Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65/0f0d1703-db6a-3fa5-8591-22716446fe2b.roa
File: 0f0d1703-db6a-3fa5-8591-22716446fe2b.roa (raw, json)
Hash identifier: +Ntd3xhV9s4uqxkxzgqIOaxR1L8eERhpCT4Mp2YXVh4=
Subject key identifier: 1C:64:53:55:C0:D8:C7:E1:FD:3E:C3:49:57:CA:6E:66:08:97:0E:03
Certificate issuer: /CN=05ceb199-4ec7-4d16-9739-22face258c65
Certificate serial: 010D0C9F4328584878BAFFCC97285E4CF12B6880
Authority key identifier: 25:A3:6A:9B:CE:3D:CB:6F:93:56:D2:97:42:07:51:16:5C:E9:9D:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65/0f0d1703-db6a-3fa5-8591-22716446fe2b.roa
Signing time: Wed 08 Jan 2025 02:00:39 +0000
ROA not before: Wed 08 Jan 2025 02:00:39 +0000
ROA not after: Tue 08 Apr 2025 01:00:39 +0000
asID: 32073
IP address blocks: 205.222.9.0/24 maxlen: 24
205.222.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:78:ba:ff:cc:97:28:5e:4c:f1:2b:68:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ceb199-4ec7-4d16-9739-22face258c65
Validity
Not Before: Jan 8 02:00:39 2025 GMT
Not After : Apr 8 01:00:39 2025 GMT
Subject: CN=91f34c24-ad34-4fbd-8428-928e71582632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a6:cf:25:17:2d:4a:56:4f:9c:07:b6:9d:61:
58:c7:4d:b7:9d:6a:3f:15:83:71:1d:4e:43:02:f5:
49:33:1a:9f:7e:b5:c7:63:e3:9a:e5:58:a9:ef:84:
51:80:9f:74:90:b7:36:f0:b1:ff:7a:da:fa:7b:0b:
5d:47:c2:ac:d7:d0:cc:0d:bb:0b:ca:f7:27:e4:e9:
61:cf:3e:16:4b:40:73:2e:d2:4b:78:a4:24:11:8a:
d6:2c:ad:ea:40:ce:15:39:f0:cf:4f:d7:76:eb:88:
7c:44:92:32:28:e2:b9:0c:9a:09:9f:7c:c1:a2:c4:
44:c8:fb:19:15:82:f4:04:a9:80:6f:44:23:22:bb:
6f:26:8b:59:66:60:a6:b1:70:d5:5c:2c:3f:98:c7:
b9:cd:bf:ad:b6:fa:2b:0e:2e:e0:f8:66:db:92:a6:
b6:33:c7:3e:3e:f6:c6:59:a8:1d:e3:1e:e7:15:ea:
2d:d8:6f:cf:87:38:6d:e6:5f:8a:ef:69:5a:7b:08:
89:f1:e6:4f:85:59:81:61:ea:11:13:cd:0c:99:ff:
54:73:3e:97:da:79:d1:ac:e7:49:62:df:b9:65:89:
86:0f:7e:4f:2b:f0:77:f6:5c:9c:3e:9e:96:8a:cd:
fd:f2:60:25:57:55:42:a3:eb:ca:61:d0:a4:cb:f4:
88:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:64:53:55:C0:D8:C7:E1:FD:3E:C3:49:57:CA:6E:66:08:97:0E:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65/0f0d1703-db6a-3fa5-8591-22716446fe2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65/05ceb199-4ec7-4d16-9739-22face258c65.crl
X509v3 Authority Key Identifier:
keyid:25:A3:6A:9B:CE:3D:CB:6F:93:56:D2:97:42:07:51:16:5C:E9:9D:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65.cer
sbgp-ipAddrBlock: critical
IPv4:
205.222.9.0/24
205.222.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:0b:1f:fc:cc:31:41:98:92:d6:af:38:36:6a:45:ec:2c:4e:
