Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/f6f4087f-bee1-3214-8fd7-dc6a6f0e88f9.roa
File: f6f4087f-bee1-3214-8fd7-dc6a6f0e88f9.roa (raw, json)
Hash identifier: dnktHApn/BbAVehWYssvsjOd9z6kHCn7eWcA/llAzaA=
Subject key identifier: 24:16:57:B7:90:61:03:3F:B4:DC:FB:B8:C4:EE:7F:96:B8:B4:BB:72
Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial: 010D0C9F4328584865303B88FDF10F37A23427C0
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/f6f4087f-bee1-3214-8fd7-dc6a6f0e88f9.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 4922
IP address blocks: 204.111.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:3b:88:fd:f1:0f:37:a2:34:27:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=67f96d35-bbbc-46b8-8d19-d9f0dd4f1461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:26:cd:e1:00:e7:42:e0:75:59:4e:a4:d3:e1:
14:d7:7f:0a:c5:85:0a:59:4b:1f:58:ae:52:1e:ed:
9f:30:54:66:66:7e:27:0a:56:c5:36:fe:34:0f:34:
72:79:6b:50:9d:b6:18:72:69:a2:d2:ee:d8:70:9c:
ec:fb:8a:09:5d:a8:92:f6:72:01:2e:bb:af:e4:67:
63:ec:ce:67:f3:90:f8:39:e3:6d:93:32:89:bb:7b:
b7:66:67:b1:b3:ad:92:28:6a:db:3c:3f:77:ec:38:
b7:0e:13:6e:25:e7:76:05:c6:34:a1:ad:ec:72:38:
70:88:27:dc:3c:b3:33:de:bd:ac:95:9d:5f:00:ee:
fa:2d:73:31:e1:6c:f9:f0:c4:3a:a3:0c:d5:74:85:
da:49:cb:50:d8:30:f6:ce:8e:d4:15:26:f8:de:8c:
6c:b2:df:63:35:2c:05:8a:76:20:5c:79:e6:4e:63:
ec:1c:cd:60:ff:8b:0a:86:e0:61:80:53:46:98:53:
81:68:84:b6:a2:d8:bd:8d:a6:19:81:5d:74:c8:63:
d9:d8:59:ba:fb:13:af:6c:8d:e4:95:ab:01:8c:41:
5e:07:e0:a2:d1:6f:e0:7a:6e:fa:9b:50:1f:ba:00:
43:06:08:d6:42:07:71:8b:e3:60:a1:07:2c:30:a5:
02:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:16:57:B7:90:61:03:3F:B4:DC:FB:B8:C4:EE:7F:96:B8:B4:BB:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/f6f4087f-bee1-3214-8fd7-dc6a6f0e88f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
X509v3 Authority Key Identifier:
keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
sbgp-ipAddrBlock: critical
IPv4:
204.111.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:6f:10:db:e7:0a:1c:62:1d:8d:93:91:78:81:d7:43:ef:09:
92:e6:37:4c:39:7e:66:65:ed:21:fc:f4:90:09:61:1a:c8:24:
d4:47:84:80:97:ea:f0:46:a7:af:f4:fc:67:9f:ac:31:0e:de:
a3:b2:29:5d:41:78:86:30:dc:ac:b0:dc:30:00:de:c1:99:e8:
7b:0d:93:c7:54:95:d4:77:ac:77:18:30:ad:4c:07:df:63:fa:
70:99:6b:f5:67:28:3d:74:86:4e:3b:7c:8c:fb:50:7e:0b:2a:
30:b5:26:2b:26:ed:64:1a:7f:fa:87:42:12:9a:19:6d:a8:63:
bc:55:68:e1:df:12:c1:30:c5:f8:0a:80:b9:81:0b:9e:e0:db:
29:d0:59:ae:59:0b:0b:20:94:4f:e9:d5:98:79:3d:87:19:33:
59:7a:c0:27:8c:d5:21:af:a4:6f:38:3d:dd:9c:9e:88:f2:09:
1c:2a:93:50:75:6e:bb:6a:14:8e:41:dc:dd:a1:b4:9d:01:63:
b6:33:46:c1:d6:20:57:cf:df:88:fb:6b:0c:61:f3:8b:28:e4:
cd:ec:91:62:c6:57:47:72:a8:0a:4d:8a:e7:12:46:41:ae:fb:
c0:a0:b9:cd:fa:bd:f3:88:ac:08:87:67:8b:7f:7b:b7:0e:0f:
7c:3e:ef:6f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEhlMDuI/fEPN6I0J8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz
MTA5MB4XDTI1MDEwMTAyMDA0MFoXDTI1MDQwMTAxMDA0MFowLzEtMCsGA1UEAxMk
NjdmOTZkMzUtYmJiYy00NmI4LThkMTktZDlmMGRkNGYxNDYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoibN4QDnQuB1WU6k0+EU138KxYUKWUsfWK5S
Hu2fMFRmZn4nClbFNv40DzRyeWtQnbYYcmmi0u7YcJzs+4oJXaiS9nIBLruv5Gdj
7M5n85D4OeNtkzKJu3u3Zmexs62SKGrbPD937Di3DhNuJed2BcY0oa3scjhwiCfc
PLMz3r2slZ1fAO76LXMx4Wz58MQ6owzVdIXaSctQ2DD2zo7UFSb43oxsst9jNSwF
inYgXHnmTmPsHM1g/4sKhuBhgFNGmFOBaIS2oti9jaYZgV10yGPZ2Fm6+xOvbI3k
lasBjEFeB+Ci0W/gem76m1AfugBDBgjWQgdxi+NgoQcsMKUCzQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCQWV7eQYQM/tNz7uMTuf5a4tLtyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm
MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvZjZmNDA4N2YtYmVlMS0z
MjE0LThmZDctZGM2YTZmMGU4OGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm
NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh
MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3
MTVlYTMxMDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzG8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAfm8Q2+cKHGIdjZOReIHXQ+8JkuY3TDl+ZmXtIfz0kAlhGsgk1EeEgJfq
8Eanr/T8Z5+sMQ7eo7IpXUF4hjDcrLDcMADewZnoew2Tx1SV1HesdxgwrUwH32P6
cJlr9WcoPXSGTjt8jPtQfgsqMLUmKybtZBp/+odCEpoZbahjvFVo4d8SwTDF+AqA
uYELnuDbKdBZrlkLCyCUT+nVmHk9hxkzWXrAJ4zVIa+kbzg93ZyeiPIJHCqTUHVu
u2oUjkHc3aG0nQFjtjNGwdYgV8/fiPtrDGHziyjkzeyRYsZXR3KoCk2K5xJGQa77
wKC5zfq984isCIdni397tw4PfD7vbw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:29 2025 by rpki-client