Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/2d29c9cc-f352-359a-a680-78348c95a6e1.roa
File: 2d29c9cc-f352-359a-a680-78348c95a6e1.roa (raw, json)
Hash identifier: jaAfDg7pfRoelhtzKmhbjr9Wu3Fs5gRibag5otIpAmo=
Subject key identifier: F9:2C:BD:32:50:EB:1A:14:39:B4:72:91:E8:EF:45:14:18:2F:0B:2C
Certificate issuer: /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97
Certificate serial: 010D0C9F4328584849456745B75922BE6D626280
Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/2d29c9cc-f352-359a-a680-78348c95a6e1.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 32788
IP address blocks: 208.88.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:67:45:b7:59:22:be:6d:62:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=34160ace-6118-42b8-9f57-59364016d518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8a:e9:85:5b:a3:9d:6f:2d:10:a5:8e:ee:9d:
a3:15:ea:f3:c3:cc:76:68:ee:c6:17:d7:c2:d5:94:
a7:9c:8c:53:42:bc:8f:21:d0:ef:55:95:ba:39:d5:
7b:e5:d7:a7:ee:bb:25:00:62:41:d1:20:62:12:c1:
56:a9:d3:bb:cb:a2:b0:7c:91:53:71:ea:1b:4c:ba:
ba:5e:80:e5:23:1d:87:6c:cc:0d:6f:27:e0:e8:ff:
ba:cc:57:3c:45:5f:a3:d5:89:bf:11:ab:b9:b9:c3:
b9:e9:b2:6f:a2:91:ad:8b:bd:a5:ef:65:e2:57:26:
a6:47:6d:ea:24:7a:a9:78:18:c5:c6:d9:e9:e7:35:
9d:59:2a:b8:db:93:59:cb:62:b9:bc:9a:02:8f:a8:
d5:b8:81:19:45:8c:02:74:5a:80:73:80:bd:b6:32:
2b:13:3a:92:31:18:65:7b:f4:b8:5c:9a:52:e7:7d:
0f:5c:e1:59:40:54:60:d8:21:74:f7:f5:53:42:a7:
51:ce:d1:ff:cb:f0:40:05:20:33:f1:c3:37:1b:6d:
b6:f7:ec:80:e7:c1:9a:30:62:6a:6c:3e:1a:77:7d:
08:90:02:57:b7:d4:7d:33:b4:c2:8a:bd:5f:39:11:
8b:40:f0:6c:ac:df:0c:20:01:d0:bd:6c:d0:ca:17:
cc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2C:BD:32:50:EB:1A:14:39:B4:72:91:E8:EF:45:14:18:2F:0B:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/2d29c9cc-f352-359a-a680-78348c95a6e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl
X509v3 Authority Key Identifier:
keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer
sbgp-ipAddrBlock: critical
IPv4:
208.88.30.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:c2:31:13:6b:91:d2:70:af:9e:52:c2:c0:7b:6f:09:ac:64:
15:1a:78:0c:8b:df:1e:cf:bb:a5:de:8a:7a:db:2e:54:fb:1b:
3d:ad:9c:70:bc:be:7c:74:a4:d1:d6:7a:70:71:f5:fb:f2:f2:
71:6a:47:6e:a2:55:b0:9b:c2:24:bb:e9:94:78:bb:51:1d:0d:
0a:fe:ea:c3:4d:c4:ef:13:78:14:28:18:e3:56:1c:ab:e4:2e:
1d:3e:21:6c:68:f4:ac:64:10:8f:5d:49:99:67:1f:8c:1e:28:
ad:08:76:6c:44:20:5a:cc:48:6a:3f:e5:6d:66:8c:b4:50:82:
fd:83:a3:cc:c5:9c:d4:d6:89:a3:c3:74:60:d7:03:9f:9e:8b:
9b:36:1f:73:62:e2:f2:84:d9:09:d4:6c:f9:37:fd:20:df:d5:
05:ba:6a:4c:dc:61:53:ae:17:ad:86:3f:c9:ee:27:48:9e:f6:
ab:bb:c7:aa:d9:9f:ff:cf:7c:c2:3e:90:0a:ec:65:f4:cb:e0:
e7:13:eb:c6:52:a7:0e:a6:d2:4e:d3:99:99:80:87:9b:c7:1d:
35:ab:41:32:fc:20:05:b1:3a:3a:3d:4c:06:9d:d2:7e:e4:ab:
61:e0:8f:bc:c6:58:c5:cb:d8:c1:d6:51:08:63:1c:8a:1e:31:
ad:5c:c7:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhJRWdFt1kivm1iYoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2I0ZDcxMDUtZDliZC00ZWU0LWI5NTgtMmU5OTAyZDVl
Yjk3MB4XDTI0MTIyMjAyMDAzOVoXDTI1MDMyMjAxMDAzOVowLzEtMCsGA1UEAxMk
MzQxNjBhY2UtNjExOC00MmI4LTlmNTctNTkzNjQwMTZkNTE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3orphVujnW8tEKWO7p2jFerzw8x2aO7GF9fC
1ZSnnIxTQryPIdDvVZW6OdV75den7rslAGJB0SBiEsFWqdO7y6KwfJFTceobTLq6
XoDlIx2HbMwNbyfg6P+6zFc8RV+j1Ym/Eau5ucO56bJvopGti72l72XiVyamR23q
JHqpeBjFxtnp5zWdWSq425NZy2K5vJoCj6jVuIEZRYwCdFqAc4C9tjIrEzqSMRhl
e/S4XJpS530PXOFZQFRg2CF09/VTQqdRztH/y/BABSAz8cM3G2229+yA58GaMGJq
bD4ad30IkAJXt9R9M7TCir1fORGLQPBsrN8MIAHQvWzQyhfMsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPksvTJQ6xoUObRykejvRRQYLwssMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRk
NzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5MDJkNWViOTcvMmQyOWM5Y2MtZjM1Mi0z
NTlhLWE2ODAtNzgzNDhjOTVhNmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2I0ZDcxMDUtZDliZC00ZWU0LWI5
NTgtMmU5OTAyZDVlYjk3LzNiNGQ3MTA1LWQ5YmQtNGVlNC1iOTU4LTJlOTkwMmQ1
ZWI5Ny5jcmwwHwYDVR0jBBgwFoAUrPgBtzCVI7GVWIX/ouTrJrmfYzswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRkNzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5
MDJkNWViOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FgeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAXCMRNrkdJwr55SwsB7bwmsZBUaeAyL3x7Pu6XeinrbLlT7Gz2tnHC8
vnx0pNHWenBx9fvy8nFqR26iVbCbwiS76ZR4u1EdDQr+6sNNxO8TeBQoGONWHKvk
Lh0+IWxo9KxkEI9dSZlnH4weKK0IdmxEIFrMSGo/5W1mjLRQgv2Do8zFnNTWiaPD
dGDXA5+ei5s2H3Ni4vKE2QnUbPk3/SDf1QW6akzcYVOuF62GP8nuJ0ie9qu7x6rZ
n//PfMI+kArsZfTL4OcT68ZSpw6m0k7TmZmAh5vHHTWrQTL8IAWxOjo9TAad0n7k
q2Hgj7zGWMXL2MHWUQhjHIoeMa1cx6M=
-----END CERTIFICATE-----
Generated at Tue Apr 29 23:59:04 2025 by rpki-client