Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/5458418a-7b5f-37fa-a1a9-87b0cc6b1108.roa
File: 5458418a-7b5f-37fa-a1a9-87b0cc6b1108.roa (raw, json)
Hash identifier: xCz2iqAyX+3l7BZ8rBgJ36vSGA2Jlu5rB2v6DJqdbuQ=
Subject key identifier: 07:E1:5F:68:09:DD:C7:B4:37:4D:70:6E:FC:6B:2D:4B:CB:D6:83:85
Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial: 010D0C9F43285848143A6C16280650E30DE0E800
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/5458418a-7b5f-37fa-a1a9-87b0cc6b1108.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 53508
IP address blocks: 206.255.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:6c:16:28:06:50:e3:0d:e0:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=e1d0e408-1049-4386-994e-153af7efbf2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:76:e2:99:fa:12:ee:ef:7c:71:85:8a:81:6b:
22:e1:b7:f0:4b:cc:32:ed:c7:54:f3:57:58:b8:d7:
4c:48:0b:cc:d6:30:a7:03:68:76:f0:4d:9c:43:43:
dd:1c:c6:da:16:e5:55:c4:9a:82:7e:27:8a:32:8e:
c6:0a:43:bf:0c:03:84:9f:75:5e:00:fa:5d:25:68:
73:ca:c1:44:ff:27:7b:76:75:ea:94:f6:d1:71:6d:
3f:e1:f9:29:82:80:15:d3:e1:c8:0e:a2:3c:5d:6c:
98:d9:d6:3d:35:08:13:95:74:ff:ca:2a:7e:62:48:
bf:22:82:da:02:b6:70:0d:65:93:80:19:7b:25:40:
f7:f6:a9:ed:91:d7:64:16:08:38:76:e0:f8:b9:41:
43:fa:85:0d:37:28:17:5c:02:a2:d4:81:2f:c4:41:
c1:c5:08:7c:c7:ac:ec:5b:4d:66:37:07:bc:67:fb:
c9:b1:4c:7f:9f:b8:f6:7f:48:d4:25:e0:7e:c5:47:
a4:ed:a6:6a:c8:da:f8:f9:2a:53:2f:bb:06:67:ee:
e0:90:74:81:14:a4:ec:51:e0:65:41:4d:ef:57:0d:
bf:cc:4e:b6:36:d9:2c:33:e5:06:b7:f4:95:78:a6:
a3:b6:41:f4:e3:99:71:a1:b3:ee:75:d6:81:a9:4a:
8a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E1:5F:68:09:DD:C7:B4:37:4D:70:6E:FC:6B:2D:4B:CB:D6:83:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/5458418a-7b5f-37fa-a1a9-87b0cc6b1108.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
X509v3 Authority Key Identifier:
keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
sbgp-ipAddrBlock: critical
IPv4:
206.255.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:d1:22:66:2f:f1:39:53:82:92:41:cc:16:f1:dd:0d:b0:79:
50:ed:45:e5:ea:88:9a:82:e6:47:12:2b:ac:13:18:6f:43:f5:
49:92:b1:72:d5:34:69:2b:9c:49:8f:12:ca:a5:11:22:25:c4:
96:fe:73:13:fc:75:a9:c1:74:65:a9:77:d8:a6:cf:0f:95:59:
4a:ff:15:80:02:0a:7b:23:e3:ee:e2:c6:a2:b3:eb:25:4f:aa:
d9:ce:50:db:d3:51:6d:a0:d7:de:30:e9:ad:db:20:ee:64:2f:
f9:8e:8d:e8:51:36:d8:03:97:e5:fd:fc:15:09:af:9f:6a:79:
17:be:67:6f:8c:0e:de:5e:3a:84:b1:41:e9:83:c3:56:b8:a3:
c1:6f:68:ea:c5:fa:f6:9d:6e:f6:02:ac:d0:d7:63:63:63:0d:
b5:e7:03:3d:de:13:22:b6:03:9b:20:13:b2:49:62:27:1f:d7:
58:aa:e9:d1:2c:af:72:0c:34:a2:2b:99:b6:01:74:cc:50:60:
43:96:4e:a2:59:03:07:43:55:d2:d7:f6:a1:bf:17:2b:60:ef:
98:a9:ef:43:f6:ca:a9:a5:c9:ad:35:f6:4e:70:65:fd:0e:b8:
d4:53:53:1f:2b:a4:2e:59:f7:12:a3:ba:39:e5:c9:4b:84:58:
ea:9c:fb:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOmwWKAZQ4w3g6AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz
NmMzMB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
ZTFkMGU0MDgtMTA0OS00Mzg2LTk5NGUtMTUzYWY3ZWZiZjJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHbimfoS7u98cYWKgWsi4bfwS8wy7cdU81dY
uNdMSAvM1jCnA2h28E2cQ0PdHMbaFuVVxJqCfieKMo7GCkO/DAOEn3VeAPpdJWhz
ysFE/yd7dnXqlPbRcW0/4fkpgoAV0+HIDqI8XWyY2dY9NQgTlXT/yip+Yki/IoLa
ArZwDWWTgBl7JUD39qntkddkFgg4duD4uUFD+oUNNygXXAKi1IEvxEHBxQh8x6zs
W01mNwe8Z/vJsUx/n7j2f0jUJeB+xUek7aZqyNr4+SpTL7sGZ+7gkHSBFKTsUeBl
QU3vVw2/zE62NtksM+UGt/SVeKajtkH045lxobPuddaBqUqK2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAfhX2gJ3ce0N01wbvxrLUvL1oOFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4
MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvNTQ1ODQxOGEtN2I1Zi0z
N2ZhLWExYTktODdiMGNjNmIxMTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0
MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0
MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk
ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzv/xMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG7RImYv8TlTgpJBzBbx3Q2weVDtReXqiJqC5kcSK6wTGG9D9UmSsXLV
NGkrnEmPEsqlESIlxJb+cxP8danBdGWpd9imzw+VWUr/FYACCnsj4+7ixqKz6yVP
qtnOUNvTUW2g194w6a3bIO5kL/mOjehRNtgDl+X9/BUJr59qeRe+Z2+MDt5eOoSx
QemDw1a4o8FvaOrF+vadbvYCrNDXY2NjDbXnAz3eEyK2A5sgE7JJYicf11iq6dEs
r3IMNKIrmbYBdMxQYEOWTqJZAwdDVdLX9qG/Fytg75ip70P2yqmlya019k5wZf0O
uNRTUx8rpC5Z9xKjujnlyUuEWOqc+38=
-----END CERTIFICATE-----
Generated at Tue Apr 29 17:45:43 2025 by rpki-client