Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/f7201aa5-0964-32a1-94a5-9389429ccd8f.roa
File: f7201aa5-0964-32a1-94a5-9389429ccd8f.roa (raw, json)
Hash identifier: DTU99m2/5rjcZ/6AYaSQgcr244NhyC1esogxNYuxf68=
Subject key identifier: 80:FD:4A:89:81:3F:79:C4:1C:F3:C1:4B:D1:C8:D7:33:6A:EC:A0:96
Certificate issuer: /CN=d1a2d4b1-dd63-4ea3-8762-70d628347ca6
Certificate serial: 010D0C9F4328584869606A42878B6E02EB9CDB00
Authority key identifier: B3:AC:FE:4F:D4:AB:F0:4E:D1:07:A2:5F:2C:2F:D2:D0:43:17:FE:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/f7201aa5-0964-32a1-94a5-9389429ccd8f.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 398655
IP address blocks: 158.83.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:6a:42:87:8b:6e:02:eb:9c:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1a2d4b1-dd63-4ea3-8762-70d628347ca6
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=3e0a0f96-8a4b-4583-b03e-8d7a5e356a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:12:ed:a3:c7:49:2a:ac:c5:1f:7e:71:8f:62:
76:cc:59:f0:66:f6:9c:ca:70:02:ea:a8:83:e1:8a:
da:91:3d:78:64:10:b6:72:82:f5:c5:3a:25:7b:b3:
ed:ee:ac:20:a2:dc:dc:2d:cf:4a:24:97:0c:c2:16:
a3:e6:da:18:92:63:dd:bf:d3:e3:44:12:d6:9c:0d:
83:8c:ec:18:2a:59:c0:43:5b:98:2b:8e:2d:8a:4f:
00:ff:0a:90:f8:05:0c:16:6b:d9:30:fc:a6:3c:11:
80:44:21:67:20:8f:f7:dd:98:26:d6:89:8e:c4:ab:
1a:9d:41:a4:93:23:60:f7:80:2f:43:e9:43:95:af:
6c:4a:ef:4c:1d:6f:a9:e1:a7:7e:84:d6:22:ec:4f:
3e:bb:8b:28:79:4c:13:44:90:22:40:53:35:98:a6:
1c:b0:f4:4c:e9:4f:1b:d4:1e:a6:a8:57:ff:d4:b9:
fc:cb:2c:a8:41:52:89:08:82:12:1d:5a:10:d7:8b:
85:02:1f:ac:cf:e4:f0:b6:32:5d:a0:e9:8f:93:79:
f1:1a:d8:11:24:c8:1b:12:30:09:db:ac:86:8d:6a:
88:1f:98:f2:e6:50:42:77:d9:f0:16:97:73:5d:98:
33:a6:9a:79:e3:e7:46:5f:de:70:37:b6:1b:d2:4d:
29:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FD:4A:89:81:3F:79:C4:1C:F3:C1:4B:D1:C8:D7:33:6A:EC:A0:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/f7201aa5-0964-32a1-94a5-9389429ccd8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.crl
X509v3 Authority Key Identifier:
keyid:B3:AC:FE:4F:D4:AB:F0:4E:D1:07:A2:5F:2C:2F:D2:D0:43:17:FE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.cer
sbgp-ipAddrBlock: critical
IPv4:
158.83.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:6f:ec:f0:36:1e:85:9c:d8:1c:20:63:41:03:be:e8:ed:22:
9b:64:25:8e:5f:9f:4e:78:e0:8c:f3:fd:db:52:37:92:b5:aa:
