Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a71e752b-3021-3d0a-8c7f-cf8a862bace1.roa
File: a71e752b-3021-3d0a-8c7f-cf8a862bace1.roa (raw, json)
Hash identifier: mWH4TAryGHlEjsqKf5iJgJ0Ho3L27qoH1nq1BMCe/ak=
Subject key identifier: 70:3E:0A:EA:63:91:E6:80:E4:EB:EC:3C:2E:0A:DB:6C:00:CD:0F:C4
Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial: 010D0C9F432858481C9A6EF3BB98DDC6A8329768
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a71e752b-3021-3d0a-8c7f-cf8a862bace1.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 53508
IP address blocks: 206.255.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:6e:f3:bb:98:dd:c6:a8:32:97:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=ca64da0b-1572-4777-a644-8d53910eb017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:80:2c:47:4a:fc:81:e0:0b:49:05:10:b4:68:
93:98:ba:dd:60:15:eb:a9:5b:39:76:64:52:7d:e1:
b8:9a:8a:73:d5:fb:7a:ec:ca:f5:be:5f:73:12:f1:
44:12:ed:a4:85:ab:e0:22:89:b1:fa:04:6d:bf:e5:
17:f2:60:90:4e:67:0d:91:3b:a5:5c:69:82:b3:71:
8f:b5:10:05:2b:4f:2d:a7:68:e2:75:72:ac:11:af:
52:4f:52:90:d7:cf:4c:f1:2f:64:c8:a6:cd:a4:27:
0c:a6:7f:23:03:a9:97:f0:f5:46:b6:eb:a6:15:a0:
d0:9a:e9:d7:1e:76:8e:84:c7:cf:af:e7:e8:1c:f4:
47:bf:ce:bf:bb:9a:92:60:32:50:ea:fc:4e:f2:bd:
b9:3f:b3:5f:45:7d:24:15:cf:ae:98:b1:56:73:57:
17:a0:bd:df:98:2f:05:6a:4c:d3:48:94:82:44:44:
60:50:e0:03:e0:b3:90:15:bd:e7:23:1a:05:01:6a:
68:b2:60:39:14:59:75:18:32:f8:af:97:02:df:2b:
8a:9b:16:04:e9:9c:99:fe:6b:c4:99:81:e1:2a:52:
08:3d:a9:d9:d5:9f:d3:04:2c:b1:8d:fb:de:95:fb:
26:6b:43:55:dd:83:62:e4:74:4a:b6:d9:65:f7:54:
37:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3E:0A:EA:63:91:E6:80:E4:EB:EC:3C:2E:0A:DB:6C:00:CD:0F:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/a71e752b-3021-3d0a-8c7f-cf8a862bace1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
X509v3 Authority Key Identifier:
keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
sbgp-ipAddrBlock: critical
IPv4:
206.255.64.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:2b:3b:4a:24:9a:8c:30:b0:f8:11:8c:0c:fc:a5:0c:1c:e9:
75:1f:4a:29:0b:c9:57:c1:ce:03:24:ca:57:67:0c:4c:1c:85:
8b:a2:16:93:9e:d0:ef:9a:9f:64:4e:ff:24:03:5d:11:53:1c:
95:63:b3:a8:b1:69:23:0b:b6:23:59:bd:f6:79:95:f3:07:b9:
9b:43:54:90:ed:4e:53:05:50:96:c2:cc:09:9a:66:e0:3e:34:
41:9a:a8:88:36:01:37:01:6f:fc:f3:e5:fe:64:c7:5b:9f:66:
72:60:28:0e:d6:26:f1:fe:ec:f5:06:66:8d:f1:f5:19:b2:14:
bc:61:f9:c0:12:f7:20:b1:7a:a9:cd:d8:67:ed:ab:97:5d:44:
9a:f2:a0:0b:5a:1d:9c:6a:4d:b1:02:f2:d7:7a:9f:71:9f:52:
76:75:b8:0c:75:3a:30:c5:3a:92:f0:5b:7d:ae:90:bc:1d:e3:
e3:23:1e:87:dc:48:ad:35:c7:5e:de:6a:f1:2a:cb:bf:c4:18:
f1:a9:25:ec:35:77:e1:c4:16:9b:d6:b4:15:93:00:61:c4:96:
18:06:4c:5b:5d:f7:28:53:1c:65:aa:4a:e1:10:e6:0f:ea:9f:
9b:77:3b:8e:e7:93:1f:de:32:d8:21:8d:87:f3:0c:f8:da:fb:
ed:3e:ea:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgcmm7zu5jdxqgyl2gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz
NmMzMB4XDTI0MTIwNjAyMDAzOVoXDTI1MDMwNjAyMDAzOVowLzEtMCsGA1UEAxMk
Y2E2NGRhMGItMTU3Mi00Nzc3LWE2NDQtOGQ1MzkxMGViMDE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYAsR0r8geALSQUQtGiTmLrdYBXrqVs5dmRS
feG4mopz1ft67Mr1vl9zEvFEEu2khavgIomx+gRtv+UX8mCQTmcNkTulXGmCs3GP
tRAFK08tp2jidXKsEa9ST1KQ189M8S9kyKbNpCcMpn8jA6mX8PVGtuumFaDQmunX
HnaOhMfPr+foHPRHv86/u5qSYDJQ6vxO8r25P7NfRX0kFc+umLFWc1cXoL3fmC8F
akzTSJSCRERgUOAD4LOQFb3nIxoFAWposmA5FFl1GDL4r5cC3yuKmxYE6ZyZ/mvE
mYHhKlIIPanZ1Z/TBCyxjfvelfsma0NV3YNi5HRKttll91Q3KQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHA+CupjkeaA5OvsPC4K22wAzQ/EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4
MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvYTcxZTc1MmItMzAyMS0z
ZDBhLThjN2YtY2Y4YTg2MmJhY2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0
MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0
MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk
ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzv9AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAYrO0okmowwsPgRjAz8pQwc6XUfSikLyVfBzgMkyldnDEwchYuiFpOe
0O+an2RO/yQDXRFTHJVjs6ixaSMLtiNZvfZ5lfMHuZtDVJDtTlMFUJbCzAmaZuA+
NEGaqIg2ATcBb/zz5f5kx1ufZnJgKA7WJvH+7PUGZo3x9RmyFLxh+cAS9yCxeqnN
2Gftq5ddRJryoAtaHZxqTbEC8td6n3GfUnZ1uAx1OjDFOpLwW32ukLwd4+MjHofc
SK01x17eavEqy7/EGPGpJew1d+HEFpvWtBWTAGHElhgGTFtd9yhTHGWqSuEQ5g/q
n5t3O47nkx/eMtghjYfzDPja++0+6kc=
-----END CERTIFICATE-----
Generated at Tue Apr 29 20:01:43 2025 by rpki-client