Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/614b6e40-c958-3824-8cf1-5905e6c7c991.roa
File: 614b6e40-c958-3824-8cf1-5905e6c7c991.roa (raw, json)
Hash identifier: J4VxFYe9PfKJWn2jtUpQtt0i4ggRYv2NXiUi3oFskAo=
Subject key identifier: 14:E6:02:49:2A:FC:25:77:41:D0:16:8B:C5:59:39:82:DE:C3:EC:F3
Certificate issuer: /CN=328ebe8e-32d9-4873-ad53-1a5e421126d5
Certificate serial: 010D0C9F432858481C9A8CD07D706D9555101280
Authority key identifier: 88:80:4B:02:44:DA:7E:76:D7:64:EE:31:28:48:B6:17:EF:DD:EE:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/614b6e40-c958-3824-8cf1-5905e6c7c991.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 13631
IP address blocks: 216.52.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:8c:d0:7d:70:6d:95:55:10:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=328ebe8e-32d9-4873-ad53-1a5e421126d5
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=3cca3e24-6bc8-4466-ab80-db6f24d7de88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ca:20:80:5f:6c:f0:11:e4:9e:9d:3d:2f:ba:
af:4f:0c:32:2d:e9:fa:b9:9b:62:26:8d:a8:ef:f9:
5b:9f:28:1f:42:f8:79:18:03:64:0f:45:f4:53:cc:
56:47:27:79:2a:5c:b4:2b:ff:fd:a3:26:58:54:fb:
55:f0:8f:5f:df:38:d1:e2:d1:a1:c8:20:96:48:3c:
cb:02:a7:ad:2c:54:b2:1c:3d:63:e3:ca:51:ea:b4:
da:90:fd:ac:ba:f6:9c:02:96:c0:92:7d:69:9f:f2:
19:40:3c:71:38:53:ed:63:d9:c9:40:df:99:f8:29:
f0:be:b7:5d:0c:65:7f:d8:f6:0a:71:84:0a:eb:0c:
c1:59:3a:19:d9:cb:d7:44:d0:9d:19:e8:93:95:18:
93:41:55:b4:bc:33:3c:5a:78:f9:65:62:18:d6:94:
bb:f6:2f:89:30:f5:93:20:81:f6:71:0b:ae:3a:ad:
ad:d5:21:e5:5a:d6:9c:25:69:a4:57:8a:10:94:8a:
8d:2b:83:22:f0:aa:2c:14:1a:8d:8d:53:d6:30:83:
61:a7:0a:03:0f:ec:03:02:4f:c1:23:01:bd:ce:af:
31:43:70:11:d7:c1:bc:38:2d:f2:44:30:ac:7a:3c:
c5:da:ae:7e:9f:4f:65:4e:7e:84:a7:be:ea:28:cf:
4d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E6:02:49:2A:FC:25:77:41:D0:16:8B:C5:59:39:82:DE:C3:EC:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/614b6e40-c958-3824-8cf1-5905e6c7c991.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.crl
X509v3 Authority Key Identifier:
keyid:88:80:4B:02:44:DA:7E:76:D7:64:EE:31:28:48:B6:17:EF:DD:EE:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer
sbgp-ipAddrBlock: critical
IPv4:
216.52.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:14:eb:c7:2b:bb:42:f0:d9:b6:a0:bf:46:c1:2f:61:72:c5:
57:04:23:d6:3a:b6:51:18:ce:3a:56:69:f4:67:f3:bb:6e:9a:
