Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/9bd9ff1f-87f9-3f00-bb6b-1f8e248b0b02.roa
File: 9bd9ff1f-87f9-3f00-bb6b-1f8e248b0b02.roa (raw, json)
Hash identifier: jKBfnCLIG9naTghRNhvPkmG+Zbi4Ig5zTkdQQkhTgkk=
Subject key identifier: 08:34:EA:F2:C0:3C:52:CC:22:A1:1E:78:26:79:7C:21:B6:BE:0B:9E
Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial: 010D0C9F432858483F80275E75EC94836229AE80
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/9bd9ff1f-87f9-3f00-bb6b-1f8e248b0b02.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 11426
IP address blocks: 216.158.207.0/24 maxlen: 24
216.158.211.0/24 maxlen: 24
216.158.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:27:5e:75:ec:94:83:62:29:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=0b3ac19d-4ba0-4375-b998-b08166e07eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:df:2c:12:c4:37:a2:f4:45:59:4a:51:29:0e:
48:03:f5:e1:7f:e7:86:fb:ee:3a:35:c8:6d:37:2a:
97:1c:ec:ba:09:ca:c5:0f:2b:17:47:50:aa:6b:3e:
30:71:b4:d0:35:3a:2c:eb:08:5f:7e:17:4f:63:ff:
94:8c:d8:1e:66:ab:b8:01:6c:d5:81:71:4a:54:28:
07:58:aa:d0:60:0b:c4:ab:5f:0c:d9:ca:c5:9e:8e:
2b:ac:59:67:7e:50:3d:71:e4:16:7c:17:05:c4:69:
23:b6:11:e7:cb:d0:c2:ce:5c:7d:d6:be:b5:1e:d9:
2c:38:19:2c:d6:9a:e8:5c:da:30:e3:73:f6:ad:3d:
28:26:e9:95:63:b8:e0:40:31:68:46:3a:02:c8:a4:
b2:19:43:e3:3e:84:4d:42:c5:b7:70:4e:fa:07:88:
b3:71:55:5b:cf:40:29:9f:a4:20:88:34:cc:29:e7:
29:36:3a:ca:05:88:0b:a0:9c:ae:4a:8c:d7:39:87:
69:4e:40:dc:28:a6:cc:4a:00:55:69:eb:7c:6b:bc:
0d:c7:11:90:c9:8a:e3:05:83:55:db:d0:89:20:60:
ee:f6:e2:81:1b:a0:84:66:37:df:78:29:ea:8f:be:
d1:96:b3:f5:7a:9a:35:92:71:73:4f:b7:0c:4c:00:
06:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:34:EA:F2:C0:3C:52:CC:22:A1:1E:78:26:79:7C:21:B6:BE:0B:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/9bd9ff1f-87f9-3f00-bb6b-1f8e248b0b02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
X509v3 Authority Key Identifier:
keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
sbgp-ipAddrBlock: critical
IPv4:
216.158.207.0/24
216.158.211.0/24
216.158.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:1b:17:72:9e:54:06:f8:35:7f:82:39:50:44:db:a9:6c:59:
0e:90:18:9b:61:52:bb:8e:76:14:a1:0b:cc:d3:44:14:42:c7:
74:06:20:a1:ad:f5:c5:c4:c2:7a:8f:59:0c:1d:ac:66:74:fa:
e3:1d:6b:97:06:09:e7:3e:02:7c:b6:b2:f8:be:3c:98:98:d4:
55:e5:06:d4:88:be:2f:7c:85:59:ee:67:00:23:28:c8:60:d5:
6b:87:fc:ef:62:0d:e3:6b:ab:a0:83:1a:d3:76:c2:b9:d4:26:
2a:8f:9d:b2:97:2f:d6:0b:98:84:b7:cc:aa:be:80:9d:43:7b:
8e:fe:5a:87:93:fd:9e:a7:83:bd:6d:ee:f6:6b:65:27:5e:5d:
1a:b5:2b:7a:ea:5c:96:6a:12:48:c5:f3:71:2f:0e:c3:ce:ce:
74:13:b9:a5:4c:6c:25:11:8e:1a:6d:01:1b:e5:76:ad:e4:f8:
a4:ca:d6:87:05:8a:b6:6c:f1:1f:da:5d:59:e0:db:38:03:79:
43:37:e9:33:d6:65:7e:18:5c:f1:4a:80:9f:f5:7c:e7:58:2b:
ea:89:b6:c8:1e:07:4a:cd:95:f8:a2:db:4b:1f:c0:f8:b9:0a:
9b:c3:c5:56:88:6d:5a:a7:2d:86:ce:65:30:ba:29:76:38:e9:
64:90:50:8b
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEg/gCdedeyUg2IproAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz
M2E0MB4XDTI0MTIxODE0MDA1MloXDTI1MDMxODEzMDA1MlowLzEtMCsGA1UEAxMk
MGIzYWMxOWQtNGJhMC00Mzc1LWI5OTgtYjA4MTY2ZTA3ZWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8N8sEsQ3ovRFWUpRKQ5IA/Xhf+eG++46Ncht
NyqXHOy6CcrFDysXR1Cqaz4wcbTQNTos6whffhdPY/+UjNgeZqu4AWzVgXFKVCgH
WKrQYAvEq18M2crFno4rrFlnflA9ceQWfBcFxGkjthHny9DCzlx91r61HtksOBks
1proXNow43P2rT0oJumVY7jgQDFoRjoCyKSyGUPjPoRNQsW3cE76B4izcVVbz0Ap
n6QgiDTMKecpNjrKBYgLoJyuSozXOYdpTkDcKKbMSgBVaet8a7wNxxGQyYrjBYNV
29CJIGDu9uKBG6CEZjffeCnqj77RlrP1epo1knFzT7cMTAAGtwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFAg06vLAPFLMIqEeeCZ5fCG2vgueMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2
NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvOWJkOWZmMWYtODdmOS0z
ZjAwLWJiNmItMWY4ZTI0OGIwYjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1
MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0
MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj
NmFiNDMzYTQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA2J7PAwQA
2J7TAwQA2J7cMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAEgbF3KeVAb4NX+COVBE26lsWQ6QGJthUruOdhSh
C8zTRBRCx3QGIKGt9cXEwnqPWQwdrGZ0+uMda5cGCec+Any2svi+PJiY1FXlBtSI
vi98hVnuZwAjKMhg1WuH/O9iDeNrq6CDGtN2wrnUJiqPnbKXL9YLmIS3zKq+gJ1D
e47+WoeT/Z6ng71t7vZrZSdeXRq1K3rqXJZqEkjF83EvDsPOznQTuaVMbCURjhpt
ARvldq3k+KTK1ocFirZs8R/aXVng2zgDeUM36TPWZX4YXPFKgJ/1fOdYK+qJtsge
B0rNlfii20sfwPi5CpvDxVaIbVqnLYbOZTC6KXY46WSQUIs=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:14:15 2025 by rpki-client