Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/2544a70c-1edf-3a1e-afe2-981ca09a7f46.roa
File: 2544a70c-1edf-3a1e-afe2-981ca09a7f46.roa (raw, json)
Hash identifier: Tuut+uMYAdj42KBZMva7+/+/J8gNs2PsWCKlWglMy/E=
Subject key identifier: DA:94:29:E8:22:08:31:65:6F:19:C3:DD:78:0B:AA:14:02:6E:51:5A
Certificate issuer: /CN=a7eafe65-cc16-48a7-b221-b00bfc181f3f
Certificate serial: 010D0C9F43285848748B1A8F043AC35DB75B3D40
Authority key identifier: BF:EE:2C:A7:43:6D:DA:A8:2B:20:CC:E3:AF:1F:DB:92:53:B9:1F:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/2544a70c-1edf-3a1e-afe2-981ca09a7f46.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 16509
IP address blocks: 216.152.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:1a:8f:04:3a:c3:5d:b7:5b:3d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7eafe65-cc16-48a7-b221-b00bfc181f3f
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=529b2a82-039a-42be-9a81-6fecf5c7e869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b1:2e:b8:8a:fa:62:b8:2e:9b:67:8a:fd:02:
22:4a:0c:b5:5f:26:7c:bc:71:b0:39:8b:02:07:ea:
9c:bd:e6:b7:46:ca:29:33:d3:b1:39:6e:17:03:1d:
23:cb:14:10:a5:13:6d:80:cf:93:2b:2a:d7:9e:f1:
2f:93:5a:59:70:5b:90:78:f2:25:41:e3:fd:02:08:
c5:2e:ef:f4:64:19:71:9c:0c:a5:8a:45:1d:c2:b9:
3d:b1:29:2f:c4:0f:6c:e5:ae:30:b1:e7:b6:6e:cf:
3e:1c:c5:f4:13:2b:91:bb:df:ea:07:17:45:96:34:
1b:66:f3:8c:d5:68:43:aa:78:e4:eb:cb:70:51:d3:
b7:41:3e:ff:82:0b:d6:ab:87:52:56:b4:7e:62:f3:
b5:a6:ef:48:6d:c4:05:0c:ec:e2:8c:61:a6:0c:f8:
67:d1:f2:c1:66:d2:2e:e9:9f:b7:93:4b:5a:3e:86:
62:da:49:96:15:c4:32:7e:b8:02:e4:24:ea:42:23:
92:62:ae:e2:a1:c8:46:8b:79:eb:de:69:87:19:0e:
77:21:b4:3b:05:9a:1f:1d:c3:9b:c1:ef:55:e1:5e:
32:90:83:43:e9:03:be:5c:bd:0a:a6:af:51:18:60:
b2:d4:54:d5:91:56:59:63:e4:d9:55:b1:18:6b:5c:
58:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:94:29:E8:22:08:31:65:6F:19:C3:DD:78:0B:AA:14:02:6E:51:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/2544a70c-1edf-3a1e-afe2-981ca09a7f46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.crl
X509v3 Authority Key Identifier:
keyid:BF:EE:2C:A7:43:6D:DA:A8:2B:20:CC:E3:AF:1F:DB:92:53:B9:1F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
216.152.77.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:63:2c:10:16:b3:a3:68:9b:af:86:bb:fe:e6:08:86:0c:c0:
86:56:23:ef:f1:bb:2d:8e:3c:68:54:e6:7e:54:e7:2f:e0:c4:
