Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/59539c3e-fbc7-39d1-8276-b7e797669930.roa
File: 59539c3e-fbc7-39d1-8276-b7e797669930.roa (raw, json)
Hash identifier: CNWirdampLpKZDyuB03Jp74vaWFu6tQ3palAgQLJ5TQ=
Subject key identifier: 4C:1B:D4:BD:85:04:DD:54:CC:42:1F:8C:81:99:20:51:BB:F2:1D:6D
Certificate issuer: /CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
Certificate serial: 010D0C9F43285849B091D796DEC6B5E69025B900
Authority key identifier: 73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/59539c3e-fbc7-39d1-8276-b7e797669930.roa
Signing time: Tue 29 Apr 2025 18:49:57 +0000
ROA not before: Tue 29 Apr 2025 18:49:57 +0000
ROA not after: Mon 28 Jul 2025 18:49:57 +0000
asID: 199527
IP address blocks: 216.132.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b0:91:d7:96:de:c6:b5:e6:90:25:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
Validity
Not Before: Apr 29 18:49:57 2025 GMT
Not After : Jul 28 18:49:57 2025 GMT
Subject: CN=dec3781f-9381-4877-9746-7ded69651465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:de:32:0c:be:a2:08:7f:bd:65:bd:34:f8:6c:
69:f0:0c:fb:da:2b:9a:b8:25:1b:87:c7:e3:ae:b7:
0c:ad:b4:fd:07:84:6e:79:c0:a1:d2:bb:af:4b:f6:
a0:8a:14:9c:b7:db:33:99:74:23:72:92:90:79:06:
65:a4:c1:3f:8c:b3:52:d0:22:69:be:ee:d6:12:5f:
db:ae:73:70:a9:44:07:c0:16:db:f0:e2:18:1c:fb:
f8:b9:83:a5:d9:0b:4d:0a:d8:d2:2f:a7:9a:3d:29:
c6:c1:45:cb:1b:fc:2e:12:96:71:a5:14:7e:1e:ce:
ed:99:b2:8a:52:e2:c6:18:68:96:99:e3:f1:0c:af:
b2:b8:80:8d:92:09:1a:4c:8b:ff:4d:19:da:cc:ca:
85:f6:67:ec:34:48:94:79:25:af:34:e9:c5:b8:4c:
38:e2:07:36:79:99:a9:31:81:f4:73:6e:e2:cf:98:
b9:b5:6f:68:6f:51:6a:fd:ae:69:87:8d:bf:06:7a:
c4:71:8c:2b:0e:fc:8c:7f:6c:d3:5e:f5:87:bd:2c:
dc:ca:80:3a:1d:e0:22:8e:d3:e0:97:57:63:36:5a:
a0:d5:74:47:c8:5c:38:d3:ca:b4:3d:c6:f4:34:43:
52:19:3f:20:1a:bb:27:d9:ec:eb:8d:e1:cb:e3:8d:
ee:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1B:D4:BD:85:04:DD:54:CC:42:1F:8C:81:99:20:51:BB:F2:1D:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/59539c3e-fbc7-39d1-8276-b7e797669930.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl
X509v3 Authority Key Identifier:
keyid:73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
sbgp-ipAddrBlock: critical
IPv4:
216.132.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:dc:89:13:28:e8:1f:ac:68:19:4b:2e:09:69:13:6e:4c:a7:
66:61:fa:6f:73:9d:3b:0f:6a:48:e5:b4:ca:4d:51:a9:78:68:
