Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/88c6dda7-4d88-3a7d-9093-d34d2975cab4.roa
File: 88c6dda7-4d88-3a7d-9093-d34d2975cab4.roa (raw, json)
Hash identifier: aDbZc99mtpaSLzcbmrA2SABttsxJ6DS/lQMfO1eAdSM=
Subject key identifier: 0F:3D:E3:EC:C6:6C:AE:02:B4:A9:DA:7D:17:2C:D5:91:0B:DF:CE:49
Certificate issuer: /CN=f37ae11d-629c-4443-bc37-2c3eebd09453
Certificate serial: 010D0C9F432858483B500C52187AEE58E35666A0
Authority key identifier: 57:3A:F3:61:F9:E5:C1:3B:27:E6:21:36:E2:F7:1D:A5:6A:DA:B8:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/88c6dda7-4d88-3a7d-9093-d34d2975cab4.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 394708
IP address blocks: 209.143.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:50:0c:52:18:7a:ee:58:e3:56:66:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f37ae11d-629c-4443-bc37-2c3eebd09453
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=11449b54-ab37-4257-8849-289284a702dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e1:f2:ff:71:aa:d0:7e:d2:1d:6a:82:a9:b9:
8a:bf:00:3d:0b:84:57:d4:dd:86:c6:ee:10:79:9f:
a2:f6:19:0b:51:11:4b:f4:99:cd:5f:5d:d2:4d:f7:
af:29:b8:11:33:2f:b2:df:cd:48:f6:45:d4:36:d8:
90:26:99:af:d5:a2:9c:e7:63:c6:16:f9:92:1d:f9:
18:b9:74:6c:6b:66:ac:b2:47:0e:39:49:c3:c2:98:
04:c7:d3:4d:6e:15:63:c8:16:a6:b0:67:72:4e:23:
b2:1e:1d:93:04:11:ac:7a:93:ea:be:9b:61:9e:1f:
47:c4:b8:48:60:8c:af:48:c5:30:0b:b5:b0:93:57:
0b:9b:27:56:62:56:a0:d7:4d:3e:58:1a:c1:a6:0f:
9f:4b:c7:d3:cf:68:7f:c7:1c:f4:69:55:19:c6:8b:
57:21:df:ec:b4:87:d1:bf:5b:a2:ea:d3:8c:cc:ad:
1f:68:2c:bf:a9:c7:25:ce:76:2b:33:1c:dd:87:bb:
eb:02:db:b2:76:62:b9:19:ce:a0:77:4e:ed:86:49:
78:d9:e6:ae:2a:3c:6c:d5:c0:f2:8e:1e:3e:96:05:
7e:5d:c7:8a:b3:04:45:b9:43:01:a4:a7:c4:e0:5a:
11:6b:9e:be:51:06:b1:83:1a:a8:50:a8:d4:d9:e0:
de:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3D:E3:EC:C6:6C:AE:02:B4:A9:DA:7D:17:2C:D5:91:0B:DF:CE:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/88c6dda7-4d88-3a7d-9093-d34d2975cab4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/f37ae11d-629c-4443-bc37-2c3eebd09453.crl
X509v3 Authority Key Identifier:
keyid:57:3A:F3:61:F9:E5:C1:3B:27:E6:21:36:E2:F7:1D:A5:6A:DA:B8:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer
sbgp-ipAddrBlock: critical
IPv4:
209.143.18.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:22:14:1e:cf:0a:0b:25:61:7f:f2:cf:a1:a0:d3:e8:d8:ad:
90:11:80:99:a0:d3:18:96:4d:c4:2f:0a:ea:d0:d0:24:31:21:
23:ff:a0:11:71:74:06:08:15:df:ff:6f:7d:5d:80:98:9a:cf:
f4:ba:2a:64:9b:d7:16:7f:8c:a5:65:b8:f0:f0:6e:a8:31:f8:
98:f6:ea:ce:ad:7a:34:4a:67:f8:46:0f:54:4c:e5:3d:29:a6:
b2:c2:f3:e6:7f:79:b6:49:c0:81:70:7f:22:8e:53:fb:d7:17:
39:dc:91:6b:39:2d:a3:3e:a7:73:10:c2:e9:84:c7:9e:85:a4:
ad:ac:ed:b2:f6:a3:57:58:97:75:83:2e:a6:54:3a:09:eb:24:
9d:b3:fc:aa:17:e7:25:56:85:49:8f:6e:18:6e:11:a6:84:3a:
98:02:9e:7a:07:c3:53:8c:2d:a4:9e:dd:78:24:29:b7:09:6d:
82:c0:de:62:0d:0b:99:a2:d6:c3:bc:13:1d:fc:03:0d:63:8a:
57:e8:4d:3f:84:78:e5:e1:5d:bc:2f:55:3e:16:92:02:a7:59:
db:c5:ce:2d:f9:ff:6f:37:27:52:d7:97:69:e4:56:8a:50:6e:
11:36:55:2e:1e:96:9b:98:60:38:e1:5d:2f:fe:c0:aa:52:23:
15:27:7d:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg7UAxSGHruWONWZqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM3YWUxMWQtNjI5Yy00NDQzLWJjMzctMmMzZWViZDA5
NDUzMB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk
MTE0NDliNTQtYWIzNy00MjU3LTg4NDktMjg5Mjg0YTcwMmRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeHy/3Gq0H7SHWqCqbmKvwA9C4RX1N2Gxu4Q
eZ+i9hkLURFL9JnNX13STfevKbgRMy+y381I9kXUNtiQJpmv1aKc52PGFvmSHfkY
uXRsa2asskcOOUnDwpgEx9NNbhVjyBamsGdyTiOyHh2TBBGsepPqvpthnh9HxLhI
YIyvSMUwC7Wwk1cLmydWYlag100+WBrBpg+fS8fTz2h/xxz0aVUZxotXId/stIfR
v1ui6tOMzK0faCy/qcclznYrMxzdh7vrAtuydmK5Gc6gd07thkl42eauKjxs1cDy
jh4+lgV+XceKswRFuUMBpKfE4FoRa56+UQaxgxqoUKjU2eDexQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA894+zGbK4CtKnafRcs1ZEL385JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mMzdh
ZTExZC02MjljLTQ0NDMtYmMzNy0yYzNlZWJkMDk0NTMvODhjNmRkYTctNGQ4OC0z
YTdkLTkwOTMtZDM0ZDI5NzVjYWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZjM3YWUxMWQtNjI5Yy00NDQzLWJj
MzctMmMzZWViZDA5NDUzL2YzN2FlMTFkLTYyOWMtNDQ0My1iYzM3LTJjM2VlYmQw
OTQ1My5jcmwwHwYDVR0jBBgwFoAUVzrzYfnlwTsn5iE24vcdpWrauOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9mMzdhZTExZC02MjljLTQ0NDMtYmMzNy0yYzNl
ZWJkMDk0NTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y8SMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHMiFB7PCgslYX/yz6Gg0+jYrZARgJmg0xiWTcQvCurQ0CQxISP/oBFx
dAYIFd//b31dgJiaz/S6KmSb1xZ/jKVluPDwbqgx+Jj26s6tejRKZ/hGD1RM5T0p
prLC8+Z/ebZJwIFwfyKOU/vXFznckWs5LaM+p3MQwumEx56FpK2s7bL2o1dYl3WD
LqZUOgnrJJ2z/KoX5yVWhUmPbhhuEaaEOpgCnnoHw1OMLaSe3XgkKbcJbYLA3mIN
C5mi1sO8Ex38Aw1jilfoTT+EeOXhXbwvVT4WkgKnWdvFzi35/283J1LXl2nkVopQ
bhE2VS4elpuYYDjhXS/+wKpSIxUnfeo=
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:16:40 2025 by rpki-client