Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/9c768e03-d7a8-3d81-8486-ef4f5c3a9c3a.roa
File: 9c768e03-d7a8-3d81-8486-ef4f5c3a9c3a.roa (raw, json)
Hash identifier: L77X/Vk/HfdDNmwVDsnoVmqcMKSMULUNXEQXxZAotR0=
Subject key identifier: C7:6B:21:D8:23:2D:11:6D:D5:FF:6B:FF:70:5A:38:7D:2E:68:39:18
Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial: 010D0C9F432858484D067C6ECB8A9D6D24C31F00
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/9c768e03-d7a8-3d81-8486-ef4f5c3a9c3a.roa
Signing time: Mon 23 Dec 2024 10:17:12 +0000
ROA not before: Mon 23 Dec 2024 10:17:12 +0000
ROA not after: Sun 23 Mar 2025 09:17:12 +0000
asID: 211373
IP address blocks: 216.224.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:06:7c:6e:cb:8a:9d:6d:24:c3:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Validity
Not Before: Dec 23 10:17:12 2024 GMT
Not After : Mar 23 09:17:12 2025 GMT
Subject: CN=95ec1014-ee30-40ec-bcf9-851fac40d0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b5:c2:f1:1f:0e:7c:6e:55:56:64:14:c2:2c:
f3:c6:f8:96:9b:d4:2f:90:4c:66:20:02:96:f7:3b:
2c:7e:c6:44:5f:e4:31:cd:71:26:c7:18:f4:46:00:
d5:47:57:3e:b8:35:b3:88:e9:fe:dc:98:5b:63:62:
9e:f9:78:d4:c4:4f:53:7b:b4:a9:1b:09:35:ac:e5:
e1:f0:b2:17:24:b3:ef:b1:06:ea:d2:ef:df:97:72:
5b:e3:47:86:c9:65:84:60:1b:b2:6e:48:16:b2:4d:
50:84:37:c5:5e:6f:c2:2a:a9:16:83:a0:29:35:ec:
84:87:40:32:4e:9f:64:a6:e1:ba:6f:50:5a:1c:71:
fe:a8:80:aa:f6:26:b2:62:eb:d4:8c:cb:2c:d4:73:
7e:e7:01:d8:6b:bf:36:9f:69:0c:89:6f:9b:a6:32:
b8:13:20:9c:3f:94:66:05:f6:79:9e:07:66:ef:e1:
da:2e:1c:90:15:9e:4e:5e:93:65:d8:61:83:47:c9:
5d:02:3b:b5:09:16:22:0d:26:f8:8f:63:6b:34:31:
27:76:05:df:4b:e0:23:fe:30:8f:92:90:bc:6d:75:
88:70:c4:38:d6:ab:07:ac:d9:f9:32:4a:d0:1d:5c:
8e:69:fc:23:88:1b:fa:b9:08:5d:ad:77:88:8a:4a:
2f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6B:21:D8:23:2D:11:6D:D5:FF:6B:FF:70:5A:38:7D:2E:68:39:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/9c768e03-d7a8-3d81-8486-ef4f5c3a9c3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
X509v3 Authority Key Identifier:
keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
sbgp-ipAddrBlock: critical
IPv4:
216.224.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:75:4f:28:55:1e:5f:52:7d:32:aa:4d:6c:75:e4:44:b8:a3:
96:7f:42:d7:cd:57:fa:4b:8a:79:5c:14:34:13:d3:85:7e:95:
4c:91:6c:15:fa:aa:bb:c9:ab:9b:fa:71:14:48:a0:12:05:07:
5f:b0:e6:95:9d:c1:25:86:ae:b7:e6:5e:fd:ac:c6:2d:43:d2:
88:f2:f1:b5:d3:9e:24:52:a7:0e:82:a2:e0:bd:b7:f6:29:8e:
fe:ba:be:b3:f1:6e:be:49:94:70:e6:98:bb:a7:87:74:15:e9:
ac:1b:24:c7:2e:f2:7c:f5:c7:c6:4e:11:02:3b:5d:0d:19:bf:
ee:aa:75:33:7c:17:23:58:b2:f4:e7:f0:06:20:c2:87:6f:d9:
c0:0d:53:56:ca:f2:fe:b8:be:95:a8:02:cb:47:0a:92:e1:58:
4e:48:89:fb:2d:99:95:e9:01:f7:c2:ba:b2:2c:64:04:ab:9e:
42:8b:4f:e6:a7:be:70:49:bb:b0:fb:bd:71:46:b3:70:82:8d:
7c:b9:ec:a4:89:4e:cf:ba:4e:fb:80:30:e2:e8:67:83:c6:18:
60:07:02:96:e3:09:f4:5a:e3:46:b4:70:6e:a9:c4:f9:7b:ae:
f3:4f:a2:61:ec:7d:55:c4:16:db:72:8d:17:85:6c:d7:45:e1:
fa:01:9c:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhNBnxuy4qdbSTDHwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1
MGU4MB4XDTI0MTIyMzEwMTcxMloXDTI1MDMyMzA5MTcxMlowLzEtMCsGA1UEAxMk
OTVlYzEwMTQtZWUzMC00MGVjLWJjZjktODUxZmFjNDBkMGMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbXC8R8OfG5VVmQUwizzxviWm9QvkExmIAKW
9zssfsZEX+QxzXEmxxj0RgDVR1c+uDWziOn+3JhbY2Ke+XjUxE9Te7SpGwk1rOXh
8LIXJLPvsQbq0u/fl3Jb40eGyWWEYBuybkgWsk1QhDfFXm/CKqkWg6ApNeyEh0Ay
Tp9kpuG6b1BaHHH+qICq9iayYuvUjMss1HN+5wHYa782n2kMiW+bpjK4EyCcP5Rm
BfZ5ngdm7+HaLhyQFZ5OXpNl2GGDR8ldAju1CRYiDSb4j2NrNDEndgXfS+Aj/jCP
kpC8bXWIcMQ41qsHrNn5MkrQHVyOafwjiBv6uQhdrXeIikov3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMdrIdgjLRFt1f9r/3BaOH0uaDkYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0
NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvOWM3NjhlMDMtZDdhOC0z
ZDgxLTg0ODYtZWY0ZjVjM2E5YzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk
MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz
NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3
NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OB/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG51TyhVHl9SfTKqTWx15ES4o5Z/QtfNV/pLinlcFDQT04V+lUyRbBX6
qrvJq5v6cRRIoBIFB1+w5pWdwSWGrrfmXv2sxi1D0ojy8bXTniRSpw6CouC9t/Yp
jv66vrPxbr5JlHDmmLunh3QV6awbJMcu8nz1x8ZOEQI7XQ0Zv+6qdTN8FyNYsvTn
8AYgwodv2cANU1bK8v64vpWoAstHCpLhWE5IifstmZXpAffCurIsZASrnkKLT+an
vnBJu7D7vXFGs3CCjXy57KSJTs+6TvuAMOLoZ4PGGGAHApbjCfRa40a0cG6pxPl7
rvNPomHsfVXEFttyjReFbNdF4foBnDI=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:12:14 2025 by rpki-client