Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/2cf60c37-0943-33c0-9db7-7f8c37bd0c92.roa
File: 2cf60c37-0943-33c0-9db7-7f8c37bd0c92.roa (raw, json)
Hash identifier: tza8YBicKw6eS+c+LLAW4pAj8ztCBEV+9CrvOPNaZLo=
Subject key identifier: 30:5C:F0:EF:5E:6C:52:F8:D3:E3:70:E9:02:F9:D5:EC:11:7E:0C:81
Certificate issuer: /CN=53f3af06-68ea-4591-9526-0c1fce331651
Certificate serial: 010D0C9F43285848100A84DED314B80A86FE0FC0
Authority key identifier: 8A:FE:A7:10:44:F5:A9:14:8D:C7:0F:AC:74:09:68:60:5F:0D:7F:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/2cf60c37-0943-33c0-9db7-7f8c37bd0c92.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 0
IP address blocks: 206.72.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:84:de:d3:14:b8:0a:86:fe:0f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f3af06-68ea-4591-9526-0c1fce331651
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=957fc1d2-fe42-488a-82c7-2c762c51e563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ff:1d:1e:58:a7:d4:8b:25:8e:74:85:40:62:
54:41:46:a3:b3:94:69:51:2a:b9:2c:f2:67:be:13:
3b:3a:ab:a2:b5:07:8c:95:2f:e0:d2:28:f2:87:50:
0c:52:fa:39:52:ba:99:ff:ab:3b:86:1a:3f:fe:05:
8b:de:f4:e7:05:40:1c:9e:5a:fa:b5:62:c9:05:76:
f6:23:c4:9d:3c:21:84:fe:d4:82:63:b7:f0:4d:33:
8f:09:23:7f:f1:77:45:d2:89:6b:57:e5:a9:3f:d6:
1f:1b:85:f1:2c:47:43:2c:1a:06:85:62:0b:17:7c:
72:82:52:28:45:5e:81:f8:b8:f5:eb:d3:7e:50:e0:
45:be:c6:5d:69:36:81:1a:e7:43:7c:9e:af:f3:7b:
44:d8:82:41:fc:ae:f2:dc:cd:f0:ce:31:63:6e:38:
15:ce:43:7d:f6:61:36:f5:f1:22:d9:21:1f:e9:3c:
4b:41:7e:82:fc:84:04:84:7c:bd:90:6a:fd:94:1a:
7f:bc:a7:11:ec:8d:fe:53:7e:39:fa:f3:db:64:4e:
ad:fb:ed:1e:5c:6e:23:f5:46:25:19:28:59:f3:75:
74:c2:85:6e:70:7f:e8:1e:cd:e9:6d:8e:04:03:82:
9c:95:40:ec:ab:8c:b3:9b:72:21:e1:f2:c0:ec:0f:
c1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5C:F0:EF:5E:6C:52:F8:D3:E3:70:E9:02:F9:D5:EC:11:7E:0C:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/2cf60c37-0943-33c0-9db7-7f8c37bd0c92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/53f3af06-68ea-4591-9526-0c1fce331651.crl
X509v3 Authority Key Identifier:
keyid:8A:FE:A7:10:44:F5:A9:14:8D:C7:0F:AC:74:09:68:60:5F:0D:7F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651.cer
sbgp-ipAddrBlock: critical
IPv4:
206.72.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:06:c9:ff:85:46:fb:7f:c0:9a:01:f3:b3:f3:4e:1b:2d:c2:
72:e8:e0:61:16:7e:43:b2:9b:56:60:2d:bd:a1:82:49:28:fb:
