Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/a1f2ded0-19c5-3a97-953b-2ea126da1a8f.roa
File: a1f2ded0-19c5-3a97-953b-2ea126da1a8f.roa (raw, json)
Hash identifier: S9wPwEcm0CZVGW9S6qVsIL0vAkqh/C9fYQSUgysYoFc=
Subject key identifier: D9:96:C4:11:3A:66:3C:2A:09:B9:81:C1:1C:C6:67:D9:11:22:0F:8F
Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial: 010D0C9F43285848547021014206F44A861F7740
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/a1f2ded0-19c5-3a97-953b-2ea126da1a8f.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 18434
IP address blocks: 216.189.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:21:01:42:06:f4:4a:86:1f:77:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=f1da070c-4ce7-4efc-af76-ec77eef25cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0b:4f:a3:62:07:3c:4f:de:cd:97:ba:16:bd:
a8:68:13:c8:3f:89:4e:a9:f9:d6:7c:ed:51:b5:ec:
6d:b0:8f:44:e7:d6:b6:b3:9a:7a:17:29:54:32:c2:
d5:8d:e6:b6:4f:72:c1:16:3b:f0:3d:fa:d4:0c:31:
e9:55:0f:cb:93:d8:b0:81:ed:7b:e0:07:81:7b:4f:
50:be:ff:71:fc:74:8a:11:23:c8:5b:8e:f9:f6:68:
3d:c9:e7:ce:44:1f:a5:0d:10:bf:b9:83:d3:fa:b6:
64:62:63:14:2f:7e:2e:8c:3f:c9:34:33:74:09:30:
f1:2f:cb:0f:f2:84:8c:17:fa:56:63:38:99:cd:9e:
11:45:16:66:2b:1e:64:1b:16:69:05:6f:b3:cf:57:
19:1d:b1:68:11:ce:41:78:5c:c4:f7:b8:6f:a8:bc:
44:9a:da:40:e2:b0:10:45:a5:23:b6:a8:bb:3b:ea:
09:5b:75:a8:ce:67:6a:a5:c4:18:a7:16:5d:00:29:
7d:13:99:ba:1f:54:a5:cd:ea:5f:71:39:ed:36:c6:
77:29:98:69:e7:20:ae:c9:55:3b:4b:6d:34:32:61:
5a:23:c8:4c:2b:76:a4:1d:ba:7d:72:9c:a7:0c:1c:
fd:08:48:e1:b2:90:fc:09:09:99:2a:2f:15:04:31:
17:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:96:C4:11:3A:66:3C:2A:09:B9:81:C1:1C:C6:67:D9:11:22:0F:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/a1f2ded0-19c5-3a97-953b-2ea126da1a8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
X509v3 Authority Key Identifier:
keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
sbgp-ipAddrBlock: critical
IPv4:
216.189.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:4a:1c:ee:d4:65:a4:7a:eb:2c:64:93:04:d7:ee:c8:46:5b:
56:e5:14:b8:1e:59:5f:7a:63:77:8b:95:23:66:8e:32:19:46:
8b:37:70:9f:ba:62:f0:00:e7:3d:19:41:c0:fa:2e:ba:de:48:
07:10:65:06:12:79:3f:29:3a:cb:a5:e8:88:3e:4a:f3:94:c8:
9c:be:2b:43:30:a0:d4:fb:67:da:7a:d0:2c:fb:44:e6:6a:41:
b3:03:7e:a2:08:0e:25:31:41:2c:a1:0f:7a:5d:32:a1:5b:06:
d9:96:8d:bd:d7:76:c2:1c:af:5f:0d:f1:b3:dc:6c:41:49:9d:
07:36:44:f7:e3:de:a7:1d:4b:5e:eb:ff:bc:ce:0a:1e:73:24:
1f:84:4b:2d:47:92:ec:db:ba:66:a9:5e:19:e1:b5:d7:77:42:
3d:1c:1f:42:4b:2c:2b:d3:da:91:d3:91:da:2f:ed:d3:e1:d3:
8f:fb:ea:35:dd:58:ff:15:2e:e5:3d:9b:8b:12:4a:bb:18:01:
95:7d:ae:4a:c9:a4:96:e5:f3:38:cc:a1:f4:78:b8:ad:e1:f2:
40:04:0a:ac:d4:67:21:4c:37:9f:a3:76:12:9c:0d:8b:1d:6b:
b5:89:98:ed:45:82:17:56:fe:c4:e4:1a:07:f4:4e:55:26:58:
09:9b:70:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhUcCEBQgb0SoYfd0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli
OTcxMB4XDTI0MTIyNjAyMDA0MFoXDTI1MDMyNjAxMDA0MFowLzEtMCsGA1UEAxMk
ZjFkYTA3MGMtNGNlNy00ZWZjLWFmNzYtZWM3N2VlZjI1Y2ZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwtPo2IHPE/ezZe6Fr2oaBPIP4lOqfnWfO1R
textsI9E59a2s5p6FylUMsLVjea2T3LBFjvwPfrUDDHpVQ/Lk9iwge174AeBe09Q
vv9x/HSKESPIW4759mg9yefORB+lDRC/uYPT+rZkYmMUL34ujD/JNDN0CTDxL8sP
8oSMF/pWYziZzZ4RRRZmKx5kGxZpBW+zz1cZHbFoEc5BeFzE97hvqLxEmtpA4rAQ
RaUjtqi7O+oJW3WozmdqpcQYpxZdACl9E5m6H1SlzepfcTntNsZ3KZhp5yCuyVU7
S200MmFaI8hMK3akHbp9cpynDBz9CEjhspD8CQmZKi8VBDEXsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNmWxBE6ZjwqCbmBwRzGZ9kRIg+PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh
NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvYTFmMmRlZDAtMTljNS0z
YTk3LTk1M2ItMmVhMTI2ZGExYThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw
YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5
Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2
MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2L38MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABdKHO7UZaR66yxkkwTX7shGW1blFLgeWV96Y3eLlSNmjjIZRos3cJ+6
YvAA5z0ZQcD6LrreSAcQZQYSeT8pOsul6Ig+SvOUyJy+K0MwoNT7Z9p60Cz7ROZq
QbMDfqIIDiUxQSyhD3pdMqFbBtmWjb3XdsIcr18N8bPcbEFJnQc2RPfj3qcdS17r
/7zOCh5zJB+ESy1HkuzbumapXhnhtdd3Qj0cH0JLLCvT2pHTkdov7dPh04/76jXd
WP8VLuU9m4sSSrsYAZV9rkrJpJbl8zjMofR4uK3h8kAECqzUZyFMN5+jdhKcDYsd
a7WJmO1FghdW/sTkGgf0TlUmWAmbcMo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:17:15 2025 by rpki-client