6c:96:2f:ff:70:9c:28:79:20:d4:7c:16:2f:7b:45:37:ff:32:
d8:56:a7:68:05:34:46:0c:a7:3c:55:34:69:c8:7b:46:e3:41:
56:c3:3f:26:aa:d1:7c:60:f4:b7:27:39:3b:e9:93:5e:3a:b5:
a7:13:04:47:e3:86:45:e4:68:b1:e1:0d:5e:aa:c7:21:07:76:
52:2a:d7:51:d4:ce:b9:3c:45:9f:92:8f:0f:a6:4a:e2:4c:20:
92:dd:1c:b9:79:97:11:0a:42:cd:6e:33:5e:4d:93:6d:6a:58:
0a:f8:c2:57:4b:29:b8:78:04:9c:6f:04:ac:99:fd:ca:1d:b0:
6a:e8:69:19:34:e7:a8:a7:fe:d7:07:95:5d:f0:5a:de:90:c2:
9a:40:cc:a2:7d:49:96:bf:e4:c7:e0:8b:99:ee:ed:7a:39:48:
3a:25:ef:5c:b4:7d:af:cb:f9:f2:44:6e:03:e2:71:7d:26:5a:
d4:38:1d:2f:3a:4a:e7:93:fe:40:12:77:bb:b4:b5:06:78:c5:
f5:47:9c:0f:94:c9:78:d1:52:a6:7a:a4:25:1b:b5:eb:ba:ab:
a9:03:3b:59:34:2a:6a:59:0f:46:1d:65:0f:28:b2:af:3f:46:
ef:eb:f0:0c
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEh4uv/MlyheTPEraIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDVjZWIxOTktNGVjNy00ZDE2LTk3MzktMjJmYWNlMjU4
YzY1MB4XDTI1MDEwODAyMDAzOVoXDTI1MDQwODAxMDAzOVowLzEtMCsGA1UEAxMk
OTFmMzRjMjQtYWQzNC00ZmJkLTg0MjgtOTI4ZTcxNTgyNjMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKbPJRctSlZPnAe2nWFYx023nWo/FYNxHU5D
AvVJMxqffrXHY+Oa5Vip74RRgJ90kLc28LH/etr6ewtdR8Ks19DMDbsLyvcn5Olh
zz4WS0BzLtJLeKQkEYrWLK3qQM4VOfDPT9d264h8RJIyKOK5DJoJn3zBosREyPsZ
FYL0BKmAb0QjIrtvJotZZmCmsXDVXCw/mMe5zb+ttvorDi7g+Gbbkqa2M8c+PvbG
Wagd4x7nFeot2G/Phzht5l+K72laewiJ8eZPhVmBYeoRE80Mmf9Ucz6X2nnRrOdJ
Yt+5ZYmGD35PK/B39lycPp6Wis398mAlV1VCo+vKYdCky/SIlwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFBxkU1XA2Mfh/T7DSVfKbmYIlw4DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wNWNl
YjE5OS00ZWM3LTRkMTYtOTczOS0yMmZhY2UyNThjNjUvMGYwZDE3MDMtZGI2YS0z
ZmE1LTg1OTEtMjI3MTY0NDZmZTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMDVjZWIxOTktNGVjNy00ZDE2LTk3
MzktMjJmYWNlMjU4YzY1LzA1Y2ViMTk5LTRlYzctNGQxNi05NzM5LTIyZmFjZTI1
OGM2NS5jcmwwHwYDVR0jBBgwFoAUJaNqm849y2+TVtKXQgdRFlzpneQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8wNWNlYjE5OS00ZWM3LTRkMTYtOTczOS0yMmZh
Y2UyNThjNjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAzd4JAwQA
zd71MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAD0LH/zMMUGYktavODZqRewsTmyWL/9wnCh5INR8Fi97RTf/
MthWp2gFNEYMpzxVNGnIe0bjQVbDPyaq0Xxg9LcnOTvpk146tacTBEfjhkXkaLHh
DV6qxyEHdlIq11HUzrk8RZ+Sjw+mSuJMIJLdHLl5lxEKQs1uM15Nk21qWAr4wldL
Kbh4BJxvBKyZ/codsGroaRk056in/tcHlV3wWt6QwppAzKJ9SZa/5Mfgi5nu7Xo5
SDol71y0fa/L+fJEbgPicX0mWtQ4HS86SueT/kASd7u0tQZ4xfVHnA+UyXjRUqZ6
pCUbteu6q6kDO1k0KmpZD0YdZQ8osq8/Ru/r8Aw=
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:07:52 2025 by rpki-client