Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/ef2e8c86-6f5d-3989-a9bd-02f9f2212c22.roa
File: ef2e8c86-6f5d-3989-a9bd-02f9f2212c22.roa (raw, json)
Hash identifier: 6+Kp2YfSQr+Jo3uVljO49zXW+ZhIJhjBiG7gQ7tMpK0=
Subject key identifier: 2F:7D:AA:58:DF:5C:F1:A0:7B:1C:02:5E:33:DD:5B:0C:D4:15:7C:A1
Certificate issuer: /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Certificate serial: 010D0C9F4328584851A582507B7C8F5DB8612080
Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/ef2e8c86-6f5d-3989-a9bd-02f9f2212c22.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 10578
IP address blocks: 192.5.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:82:50:7b:7c:8f:5d:b8:61:20:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=5b3153a0-85c4-40bc-9083-ebca311e7818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bc:fc:8d:0f:c9:d8:26:ad:89:fe:7a:2d:27:
ca:a2:1b:0c:66:94:8a:28:b6:32:4d:88:05:72:56:
37:8f:c6:bb:2d:52:77:2a:d6:e6:1e:01:91:9e:06:
62:a9:e7:90:59:9f:e5:56:22:a9:ca:da:23:c1:60:
8e:01:9d:b9:6a:ad:48:af:90:33:65:2b:ef:5d:5a:
84:56:17:0b:06:f3:7b:83:1b:f9:04:00:9f:69:2b:
d3:b2:88:1c:80:37:17:1b:3b:6e:95:ad:6c:97:14:
cf:26:97:f9:42:92:f2:73:0b:80:03:d0:80:6f:8a:
28:ee:ae:33:7a:7b:9e:76:81:85:42:94:d9:8f:96:
eb:f9:98:fb:eb:c0:b2:59:57:eb:f4:77:96:37:1b:
88:c7:43:c9:10:8d:e1:0c:cc:2e:64:f2:64:63:ca:
08:29:db:a3:ad:f4:e6:2a:48:a5:5f:4d:90:10:19:
34:9a:d2:4c:fe:db:6d:a7:29:70:29:f4:77:d6:3a:
18:a3:91:60:28:ce:8d:42:ea:6a:e4:83:19:aa:96:
7f:81:2b:94:d7:e8:14:73:60:00:3c:53:e3:e9:25:
34:33:72:50:7f:0e:e3:95:da:3b:13:85:b9:69:5e:
42:ce:20:c9:6f:b8:71:fa:6e:ed:b1:d1:fa:5c:8d:
e4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7D:AA:58:DF:5C:F1:A0:7B:1C:02:5E:33:DD:5B:0C:D4:15:7C:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/ef2e8c86-6f5d-3989-a9bd-02f9f2212c22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl
X509v3 Authority Key Identifier:
keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
sbgp-ipAddrBlock: critical
IPv4:
192.5.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:c3:8e:33:76:b4:25:39:f7:c3:53:47:15:60:5b:28:0d:a1:
28:a0:df:24:51:80:8a:2e:f0:5b:66:9c:57:7f:8c:ba:cd:26:
42:cb:de:c8:58:0b:66:ed:a1:66:71:ea:d0:3d:6e:ae:a2:28:
fc:e8:ff:b8:a6:4e:a5:24:ae:df:c2:8d:74:29:60:cc:89:d8:
75:50:9b:af:e9:fc:3f:a1:97:cb:31:f4:39:1d:ff:af:26:cc:
3e:cc:20:53:58:e6:87:62:c3:95:a2:d1:b2:6e:3d:a8:51:66:
48:07:e8:0c:a1:38:4e:b9:61:1e:82:d5:3d:e4:be:2b:9b:80:
d6:09:b0:97:7d:66:2d:4f:4b:f8:bd:2f:1f:5d:90:64:30:f1:
a2:95:b0:ad:1d:08:5f:ca:b3:47:0e:12:28:42:64:4d:13:9f:
4d:49:1f:54:bf:6a:75:c7:7f:01:a1:63:fc:98:c5:d5:2a:aa:
a0:d5:19:dd:91:96:14:f5:8f:b3:28:47:43:b2:f8:04:0f:79:
d0:7f:ee:b7:69:20:78:4b:97:98:18:3f:1c:ee:de:2c:65:2c:
25:27:94:79:73:69:82:77:57:2e:7a:35:ae:c9:7a:e0:4c:9d:
19:a3:2b:e4:6e:f2:5c:94:98:e0:68:8f:44:d1:df:27:9f:ed:
cf:2a:b3:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhRpYJQe3yPXbhhIIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODc0MTdmZTYtMTc5MC00ODFhLTliZGMtNjU3NGMwZWY3
ZDdjMB4XDTI0MTIyNTAyMDAzOFoXDTI1MDMyNTAxMDAzOFowLzEtMCsGA1UEAxMk
NWIzMTUzYTAtODVjNC00MGJjLTkwODMtZWJjYTMxMWU3ODE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Lz8jQ/J2Catif56LSfKohsMZpSKKLYyTYgF
clY3j8a7LVJ3KtbmHgGRngZiqeeQWZ/lViKpytojwWCOAZ25aq1Ir5AzZSvvXVqE
VhcLBvN7gxv5BACfaSvTsogcgDcXGztula1slxTPJpf5QpLycwuAA9CAb4oo7q4z
enuedoGFQpTZj5br+Zj768CyWVfr9HeWNxuIx0PJEI3hDMwuZPJkY8oIKdujrfTm
KkilX02QEBk0mtJM/tttpylwKfR31joYo5FgKM6NQupq5IMZqpZ/gSuU1+gUc2AA
PFPj6SU0M3JQfw7jldo7E4W5aV5CziDJb7hx+m7tsdH6XI3kaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC99qljfXPGgexwCXjPdWwzUFXyhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NzQx
N2ZlNi0xNzkwLTQ4MWEtOWJkYy02NTc0YzBlZjdkN2MvZWYyZThjODYtNmY1ZC0z
OTg5LWE5YmQtMDJmOWYyMjEyYzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODc0MTdmZTYtMTc5MC00ODFhLTli
ZGMtNjU3NGMwZWY3ZDdjLzg3NDE3ZmU2LTE3OTAtNDgxYS05YmRjLTY1NzRjMGVm
N2Q3Yy5jcmwwHwYDVR0jBBgwFoAUurcPAt6acXKk8OlAE68ADtiaXP0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84NzQxN2ZlNi0xNzkwLTQ4MWEtOWJkYy02NTc0
YzBlZjdkN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAVZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACnDjjN2tCU598NTRxVgWygNoSig3yRRgIou8FtmnFd/jLrNJkLL3shY
C2btoWZx6tA9bq6iKPzo/7imTqUkrt/CjXQpYMyJ2HVQm6/p/D+hl8sx9Dkd/68m
zD7MIFNY5odiw5Wi0bJuPahRZkgH6AyhOE65YR6C1T3kviubgNYJsJd9Zi1PS/i9
Lx9dkGQw8aKVsK0dCF/Ks0cOEihCZE0Tn01JH1S/anXHfwGhY/yYxdUqqqDVGd2R
lhT1j7MoR0Oy+AQPedB/7rdpIHhLl5gYPxzu3ixlLCUnlHlzaYJ3Vy56Na7JeuBM
nRmjK+Ru8lyUmOBoj0TR3yef7c8qs38=
-----END CERTIFICATE-----
Generated at Wed Apr 30 03:55:44 2025 by rpki-client