Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/b7aacbe5-842d-385f-b714-d6ba290e853d.roa
File: b7aacbe5-842d-385f-b714-d6ba290e853d.roa (raw, json)
Hash identifier: HYjEiEImc+x6f3ySb/FxUAj5ySyxnRs5WyqaAXwpnrI=
Subject key identifier: 73:EC:8C:EF:64:02:69:B8:F7:D2:01:31:28:1F:24:4B:DB:D0:07:D6
Certificate issuer: /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial: 010D0C9F432858488DAB4B786201D6F2DFFA9D40
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/b7aacbe5-842d-385f-b714-d6ba290e853d.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 25697
IP address blocks: 209.94.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:4b:78:62:01:d6:f2:df:fa:9d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=612e8028-6f39-4490-9bc2-a4d462b3d0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b2:c6:8b:e7:d3:48:85:17:bc:3b:0b:69:db:
49:9d:bb:55:bb:89:c3:f9:ef:40:a2:69:30:44:da:
ab:9a:23:e1:db:a1:3c:7d:54:4d:a2:f0:97:b3:1d:
83:c3:f0:0a:2e:cf:06:b8:06:ff:19:bf:18:c8:89:
fd:aa:de:b0:bf:53:b4:1b:c9:77:46:65:a1:5e:25:
c8:2d:3f:05:a0:a3:1d:c4:38:2b:63:23:7f:14:49:
f3:8d:04:99:88:a8:f4:52:45:05:1e:58:15:6e:a7:
3b:db:67:97:7a:e6:23:61:00:a8:94:75:a5:0d:d8:
81:81:6d:ce:31:35:8d:e7:91:de:7e:f2:99:b8:bc:
af:10:99:b4:b3:2c:f9:be:55:6f:8d:17:dd:46:d3:
2b:d1:e6:cd:73:f1:a1:60:2c:f5:8b:57:d3:fb:4a:
93:97:f0:ec:7c:5f:b2:69:14:a5:c9:b0:e3:c4:3b:
60:29:6d:22:ac:57:5e:fc:17:bc:f8:d0:5b:e9:5d:
88:20:6d:46:fb:35:26:0e:62:68:ef:ec:78:56:12:
ab:e1:d8:8c:8b:5f:66:88:a6:6e:5b:62:47:27:9f:
31:f3:23:a4:26:4f:e1:23:40:3c:34:32:dc:50:81:
0e:c9:61:01:de:1c:11:e4:25:e5:0d:f5:14:ac:5f:
5c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EC:8C:EF:64:02:69:B8:F7:D2:01:31:28:1F:24:4B:DB:D0:07:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/b7aacbe5-842d-385f-b714-d6ba290e853d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
X509v3 Authority Key Identifier:
keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
sbgp-ipAddrBlock: critical
IPv4:
209.94.56.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:46:45:d3:ac:49:ee:26:01:b7:d8:a1:66:f4:2d:06:c6:5f:
b5:86:ee:d1:52:f3:b7:05:e4:50:7f:1a:03:a1:5f:ce:d6:a6:
bf:9c:42:19:91:04:10:f8:07:5a:48:90:64:fc:3c:70:c6:49:
04:78:b8:df:ca:ee:63:a9:aa:2d:ea:b4:90:63:dd:c7:c4:00:
82:1f:a7:c1:31:7a:58:60:20:b1:bf:6d:f6:07:b5:50:c5:f3:
36:bf:96:bf:a5:4b:35:b3:28:fd:7a:a0:4e:9c:45:89:cf:9f:
70:e8:d2:c3:7a:78:e2:c4:a7:33:9c:33:27:c0:29:9d:a9:ab:
64:3c:6f:ef:8a:37:d1:8f:d3:8f:4e:2b:72:0e:f3:78:3a:21:
b1:61:3f:6c:e7:8a:df:f3:31:ae:24:9c:56:ba:20:3c:71:86:
68:47:3d:63:8c:88:37:c9:99:b2:ba:f5:da:d5:4b:42:97:76:
87:28:80:12:93:47:01:bb:2e:0d:a8:3c:1f:05:76:3a:32:5c:
d1:17:6b:b0:a9:6f:c6:e7:8c:91:e3:41:f4:0b:fa:6d:7f:d0:
e3:26:50:09:48:0b:a2:4e:41:59:22:cc:49:a8:9d:68:a4:8b:
59:3e:60:8b:cd:8d:04:35:99:ba:ca:8f:be:a0:37:eb:ad:fd:
c3:26:88:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq0t4YgHW8t/6nUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDVlYmFkYmItYjYzYy00ZTk1LThlNzYtZmQyMmNjODYx
MzExMB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk
NjEyZTgwMjgtNmYzOS00NDkwLTliYzItYTRkNDYyYjNkMGFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLLGi+fTSIUXvDsLadtJnbtVu4nD+e9Aomkw
RNqrmiPh26E8fVRNovCXsx2Dw/AKLs8GuAb/Gb8YyIn9qt6wv1O0G8l3RmWhXiXI
LT8FoKMdxDgrYyN/FEnzjQSZiKj0UkUFHlgVbqc722eXeuYjYQColHWlDdiBgW3O
MTWN55HefvKZuLyvEJm0syz5vlVvjRfdRtMr0ebNc/GhYCz1i1fT+0qTl/DsfF+y
aRSlybDjxDtgKW0irFde/Be8+NBb6V2IIG1G+zUmDmJo7+x4VhKr4diMi19miKZu
W2JHJ58x8yOkJk/hI0A8NDLcUIEOyWEB3hwR5CXlDfUUrF9c2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHPsjO9kAmm499IBMSgfJEvb0AfWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNWVi
YWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIyY2M4NjEzMTEvYjdhYWNiZTUtODQyZC0z
ODVmLWI3MTQtZDZiYTI5MGU4NTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDVlYmFkYmItYjYzYy00ZTk1LThl
NzYtZmQyMmNjODYxMzExL2Q1ZWJhZGJiLWI2M2MtNGU5NS04ZTc2LWZkMjJjYzg2
MTMxMS5jcmwwHwYDVR0jBBgwFoAUCl3nOppYysWd9gW84/IezCP415QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNWViYWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIy
Y2M4NjEzMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0V44MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF1GRdOsSe4mAbfYoWb0LQbGX7WG7tFS87cF5FB/GgOhX87Wpr+cQhmR
BBD4B1pIkGT8PHDGSQR4uN/K7mOpqi3qtJBj3cfEAIIfp8ExelhgILG/bfYHtVDF
8za/lr+lSzWzKP16oE6cRYnPn3Do0sN6eOLEpzOcMyfAKZ2pq2Q8b++KN9GP049O
K3IO83g6IbFhP2znit/zMa4knFa6IDxxhmhHPWOMiDfJmbK69drVS0KXdocogBKT
RwG7Lg2oPB8FdjoyXNEXa7Cpb8bnjJHjQfQL+m1/0OMmUAlIC6JOQVkizEmonWik
i1k+YIvNjQQ1mbrKj76gN+ut/cMmiD4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:46:22 2025 by rpki-client