Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/30556b03-38d3-3916-aa52-b8ba0322c064.roa
File: 30556b03-38d3-3916-aa52-b8ba0322c064.roa (raw, json)
Hash identifier: i1auCT9wnQr6bq//S1IfIh8uFLpPXgOS3PBAvEuEAoI=
Subject key identifier: 10:DE:D1:9B:E9:67:65:17:7E:E7:81:F6:70:DF:37:EF:5D:16:10:91
Certificate issuer: /CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5
Certificate serial: 010D0C9F432858489075F846C879A0BE21A254C0
Authority key identifier: 00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/30556b03-38d3-3916-aa52-b8ba0322c064.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 0
IP address blocks: 204.229.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:75:f8:46:c8:79:a0:be:21:a2:54:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc3951ec-0f8a-49d2-bec7-41a9657e87f5
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=35ba7d89-80f4-4574-9bf4-619ca4657cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d1:7e:59:34:08:e0:8d:05:d2:1e:50:a7:65:
93:7c:3c:fe:de:47:f9:51:80:4a:21:82:59:6d:ad:
af:26:41:26:df:80:7f:0b:9b:17:8c:e9:f9:b8:0c:
e9:34:17:45:bf:72:e6:39:e3:b8:4e:d9:0b:78:f8:
50:0e:93:1c:6f:ca:8f:1e:87:43:f5:0d:32:7f:a0:
0a:0f:29:c8:08:29:cc:ea:76:4d:28:bb:fa:55:f0:
1f:12:e5:84:9c:30:c1:70:47:83:75:39:f6:f3:19:
64:0b:ea:c2:3b:24:dc:39:bb:77:89:90:ef:e7:86:
b3:99:b6:86:88:e3:c1:f0:52:35:ce:09:be:fa:d9:
e4:ed:0a:7b:02:1f:b1:18:7b:aa:93:0b:4e:29:28:
2d:2f:ea:b9:87:97:05:2c:bb:2d:d2:f0:db:e0:6d:
de:be:3b:eb:9e:c6:8d:f4:9e:c4:1e:1b:e0:eb:fa:
ea:4f:91:9c:49:2c:ba:34:0f:dc:58:85:ed:3b:2c:
42:53:e5:a7:03:f2:32:6d:2e:eb:9a:73:b7:11:81:
53:24:d5:47:83:cc:7f:67:70:fa:8c:80:ab:4b:a0:
88:3e:a2:78:30:1f:47:70:74:1b:b9:ff:fd:2a:74:
28:ed:3f:c2:01:d6:c9:1f:88:a7:f5:3c:c2:d9:44:
6b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DE:D1:9B:E9:67:65:17:7E:E7:81:F6:70:DF:37:EF:5D:16:10:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/30556b03-38d3-3916-aa52-b8ba0322c064.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.crl
X509v3 Authority Key Identifier:
keyid:00:96:DD:99:13:E4:C1:00:CA:66:7C:56:A6:9F:2F:41:B9:D4:5C:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3951ec-0f8a-49d2-bec7-41a9657e87f5.cer
sbgp-ipAddrBlock: critical
IPv4:
204.229.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:73:ad:3f:fb:07:79:dc:5c:92:da:a6:b1:fc:09:b4:c9:22:
38:b8:4a:46:bc:6b:44:4c:3f:39:84:e4:a0:1d:b8:be:01:b5:
42:14:95:34:7e:23:ba:01:09:c4:c3:28:6b:5a:0e:6f:a6:c5:
6a:33:8c:cc:cd:db:72:d1:15:75:8a:ef:41:70:eb:8d:76:68:
ec:72:df:72:86:78:ee:b1:36:6c:53:3c:e8:c3:c2:31:bc:25:
8e:42:e0:0e:57:0f:d7:53:f8:73:dd:7f:e1:1b:37:68:dd:a9:
11:dd:96:0d:d7:9e:12:94:39:7f:ba:19:bc:6c:81:9d:63:87:
df:ef:1a:2b:be:aa:25:68:0e:a0:ce:41:43:ea:9c:66:d2:34:
28:46:5d:0f:eb:75:f5:41:70:2e:c1:ef:68:22:4e:fc:3a:22:
2c:0a:c1:91:fd:de:dd:46:8e:76:d9:f9:99:4c:cd:35:99:8e:
2c:aa:44:75:a5:b2:4b:fb:e9:d7:d5:f9:fd:0f:b8:54:b0:1f:
a0:90:bc:35:b2:a9:dd:4f:eb:c9:09:f4:9b:2d:c6:59:32:13:
f3:00:d1:a0:a1:12:a9:9f:89:70:cb:7f:0b:b0:ec:60:85:94:
ea:9d:03:05:60:33:9d:6b:c2:f6:c8:8b:58:0b:07:d5:bd:e9:
ac:79:1b:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdfhGyHmgviGiVMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmMzOTUxZWMtMGY4YS00OWQyLWJlYzctNDFhOTY1N2U4
N2Y1MB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk
MzViYTdkODktODBmNC00NTc0LTliZjQtNjE5Y2E0NjU3Y2FlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntF+WTQI4I0F0h5Qp2WTfDz+3kf5UYBKIYJZ
ba2vJkEm34B/C5sXjOn5uAzpNBdFv3LmOeO4TtkLePhQDpMcb8qPHodD9Q0yf6AK
DynICCnM6nZNKLv6VfAfEuWEnDDBcEeDdTn28xlkC+rCOyTcObt3iZDv54azmbaG
iOPB8FI1zgm++tnk7Qp7Ah+xGHuqkwtOKSgtL+q5h5cFLLst0vDb4G3evjvrnsaN
9J7EHhvg6/rqT5GcSSy6NA/cWIXtOyxCU+WnA/IybS7rmnO3EYFTJNVHg8x/Z3D6
jICrS6CIPqJ4MB9HcHQbuf/9KnQo7T/CAdbJH4in9TzC2URrFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBDe0ZvpZ2UXfueB9nDfN+9dFhCRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iYzM5
NTFlYy0wZjhhLTQ5ZDItYmVjNy00MWE5NjU3ZTg3ZjUvMzA1NTZiMDMtMzhkMy0z
OTE2LWFhNTItYjhiYTAzMjJjMDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmMzOTUxZWMtMGY4YS00OWQyLWJl
YzctNDFhOTY1N2U4N2Y1L2JjMzk1MWVjLTBmOGEtNDlkMi1iZWM3LTQxYTk2NTdl
ODdmNS5jcmwwHwYDVR0jBBgwFoAUAJbdmRPkwQDKZnxWpp8vQbnUXDEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iYzM5NTFlYy0wZjhhLTQ5ZDItYmVjNy00MWE5
NjU3ZTg3ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGzOWAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAhzrT/7B3ncXJLaprH8CbTJIji4Ska8a0RMPzmE5KAduL4BtUIUlTR+
I7oBCcTDKGtaDm+mxWozjMzN23LRFXWK70Fw6412aOxy33KGeO6xNmxTPOjDwjG8
JY5C4A5XD9dT+HPdf+EbN2jdqRHdlg3XnhKUOX+6GbxsgZ1jh9/vGiu+qiVoDqDO
QUPqnGbSNChGXQ/rdfVBcC7B72giTvw6IiwKwZH93t1GjnbZ+ZlMzTWZjiyqRHWl
skv76dfV+f0PuFSwH6CQvDWyqd1P68kJ9JstxlkyE/MA0aChEqmfiXDLfwuw7GCF
lOqdAwVgM51rwvbIi1gLB9W96ax5G50=
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:15 2025 by rpki-client