Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/de8b7be4-f4dd-3fbf-98c7-c45cc0621e2e.roa
File: de8b7be4-f4dd-3fbf-98c7-c45cc0621e2e.roa (raw, json)
Hash identifier: p1tHXQPpsKs+1sd4zqPi7V7AXTciE3KvxKD5VxGjSzU=
Subject key identifier: 19:6A:C7:F8:78:E3:F4:89:2B:3C:FD:96:83:66:DA:70:85:02:8E:45
Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial: 010D0C9F432858487755E65FF6CBFDB5E9003B00
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/de8b7be4-f4dd-3fbf-98c7-c45cc0621e2e.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 7270
IP address blocks: 216.97.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:e6:5f:f6:cb:fd:b5:e9:00:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=b96a9f0d-e10a-4c67-a746-aa236777921a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:32:fc:4c:cd:0b:7e:f6:83:b4:e7:9b:a1:4a:
38:0b:c0:af:fc:2a:89:70:e8:79:70:61:b1:63:46:
88:d0:ca:51:6b:d5:0f:3f:90:22:f3:2f:f1:62:c7:
48:f9:ec:4d:b1:d4:70:f0:5d:39:38:39:d5:bd:41:
f3:c9:48:ac:93:96:97:3f:10:d7:87:29:a8:19:2b:
e7:3c:6f:be:5b:5c:34:b8:64:57:23:48:89:cb:64:
a2:52:c7:8b:a0:50:32:6d:d9:43:53:03:a9:a8:fa:
a1:75:31:7b:2e:c8:67:90:55:ef:ce:b4:e7:44:50:
05:6b:ae:bb:ed:59:7c:53:44:c6:63:83:98:ad:05:
44:f0:aa:20:26:cc:e8:78:aa:51:53:49:7d:c9:09:
c1:da:d4:f7:d5:bb:4f:45:6e:40:44:35:89:21:07:
e4:5b:7a:4a:26:08:50:89:58:3e:d2:3f:2b:52:74:
ba:98:f6:0d:cd:bc:6e:86:35:2a:43:6e:cc:08:30:
fc:c1:73:d6:75:84:0f:ea:2e:36:c0:4b:46:03:29:
f3:34:ea:95:c6:44:c5:ac:7e:fb:1b:87:d6:75:bc:
24:0d:b0:d9:84:41:ca:26:7f:58:02:00:0a:88:ad:
cb:0e:24:36:cc:96:73:3b:cb:c3:48:31:2f:83:00:
ec:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6A:C7:F8:78:E3:F4:89:2B:3C:FD:96:83:66:DA:70:85:02:8E:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/de8b7be4-f4dd-3fbf-98c7-c45cc0621e2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
X509v3 Authority Key Identifier:
keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
sbgp-ipAddrBlock: critical
IPv4:
216.97.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:d7:ac:e6:a2:45:f0:b6:bb:e5:a4:2d:8d:bd:77:58:e5:cc:
97:93:76:f6:37:43:94:32:e9:26:90:03:c7:be:d6:8b:d0:78:
ea:c8:6f:00:7f:27:5a:18:4c:8e:3f:b7:aa:29:5f:ef:44:d6:
0c:c3:06:1e:2a:52:0d:a6:98:43:02:bc:e6:5c:34:c2:89:68:
b5:5e:89:d3:a2:29:cd:76:5b:e9:b7:11:92:63:d8:4c:15:62:
d7:90:30:c7:e3:e5:6e:10:29:5c:a3:a6:e3:d8:7a:c4:78:38:
86:e2:b9:d9:2d:24:e8:47:34:22:7c:ac:5d:5c:d6:2c:d9:99:
27:62:9a:43:ff:83:8d:5b:47:95:83:3f:ee:fe:e9:5c:da:c8:
b2:f0:2a:13:e7:fb:49:cf:26:cc:ed:ef:e6:15:cb:c8:40:26:
31:85:f4:21:9b:02:68:1f:37:52:30:c6:51:39:17:b9:4c:bb:
ff:cf:ee:61:e9:a1:ea:b9:52:df:5a:84:bd:ba:99:76:7a:18:
11:68:d7:63:bb:65:e7:7b:09:5f:06:d0:29:2d:b9:7b:70:49:
4c:7b:5f:b2:a9:4d:96:e9:9a:a4:76:76:5d:2b:2c:92:23:6f:
f1:5d:b7:1c:22:21:9d:df:d1:44:fb:cd:80:f8:87:b8:89:11:
7c:d6:27:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3VeZf9sv9tekAOwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3
NzNlMB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk
Yjk2YTlmMGQtZTEwYS00YzY3LWE3NDYtYWEyMzY3Nzc5MjFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DL8TM0LfvaDtOeboUo4C8Cv/CqJcOh5cGGx
Y0aI0MpRa9UPP5Ai8y/xYsdI+exNsdRw8F05ODnVvUHzyUisk5aXPxDXhymoGSvn
PG++W1w0uGRXI0iJy2SiUseLoFAybdlDUwOpqPqhdTF7LshnkFXvzrTnRFAFa667
7Vl8U0TGY4OYrQVE8KogJszoeKpRU0l9yQnB2tT31btPRW5ARDWJIQfkW3pKJghQ
iVg+0j8rUnS6mPYNzbxuhjUqQ27MCDD8wXPWdYQP6i42wEtGAynzNOqVxkTFrH77
G4fWdbwkDbDZhEHKJn9YAgAKiK3LDiQ2zJZzO8vDSDEvgwDs3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBlqx/h44/SJKzz9loNm2nCFAo5FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl
ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvZGU4YjdiZTQtZjRkZC0z
ZmJmLTk4YzctYzQ1Y2MwNjIxZTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4
YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj
NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1
MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2GGQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHHXrOaiRfC2u+WkLY29d1jlzJeTdvY3Q5Qy6SaQA8e+1ovQeOrIbwB/
J1oYTI4/t6opX+9E1gzDBh4qUg2mmEMCvOZcNMKJaLVeidOiKc12W+m3EZJj2EwV
YteQMMfj5W4QKVyjpuPYesR4OIbiudktJOhHNCJ8rF1c1izZmSdimkP/g41bR5WD
P+7+6VzayLLwKhPn+0nPJszt7+YVy8hAJjGF9CGbAmgfN1IwxlE5F7lMu//P7mHp
oeq5Ut9ahL26mXZ6GBFo12O7Zed7CV8G0CktuXtwSUx7X7KpTZbpmqR2dl0rLJIj
b/FdtxwiIZ3f0UT7zYD4h7iJEXzWJ7Q=
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:54:59 2025 by rpki-client