Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3c5788b1-7c82-3275-9457-c61ff52b2890.roa
File: 3c5788b1-7c82-3275-9457-c61ff52b2890.roa (raw, json)
Hash identifier: zYyKIOwg9pNa8j/tcffj3mlCiUaHtiEutJRytSoRG6Q=
Subject key identifier: A5:5E:9D:EF:1F:CF:30:16:AF:76:E2:9F:FA:E1:C6:F1:E0:02:E4:1B
Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial: 010D0C9F43285847FB1A22F0FF890ABFA1450700
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3c5788b1-7c82-3275-9457-c61ff52b2890.roa
Signing time: Sun 24 Nov 2024 02:00:27 +0000
ROA not before: Sun 24 Nov 2024 02:00:27 +0000
ROA not after: Sat 22 Feb 2025 02:00:27 +0000
asID: 397422
IP address blocks: 208.56.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fb:1a:22:f0:ff:89:0a:bf:a1:45:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Validity
Not Before: Nov 24 02:00:27 2024 GMT
Not After : Feb 22 02:00:27 2025 GMT
Subject: CN=27bbe151-1d72-45b8-bbcd-32c436a45b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:45:85:29:25:6a:84:e7:a4:8f:e7:58:03:b4:
19:64:8d:0a:51:12:1c:44:12:9c:c2:df:fa:d8:03:
85:23:6e:2a:e1:a6:dd:e5:5e:43:c9:33:a3:71:88:
d8:78:7d:6e:0d:f5:35:3d:74:e2:05:2c:1e:07:0c:
ed:b8:3f:77:78:1d:99:6e:a7:e0:35:a0:11:3b:7d:
05:14:5b:85:66:55:db:fe:e8:ed:9f:93:35:f5:18:
51:24:77:84:30:44:54:1d:3c:c9:e6:bb:d5:a6:e7:
f0:da:06:cb:f7:f3:34:e0:48:e6:80:4d:55:3d:0a:
e6:4b:03:9b:1a:8f:62:10:26:8f:a9:2a:d8:68:ea:
b7:f5:21:21:2c:bf:f2:d4:0e:48:9c:fd:27:66:bf:
32:3f:69:35:6e:dd:02:c5:a9:05:0e:f7:9c:87:47:
30:ce:bd:23:d6:a1:df:75:e0:57:d3:7c:b5:b2:e6:
57:b5:be:a1:0c:66:8f:a7:32:83:73:6b:e8:64:a0:
83:8e:f2:fb:fe:9a:4f:2e:91:2d:64:18:86:05:77:
c0:d8:b1:2a:bc:7c:c8:8e:6c:38:39:7d:22:76:b8:
5b:0b:f0:1a:b1:29:3c:b2:44:7b:22:b6:7d:cd:0b:
9d:cc:bf:2d:e1:72:2a:27:3a:e5:e0:13:cd:71:f4:
9f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5E:9D:EF:1F:CF:30:16:AF:76:E2:9F:FA:E1:C6:F1:E0:02:E4:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3c5788b1-7c82-3275-9457-c61ff52b2890.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
X509v3 Authority Key Identifier:
keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
sbgp-ipAddrBlock: critical
IPv4:
208.56.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:cb:a3:d6:d6:bf:1f:c7:ff:e8:b1:9f:21:d9:31:d0:4b:ac:
95:3c:cd:27:26:f2:55:c2:c7:ae:bb:fe:77:12:f5:61:c8:e7:
ad:e1:f9:b8:c9:a5:b7:9e:7b:cf:7f:56:a2:63:a7:45:77:5a:
ac:6d:f1:ce:b9:4d:db:a7:3e:20:44:5f:e9:d1:49:90:ba:8b:
4e:84:b4:cc:05:fe:d5:86:c8:6a:a4:39:63:c7:89:a8:7f:03:
2d:ef:69:e9:32:96:2e:e0:34:d1:0a:fb:0e:4c:99:4f:a9:ba:
68:9f:05:62:f9:41:c8:fd:82:8b:ff:49:c6:35:5c:6e:95:eb:
05:27:f1:01:4d:dd:5c:b8:4a:ce:3b:5c:3f:9f:ab:1b:ec:dd:
6c:03:a5:45:8e:b2:d5:5d:c2:2a:62:61:8c:0d:df:24:aa:db:
9e:bf:7e:09:e4:93:8b:1e:aa:39:33:90:f2:a7:d8:4f:0b:35:
53:f0:c6:fd:d9:cf:7e:e1:fb:39:43:ce:13:9b:3c:c4:d4:43:
81:c8:56:07:79:ba:68:2e:ce:71:cd:9c:c3:3c:41:c9:21:fa:
b4:82:94:1e:b2:71:41:90:65:0a:f5:f3:0e:a0:1f:c8:d5:ea:
66:75:e2:fb:09:f6:d6:4d:41:ec:16:6c:6d:be:48:d7:85:d2:
f0:02:6a:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf7GiLw/4kKv6FFBwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI0MTEyNDAyMDAyN1oXDTI1MDIyMjAyMDAyN1owLzEtMCsGA1UEAxMk
MjdiYmUxNTEtMWQ3Mi00NWI4LWJiY2QtMzJjNDM2YTQ1YjA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUWFKSVqhOekj+dYA7QZZI0KURIcRBKcwt/6
2AOFI24q4abd5V5DyTOjcYjYeH1uDfU1PXTiBSweBwztuD93eB2ZbqfgNaARO30F
FFuFZlXb/ujtn5M19RhRJHeEMERUHTzJ5rvVpufw2gbL9/M04EjmgE1VPQrmSwOb
Go9iECaPqSrYaOq39SEhLL/y1A5InP0nZr8yP2k1bt0CxakFDvech0cwzr0j1qHf
deBX03y1suZXtb6hDGaPpzKDc2voZKCDjvL7/ppPLpEtZBiGBXfA2LEqvHzIjmw4
OX0idrhbC/AasSk8skR7IrZ9zQudzL8t4XIqJzrl4BPNcfSf4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKVene8fzzAWr3bin/rhxvHgAuQbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvM2M1Nzg4YjEtN2M4Mi0z
Mjc1LTk0NTctYzYxZmY1MmIyODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DjuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABXLo9bWvx/H/+ixnyHZMdBLrJU8zScm8lXCx667/ncS9WHI563h+bjJ
pbeee89/VqJjp0V3Wqxt8c65TdunPiBEX+nRSZC6i06EtMwF/tWGyGqkOWPHiah/
Ay3vaekyli7gNNEK+w5MmU+pumifBWL5Qcj9gov/ScY1XG6V6wUn8QFN3Vy4Ss47
XD+fqxvs3WwDpUWOstVdwipiYYwN3ySq256/fgnkk4seqjkzkPKn2E8LNVPwxv3Z
z37h+zlDzhObPMTUQ4HIVgd5umguznHNnMM8Qckh+rSClB6ycUGQZQr18w6gH8jV
6mZ14vsJ9tZNQewWbG2+SNeF0vACank=
-----END CERTIFICATE-----
Generated at Sat May 10 10:25:31 2025 by rpki-client