Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/9ec58a3b-8704-3120-b6b5-10e77d09643b.roa
File: 9ec58a3b-8704-3120-b6b5-10e77d09643b.roa (raw, json)
Hash identifier: +n3uJPRVvu6eO41PBOgQnwK/TFRyGIA0wPT+FvEOlh4=
Subject key identifier: BC:48:A8:BC:EC:8A:40:02:74:7A:0C:65:88:FA:CB:6D:4B:57:E0:CC
Certificate issuer: /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial: 010D0C9F4328584812D5340E89E078D6D05A9F08
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/9ec58a3b-8704-3120-b6b5-10e77d09643b.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 11650
IP address blocks: 159.242.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:34:0e:89:e0:78:d6:d0:5a:9f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=065fb292-ea9f-4b46-a7fd-14a8c82c2012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:28:89:24:9d:8f:44:ee:60:39:a7:1f:25:1e:
e2:80:13:75:87:88:71:89:80:6a:db:79:34:14:4b:
70:c3:ab:0e:c1:37:e7:ef:11:66:47:7c:8c:2b:98:
8e:53:fe:69:ee:68:e3:72:0b:b3:d1:01:26:5a:8f:
19:8c:ab:f5:34:44:76:c7:8a:c9:3b:fe:60:f2:77:
e7:b9:a8:d9:0a:f3:57:83:16:b7:cc:a6:85:3f:3d:
7c:51:aa:ad:77:1f:15:20:89:c2:fe:49:8d:b2:2c:
c3:93:07:2b:6a:0d:72:65:e3:8a:39:ad:a1:43:10:
b6:38:cc:6a:36:43:c2:85:86:ac:73:52:bb:ad:27:
38:22:0f:86:5c:32:eb:d4:8c:8f:90:6c:c8:18:2c:
e6:3d:7a:7f:43:6b:de:ae:ac:51:c9:70:05:9f:7d:
b9:2f:97:6f:04:4a:05:a7:65:d3:26:ff:d7:ed:6b:
00:2a:d4:43:36:d6:12:f5:ca:01:7e:28:a3:71:93:
19:89:28:72:b5:2a:b0:16:bc:e7:ee:3a:d2:8f:f1:
d3:0e:9e:fb:f8:25:ee:c2:e7:11:3d:2c:d4:0b:3d:
f9:04:68:19:00:84:d8:ad:98:6a:0e:49:d0:bd:06:
28:0f:13:89:00:b0:ff:bc:02:e1:1f:5b:87:2b:17:
d2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:48:A8:BC:EC:8A:40:02:74:7A:0C:65:88:FA:CB:6D:4B:57:E0:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/9ec58a3b-8704-3120-b6b5-10e77d09643b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl
X509v3 Authority Key Identifier:
keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
sbgp-ipAddrBlock: critical
IPv4:
159.242.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:10:b6:e4:44:5a:5b:57:cd:2f:35:b6:b0:e7:65:65:b2:c6:
2e:89:5b:e7:15:8d:cf:7c:33:88:63:52:5b:02:67:b7:96:44:
87:12:8e:98:1c:dd:46:c4:0c:47:37:a9:e3:81:4c:4a:9b:e3:
05:cc:91:90:6a:39:b2:5a:27:7b:f0:1b:2b:2e:f8:29:32:1c:
1d:95:0a:5a:17:8a:59:f2:7d:e0:19:14:b1:98:5a:9b:df:11:
b5:f6:62:c2:24:b3:9a:40:d0:5c:38:ac:f6:9e:3b:24:0c:7d:
48:48:64:31:fc:4f:13:dc:da:dc:ed:36:48:26:06:7a:fc:da:
f9:1b:4d:81:55:96:38:4e:58:42:cb:dc:37:59:28:49:cf:81:
7d:38:d2:9a:0d:4f:9a:ff:e6:bf:da:16:24:16:fb:30:45:8a:
42:21:8d:fd:66:de:dc:fb:eb:60:18:9c:f8:55:ef:41:5a:89:
d1:d9:48:c9:f4:52:d4:e3:e8:cc:74:68:bf:e9:39:35:7f:4c:
de:62:ba:f6:93:c9:74:40:f1:2e:f0:65:f7:82:eb:87:75:d6:
92:56:c0:bf:9c:db:66:34:e3:44:4c:d2:f8:38:44:af:21:ba:
82:4f:7c:98:68:6a:87:76:0f:72:f2:0c:cc:77:bc:ab:6a:2f:
f6:2a:f6:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgS1TQOieB41tBanwgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmZkZWUzZjgtZTM2OC00NWVhLTlhMGEtMDMzYzU5MWI0
OTcxMB4XDTI0MTIwMjE0MDA1MVoXDTI1MDMwMjE0MDA1MVowLzEtMCsGA1UEAxMk
MDY1ZmIyOTItZWE5Zi00YjQ2LWE3ZmQtMTRhOGM4MmMyMDEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSiJJJ2PRO5gOacfJR7igBN1h4hxiYBq23k0
FEtww6sOwTfn7xFmR3yMK5iOU/5p7mjjcguz0QEmWo8ZjKv1NER2x4rJO/5g8nfn
uajZCvNXgxa3zKaFPz18Uaqtdx8VIInC/kmNsizDkwcrag1yZeOKOa2hQxC2OMxq
NkPChYasc1K7rSc4Ig+GXDLr1IyPkGzIGCzmPXp/Q2verqxRyXAFn325L5dvBEoF
p2XTJv/X7WsAKtRDNtYS9coBfiijcZMZiShytSqwFrzn7jrSj/HTDp77+CXuwucR
PSzUCz35BGgZAITYrZhqDknQvQYoDxOJALD/vALhH1uHKxfS7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLxIqLzsikACdHoMZYj6y21LV+DMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRl
ZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNjNTkxYjQ5NzEvOWVjNThhM2ItODcwNC0z
MTIwLWI2YjUtMTBlNzdkMDk2NDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmZkZWUzZjgtZTM2OC00NWVhLTlh
MGEtMDMzYzU5MWI0OTcxL2ZmZGVlM2Y4LWUzNjgtNDVlYS05YTBhLTAzM2M1OTFi
NDk3MS5jcmwwHwYDVR0jBBgwFoAUozvxxshhdA6a/HFRB4QVpwaz2l8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRlZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNj
NTkxYjQ5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEn/LQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI4QtuREWltXzS81trDnZWWyxi6JW+cVjc98M4hjUlsCZ7eWRIcSjpgc
3UbEDEc3qeOBTEqb4wXMkZBqObJaJ3vwGysu+CkyHB2VCloXilnyfeAZFLGYWpvf
EbX2YsIks5pA0Fw4rPaeOyQMfUhIZDH8TxPc2tztNkgmBnr82vkbTYFVljhOWELL
3DdZKEnPgX040poNT5r/5r/aFiQW+zBFikIhjf1m3tz762AYnPhV70FaidHZSMn0
UtTj6Mx0aL/pOTV/TN5iuvaTyXRA8S7wZfeC64d11pJWwL+c22Y040RM0vg4RK8h
uoJPfJhoaod2D3LyDMx3vKtqL/Yq9uw=
-----END CERTIFICATE-----
Generated at Mon May 12 12:19:44 2025 by rpki-client