Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/ba968438-1dc4-3db1-a0a1-e4360c977088.roa
File: ba968438-1dc4-3db1-a0a1-e4360c977088.roa (raw, json)
Hash identifier: MZZAR9ONq29TNHcuUaK7wkCu6qNtewkSxm+0/wUG7xs=
Subject key identifier: 78:09:16:CE:7C:AC:2B:EE:2F:24:F1:C1:9D:32:3A:AC:6B:4E:3C:E9
Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial: 010D0C9F432858480215081EBBBC2429DB482D80
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/ba968438-1dc4-3db1-a0a1-e4360c977088.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 52129
IP address blocks: 208.84.64.0/24 maxlen: 24
208.86.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:15:08:1e:bb:bc:24:29:db:48:2d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=638caf98-a64c-491c-a06a-fd2b0da9cd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:95:86:af:2a:cd:9a:19:2c:0b:fa:70:5a:da:
f0:52:51:96:4f:91:fb:40:d2:33:42:0e:52:3a:9e:
47:a5:34:d1:95:e3:95:89:8d:9c:8b:b0:0b:50:d4:
2e:47:f5:38:c9:c1:1b:be:cc:32:4e:48:99:22:c6:
18:38:ab:8d:7f:0e:40:06:78:72:de:43:0f:90:31:
c1:43:05:7c:2c:43:8e:37:9c:51:0a:21:d8:51:04:
bb:c6:9d:82:69:10:6f:6d:98:d5:fd:14:06:b8:bb:
22:1f:70:0f:8b:94:75:1a:f5:7d:87:78:2a:00:ff:
a6:f9:01:78:e1:ba:73:b2:86:27:6e:2b:df:e7:fc:
95:7a:16:3c:f9:94:ba:77:0e:ba:c3:a2:a7:2f:fd:
fb:15:45:9c:da:44:9d:15:cc:08:e1:b9:69:7b:c0:
f1:7e:eb:c4:c3:d4:43:fd:9d:02:5c:8a:e9:8a:95:
e7:ff:a6:fb:48:bd:98:dc:40:77:ec:80:42:3c:4f:
8c:4e:7d:88:35:27:16:2d:74:54:5c:66:be:e3:87:
fa:c0:d5:13:3e:15:89:d7:10:80:72:9e:33:b6:6e:
c8:eb:17:c9:38:ba:1a:a0:44:e2:76:5d:3b:b6:9c:
30:42:69:6d:ab:fb:8f:c3:4e:43:13:91:ac:b0:85:
1c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:09:16:CE:7C:AC:2B:EE:2F:24:F1:C1:9D:32:3A:AC:6B:4E:3C:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/ba968438-1dc4-3db1-a0a1-e4360c977088.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
X509v3 Authority Key Identifier:
keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
sbgp-ipAddrBlock: critical
IPv4:
208.84.64.0/24
208.86.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:18:b9:36:47:cd:a3:21:02:af:01:9c:7a:7c:1f:9d:43:e4:
a3:88:40:96:ec:5c:4b:3c:9b:3c:27:c8:24:de:b4:a2:34:76:
b4:1b:c3:fc:f3:ce:c0:d2:e9:10:0a:2b:91:26:8f:13:cc:28:
08:37:7f:fd:13:de:6d:50:44:9f:8e:8b:c3:6c:09:6c:99:c9:
80:a0:b1:80:e0:ff:3b:8c:01:e3:46:21:a0:52:b8:fd:a5:93:
77:54:2c:dc:b7:6a:cc:50:b8:0a:94:5a:ee:eb:33:b7:56:f0:
67:28:7c:c1:eb:b4:19:c4:ed:76:48:db:a5:c8:7d:8d:5e:40:
f3:6f:6f:a7:03:43:91:a5:fc:bb:68:47:96:da:09:d8:29:fb:
f2:00:28:33:85:6e:9e:b4:33:74:af:5a:bf:4b:64:65:53:67:
ba:f4:43:0d:6a:1b:a9:27:09:21:60:81:21:18:66:35:37:60:
8e:f9:32:fe:12:47:69:cd:68:22:6d:6f:15:57:26:ed:e0:e7:
7b:c0:f2:bc:19:34:7f:c1:ce:c7:fb:e0:6f:4d:9f:d1:45:78:
a9:2a:f4:96:e9:62:3a:c6:a2:25:a5:1a:db:80:08:c6:6f:32:
d1:b0:5b:e7:20:47:46:fe:0e:d7:3b:26:48:d1:04:6c:e2:dc:
92:29:72:f3
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEgCFQgeu7wkKdtILYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk
N2M2MB4XDTI0MTEyNjE0MDAzOVoXDTI1MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk
NjM4Y2FmOTgtYTY0Yy00OTFjLWEwNmEtZmQyYjBkYTljZDQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJWGryrNmhksC/pwWtrwUlGWT5H7QNIzQg5S
Op5HpTTRleOViY2ci7ALUNQuR/U4ycEbvswyTkiZIsYYOKuNfw5ABnhy3kMPkDHB
QwV8LEOON5xRCiHYUQS7xp2CaRBvbZjV/RQGuLsiH3APi5R1GvV9h3gqAP+m+QF4
4bpzsoYnbivf5/yVehY8+ZS6dw66w6KnL/37FUWc2kSdFcwI4blpe8DxfuvEw9RD
/Z0CXIrpipXn/6b7SL2Y3EB37IBCPE+MTn2INScWLXRUXGa+44f6wNUTPhWJ1xCA
cp4ztm7I6xfJOLoaoETidl07tpwwQmltq/uPw05DE5GssIUc3wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFHgJFs58rCvuLyTxwZ0yOqxrTjzpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj
NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvYmE5Njg0MzgtMWRjNC0z
ZGIxLWEwYTEtZTQzNjBjOTc3MDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw
MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz
ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz
MjM2M2Q3YzYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA0FRAAwQA
0FbIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAIkYuTZHzaMhAq8BnHp8H51D5KOIQJbsXEs8mzwnyCTetKI0
drQbw/zzzsDS6RAKK5EmjxPMKAg3f/0T3m1QRJ+Oi8NsCWyZyYCgsYDg/zuMAeNG
IaBSuP2lk3dULNy3asxQuAqUWu7rM7dW8GcofMHrtBnE7XZI26XIfY1eQPNvb6cD
Q5Gl/LtoR5baCdgp+/IAKDOFbp60M3SvWr9LZGVTZ7r0Qw1qG6knCSFggSEYZjU3
YI75Mv4SR2nNaCJtbxVXJu3g53vA8rwZNH/Bzsf74G9Nn9FFeKkq9JbpYjrGoiWl
GtuACMZvMtGwW+cgR0b+Dtc7JkjRBGzi3JIpcvM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:16:18 2025 by rpki-client