81:9c:2f:c0:89:21:b0:26:ee:2c:a3:2d:cd:ce:a5:b3:61:21:
6e:12:44:c4:e5:3d:e5:79:46:4f:da:0b:78:d3:81:3c:86:53:
0e:ef:4e:58:06:69:84:6a:7a:bd:3d:6b:2b:e0:68:50:98:bc:
5a:c7:69:75:29:d3:38:d2:c3:3a:bf:11:cc:28:a8:a1:7e:db:
53:79:fc:11:c1:0d:b0:3e:b1:f6:7a:e4:69:9f:d3:7a:b0:99:
19:c4:5c:cf:a9:9f:3d:01:c2:3f:74:5b:09:0f:8d:6c:4d:e3:
a4:48:02:e9:34:6e:5c:ff:a7:a9:9b:72:68:d6:5f:32:6b:ec:
34:2c:48:25:34:83:ae:d0:c9:f6:6c:6a:72:69:7a:09:77:9d:
c3:03:5c:bb:24:69:a5:51:fd:ca:b0:43:63:6f:61:1e:16:43:
1b:9f:7e:49:8e:a4:ad:d3:5a:eb:48:14:10:7a:b7:60:18:58:
48:54:1e:f6:81:5d:bc:9f:e2:dc:d9:96:49:e0:e8:84:9d:5f:
fe:ae:24:ca:2f:6b:b4:35:23:54:a4:8b:93:ad:f3:85:38:af:
8a:9e:14:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgQCoTe0xS4Cob+D8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTNmM2FmMDYtNjhlYS00NTkxLTk1MjYtMGMxZmNlMzMx
NjUxMB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk
OTU3ZmMxZDItZmU0Mi00ODhhLTgyYzctMmM3NjJjNTFlNTYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgP8dHlin1IsljnSFQGJUQUajs5RpUSq5LPJn
vhM7OquitQeMlS/g0ijyh1AMUvo5UrqZ/6s7hho//gWL3vTnBUAcnlr6tWLJBXb2
I8SdPCGE/tSCY7fwTTOPCSN/8XdF0olrV+WpP9YfG4XxLEdDLBoGhWILF3xyglIo
RV6B+Lj169N+UOBFvsZdaTaBGudDfJ6v83tE2IJB/K7y3M3wzjFjbjgVzkN99mE2
9fEi2SEf6TxLQX6C/IQEhHy9kGr9lBp/vKcR7I3+U345+vPbZE6t++0eXG4j9UYl
GShZ83V0woVucH/oHs3pbY4EA4KclUDsq4yzm3Ih4fLA7A/BOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDBc8O9ebFL40+Nw6QL51ewRfgyBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81M2Yz
YWYwNi02OGVhLTQ1OTEtOTUyNi0wYzFmY2UzMzE2NTEvMmNmNjBjMzctMDk0My0z
M2MwLTlkYjctN2Y4YzM3YmQwYzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTNmM2FmMDYtNjhlYS00NTkxLTk1
MjYtMGMxZmNlMzMxNjUxLzUzZjNhZjA2LTY4ZWEtNDU5MS05NTI2LTBjMWZjZTMz
MTY1MS5jcmwwHwYDVR0jBBgwFoAUiv6nEET1qRSNxw+sdAloYF8Nf9IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81M2YzYWYwNi02OGVhLTQ1OTEtOTUyNi0wYzFm
Y2UzMzE2NTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzkjQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADQGyf+FRvt/wJoB87PzThstwnLo4GEWfkOym1ZgLb2hgkko+4GcL8CJ
IbAm7iyjLc3OpbNhIW4SRMTlPeV5Rk/aC3jTgTyGUw7vTlgGaYRqer09ayvgaFCY
vFrHaXUp0zjSwzq/EcwoqKF+21N5/BHBDbA+sfZ65Gmf03qwmRnEXM+pnz0Bwj90
WwkPjWxN46RIAuk0blz/p6mbcmjWXzJr7DQsSCU0g67QyfZsanJpegl3ncMDXLsk
aaVR/cqwQ2NvYR4WQxuffkmOpK3TWutIFBB6t2AYWEhUHvaBXbyf4tzZlkng6ISd
X/6uJMova7Q1I1Ski5Ot84U4r4qeFOo=
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:06 2025 by rpki-client