Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2aaa1b6d-0624-3ccf-bdf5-326004cf80b1.roa
File: 2aaa1b6d-0624-3ccf-bdf5-326004cf80b1.roa (raw, json)
Hash identifier: 7ghXOLvUeJBjmaJIZimc4GXD2zyjmDauATcOUMdHq5c=
Subject key identifier: 8E:F6:1F:5C:91:E1:A8:A1:62:6C:52:F7:48:C6:B6:91:E6:93:A1:F3
Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial: 010D0C9F432858481C9A701883ED62B0E51B7780
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2aaa1b6d-0624-3ccf-bdf5-326004cf80b1.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 53508
IP address blocks: 206.255.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:70:18:83:ed:62:b0:e5:1b:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=0125e7ec-1e60-4866-996d-5773ba39c6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1c:ca:71:fb:89:80:85:93:b5:7c:75:17:48:
52:2f:19:11:08:bd:95:66:b2:ed:f3:da:cf:dd:4a:
b9:f4:c0:38:f5:d3:0b:0b:41:36:a2:83:49:3f:15:
3b:13:31:2f:60:b7:e0:ab:a8:38:65:9e:8c:0a:3a:
5b:c7:4a:c4:54:2a:41:48:21:bf:0a:f5:b6:3e:80:
60:50:c0:71:8b:97:04:11:ef:64:30:9d:7c:3f:5d:
18:17:5e:1e:4a:aa:01:3f:58:c3:33:24:12:0c:e1:
95:3c:ed:06:11:2e:96:2e:db:81:05:eb:53:1d:1b:
9b:58:07:2e:3e:fd:b2:66:b9:2b:77:b1:bd:c3:f0:
a3:5b:e2:8b:42:d3:fc:57:90:ca:f5:f6:80:b6:4b:
5f:3c:d3:5d:ee:af:be:25:2c:40:3a:c1:e3:5f:00:
f1:74:c0:95:50:68:41:4f:b0:51:e8:08:6e:ac:90:
bc:37:de:b4:44:32:e8:b3:39:41:b6:b2:0c:17:7a:
e5:99:06:b9:0b:43:85:a1:4a:fe:ef:56:ad:10:70:
ae:64:87:7a:eb:11:75:70:10:43:81:28:65:06:21:
0e:f5:6e:72:16:fb:87:27:4f:6e:3d:f7:f5:83:25:
23:2f:11:b9:76:4a:83:4e:85:d9:bf:5a:f2:59:1a:
84:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F6:1F:5C:91:E1:A8:A1:62:6C:52:F7:48:C6:B6:91:E6:93:A1:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2aaa1b6d-0624-3ccf-bdf5-326004cf80b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
X509v3 Authority Key Identifier:
keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
sbgp-ipAddrBlock: critical
IPv4:
206.255.247.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:81:70:6e:56:84:9b:d2:5b:97:01:56:24:93:55:6e:de:f5:
02:27:cc:08:8f:c9:20:57:a5:c3:e5:18:af:46:7f:86:5b:c0:
51:9c:2f:1a:78:6a:b6:4f:17:90:8f:fb:d2:3b:5d:0e:1c:0f:
d6:25:9e:c7:15:f4:1c:62:8b:5c:ea:53:02:15:c5:42:bc:0c:
6f:52:2d:e0:8d:ae:fb:95:87:96:e0:5f:ea:4d:e9:7c:f3:da:
47:96:b6:09:51:50:64:17:d0:b4:59:07:b2:d9:9e:fc:28:90:
81:df:95:e8:bf:22:bd:8c:06:d2:5d:08:62:2f:4c:57:63:9b:
15:e7:78:5b:bd:b4:94:dd:43:aa:35:96:69:ef:2b:ea:ff:4c:
3f:81:bf:ce:d3:e3:58:28:f0:19:26:c7:a3:8c:e0:c0:2a:f9:
0c:f7:73:81:6f:77:ca:5b:d4:25:b0:79:4e:ca:3a:b3:88:e8:
0d:88:56:3d:41:9e:7a:8a:0f:ad:75:4a:e0:4f:42:be:08:99:
ff:8d:4f:dd:05:d2:fc:44:22:1e:1e:0c:ba:08:fd:54:a6:6e:
8c:45:8a:a1:1b:06:e4:7e:d3:0a:cb:5d:c7:1a:bd:e3:5c:1e:
9a:fa:da:8c:d8:07:1a:57:68:b2:49:c5:ea:b2:5a:99:f0:01:
5d:fa:ab:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgcmnAYg+1isOUbd4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz
NmMzMB4XDTI0MTIwNjAyMDAzOVoXDTI1MDMwNjAyMDAzOVowLzEtMCsGA1UEAxMk
MDEyNWU3ZWMtMWU2MC00ODY2LTk5NmQtNTc3M2JhMzljNmIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghzKcfuJgIWTtXx1F0hSLxkRCL2VZrLt89rP
3Uq59MA49dMLC0E2ooNJPxU7EzEvYLfgq6g4ZZ6MCjpbx0rEVCpBSCG/CvW2PoBg
UMBxi5cEEe9kMJ18P10YF14eSqoBP1jDMyQSDOGVPO0GES6WLtuBBetTHRubWAcu
Pv2yZrkrd7G9w/CjW+KLQtP8V5DK9faAtktfPNNd7q++JSxAOsHjXwDxdMCVUGhB
T7BR6AhurJC8N960RDLoszlBtrIMF3rlmQa5C0OFoUr+71atEHCuZId66xF1cBBD
gShlBiEO9W5yFvuHJ09uPff1gyUjLxG5dkqDToXZv1ryWRqE4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI72H1yR4aihYmxS90jGtpHmk6HzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4
MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMmFhYTFiNmQtMDYyNC0z
Y2NmLWJkZjUtMzI2MDA0Y2Y4MGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0
MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0
MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk
ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzv/3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABCBcG5WhJvSW5cBViSTVW7e9QInzAiPySBXpcPlGK9Gf4ZbwFGcLxp4
arZPF5CP+9I7XQ4cD9YlnscV9Bxii1zqUwIVxUK8DG9SLeCNrvuVh5bgX+pN6Xzz
2keWtglRUGQX0LRZB7LZnvwokIHflei/Ir2MBtJdCGIvTFdjmxXneFu9tJTdQ6o1
lmnvK+r/TD+Bv87T41go8Bkmx6OM4MAq+Qz3c4Fvd8pb1CWweU7KOrOI6A2IVj1B
nnqKD611SuBPQr4Imf+NT90F0vxEIh4eDLoI/VSmboxFiqEbBuR+0wrLXccaveNc
Hpr62ozYBxpXaLJJxeqyWpnwAV36qxI=
-----END CERTIFICATE-----
Generated at Tue Apr 29 20:13:03 2025 by rpki-client