Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/7d8ad61a-3568-305d-b11c-06347f5b968c.roa
File: 7d8ad61a-3568-305d-b11c-06347f5b968c.roa (raw, json)
Hash identifier: 00/F2Tw2hPc8er4eOVS2S6lJsXfO7L+hIDIbds2XZSw=
Subject key identifier: D9:3E:D2:FD:C2:82:DB:7A:67:F9:14:7D:0E:D0:82:BE:F3:1C:84:8B
Certificate issuer: /CN=85ab0b8f-e87f-4660-83cc-46c357202ed9
Certificate serial: 010D0C9F43285848037B61EB77BCB7B8D1BEFE00
Authority key identifier: 9D:E5:D3:16:6B:18:97:A4:4E:55:F8:BE:7B:71:30:25:AF:77:9B:E8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/7d8ad61a-3568-305d-b11c-06347f5b968c.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 14618
IP address blocks: 209.222.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:61:eb:77:bc:b7:b8:d1:be:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85ab0b8f-e87f-4660-83cc-46c357202ed9
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=924945c3-fee0-42c1-8bd0-a06c3ad84107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:47:5f:f4:86:4b:72:eb:d3:2b:c8:11:cf:cb:
86:6d:23:ab:79:5b:c6:ed:f1:d6:9e:fa:39:74:7b:
e0:b9:04:41:b3:bc:e6:4f:b9:39:dc:f9:cf:42:06:
b8:96:e0:d9:20:8b:37:36:84:10:0d:25:eb:f4:7d:
96:cb:4f:c1:14:7f:a1:e9:99:65:e6:7a:4d:ca:38:
c1:9e:77:f6:72:52:a4:5b:44:8f:47:ca:dd:0b:22:
86:69:72:ee:8f:4e:e2:bd:90:8b:04:aa:46:ba:91:
4c:90:12:a9:40:cc:6d:53:e5:3a:4e:29:b7:f3:7a:
ae:13:f4:5e:75:b1:8a:92:f6:d9:0e:9f:20:ed:0d:
5f:73:4c:98:80:66:12:48:01:8d:2f:d6:95:f2:c7:
5e:2f:a8:7c:4b:94:76:18:be:f5:fe:10:cc:75:96:
a4:b7:49:22:6b:4c:55:b8:4a:51:e8:70:61:86:34:
90:a8:76:1a:4d:c8:a1:66:1d:7f:ff:aa:d3:00:0b:
cb:15:bf:70:d2:b0:ca:07:9e:51:bf:8c:7b:8d:37:
4a:12:65:3f:46:71:aa:cf:57:e2:6b:93:99:0b:0e:
bd:b5:c3:da:9d:ef:74:82:d8:bb:50:ec:0d:b0:ca:
7c:96:1e:c3:bb:b3:4d:6b:f7:fc:63:c0:21:f0:a8:
a5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3E:D2:FD:C2:82:DB:7A:67:F9:14:7D:0E:D0:82:BE:F3:1C:84:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/7d8ad61a-3568-305d-b11c-06347f5b968c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/85ab0b8f-e87f-4660-83cc-46c357202ed9.crl
X509v3 Authority Key Identifier:
keyid:9D:E5:D3:16:6B:18:97:A4:4E:55:F8:BE:7B:71:30:25:AF:77:9B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9.cer
sbgp-ipAddrBlock: critical
IPv4:
209.222.82.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:26:2d:ac:5d:54:68:8a:a5:39:3b:3b:0d:e3:36:91:f6:81:
db:47:4d:15:4a:5a:19:fc:95:6f:67:d6:ed:91:eb:61:66:05:
61:87:24:80:63:0b:7b:1e:23:0d:ff:b2:99:56:d1:d0:03:f6:
a8:b0:31:c7:a6:e7:d1:48:9b:3b:f4:eb:c7:e3:fa:7a:c0:91:
4b:e5:68:e0:6c:86:38:5b:32:44:73:1e:c8:f4:f2:91:c6:c3:
5f:0d:dc:72:f6:6a:da:c9:32:62:20:fb:fc:ee:de:27:a9:db:
c2:d7:3c:a2:28:6b:0d:7e:8c:e0:8d:68:7d:6a:31:02:68:79:
b6:20:21:04:62:62:66:12:43:92:5c:d4:68:56:d1:3f:e4:e5:
55:9e:35:91:14:71:da:1a:08:60:43:81:5f:aa:e0:08:9d:63:
6f:d0:62:82:c3:73:a2:24:7a:c3:f4:85:41:ae:7a:f4:1a:5b:
0f:d7:a3:96:38:a1:a1:7e:9b:10:b2:28:08:e4:f4:eb:35:07:
c1:a0:cd:cf:ea:ee:27:37:77:d7:42:30:bc:29:2a:f6:f7:d3:
22:4c:4c:f0:f4:d5:9c:e0:b8:9a:8e:89:0d:e8:9e:7c:39:29:
aa:2c:6c:01:96:0a:e3:4a:f6:f0:96:87:56:90:22:8a:27:62:
cf:67:ae:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDe2Hrd7y3uNG+/gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODVhYjBiOGYtZTg3Zi00NjYwLTgzY2MtNDZjMzU3MjAy
ZWQ5MB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
OTI0OTQ1YzMtZmVlMC00MmMxLThiZDAtYTA2YzNhZDg0MTA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUdf9IZLcuvTK8gRz8uGbSOreVvG7fHWnvo5
dHvguQRBs7zmT7k53PnPQga4luDZIIs3NoQQDSXr9H2Wy0/BFH+h6Zll5npNyjjB
nnf2clKkW0SPR8rdCyKGaXLuj07ivZCLBKpGupFMkBKpQMxtU+U6Tim383quE/Re
dbGKkvbZDp8g7Q1fc0yYgGYSSAGNL9aV8sdeL6h8S5R2GL71/hDMdZakt0kia0xV
uEpR6HBhhjSQqHYaTcihZh1//6rTAAvLFb9w0rDKB55Rv4x7jTdKEmU/RnGqz1fi
a5OZCw69tcPane90gti7UOwNsMp8lh7Du7NNa/f8Y8Ah8KilXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNk+0v3Cgtt6Z/kUfQ7Qgr7zHISLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NWFi
MGI4Zi1lODdmLTQ2NjAtODNjYy00NmMzNTcyMDJlZDkvN2Q4YWQ2MWEtMzU2OC0z
MDVkLWIxMWMtMDYzNDdmNWI5NjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODVhYjBiOGYtZTg3Zi00NjYwLTgz
Y2MtNDZjMzU3MjAyZWQ5Lzg1YWIwYjhmLWU4N2YtNDY2MC04M2NjLTQ2YzM1NzIw
MmVkOS5jcmwwHwYDVR0jBBgwFoAUneXTFmsYl6ROVfi+e3EwJa93m+gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NWFiMGI4Zi1lODdmLTQ2NjAtODNjYy00NmMz
NTcyMDJlZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0d5SMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGQmLaxdVGiKpTk7Ow3jNpH2gdtHTRVKWhn8lW9n1u2R62FmBWGHJIBj
C3seIw3/splW0dAD9qiwMcem59FImzv068fj+nrAkUvlaOBshjhbMkRzHsj08pHG
w18N3HL2atrJMmIg+/zu3iep28LXPKIoaw1+jOCNaH1qMQJoebYgIQRiYmYSQ5Jc
1GhW0T/k5VWeNZEUcdoaCGBDgV+q4AidY2/QYoLDc6IkesP0hUGuevQaWw/Xo5Y4
oaF+mxCyKAjk9Os1B8Ggzc/q7ic3d9dCMLwpKvb30yJMTPD01ZzguJqOiQ3onnw5
KaosbAGWCuNK9vCWh1aQIoonYs9nrho=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:14:09 2025 by rpki-client