Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/76c9a55e-ad49-38eb-9017-9a51b8f21b8e.roa
File: 76c9a55e-ad49-38eb-9017-9a51b8f21b8e.roa (raw, json)
Hash identifier: q6YLqQhO7g8riVmzgZT8BaT3i+VANgFfP4A7lezBe/c=
Subject key identifier: AA:0C:55:28:23:3C:14:1D:67:C1:2F:E9:C1:36:CF:5C:4D:06:19:CB
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F43285847ED24C7D99752B66836CA9E60
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/76c9a55e-ad49-38eb-9017-9a51b8f21b8e.roa
Signing time: Tue 19 Nov 2024 02:00:27 +0000
ROA not before: Tue 19 Nov 2024 02:00:27 +0000
ROA not after: Mon 17 Feb 2025 02:00:27 +0000
asID: 11090
IP address blocks: 216.137.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ed:24:c7:d9:97:52:b6:68:36:ca:9e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Nov 19 02:00:27 2024 GMT
Not After : Feb 17 02:00:27 2025 GMT
Subject: CN=9bb47dda-e85d-4af3-a0ae-03b0c0ae9777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1e:d3:00:45:c0:68:49:7b:1c:01:dc:47:cf:
48:ee:fa:ef:84:98:0f:cb:9f:54:bb:e6:e0:35:86:
28:5d:5b:7a:bd:38:7a:62:05:ee:52:b1:85:29:3d:
2e:9b:b7:fe:0e:5e:07:24:dd:45:82:c8:f2:87:2c:
29:ec:b4:88:c0:51:28:e8:1b:c7:17:2c:40:40:70:
b2:81:82:8e:f1:5e:32:b6:f1:6e:3e:9f:83:24:2a:
57:6d:3b:00:84:fc:c7:90:d7:c9:3f:01:f9:89:e2:
84:72:17:72:47:5a:fb:21:9f:a7:14:d1:5e:0f:3d:
a4:d3:b2:e4:76:e6:03:ad:2f:62:7e:c0:39:c8:3f:
e7:74:45:3a:a0:59:42:3b:be:0a:82:ab:c8:76:7a:
99:de:ff:d4:39:d7:ae:64:2c:c8:56:00:71:d0:02:
2e:6f:07:6b:02:90:c7:f3:ff:f5:87:16:c7:42:94:
7e:2a:ce:d8:5e:27:56:a6:0c:1a:3c:b1:8c:9c:1c:
59:ea:f3:a6:e3:03:4e:2d:32:ed:b8:38:49:bc:23:
75:c9:47:f1:b8:07:44:10:12:61:c7:9e:ee:e5:27:
64:cf:ed:01:bf:24:0e:24:b6:6f:5b:8f:10:49:aa:
c5:4b:3c:f2:b5:2f:20:3a:3d:72:a1:05:48:88:0e:
36:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0C:55:28:23:3C:14:1D:67:C1:2F:E9:C1:36:CF:5C:4D:06:19:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/76c9a55e-ad49-38eb-9017-9a51b8f21b8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
216.137.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:78:d5:22:f1:8b:6e:7e:63:62:c5:a7:ef:34:b7:df:c8:e9:
d1:b3:f2:b7:17:47:d5:76:86:e1:72:2d:dd:63:9d:5f:f7:8f:
ea:07:02:af:ac:f1:f2:ba:d8:ac:6a:06:24:7e:8f:20:54:bc:
36:0d:83:3a:35:c8:0c:bd:14:bc:45:c4:7c:b9:1e:00:3d:87:
ef:d0:98:6f:20:98:a4:a3:e7:b3:37:94:3c:21:57:4e:25:63:
5e:ad:67:8c:a5:06:f3:54:ef:e8:f7:c0:ef:d8:e1:a4:92:f9:
73:12:3b:d4:34:57:c5:b4:3f:5c:ec:a6:cb:88:6a:f0:3e:e3:
b6:8f:df:e7:ee:1a:41:99:e5:06:d8:1b:6b:84:d9:4c:f1:e2:
2a:17:76:71:7b:49:43:6e:03:8d:c1:91:61:1b:de:d4:a7:0d:
f4:d5:3d:2b:8e:0b:ab:bc:f4:d0:ac:7f:e5:c8:d1:b0:96:74:
16:63:5a:4d:b4:e4:68:b3:00:37:d6:66:79:50:b2:4b:fb:cf:
d7:99:73:87:3f:81:de:82:c7:06:85:50:93:78:1e:6a:e0:6a:
a5:b0:5f:ac:21:8f:28:6d:68:67:bf:67:2b:b4:e4:83:97:dd:
9b:b5:9a:2f:6a:a5:a9:06:76:cc:b8:36:04:46:e8:f9:55:8c:
df:f6:87:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEftJMfZl1K2aDbKnmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2
OWQxMB4XDTI0MTExOTAyMDAyN1oXDTI1MDIxNzAyMDAyN1owLzEtMCsGA1UEAxMk
OWJiNDdkZGEtZTg1ZC00YWYzLWEwYWUtMDNiMGMwYWU5Nzc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlR7TAEXAaEl7HAHcR89I7vrvhJgPy59Uu+bg
NYYoXVt6vTh6YgXuUrGFKT0um7f+Dl4HJN1Fgsjyhywp7LSIwFEo6BvHFyxAQHCy
gYKO8V4ytvFuPp+DJCpXbTsAhPzHkNfJPwH5ieKEchdyR1r7IZ+nFNFeDz2k07Lk
duYDrS9ifsA5yD/ndEU6oFlCO74KgqvIdnqZ3v/UOdeuZCzIVgBx0AIubwdrApDH
8//1hxbHQpR+Ks7YXidWpgwaPLGMnBxZ6vOm4wNOLTLtuDhJvCN1yUfxuAdEEBJh
x57u5Sdkz+0BvyQOJLZvW48QSarFSzzytS8gOj1yoQVIiA42vwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKoMVSgjPBQdZ8Ev6cE2z1xNBhnLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk
NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvNzZjOWE1NWUtYWQ0OS0z
OGViLTkwMTctOWE1MWI4ZjIxYjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw
MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh
NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0
M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2InIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALF41SLxi25+Y2LFp+80t9/I6dGz8rcXR9V2huFyLd1jnV/3j+oHAq+s
8fK62KxqBiR+jyBUvDYNgzo1yAy9FLxFxHy5HgA9h+/QmG8gmKSj57M3lDwhV04l
Y16tZ4ylBvNU7+j3wO/Y4aSS+XMSO9Q0V8W0P1zspsuIavA+47aP3+fuGkGZ5QbY
G2uE2Uzx4ioXdnF7SUNuA43BkWEb3tSnDfTVPSuOC6u89NCsf+XI0bCWdBZjWk20
5GizADfWZnlQskv7z9eZc4c/gd6CxwaFUJN4HmrgaqWwX6whjyhtaGe/Zyu05IOX
3Zu1mi9qpakGdsy4NgRG6PlVjN/2h3w=
-----END CERTIFICATE-----
Generated at Mon May 12 16:14:25 2025 by rpki-client