Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe/7a87cccb-1861-3d70-83df-d545333d305b.roa
File: 7a87cccb-1861-3d70-83df-d545333d305b.roa (raw, json)
Hash identifier: ucGZq7i9bU3wmO7GDEADV6S2u0clHqUi39p7NkB+T3U=
Subject key identifier: C7:43:58:43:74:45:30:4D:88:57:4A:3C:3C:FF:B8:AD:CA:DC:E5:7D
Certificate issuer: /CN=5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe
Certificate serial: 010D0C9F43285848143A6763C261FD5C98240140
Authority key identifier: DF:4B:B0:B5:6D:27:A0:AF:86:F0:AA:86:5A:D8:4C:AB:5F:60:C7:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe/7a87cccb-1861-3d70-83df-d545333d305b.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 396982
IP address blocks: 158.228.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:67:63:c2:61:fd:5c:98:24:01:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=d4408f17-808d-4815-bca4-a657186f0ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:59:90:9a:fd:9e:5f:45:dc:fa:83:e5:b9:f3:
72:b1:49:7f:05:31:06:ec:d6:69:73:2d:71:5e:d6:
a8:b9:1c:e9:a0:b6:3b:63:42:3d:53:d0:75:5f:50:
2b:25:89:a4:cb:0a:f4:0e:d5:f7:8c:99:68:92:b7:
6e:44:e4:fa:fe:dc:e8:4f:65:9c:db:13:cc:30:49:
e3:6d:b1:fe:b7:40:91:77:60:ed:a8:5b:3d:fa:f5:
75:34:b5:6a:ec:44:eb:e6:19:60:06:46:9d:f4:49:
ee:14:a1:ed:9e:07:ef:75:88:1c:51:5a:07:7f:e0:
dd:cb:c1:ce:21:74:21:57:6b:e4:5f:98:69:29:2b:
74:5f:19:fb:64:29:9f:8f:de:21:26:00:f0:5e:d9:
08:c2:24:eb:05:b2:7b:76:24:17:1b:eb:b6:a4:10:
a6:f7:08:cf:4e:48:58:11:06:20:4b:a4:c6:d1:aa:
1a:6c:45:f9:5f:fa:a3:e8:79:82:39:c5:d7:e7:2b:
1f:27:23:62:e5:50:32:da:1d:f5:9a:49:8e:d4:59:
30:20:94:9b:01:c6:a5:07:16:b0:4d:39:be:71:7d:
5e:e2:7d:87:20:e9:c0:e3:2d:6f:72:65:33:68:e9:
27:d2:6c:c6:d0:97:dd:d4:ac:5a:d5:2a:d3:1c:01:
6c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:43:58:43:74:45:30:4D:88:57:4A:3C:3C:FF:B8:AD:CA:DC:E5:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe/7a87cccb-1861-3d70-83df-d545333d305b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe/5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe.crl
X509v3 Authority Key Identifier:
keyid:DF:4B:B0:B5:6D:27:A0:AF:86:F0:AA:86:5A:D8:4C:AB:5F:60:C7:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe.cer
sbgp-ipAddrBlock: critical
IPv4:
158.228.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:b6:2f:b4:04:c4:e5:b2:a9:9e:df:d5:2d:f0:5e:e8:33:6c:
69:af:68:72:67:02:0e:dd:14:01:95:a2:78:aa:09:87:ee:a0:
a2:a9:06:1d:36:fe:3d:a2:d5:14:2f:9a:22:49:74:dd:67:43:
72:9c:e7:f5:e2:36:a1:1b:14:97:26:a2:de:98:09:7b:43:12:
f2:99:07:25:e0:73:85:7c:2d:52:6c:30:e7:a6:13:07:27:af:
0f:a1:99:55:ea:9c:8b:5f:29:78:73:8a:da:9e:d3:28:55:76:
f6:b8:90:d3:46:76:9e:f0:17:22:09:17:e8:b9:bb:38:57:83:
25:b6:50:34:78:9d:fc:40:c4:46:37:94:0b:91:ba:96:b3:54:
9e:41:21:75:c0:70:4d:83:49:29:57:25:df:cc:7b:a5:c1:d9:
28:46:70:67:1a:8f:b9:29:32:f9:a6:94:15:08:dd:cd:b2:75:
cf:df:ee:57:35:39:df:f0:1e:db:09:22:05:3c:34:60:98:db:
5c:3a:71:00:74:27:27:3c:a0:15:65:f1:35:5a:d7:d5:3f:28:
b4:f6:f8:08:ec:a0:30:66:09:fa:33:ae:8f:f3:d1:a1:91:6d:
e5:ab:17:46:f4:32:7c:46:53:d3:eb:34:80:bf:5d:b6:3b:00:
5a:40:83:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOmdjwmH9XJgkAUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTkwNWQyY2UtYmQwMi00OGVmLWJiZWUtOWNkM2IyNmZj
ZmJlMB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
ZDQ0MDhmMTctODA4ZC00ODE1LWJjYTQtYTY1NzE4NmYwYmE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVmQmv2eX0Xc+oPlufNysUl/BTEG7NZpcy1x
XtaouRzpoLY7Y0I9U9B1X1ArJYmkywr0DtX3jJlokrduROT6/tzoT2Wc2xPMMEnj
bbH+t0CRd2DtqFs9+vV1NLVq7ETr5hlgBkad9EnuFKHtngfvdYgcUVoHf+Ddy8HO
IXQhV2vkX5hpKSt0Xxn7ZCmfj94hJgDwXtkIwiTrBbJ7diQXG+u2pBCm9wjPTkhY
EQYgS6TG0aoabEX5X/qj6HmCOcXX5ysfJyNi5VAy2h31mkmO1FkwIJSbAcalBxaw
TTm+cX1e4n2HIOnA4y1vcmUzaOkn0mzG0Jfd1Kxa1SrTHAFshwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMdDWEN0RTBNiFdKPDz/uK3K3OV9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81OTA1
ZDJjZS1iZDAyLTQ4ZWYtYmJlZS05Y2QzYjI2ZmNmYmUvN2E4N2NjY2ItMTg2MS0z
ZDcwLTgzZGYtZDU0NTMzM2QzMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTkwNWQyY2UtYmQwMi00OGVmLWJi
ZWUtOWNkM2IyNmZjZmJlLzU5MDVkMmNlLWJkMDItNDhlZi1iYmVlLTljZDNiMjZm
Y2ZiZS5jcmwwHwYDVR0jBBgwFoAU30uwtW0noK+G8KqGWthMq19gx1owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC81OTA1ZDJjZS1iZDAyLTQ4ZWYtYmJlZS05Y2Qz
YjI2ZmNmYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnuTxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAC2L7QExOWyqZ7f1S3wXugzbGmvaHJnAg7dFAGVoniqCYfuoKKpBh02
/j2i1RQvmiJJdN1nQ3Kc5/XiNqEbFJcmot6YCXtDEvKZByXgc4V8LVJsMOemEwcn
rw+hmVXqnItfKXhzitqe0yhVdva4kNNGdp7wFyIJF+i5uzhXgyW2UDR4nfxAxEY3
lAuRupazVJ5BIXXAcE2DSSlXJd/Me6XB2ShGcGcaj7kpMvmmlBUI3c2ydc/f7lc1
Od/wHtsJIgU8NGCY21w6cQB0Jyc8oBVl8TVa19U/KLT2+AjsoDBmCfozro/z0aGR
beWrF0b0MnxGU9PrNIC/XbY7AFpAg0A=
-----END CERTIFICATE-----
Generated at Tue May 13 04:30:28 2025 by rpki-client