Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/b214acd2-07b1-360e-a1cc-31f9d400eba6.roa
File: b214acd2-07b1-360e-a1cc-31f9d400eba6.roa (raw, json)
Hash identifier: V1whHyOP2lWhVM3yog/3KfUbyzc0MC51CzP4rTYv7do=
Subject key identifier: 8E:E2:C8:38:B3:03:14:9C:09:17:2C:FE:0A:74:CC:C5:23:74:16:42
Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial: 010D0C9F43285848467ABB7DA5D9F39210B3ADA0
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/b214acd2-07b1-360e-a1cc-31f9d400eba6.roa
Signing time: Sat 21 Dec 2024 02:00:39 +0000
ROA not before: Sat 21 Dec 2024 02:00:39 +0000
ROA not after: Fri 21 Mar 2025 01:00:39 +0000
asID: 398156
IP address blocks: 168.220.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:46:7a:bb:7d:a5:d9:f3:92:10:b3:ad:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Validity
Not Before: Dec 21 02:00:39 2024 GMT
Not After : Mar 21 01:00:39 2025 GMT
Subject: CN=94b4908a-c5dc-42f1-9b16-6f867365b396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:04:9c:16:f0:c7:1d:ab:a7:2c:15:5b:26:1b:
cc:66:31:2d:39:8f:16:55:7c:0f:17:1d:7f:d5:2a:
b0:19:7d:b7:ca:e0:3f:68:d6:9f:ff:77:28:55:74:
ff:18:70:24:a5:7e:65:e8:80:94:59:dd:25:33:f4:
b3:c5:bf:53:92:1b:82:09:b4:e6:44:35:f8:db:72:
54:38:e8:85:81:85:3c:26:b4:16:d6:bc:c6:0a:19:
56:c8:e2:33:d2:7d:72:70:d0:3a:d4:f4:ea:d3:ff:
be:e2:ff:da:76:e7:1c:ab:58:3e:37:7e:7c:34:28:
a8:3e:3c:f3:62:1e:d0:1a:be:7c:5c:c6:c4:00:39:
0a:e8:09:a3:c8:ea:ab:84:79:f0:1e:21:04:99:5d:
3f:7f:60:b6:f8:e4:d5:fc:c1:ce:4f:5f:12:9a:68:
7e:1c:e9:bf:b3:99:2a:45:7f:fa:8d:66:fd:b8:93:
15:06:fd:a6:68:bd:5e:5f:1b:d4:79:75:03:8d:57:
9b:58:a7:1a:4e:b5:aa:9b:7e:3e:66:20:80:bb:9d:
25:f0:ef:cd:cf:19:ec:e3:61:54:5e:b9:bd:e8:ea:
e7:44:35:f0:7c:b5:13:f8:cb:93:d5:7e:3f:ee:35:
68:11:05:ed:47:6c:74:8a:63:46:23:29:e4:4a:c6:
48:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E2:C8:38:B3:03:14:9C:09:17:2C:FE:0A:74:CC:C5:23:74:16:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/b214acd2-07b1-360e-a1cc-31f9d400eba6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
X509v3 Authority Key Identifier:
keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
sbgp-ipAddrBlock: critical
IPv4:
168.220.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:c5:b3:a2:98:d3:c0:49:39:98:f3:71:ba:a2:76:8e:f0:76:
b9:08:54:86:c4:96:e0:32:a7:83:fb:c6:a3:16:d8:95:f1:b7:
41:80:71:86:5f:58:55:7c:66:3c:33:47:50:83:6f:9a:39:28:
dd:e4:c0:21:14:e1:db:4e:e7:e5:e6:c2:eb:42:30:1f:4e:02:
f2:fc:d2:d3:34:e8:0c:d1:ec:60:ef:17:c8:cb:96:cb:41:a7:
17:94:b2:d7:80:b6:62:86:72:db:db:03:2f:8c:09:f8:d7:c0:
f2:f5:7b:0c:0e:23:14:ec:cb:ee:9d:a3:a3:30:02:1a:46:2a:
c9:a5:19:7f:cb:df:4e:5a:79:e7:36:1a:05:8e:7e:20:92:d8:
f1:7e:9e:07:1d:7e:3a:41:56:88:c7:db:8d:a9:96:d3:23:27:
e6:f4:58:d7:6c:30:c4:55:a9:bc:46:fc:be:ac:80:75:57:75:
a7:c4:68:4e:82:db:84:2b:bb:3e:87:ae:77:fe:ca:52:e6:ed:
bd:49:0b:51:fc:62:5f:b2:e0:6a:cd:8d:b7:03:e0:1a:10:8f:
6d:b5:60:68:b3:a0:97:d1:5a:28:b8:e9:12:79:47:58:92:83:
f1:34:72:60:36:a6:93:29:89:17:7d:85:ff:1f:97:94:7d:e6:
80:34:23:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhGert9pdnzkhCzraAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm
NjZkMB4XDTI0MTIyMTAyMDAzOVoXDTI1MDMyMTAxMDAzOVowLzEtMCsGA1UEAxMk
OTRiNDkwOGEtYzVkYy00MmYxLTliMTYtNmY4NjczNjViMzk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQScFvDHHaunLBVbJhvMZjEtOY8WVXwPFx1/
1SqwGX23yuA/aNaf/3coVXT/GHAkpX5l6ICUWd0lM/Szxb9TkhuCCbTmRDX423JU
OOiFgYU8JrQW1rzGChlWyOIz0n1ycNA61PTq0/++4v/aduccq1g+N358NCioPjzz
Yh7QGr58XMbEADkK6AmjyOqrhHnwHiEEmV0/f2C2+OTV/MHOT18Smmh+HOm/s5kq
RX/6jWb9uJMVBv2maL1eXxvUeXUDjVebWKcaTrWqm34+ZiCAu50l8O/Nzxns42FU
Xrm96OrnRDXwfLUT+MuT1X4/7jVoEQXtR2x0imNGIynkSsZI+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI7iyDizAxScCRcs/gp0zMUjdBZCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl
ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvYjIxNGFjZDItMDdiMS0z
NjBlLWExY2MtMzFmOWQ0MDBlYmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2
OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi
ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4
MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqNzeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH7Fs6KY08BJOZjzcbqido7wdrkIVIbEluAyp4P7xqMW2JXxt0GAcYZf
WFV8ZjwzR1CDb5o5KN3kwCEU4dtO5+XmwutCMB9OAvL80tM06AzR7GDvF8jLlstB
pxeUsteAtmKGctvbAy+MCfjXwPL1ewwOIxTsy+6do6MwAhpGKsmlGX/L305aeec2
GgWOfiCS2PF+ngcdfjpBVojH242pltMjJ+b0WNdsMMRVqbxG/L6sgHVXdafEaE6C
24Qruz6Hrnf+ylLm7b1JC1H8Yl+y4GrNjbcD4BoQj221YGizoJfRWii46RJ5R1iS
g/E0cmA2ppMpiRd9hf8fl5R95oA0I1k=
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:58:04 2025 by rpki-client