30:00:c0:68:42:c9:f7:50:9e:df:27:93:b1:2d:cb:45:28:97:
a7:66:ce:0a:12:1d:4d:a5:b4:9d:76:04:c9:60:ce:e1:3c:f5:
fc:8c:72:61:18:ad:cf:46:d1:88:27:ae:7a:2b:8f:5e:9c:c2:
84:7f:dc:95:5a:fd:c8:49:f6:58:2e:bf:be:29:e3:03:dd:24:
02:f2:d5:8e:50:ea:55:c1:8e:79:78:32:6c:5b:c4:fc:a8:ec:
b7:11:41:c7:14:ab:d9:5c:25:37:ec:10:89:8f:b0:b1:b3:57:
43:5e:c9:34:69:02:ba:56:91:f5:d0:15:16:ea:32:ad:33:16:
b8:e7:4f:64:e3:dc:44:87:47:e6:c6:59:2e:a6:ce:1d:5e:04:
8d:00:ce:7a:65:93:02:e7:a3:97:79:15:31:5e:e9:49:ad:79:
4d:04:de:c3:69:38:d8:4c:1d:f6:38:73:8c:f9:cc:98:34:32:
b8:dc:1c:bd:b4:b0:f8:a2:66:44:e1:cf:fa:32:d4:0d:9e:9f:
4f:b3:8e:7c:05:2b:83:5a:7c:af:34:42:11:36:98:ff:70:42:
90:d5:6c:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmwkdeW3sa15pAluQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNiNTkwZTgtMzBjNS00OTk3LWJiZjMtZjJmZTEwYTI5
ZTg3MB4XDTI1MDQyOTE4NDk1N1oXDTI1MDcyODE4NDk1N1owLzEtMCsGA1UEAxMk
ZGVjMzc4MWYtOTM4MS00ODc3LTk3NDYtN2RlZDY5NjUxNDY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7N4yDL6iCH+9Zb00+Gxp8Az72iuauCUbh8fj
rrcMrbT9B4RuecCh0ruvS/agihSct9szmXQjcpKQeQZlpME/jLNS0CJpvu7WEl/b
rnNwqUQHwBbb8OIYHPv4uYOl2QtNCtjSL6eaPSnGwUXLG/wuEpZxpRR+Hs7tmbKK
UuLGGGiWmePxDK+yuICNkgkaTIv/TRnazMqF9mfsNEiUeSWvNOnFuEw44gc2eZmp
MYH0c27iz5i5tW9ob1Fq/a5ph42/BnrEcYwrDvyMf2zTXvWHvSzcyoA6HeAijtPg
l1djNlqg1XRHyFw408q0Pcb0NENSGT8gGrsn2ezrjeHL443u0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEwb1L2FBN1UzEIfjIGZIFG78h1tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yM2I1
OTBlOC0zMGM1LTQ5OTctYmJmMy1mMmZlMTBhMjllODcvNTk1MzljM2UtZmJjNy0z
OWQxLTgyNzYtYjdlNzk3NjY5OTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjNiNTkwZTgtMzBjNS00OTk3LWJi
ZjMtZjJmZTEwYTI5ZTg3LzIzYjU5MGU4LTMwYzUtNDk5Ny1iYmYzLWYyZmUxMGEy
OWU4Ny5jcmwwHwYDVR0jBBgwFoAUcy1hwgTHlLBjGpuuELFhCs6jUygwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8yM2I1OTBlOC0zMGM1LTQ5OTctYmJmMy1mMmZl
MTBhMjllODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ITgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKrciRMo6B+saBlLLglpE25Mp2Zh+m9znTsPakjltMpNUal4aDAAwGhC
yfdQnt8nk7Ety0Uol6dmzgoSHU2ltJ12BMlgzuE89fyMcmEYrc9G0Ygnrnorj16c
woR/3JVa/chJ9lguv74p4wPdJALy1Y5Q6lXBjnl4MmxbxPyo7LcRQccUq9lcJTfs
EImPsLGzV0NeyTRpArpWkfXQFRbqMq0zFrjnT2Tj3ESHR+bGWS6mzh1eBI0Aznpl
kwLno5d5FTFe6UmteU0E3sNpONhMHfY4c4z5zJg0MrjcHL20sPiiZkThz/oy1A2e
n0+zjnwFK4NafK80QhE2mP9wQpDVbAM=
-----END CERTIFICATE-----
Generated at Sun May 11 20:09:41 2025 by rpki-client