d7:13:8d:fe:7e:c1:27:d4:18:0c:49:a4:57:29:a0:a4:4a:07:
68:4f:d2:52:7e:2f:2a:fc:21:c5:c4:7e:33:91:f8:20:c7:a1:
cf:7a:dc:64:08:eb:41:1c:15:4d:f3:ab:ba:4d:f1:05:74:d3:
78:72:ee:d6:1e:39:fc:09:3a:a9:c5:4c:28:e4:d3:5c:6f:fb:
9a:eb:ea:96:4f:57:a4:7a:57:29:95:e7:a8:4c:c7:f1:51:d4:
9c:53:dd:86:f2:48:36:78:6e:94:60:ac:3e:68:0a:83:e5:11:
2d:a6:c9:40:9e:5e:14:cb:8f:a3:c2:37:a4:0e:b9:c3:53:3d:
66:b0:da:8f:80:f3:32:bb:25:57:ba:bf:ac:64:37:8f:ce:ce:
5f:d4:21:2b:45:06:15:85:ee:ad:d3:5a:82:89:7b:a2:92:0d:
11:57:55:93:81:e7:f4:a8:bc:d6:22:d0:22:55:49:7a:81:97:
c4:5f:15:66:ad:c3:d3:df:ca:35:9b:c9:f2:ca:9d:34:39:b4:
dd:f2:ab:2a:2d:d9:5c:73:cf:9e:7e:6e:11:5c:43:51:36:e3:
91:8c:a9:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh0ixqPBDrDXbdbPUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTdlYWZlNjUtY2MxNi00OGE3LWIyMjEtYjAwYmZjMTgx
ZjNmMB4XDTI1MDEwNjE0MDA1MloXDTI1MDQwNjEzMDA1MlowLzEtMCsGA1UEAxMk
NTI5YjJhODItMDM5YS00MmJlLTlhODEtNmZlY2Y1YzdlODY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrEuuIr6Yrgum2eK/QIiSgy1XyZ8vHGwOYsC
B+qcvea3RsopM9OxOW4XAx0jyxQQpRNtgM+TKyrXnvEvk1pZcFuQePIlQeP9AgjF
Lu/0ZBlxnAylikUdwrk9sSkvxA9s5a4wsee2bs8+HMX0EyuRu9/qBxdFljQbZvOM
1WhDqnjk68twUdO3QT7/ggvWq4dSVrR+YvO1pu9IbcQFDOzijGGmDPhn0fLBZtIu
6Z+3k0taPoZi2kmWFcQyfrgC5CTqQiOSYq7iochGi3nr3mmHGQ53IbQ7BZofHcOb
we9V4V4ykIND6QO+XL0Kpq9RGGCy1FTVkVZZY+TZVbEYa1xYwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNqUKegiCDFlbxnD3XgLqhQCblFaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Vh
ZmU2NS1jYzE2LTQ4YTctYjIyMS1iMDBiZmMxODFmM2YvMjU0NGE3MGMtMWVkZi0z
YTFlLWFmZTItOTgxY2EwOWE3ZjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdlYWZlNjUtY2MxNi00OGE3LWIy
MjEtYjAwYmZjMTgxZjNmL2E3ZWFmZTY1LWNjMTYtNDhhNy1iMjIxLWIwMGJmYzE4
MWYzZi5jcmwwHwYDVR0jBBgwFoAUv+4sp0Nt2qgrIMzjrx/bklO5H3cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2VhZmU2NS1jYzE2LTQ4YTctYjIyMS1iMDBi
ZmMxODFmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JhNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIRjLBAWs6Nom6+Gu/7mCIYMwIZWI+/xuy2OPGhU5n5U5y/gxNcTjf5+
wSfUGAxJpFcpoKRKB2hP0lJ+Lyr8IcXEfjOR+CDHoc963GQI60EcFU3zq7pN8QV0
03hy7tYeOfwJOqnFTCjk01xv+5rr6pZPV6R6VymV56hMx/FR1JxT3YbySDZ4bpRg
rD5oCoPlES2myUCeXhTLj6PCN6QOucNTPWaw2o+A8zK7JVe6v6xkN4/Ozl/UIStF
BhWF7q3TWoKJe6KSDRFXVZOB5/SovNYi0CJVSXqBl8RfFWatw9PfyjWbyfLKnTQ5
tN3yqyot2Vxzz55+bhFcQ1E245GMqc4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:30:06 2025 by rpki-client