Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/d9267840-74ce-3a72-81c9-8d2037a7bbc2.roa
File: d9267840-74ce-3a72-81c9-8d2037a7bbc2.roa (raw, json)
Hash identifier: HiA0QfU8r0/K3HWWWOHlh3FSOSzq5mXjiOfD9I+SjJs=
Subject key identifier: F5:11:8D:CB:90:4C:A1:38:97:E8:D4:BA:B6:7E:6C:3B:C9:E2:55:E0
Certificate issuer: /CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
Certificate serial: 010D0C9F432858483E1AAC8E9C8E33598A267300
Authority key identifier: C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/d9267840-74ce-3a72-81c9-8d2037a7bbc2.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 27742
IP address blocks: 208.96.128.0/21 maxlen: 24
208.96.136.0/22 maxlen: 24
209.124.100.0/23 maxlen: 24
209.124.105.0/24 maxlen: 24
209.124.106.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:ac:8e:9c:8e:33:59:8a:26:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=7c631608-4819-4da3-8999-999050139b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c0:97:9d:c5:03:7b:cd:21:f3:9b:2d:d0:b7:
97:ac:9e:bf:cd:46:22:30:1f:eb:3d:e8:61:a6:b0:
50:18:26:c1:7f:61:ca:31:30:38:06:7d:d5:41:c4:
f4:8a:b7:99:40:95:32:2a:41:5f:d5:f3:2c:d9:a9:
e3:7c:16:6f:93:0d:2c:f1:82:52:d5:d3:73:49:0f:
69:ad:07:5f:56:7b:84:f9:7e:23:2c:72:b1:fc:7f:
f0:bb:c1:89:99:06:db:ef:d4:13:45:95:d0:82:18:
db:46:38:a6:30:c5:78:ef:45:dd:6b:09:30:fc:e1:
45:ca:86:9f:8a:b4:65:76:8e:a3:0d:5a:41:ed:d6:
28:bd:4b:53:bc:b5:23:cd:6c:da:ab:5a:43:c5:0a:
4d:7a:7f:8f:62:40:45:23:e4:4c:ab:0e:50:5c:0d:
b9:a2:a2:f0:31:62:4a:be:ee:5b:b3:b4:34:bd:7c:
7e:aa:d3:3f:7d:b2:6f:d6:4b:02:88:32:62:8f:cd:
a7:b7:40:51:64:58:62:17:ba:ac:91:a4:c7:c9:59:
0f:df:1a:f1:34:c0:7f:16:61:af:ad:c0:24:64:70:
24:ea:a3:ad:c7:a8:7c:b3:30:7c:a6:d7:6b:cb:36:
74:1e:e3:4d:4b:be:ba:94:b3:d9:6c:8f:f1:11:d1:
85:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:11:8D:CB:90:4C:A1:38:97:E8:D4:BA:B6:7E:6C:3B:C9:E2:55:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/d9267840-74ce-3a72-81c9-8d2037a7bbc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl
X509v3 Authority Key Identifier:
keyid:C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
sbgp-ipAddrBlock: critical
IPv4:
208.96.128.0-208.96.139.255
209.124.100.0/23
209.124.105.0-209.124.107.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:c2:da:2e:e2:ec:bf:90:bf:51:7d:8f:60:3a:05:09:b2:03:
2d:f9:57:e8:62:51:a1:ed:51:81:7b:da:c4:75:41:02:0e:7a:
42:17:bd:2f:af:62:b6:26:e7:91:a8:96:55:4c:1a:f7:a5:f5:
65:55:4a:64:ab:af:0f:7e:94:58:f4:c4:76:9e:a7:dd:14:da:
66:da:1a:95:9c:5b:07:79:b8:63:a5:df:79:5d:88:07:94:54:
88:bf:80:de:f8:a2:e9:9c:46:10:b9:c7:1f:49:43:26:da:43:
8c:11:3b:a5:55:ed:22:2b:ec:15:7a:bf:dd:70:e3:75:b1:e7:
14:35:0e:cb:11:30:fe:bd:63:ee:b3:3d:48:56:2d:16:bc:21:
0b:84:e1:23:a9:18:ea:c3:52:be:9a:fb:86:26:5c:c5:6b:8d:
ed:11:27:d1:be:32:d1:3e:a9:64:db:51:ca:97:7d:7d:29:bf:
d7:f2:fc:b0:f9:1c:91:a4:6a:12:3e:b7:85:76:36:29:60:dc:
eb:b7:a9:7a:ce:89:81:20:bf:0f:88:ba:a8:6b:2b:99:2a:82:
92:d7:ec:b5:cf:44:a1:5e:46:0b:47:a0:54:63:bc:a3:99:73:
fa:3c:19:c8:a4:97:cf:2c:84:f4:2e:ad:d5:d6:22:29:be:fa:
57:ad:c8:2e
-----BEGIN CERTIFICATE-----
MIIGXzCCBUegAwIBAgIUAQ0Mn0MoWEg+GqyOnI4zWYomcwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjE1MzJhZGItZWQ3ZC00M2JhLWE2NmYtMmEzMzNmYjlj
ZjYyMB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk
N2M2MzE2MDgtNDgxOS00ZGEzLTg5OTktOTk5MDUwMTM5YjQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8CXncUDe80h85st0LeXrJ6/zUYiMB/rPehh
prBQGCbBf2HKMTA4Bn3VQcT0ireZQJUyKkFf1fMs2anjfBZvkw0s8YJS1dNzSQ9p
rQdfVnuE+X4jLHKx/H/wu8GJmQbb79QTRZXQghjbRjimMMV470Xdawkw/OFFyoaf
irRldo6jDVpB7dYovUtTvLUjzWzaq1pDxQpNen+PYkBFI+RMqw5QXA25oqLwMWJK
vu5bs7Q0vXx+qtM/fbJv1ksCiDJij82nt0BRZFhiF7qskaTHyVkP3xrxNMB/FmGv
rcAkZHAk6qOtx6h8szB8ptdryzZ0HuNNS766lLPZbI/xEdGFXQIDAQABo4IDcTCC
A20wHQYDVR0OBBYEFPURjcuQTKE4l+jUurZ+bDvJ4lXgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MTUz
MmFkYi1lZDdkLTQzYmEtYTY2Zi0yYTMzM2ZiOWNmNjIvZDkyNjc4NDAtNzRjZS0z
YTcyLTgxYzktOGQyMDM3YTdiYmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjE1MzJhZGItZWQ3ZC00M2JhLWE2
NmYtMmEzMzNmYjljZjYyLzYxNTMyYWRiLWVkN2QtNDNiYS1hNjZmLTJhMzMzZmI5
Y2Y2Mi5jcmwwHwYDVR0jBBgwFoAUyWUizQq8OtYAsr0X/ULCZsZFX80wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82MTUzMmFkYi1lZDdkLTQzYmEtYTY2Zi0yYTMz
M2ZiOWNmNjIuY2VyMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAfQYIAD
BALQYIgDBAHRfGQwDAMEANF8aQMEAtF8aDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBBwtou4uy/kL9RfY9g
OgUJsgMt+VfoYlGh7VGBe9rEdUECDnpCF70vr2K2JueRqJZVTBr3pfVlVUpkq68P
fpRY9MR2nqfdFNpm2hqVnFsHebhjpd95XYgHlFSIv4De+KLpnEYQuccfSUMm2kOM
ETulVe0iK+wVer/dcON1secUNQ7LETD+vWPusz1IVi0WvCELhOEjqRjqw1K+mvuG
JlzFa43tESfRvjLRPqlk21HKl319Kb/X8vyw+RyRpGoSPreFdjYpYNzrt6l6zomB
IL8PiLqoayuZKoKS1+y1z0ShXkYLR6BUY7yjmXP6PBnIpJfPLIT0Lq3V1iIpvvpX
rcgu
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:35:13 2025 by rpki-client