FB:78:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/3cf4e6b1-4ee0-339c-bb5e-ba569af0282f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/bf862f27-363f-42ce-ab7e-31739b3660a0.crl
X509v3 Authority Key Identifier:
keyid:FC:C9:FE:DA:2C:4E:20:D6:E2:7B:36:27:5C:01:34:62:A4:64:DA:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0.cer
sbgp-ipAddrBlock: critical
IPv4:
216.38.228.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:f2:7f:f2:11:3a:c4:b2:c7:c3:97:73:74:71:f1:0b:43:76:
77:65:b9:3a:80:c6:6f:fd:19:3e:84:09:23:11:18:62:90:c3:
07:fb:59:b7:95:cc:d7:db:f4:44:13:84:f8:4d:c6:9f:8e:67:
5f:3e:f7:e9:5a:b1:c2:cb:af:a8:ad:2b:d5:19:9b:92:5c:01:
ab:87:2c:b5:36:00:5c:28:4d:63:b9:6d:09:f7:da:c0:16:bf:
0a:33:52:c9:36:61:1a:e6:44:0c:4e:71:a6:72:77:c1:a0:4a:
41:91:9f:fe:e2:68:0c:30:1b:a3:8b:81:ca:b0:b3:48:77:83:
f1:b1:cc:2f:b0:0e:57:bc:e5:31:12:38:b3:d7:eb:17:80:79:
9b:9d:ce:f9:a7:9e:35:3c:a1:97:1c:ea:b0:73:ab:16:71:60:
34:39:15:85:eb:28:83:5b:0b:c6:38:12:c1:5a:67:cf:14:5a:
d4:2e:da:ea:be:37:69:f9:fb:e6:e9:76:a9:a3:12:6f:c5:a1:
bf:1c:db:72:59:d3:d8:83:c6:f1:51:de:7c:fd:6c:37:b1:27:
19:e9:94:81:32:3c:c3:f7:4f:01:1f:a1:0d:ee:1f:fd:25:6d:
ea:cb:a0:77:b2:d2:fc:d0:3e:c4:5f:80:81:8f:40:21:76:46:
7d:e5:6c:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg4hWCbbubHwRC64IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmY4NjJmMjctMzYzZi00MmNlLWFiN2UtMzE3MzliMzY2
MGEwMB4XDTI0MTIxNjAyMDAzOVoXDTI1MDMxNjAxMDAzOVowLzEtMCsGA1UEAxMk
OGY5ZWZkNmQtNDY4Mi00ZWUxLWE4ZDctMzU3NWJjY2ZlYzRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDIDo2U8kY1YTcYf/uWuvNiiWi5wzXCqX49M
VFOTzkUfHcQD4hxTZtqbvDdpHXAvHqkDvZUcvtyDmUE3D+llyWVqeKJTKZgR9JhW
cb5UUAp562Qo6In3NYT2tEBMyZEO1ffk/Yovbqj18Dn8m7nPvROBa8rkm7VsOY/f
9CelvYTMUqhLLBAIVcdHRNTJ3sijcXfIdlFr0Lk9tnTed137HKmRI+iUN4p3ef72
dsBEBGpw5QK90KKNFSg4q+ID2c3Ndi74Cv0VmtovE1XffGIK5tle4ELQPwupL7dW
GTRUTb6IrdNdcQrkGvA5Yl3C+kxRhe0Ftw8UlDWlHze4IUlErwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBPIOmo+3b1TmuUzKQfM4/ew+3jyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjg2
MmYyNy0zNjNmLTQyY2UtYWI3ZS0zMTczOWIzNjYwYTAvM2NmNGU2YjEtNGVlMC0z
MzljLWJiNWUtYmE1NjlhZjAyODJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmY4NjJmMjctMzYzZi00MmNlLWFi
N2UtMzE3MzliMzY2MGEwL2JmODYyZjI3LTM2M2YtNDJjZS1hYjdlLTMxNzM5YjM2
NjBhMC5jcmwwHwYDVR0jBBgwFoAU/Mn+2ixOINbiezYnXAE0YqRk2m8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjg2MmYyNy0zNjNmLTQyY2UtYWI3ZS0zMTcz
OWIzNjYwYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2CbkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHXyf/IROsSyx8OXc3Rx8QtDdndluTqAxm/9GT6ECSMRGGKQwwf7WbeV
zNfb9EQThPhNxp+OZ18+9+lascLLr6itK9UZm5JcAauHLLU2AFwoTWO5bQn32sAW
vwozUsk2YRrmRAxOcaZyd8GgSkGRn/7iaAwwG6OLgcqws0h3g/GxzC+wDle85TES
OLPX6xeAeZudzvmnnjU8oZcc6rBzqxZxYDQ5FYXrKINbC8Y4EsFaZ88UWtQu2uq+
N2n5++bpdqmjEm/Fob8c23JZ09iDxvFR3nz9bDexJxnplIEyPMP3TwEfoQ3uH/0l
berLoHey0vzQPsRfgIGPQCF2Rn3lbPk=
-----END CERTIFICATE-----
Generated at Mon Apr 28 16:47:26 2025 by rpki-client