Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/b2708acf-f59c-3b4f-9f11-01baaa6b4999.roa
File: b2708acf-f59c-3b4f-9f11-01baaa6b4999.roa (raw, json)
Hash identifier: n4CbGiysG7KmIk1UYT+ZqA9vxY7aV3Pn9TELDKgsgwc=
Subject key identifier: 3A:85:B8:98:9E:28:FE:A8:82:FC:7B:10:87:A0:54:FD:06:51:04:0B
Certificate issuer: /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
Certificate serial: 010D0C9F432858487325B1B31C32E46F99EFA208
Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/b2708acf-f59c-3b4f-9f11-01baaa6b4999.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 20055
IP address blocks: 204.11.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:b1:b3:1c:32:e4:6f:99:ef:a2:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=ae1a38a1-5e74-4415-9e87-3b203de34e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f7:ca:79:2a:fe:eb:f5:53:ec:ee:4c:3f:90:
c7:63:76:e3:46:67:8c:ca:3a:98:a5:37:1b:45:f0:
6e:ee:b6:2e:80:39:3b:a9:4b:52:50:03:0a:65:b5:
b5:62:c2:1f:e1:b3:9d:09:03:12:73:a2:65:ed:e2:
da:c8:07:3a:82:80:35:21:f6:61:a9:ad:89:99:e7:
06:ce:88:97:30:da:7f:ea:5a:4a:76:07:00:2e:7e:
3e:b7:c3:78:44:f7:90:d7:70:67:83:e1:d3:a2:b7:
df:19:33:b1:b7:13:2b:22:4a:7d:9a:c1:9f:e5:42:
60:20:f5:93:e6:16:a2:3b:cd:87:32:2a:2f:c1:da:
be:c0:1d:30:f6:21:dc:43:fd:7e:67:db:87:cb:b4:
e8:5e:19:8a:ac:f5:db:78:b5:de:d8:61:bb:15:7f:
a1:a8:72:c0:00:5e:ec:8c:3f:8b:36:12:2e:23:16:
53:1b:53:1e:8f:bc:df:29:83:1e:57:fd:c0:8a:3c:
cf:56:23:e4:37:01:21:3d:fa:63:54:75:c6:c9:3f:
7a:c1:23:d2:04:ae:7a:51:b1:69:cd:ff:89:a6:63:
d9:3f:4c:5c:33:b5:37:c4:f4:3f:49:03:c1:4b:4a:
98:c0:8e:95:68:e0:ff:e4:76:c6:89:56:ca:23:eb:
59:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:85:B8:98:9E:28:FE:A8:82:FC:7B:10:87:A0:54:FD:06:51:04:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/b2708acf-f59c-3b4f-9f11-01baaa6b4999.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl
X509v3 Authority Key Identifier:
keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
sbgp-ipAddrBlock: critical
IPv4:
204.11.64.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:82:7e:57:0e:bd:af:e1:f9:58:cb:2f:46:03:0d:9c:c6:55:
4d:f7:b5:94:13:a8:97:bf:c3:a5:ba:62:60:72:42:10:7c:64:
7f:8e:37:3a:1b:84:40:bd:eb:cf:c2:9d:2a:02:a4:ea:ef:f2:
9b:a1:35:aa:eb:f8:63:49:16:34:66:68:ce:6e:4a:86:45:3f:
e5:a3:1a:df:ff:7f:c4:1b:fa:fd:7a:33:d0:83:18:c0:0d:7c:
fd:b1:20:f0:c1:5c:af:db:9d:ac:e7:fb:cf:31:ac:e0:29:6c:
d4:09:54:e0:2d:53:f1:30:d1:3b:f4:bc:ca:79:4b:41:52:64:
cb:26:87:c1:e6:17:f2:1d:ef:38:71:55:89:bb:ba:1a:78:a2:
45:10:4d:e0:d1:7c:3b:0e:31:99:14:08:34:1e:65:9c:49:33:
16:b3:7e:35:ca:18:d4:fc:aa:67:66:82:88:cb:66:2c:5b:05:
4d:04:c9:d0:0a:52:d0:85:aa:ff:45:b6:6e:6c:c1:b5:57:c9:
8f:e2:80:36:09:0a:2a:36:cd:67:62:ee:c5:57:5f:d8:02:9d:
41:cc:60:37:f9:cc:1a:50:44:0f:f3:2c:9e:da:89:c5:58:39:
13:0a:80:c2:69:da:d4:80:ce:70:d9:6b:4b:e0:cb:f6:13:6c:
39:c0:6a:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhzJbGzHDLkb5nvoggwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmMxZmJkOGItNGVkOS00ZjVkLWE4ZjAtNzU1OWQ5MWJm
M2M4MB4XDTI1MDEwNjAyMDA0MFoXDTI1MDQwNjAxMDA0MFowLzEtMCsGA1UEAxMk
YWUxYTM4YTEtNWU3NC00NDE1LTllODctM2IyMDNkZTM0ZTllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ffKeSr+6/VT7O5MP5DHY3bjRmeMyjqYpTcb
RfBu7rYugDk7qUtSUAMKZbW1YsIf4bOdCQMSc6Jl7eLayAc6goA1IfZhqa2JmecG
zoiXMNp/6lpKdgcALn4+t8N4RPeQ13Bng+HTorffGTOxtxMrIkp9msGf5UJgIPWT
5haiO82HMiovwdq+wB0w9iHcQ/1+Z9uHy7ToXhmKrPXbeLXe2GG7FX+hqHLAAF7s
jD+LNhIuIxZTG1Mej7zfKYMeV/3AijzPViPkNwEhPfpjVHXGyT96wSPSBK56UbFp
zf+JpmPZP0xcM7U3xPQ/SQPBS0qYwI6VaOD/5HbGiVbKI+tZWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDqFuJieKP6ogvx7EIegVP0GUQQLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzFm
YmQ4Yi00ZWQ5LTRmNWQtYThmMC03NTU5ZDkxYmYzYzgvYjI3MDhhY2YtZjU5Yy0z
YjRmLTlmMTEtMDFiYWFhNmI0OTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmMxZmJkOGItNGVkOS00ZjVkLWE4
ZjAtNzU1OWQ5MWJmM2M4L2ZjMWZiZDhiLTRlZDktNGY1ZC1hOGYwLTc1NTlkOTFi
ZjNjOC5jcmwwHwYDVR0jBBgwFoAUbKtKsvVYO/RVBP3F8Yue3m5JAT0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzFmYmQ4Yi00ZWQ5LTRmNWQtYThmMC03NTU5
ZDkxYmYzYzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAtAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEWCflcOva/h+VjLL0YDDZzGVU33tZQTqJe/w6W6YmByQhB8ZH+ONzob
hEC968/CnSoCpOrv8puhNarr+GNJFjRmaM5uSoZFP+WjGt//f8Qb+v16M9CDGMAN
fP2xIPDBXK/bnazn+88xrOApbNQJVOAtU/Ew0Tv0vMp5S0FSZMsmh8HmF/Id7zhx
VYm7uhp4okUQTeDRfDsOMZkUCDQeZZxJMxazfjXKGNT8qmdmgojLZixbBU0EydAK
UtCFqv9Ftm5swbVXyY/igDYJCio2zWdi7sVXX9gCnUHMYDf5zBpQRA/zLJ7aicVY
ORMKgMJp2tSAznDZa0vgy/YTbDnAarM=
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:22:17 2025 by rpki-client