Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4/34cdba4c-80f1-350c-adea-5c65a62ef612.roa
File: 34cdba4c-80f1-350c-adea-5c65a62ef612.roa (raw, json)
Hash identifier: c8HLRdWoSH1hP3sGT9CLCpUCM79U0XaX/ZmZDtQXOAE=
Subject key identifier: CB:A0:E3:92:65:9C:C0:66:72:9F:5A:A3:FF:3E:A8:D4:31:AC:40:6D
Certificate issuer: /CN=87baa4d2-11b1-4829-9bf6-86e0efc65ff4
Certificate serial: 010D0C9F43285847E1F9FA57EC0005F3B08DEF00
Authority key identifier: 05:BF:BA:DD:14:E0:8D:B2:E2:C7:E6:7B:D7:8E:F9:39:E1:C8:46:51
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4/34cdba4c-80f1-350c-adea-5c65a62ef612.roa
Signing time: Fri 15 Nov 2024 02:00:28 +0000
ROA not before: Fri 15 Nov 2024 02:00:28 +0000
ROA not after: Thu 13 Feb 2025 02:00:28 +0000
asID: 14618
IP address blocks: 208.79.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e1:f9:fa:57:ec:00:05:f3:b0:8d:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87baa4d2-11b1-4829-9bf6-86e0efc65ff4
Validity
Not Before: Nov 15 02:00:28 2024 GMT
Not After : Feb 13 02:00:28 2025 GMT
Subject: CN=31def5f3-74a0-4cf4-b0a5-a03f1568dcbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:4e:55:73:3f:d0:8a:68:fd:2e:44:5c:7b:
67:46:16:0e:1a:db:c6:5f:ba:91:24:f2:e3:89:45:
c1:a5:d6:25:bc:99:fb:ea:55:7e:31:b2:07:4a:55:
ec:9f:68:99:98:59:1b:04:df:4e:90:36:40:17:8c:
74:70:51:6f:94:45:5b:21:b1:9f:fc:ac:f8:69:87:
69:0c:43:0d:4b:a0:ff:6f:d8:8c:f4:19:c7:af:ac:
4e:d5:27:94:45:ce:50:4a:5f:cd:4e:18:fe:c9:9f:
63:99:c4:a9:9d:ab:26:4f:5f:9d:db:cf:9a:bb:1b:
ee:81:2b:dd:67:9f:fc:f6:93:03:13:be:b4:eb:97:
a6:0e:e9:c8:0d:44:5f:0e:25:d1:9e:04:70:bc:33:
0f:e8:38:cd:f3:e3:a5:09:74:d1:f3:b6:19:c3:27:
c1:fe:cb:1a:5a:db:a3:3d:ec:c7:12:72:f6:f6:67:
d5:1c:2a:73:f6:f6:e1:89:df:bd:f5:02:82:c2:6c:
55:7f:ef:35:94:f7:b1:e3:5e:c8:54:53:42:b4:4d:
ba:3e:f6:1d:30:bc:8a:f5:33:54:87:84:be:39:45:
53:dc:8a:88:6b:8c:b1:18:17:d9:51:31:44:73:32:
1e:39:7c:78:ed:84:6f:87:e5:b1:85:d0:87:f7:73:
bb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A0:E3:92:65:9C:C0:66:72:9F:5A:A3:FF:3E:A8:D4:31:AC:40:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4/34cdba4c-80f1-350c-adea-5c65a62ef612.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4/87baa4d2-11b1-4829-9bf6-86e0efc65ff4.crl
X509v3 Authority Key Identifier:
keyid:05:BF:BA:DD:14:E0:8D:B2:E2:C7:E6:7B:D7:8E:F9:39:E1:C8:46:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
208.79.135.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:c8:af:eb:7b:6c:d8:d3:fa:e6:d3:e4:85:68:c2:a3:c5:b8:
