Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/d9ed5857-01ca-3449-a400-25ab44cbe450.roa
File: d9ed5857-01ca-3449-a400-25ab44cbe450.roa (raw, json)
Hash identifier: 0NzRA4XRDIwqKQzS6c0qSvuf5S0UtFRSUS5a20Hm0OM=
Subject key identifier: F1:46:58:68:59:57:60:22:D9:9D:A4:36:AF:EF:37:EF:03:BC:24:15
Certificate issuer: /CN=f78a234f-9553-446a-965d-0bfffa402f1b
Certificate serial: 010D0C9F4328584832F040480FB7A47169E4DF00
Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/d9ed5857-01ca-3449-a400-25ab44cbe450.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 22925
IP address blocks: 205.201.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:40:48:0f:b7:a4:71:69:e4:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=b8ce24d9-d4b7-4327-b4e7-8879422c3dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c4:14:ff:13:db:b5:7a:ea:19:3e:21:35:b9:
e5:ac:6c:3a:dd:5f:ed:ed:8d:ec:0e:7f:7b:cd:6e:
b5:a4:ba:3b:4a:e6:fe:ab:72:07:b6:4d:84:78:cc:
62:2b:3f:80:58:75:9c:1f:54:41:ad:54:d1:7a:0e:
d4:1a:47:a4:f5:43:19:9f:dc:70:51:e2:27:67:86:
53:b5:24:bd:7b:9f:5d:c5:25:bb:e3:52:07:6f:7c:
11:de:9a:fc:33:dc:1b:ba:b7:d2:75:e3:6f:10:ff:
30:48:e9:93:d9:78:05:4e:cf:42:d2:83:a5:ca:51:
5e:1e:b7:a2:b9:f4:61:79:cc:91:ef:a1:4b:74:82:
25:13:bf:a9:bb:6a:95:cf:52:66:33:09:8b:31:8d:
9f:bd:05:20:5c:4e:d2:be:3b:ba:8f:c6:fb:67:14:
0c:40:c8:6f:e4:44:da:09:77:a3:a2:77:2b:05:cb:
46:c7:3e:46:9c:9c:07:95:ee:74:00:06:98:71:45:
d4:66:60:e0:e9:38:1f:a5:f7:f4:3e:08:91:8e:52:
c9:fd:54:ff:de:da:de:32:e7:ae:57:6a:0b:6e:f5:
46:b3:49:cf:36:73:68:98:a2:53:b2:3d:46:0c:31:
63:2f:30:95:4a:f3:7a:81:0d:ad:dd:04:8b:da:01:
15:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:46:58:68:59:57:60:22:D9:9D:A4:36:AF:EF:37:EF:03:BC:24:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/d9ed5857-01ca-3449-a400-25ab44cbe450.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl
X509v3 Authority Key Identifier:
keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
sbgp-ipAddrBlock: critical
IPv4:
205.201.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:fd:43:cc:0e:cd:51:a8:46:4b:f6:83:a5:c7:c7:bb:24:ec:
ba:af:66:97:89:99:f8:cc:dd:3e:ea:23:b2:dd:43:77:de:29:
0a:e6:c2:a9:db:eb:d5:89:d4:c0:c2:ca:cd:0d:b2:fb:62:8c:
e3:07:86:92:93:d2:33:78:99:20:ee:f7:6d:0b:b7:60:87:ba:
0f:2b:30:bb:d1:fe:31:41:23:98:67:3e:1f:4d:af:93:cb:99:
ee:43:82:77:85:1c:70:1a:23:bb:81:a8:c6:2c:aa:17:aa:c2:
fa:5e:7c:d5:57:72:e4:cf:cc:54:d1:38:96:f4:f0:0e:7e:9e:
aa:92:8a:02:7f:e3:0a:8d:d3:50:21:c7:d8:e1:2c:cb:59:f8:
29:3d:00:b8:56:fb:64:33:3c:13:00:87:44:7f:57:5a:ce:49:
f9:cd:ff:57:ca:a3:29:e6:d3:5d:52:32:7b:a7:a4:13:28:62:
af:54:81:7f:32:df:52:e4:36:e9:1f:82:c2:5e:00:15:db:b6:
fa:cf:e5:13:9e:8d:b5:fd:e9:44:38:09:e6:8a:fb:75:e7:9a:
78:73:61:a8:ea:be:f6:f1:97:07:f7:31:f5:34:72:9f:d6:5c:
5c:be:48:16:62:d1:43:82:6d:fa:c1:42:5f:6f:af:05:b3:ce:
dd:58:dc:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8EBID7ekcWnk3wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjc4YTIzNGYtOTU1My00NDZhLTk2NWQtMGJmZmZhNDAy
ZjFiMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
YjhjZTI0ZDktZDRiNy00MzI3LWI0ZTctODg3OTQyMmMzZGZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcQU/xPbtXrqGT4hNbnlrGw63V/t7Y3sDn97
zW61pLo7Sub+q3IHtk2EeMxiKz+AWHWcH1RBrVTReg7UGkek9UMZn9xwUeInZ4ZT
tSS9e59dxSW741IHb3wR3pr8M9wburfSdeNvEP8wSOmT2XgFTs9C0oOlylFeHrei
ufRhecyR76FLdIIlE7+pu2qVz1JmMwmLMY2fvQUgXE7Svju6j8b7ZxQMQMhv5ETa
CXejoncrBctGxz5GnJwHle50AAaYcUXUZmDg6Tgfpff0PgiRjlLJ/VT/3treMueu
V2oLbvVGs0nPNnNomKJTsj1GDDFjLzCVSvN6gQ2t3QSL2gEV2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPFGWGhZV2Ai2Z2kNq/vN+8DvCQVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNzhh
MjM0Zi05NTUzLTQ0NmEtOTY1ZC0wYmZmZmE0MDJmMWIvZDllZDU4NTctMDFjYS0z
NDQ5LWE0MDAtMjVhYjQ0Y2JlNDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjc4YTIzNGYtOTU1My00NDZhLTk2
NWQtMGJmZmZhNDAyZjFiL2Y3OGEyMzRmLTk1NTMtNDQ2YS05NjVkLTBiZmZmYTQw
MmYxYi5jcmwwHwYDVR0jBBgwFoAUySL1rL077bzOZt54JOhaPckKjtYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNzhhMjM0Zi05NTUzLTQ0NmEtOTY1ZC0wYmZm
ZmE0MDJmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzcnwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABL9Q8wOzVGoRkv2g6XHx7sk7LqvZpeJmfjM3T7qI7LdQ3feKQrmwqnb
69WJ1MDCys0NsvtijOMHhpKT0jN4mSDu920Lt2CHug8rMLvR/jFBI5hnPh9Nr5PL
me5DgneFHHAaI7uBqMYsqheqwvpefNVXcuTPzFTROJb08A5+nqqSigJ/4wqN01Ah
x9jhLMtZ+Ck9ALhW+2QzPBMAh0R/V1rOSfnN/1fKoynm011SMnunpBMoYq9UgX8y
31LkNukfgsJeABXbtvrP5ROejbX96UQ4CeaK+3XnmnhzYajqvvbxlwf3MfU0cp/W
XFy+SBZi0UOCbfrBQl9vrwWzzt1Y3Ms=
-----END CERTIFICATE-----
Generated at Mon May 12 16:48:50 2025 by rpki-client