Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/c481b471-d019-386a-9eb3-32cbcff9f93e.roa
File: c481b471-d019-386a-9eb3-32cbcff9f93e.roa (raw, json)
Hash identifier: RamnE7C+IVJ0nSe8i0DNDhEVfypYDBpz2DltnQJCwbQ=
Subject key identifier: 9A:C5:ED:89:B6:6E:A7:70:8F:A3:A1:12:68:5F:D1:FA:25:D4:2A:CC
Certificate issuer: /CN=1931273b-f68a-4770-b714-cad22762621f
Certificate serial: 010D0C9F4328584878BB04539A56845D08B5C000
Authority key identifier: F7:16:90:B5:E3:C9:9B:72:25:C4:87:A7:EA:51:76:F2:4E:3C:F6:AD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/c481b471-d019-386a-9eb3-32cbcff9f93e.roa
Signing time: Wed 08 Jan 2025 02:00:39 +0000
ROA not before: Wed 08 Jan 2025 02:00:39 +0000
ROA not after: Tue 08 Apr 2025 01:00:39 +0000
asID: 945
IP address blocks: 206.168.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:78:bb:04:53:9a:56:84:5d:08:b5:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1931273b-f68a-4770-b714-cad22762621f
Validity
Not Before: Jan 8 02:00:39 2025 GMT
Not After : Apr 8 01:00:39 2025 GMT
Subject: CN=39038885-3b1b-4957-b876-adae2ae3ca68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1d:2f:3c:bf:d0:b7:f6:d2:a8:cc:28:4b:33:
1c:11:51:55:96:b8:ad:f0:2a:bd:5c:8f:9d:78:bd:
53:39:80:62:07:56:13:a3:98:7d:e3:be:f1:04:95:
84:34:26:e5:b6:fe:74:7c:c0:80:a3:a4:02:28:88:
49:d2:c2:75:37:da:cc:7a:61:0c:46:69:f5:0a:6f:
ab:c2:79:cd:9a:ec:1e:a8:e3:bb:66:dd:18:8c:45:
c3:d2:92:12:4c:19:a8:ca:16:dc:ea:14:66:69:37:
0a:7d:9e:2f:ad:c5:11:d4:d3:9f:3f:08:6c:84:fc:
db:57:10:39:c4:64:62:52:94:59:e5:f1:79:ff:56:
d8:14:8a:d0:9c:ae:a1:d0:c4:1a:6c:ef:d7:46:1c:
ab:c5:b0:72:67:8b:07:5c:01:08:f2:ff:4a:6b:48:
2c:63:29:95:9e:14:a0:db:d5:e4:be:11:b5:69:09:
e4:a2:a3:07:27:ed:3e:2b:3c:71:9c:fb:cf:80:79:
10:7e:51:e6:fe:d9:ab:90:f7:e6:f4:44:ed:e8:87:
e0:09:b5:ae:55:4c:f8:bd:95:e0:36:f7:82:08:b6:
82:25:a0:53:65:a2:59:3b:11:70:60:8f:3c:be:77:
fe:c4:61:f6:a6:d9:b5:06:05:6c:23:a9:49:04:ac:
11:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C5:ED:89:B6:6E:A7:70:8F:A3:A1:12:68:5F:D1:FA:25:D4:2A:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/c481b471-d019-386a-9eb3-32cbcff9f93e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/1931273b-f68a-4770-b714-cad22762621f.crl
X509v3 Authority Key Identifier:
keyid:F7:16:90:B5:E3:C9:9B:72:25:C4:87:A7:EA:51:76:F2:4E:3C:F6:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:7e:72:f0:d7:6e:5c:a2:08:6b:e6:71:d3:90:02:53:af:13:
2e:23:20:f0:d1:55:f0:1c:c9:7b:07:87:41:59:09:90:8b:d3:
65:53:d7:0c:f0:96:df:c0:cc:28:49:a6:13:e6:96:79:d1:93:
ed:b2:ef:c5:d2:0f:f1:0f:cf:d1:bd:a6:6d:6c:b7:65:c6:ee:
21:24:74:6d:54:f3:ce:70:dc:df:7c:6a:90:80:1d:0f:14:31:
75:e7:fb:f6:64:00:a9:87:fc:dd:8c:53:e5:b3:d0:ea:43:21:
a3:65:4a:c0:f6:4e:06:b4:aa:fd:04:84:ab:49:46:82:2a:ef:
ea:6d:77:03:9b:db:89:25:52:e1:f4:16:7c:b5:38:d6:db:f7:
9b:36:c2:ab:a0:e7:20:48:f4:06:43:e5:4c:13:f8:14:d5:90:
b2:dc:cd:b9:c1:09:e0:b5:64:e4:79:d5:fa:21:ad:c6:1f:b9:
93:e6:f5:46:be:cd:cc:a1:a1:93:f3:a2:ad:a5:54:6e:9e:1c:
c9:04:9d:51:c8:9c:dc:01:6a:b3:24:d0:c6:a7:9d:c9:c0:e6:
1f:8d:3a:3f:58:a1:33:f2:e9:0b:54:df:88:ae:7a:89:98:58:
f1:f8:83:9e:41:3a:7c:24:60:d4:01:e0:fe:1a:5b:61:fd:ae:
1b:86:72:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh4uwRTmlaEXQi1wAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTkzMTI3M2ItZjY4YS00NzcwLWI3MTQtY2FkMjI3NjI2
MjFmMB4XDTI1MDEwODAyMDAzOVoXDTI1MDQwODAxMDAzOVowLzEtMCsGA1UEAxMk
MzkwMzg4ODUtM2IxYi00OTU3LWI4NzYtYWRhZTJhZTNjYTY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB0vPL/Qt/bSqMwoSzMcEVFVlrit8Cq9XI+d
eL1TOYBiB1YTo5h9477xBJWENCbltv50fMCAo6QCKIhJ0sJ1N9rMemEMRmn1Cm+r
wnnNmuweqOO7Zt0YjEXD0pISTBmoyhbc6hRmaTcKfZ4vrcUR1NOfPwhshPzbVxA5
xGRiUpRZ5fF5/1bYFIrQnK6h0MQabO/XRhyrxbByZ4sHXAEI8v9Ka0gsYymVnhSg
29XkvhG1aQnkoqMHJ+0+KzxxnPvPgHkQflHm/tmrkPfm9ETt6IfgCbWuVUz4vZXg
NveCCLaCJaBTZaJZOxFwYI88vnf+xGH2ptm1BgVsI6lJBKwRPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJrF7Ym2bqdwj6OhEmhf0fol1CrMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xOTMx
MjczYi1mNjhhLTQ3NzAtYjcxNC1jYWQyMjc2MjYyMWYvYzQ4MWI0NzEtZDAxOS0z
ODZhLTllYjMtMzJjYmNmZjlmOTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTkzMTI3M2ItZjY4YS00NzcwLWI3
MTQtY2FkMjI3NjI2MjFmLzE5MzEyNzNiLWY2OGEtNDc3MC1iNzE0LWNhZDIyNzYy
NjIxZi5jcmwwHwYDVR0jBBgwFoAU9xaQtePJm3IlxIen6lF28k489q0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xOTMxMjczYi1mNjhhLTQ3NzAtYjcxNC1jYWQy
Mjc2MjYyMWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqjsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABN+cvDXblyiCGvmcdOQAlOvEy4jIPDRVfAcyXsHh0FZCZCL02VT1wzw
lt/AzChJphPmlnnRk+2y78XSD/EPz9G9pm1st2XG7iEkdG1U885w3N98apCAHQ8U
MXXn+/ZkAKmH/N2MU+Wz0OpDIaNlSsD2Tga0qv0EhKtJRoIq7+ptdwOb24klUuH0
Fny1ONbb95s2wqug5yBI9AZD5UwT+BTVkLLczbnBCeC1ZOR51fohrcYfuZPm9Ua+
zcyhoZPzoq2lVG6eHMkEnVHInNwBarMk0ManncnA5h+NOj9YoTPy6QtU34iueomY
WPH4g55BOnwkYNQB4P4aW2H9rhuGcms=
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:20:40 2025 by rpki-client