47:ba:05:5a:e7:cf:a0:83:1e:f0:2e:a5:b0:41:09:de:f1:77:
d1:42:14:68:9d:dd:30:d6:fe:73:95:6c:b5:02:6c:0c:e7:b4:
54:bc:16:71:5a:b0:1c:f3:48:30:29:b5:d8:70:0d:bc:78:e0:
40:77:85:91:91:24:71:dc:95:29:a4:7d:21:cb:bd:02:e8:00:
99:c0:0f:ae:b5:03:76:34:ee:80:a5:65:1b:71:e1:8d:5e:b5:
da:5c:c9:9f:8a:fc:d0:39:34:52:86:5f:62:96:05:4e:a5:9b:
a4:2b:3b:cd:c1:81:f4:08:d4:24:9b:4e:06:6c:a1:24:ee:34:
63:cc:2d:47:77:5a:52:24:b9:2a:27:fc:bb:d5:6e:5d:c1:02:
04:46:89:95:01:83:76:fc:cf:3b:92:40:ba:c6:ac:75:f2:db:
a9:dc:b1:9e:24:55:d3:20:70:f0:05:ad:f9:ce:3f:0a:40:b8:
de:2f:b8:3c:8f:26:24:3d:8f:ff:08:08:e9:d6:df:e4:76:dd:
91:90:27:34:ab:cd:a7:a4:aa:da:01:22:8f:12:c5:cf:78:96:
bf:40:ce:4f:4c:87:be:9f:90:1b:90:7e:17:09:69:01:d0:59:
2f:b6:67:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfh+fpX7AAF87CN7wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODdiYWE0ZDItMTFiMS00ODI5LTliZjYtODZlMGVmYzY1
ZmY0MB4XDTI0MTExNTAyMDAyOFoXDTI1MDIxMzAyMDAyOFowLzEtMCsGA1UEAxMk
MzFkZWY1ZjMtNzRhMC00Y2Y0LWIwYTUtYTAzZjE1NjhkY2JmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJVOVXM/0Ipo/S5EXHtnRhYOGtvGX7qRJPLj
iUXBpdYlvJn76lV+MbIHSlXsn2iZmFkbBN9OkDZAF4x0cFFvlEVbIbGf/Kz4aYdp
DEMNS6D/b9iM9BnHr6xO1SeURc5QSl/NThj+yZ9jmcSpnasmT1+d28+auxvugSvd
Z5/89pMDE76065emDunIDURfDiXRngRwvDMP6DjN8+OlCXTR87YZwyfB/ssaWtuj
PezHEnL29mfVHCpz9vbhid+99QKCwmxVf+81lPex417IVFNCtE26PvYdMLyK9TNU
h4S+OUVT3IqIa4yxGBfZUTFEczIeOXx47YRvh+WxhdCH93O7VQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMug45JlnMBmcp9ao/8+qNQxrEBtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84N2Jh
YTRkMi0xMWIxLTQ4MjktOWJmNi04NmUwZWZjNjVmZjQvMzRjZGJhNGMtODBmMS0z
NTBjLWFkZWEtNWM2NWE2MmVmNjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODdiYWE0ZDItMTFiMS00ODI5LTli
ZjYtODZlMGVmYzY1ZmY0Lzg3YmFhNGQyLTExYjEtNDgyOS05YmY2LTg2ZTBlZmM2
NWZmNC5jcmwwHwYDVR0jBBgwFoAUBb+63RTgjbLix+Z71475OeHIRlEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84N2JhYTRkMi0xMWIxLTQ4MjktOWJmNi04NmUw
ZWZjNjVmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0E+HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAErIr+t7bNjT+ubT5IVowqPFuEe6BVrnz6CDHvAupbBBCd7xd9FCFGid
3TDW/nOVbLUCbAzntFS8FnFasBzzSDAptdhwDbx44EB3hZGRJHHclSmkfSHLvQLo
AJnAD661A3Y07oClZRtx4Y1etdpcyZ+K/NA5NFKGX2KWBU6lm6QrO83BgfQI1CSb
TgZsoSTuNGPMLUd3WlIkuSon/LvVbl3BAgRGiZUBg3b8zzuSQLrGrHXy26ncsZ4k
VdMgcPAFrfnOPwpAuN4vuDyPJiQ9j/8ICOnW3+R23ZGQJzSrzaekqtoBIo8Sxc94
lr9Azk9Mh76fkBuQfhcJaQHQWS+2Z5Q=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:38:13 2025 by rpki-client