f3:cc:b2:0e:84:be:75:46:10:0f:b6:19:66:c7:13:23:d3:8c:
2e:97:31:63:6a:a8:31:3b:08:50:2d:2d:65:cc:3e:c8:fc:cf:
fe:ea:f4:cb:4a:63:80:d7:4d:9b:0d:3a:fc:b8:eb:78:36:8f:
8b:47:d0:74:95:ef:b2:61:92:ec:b3:d3:f0:d8:9b:76:39:0c:
03:e2:fb:59:23:7b:81:91:a6:e6:de:af:84:8d:8a:ec:35:0d:
e4:cf:25:f8:ad:bf:12:fd:08:eb:f4:1f:41:36:e2:17:6e:c9:
81:6b:d3:41:ab:8d:12:f5:c8:62:d2:e8:38:5d:0e:9e:8a:f9:
88:20:4c:66:3c:b9:f5:30:40:35:d3:66:00:df:08:39:cd:d6:
23:7a:7f:8e:88:9e:9a:e4:56:16:0b:6e:e0:41:ae:06:4b:bb:
90:73:29:90:19:37:c9:8f:85:45:30:59:1f:ef:5f:3b:19:b5:
e8:85:52:38:97:b1:8f:c3:f8:ab:df:00:b8:90:d3:3a:34:6a:
7b:fa:a2:f3:62:0e:f3:8f:3a:70:fe:7c:fb:7d:b8:44:2a:15:
9f:41:22:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgcmozQfXBtlVUQEoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzI4ZWJlOGUtMzJkOS00ODczLWFkNTMtMWE1ZTQyMTEy
NmQ1MB4XDTI0MTIwNjAyMDAzOVoXDTI1MDMwNjAyMDAzOVowLzEtMCsGA1UEAxMk
M2NjYTNlMjQtNmJjOC00NDY2LWFiODAtZGI2ZjI0ZDdkZTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMoggF9s8BHknp09L7qvTwwyLen6uZtiJo2o
7/lbnygfQvh5GANkD0X0U8xWRyd5Kly0K//9oyZYVPtV8I9f3zjR4tGhyCCWSDzL
AqetLFSyHD1j48pR6rTakP2suvacApbAkn1pn/IZQDxxOFPtY9nJQN+Z+Cnwvrdd
DGV/2PYKcYQK6wzBWToZ2cvXRNCdGeiTlRiTQVW0vDM8Wnj5ZWIY1pS79i+JMPWT
IIH2cQuuOq2t1SHlWtacJWmkV4oQlIqNK4Mi8KosFBqNjVPWMINhpwoDD+wDAk/B
IwG9zq8xQ3AR18G8OC3yRDCsejzF2q5+n09lTn6Ep77qKM9NfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBTmAkkq/CV3QdAWi8VZOYLew+zzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zMjhl
YmU4ZS0zMmQ5LTQ4NzMtYWQ1My0xYTVlNDIxMTI2ZDUvNjE0YjZlNDAtYzk1OC0z
ODI0LThjZjEtNTkwNWU2YzdjOTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzI4ZWJlOGUtMzJkOS00ODczLWFk
NTMtMWE1ZTQyMTEyNmQ1LzMyOGViZThlLTMyZDktNDg3My1hZDUzLTFhNWU0MjEx
MjZkNS5jcmwwHwYDVR0jBBgwFoAUiIBLAkTafnbXZO4xKEi2F+/d7g0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zMjhlYmU4ZS0zMmQ5LTQ4NzMtYWQ1My0xYTVl
NDIxMTI2ZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DQOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABsU68cru0Lw2bagv0bBL2FyxVcEI9Y6tlEYzjpWafRn87tumvPMsg6E
vnVGEA+2GWbHEyPTjC6XMWNqqDE7CFAtLWXMPsj8z/7q9MtKY4DXTZsNOvy463g2
j4tH0HSV77Jhkuyz0/DYm3Y5DAPi+1kje4GRpuber4SNiuw1DeTPJfitvxL9COv0
H0E24hduyYFr00GrjRL1yGLS6DhdDp6K+YggTGY8ufUwQDXTZgDfCDnN1iN6f46I
nprkVhYLbuBBrgZLu5BzKZAZN8mPhUUwWR/vXzsZteiFUjiXsY/D+KvfALiQ0zo0
anv6ovNiDvOPOnD+fPt9uEQqFZ9BIuU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:27:54 2025 by rpki-client