0a:93:62:6c:5e:d6:bc:39:3a:07:65:7e:79:1e:82:68:5b:4f:
8c:f9:48:77:28:04:16:ef:b6:67:07:9f:96:72:6e:95:2b:56:
55:07:81:b0:9e:a4:30:c2:44:8e:9c:b3:97:01:e0:2d:1d:63:
bc:76:66:3c:19:62:08:bf:9d:9c:69:0b:98:ab:2d:99:14:05:
b5:d0:ea:67:52:36:0b:75:35:12:90:e5:f5:cf:18:00:20:33:
f5:1f:0c:14:a8:5a:8b:3f:5d:48:f3:ae:23:72:ff:0b:8f:10:
de:5d:59:a6:b0:4d:ce:e3:ca:40:f4:64:0c:7c:22:0e:ab:0a:
8e:e0:57:ef:6f:1f:a3:42:e5:e9:4c:9f:f6:cd:7f:cf:36:8c:
58:78:33:fe:b1:9c:cf:2c:e2:6c:2c:38:13:aa:32:0a:a6:74:
6a:99:ba:cc:77:1f:4e:9d:ff:99:72:40:09:2a:2e:f7:2b:c5:
b3:39:2d:84:5c:48:4d:b3:b2:b5:d0:8b:23:70:a3:09:02:f9:
74:3e:7f:37:0c:92:b2:1b:8b:a0:ef:24:ba:ef:88:7e:36:48:
a8:43:33:e1
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEhpYGpCh4tuAuuc2wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDFhMmQ0YjEtZGQ2My00ZWEzLTg3NjItNzBkNjI4MzQ3
Y2E2MB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk
M2UwYTBmOTYtOGE0Yi00NTgzLWIwM2UtOGQ3YTVlMzU2YTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxLto8dJKqzFH35xj2J2zFnwZvacynAC6qiD
4YrakT14ZBC2coL1xTole7Pt7qwgotzcLc9KJJcMwhaj5toYkmPdv9PjRBLWnA2D
jOwYKlnAQ1uYK44tik8A/wqQ+AUMFmvZMPymPBGARCFnII/33Zgm1omOxKsanUGk
kyNg94AvQ+lDla9sSu9MHW+p4ad+hNYi7E8+u4soeUwTRJAiQFM1mKYcsPRM6U8b
1B6mqFf/1Ln8yyyoQVKJCIISHVoQ14uFAh+sz+TwtjJdoOmPk3nxGtgRJMgbEjAJ
26yGjWqIH5jy5lBCd9nwFpdzXZgzppp54+dGX95wN7Yb0k0pJwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFID9SomBP3nEHPPBS9HI1zNq7KCWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMWEy
ZDRiMS1kZDYzLTRlYTMtODc2Mi03MGQ2MjgzNDdjYTYvZjcyMDFhYTUtMDk2NC0z
MmExLTk0YTUtOTM4OTQyOWNjZDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDFhMmQ0YjEtZGQ2My00ZWEzLTg3
NjItNzBkNjI4MzQ3Y2E2L2QxYTJkNGIxLWRkNjMtNGVhMy04NzYyLTcwZDYyODM0
N2NhNi5jcmwwHwYDVR0jBBgwFoAUs6z+T9Sr8E7RB6JfLC/S0EMX/vswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9kMWEyZDRiMS1kZDYzLTRlYTMtODc2Mi03MGQ2
MjgzNDdjYTYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnlMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEANG/s8DYehZzYHCBjQQO+6O0im2Qljl+fTnjgjPP921I3krWqCpNibF7W
vDk6B2V+eR6CaFtPjPlIdygEFu+2ZweflnJulStWVQeBsJ6kMMJEjpyzlwHgLR1j
vHZmPBliCL+dnGkLmKstmRQFtdDqZ1I2C3U1EpDl9c8YACAz9R8MFKhaiz9dSPOu
I3L/C48Q3l1ZprBNzuPKQPRkDHwiDqsKjuBX728fo0Ll6Uyf9s1/zzaMWHgz/rGc
zyzibCw4E6oyCqZ0apm6zHcfTp3/mXJACSou9yvFszkthFxITbOytdCLI3CjCQL5
dD5/NwySshuLoO8kuu+IfjZIqEMz4Q==
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:30:26 2025 by rpki-client