Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/d9b3d2af-88b0-3b3b-a075-b21514d98bb4.roa
File: d9b3d2af-88b0-3b3b-a075-b21514d98bb4.roa (raw, json)
Hash identifier: XRratMKJCTsCfI+4jG19IrShmOluN4ZiLAfdZ8lS+M0=
Subject key identifier: E3:A0:F1:5E:CE:FB:26:40:AC:7A:50:CD:3C:A7:52:60:25:8F:65:DF
Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial: 010D0C9F432858485F9AE6F20CC4D55DD2FB8580
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/d9b3d2af-88b0-3b3b-a075-b21514d98bb4.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 33392
IP address blocks: 216.230.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:e6:f2:0c:c4:d5:5d:d2:fb:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=8ab58ce8-eb48-493b-9545-d16102a8ecaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ad:09:0c:87:90:f3:19:f8:1d:1f:23:af:81:
30:1d:7b:9e:f9:60:01:63:2f:d2:72:b8:98:23:57:
b7:03:66:fd:18:ef:1b:90:39:b5:e4:41:46:4a:e6:
c3:09:49:8d:63:44:38:eb:2f:3b:e3:89:3b:12:1d:
fa:06:20:a4:d9:d6:9a:34:1c:5d:e3:1e:16:82:3c:
3d:1e:90:d6:47:99:48:3a:24:1c:5b:8c:a1:ca:ad:
b5:52:cc:14:a3:b3:e0:0c:5f:29:be:ed:79:0c:85:
c0:3a:94:6d:14:94:ba:bc:b7:d4:61:2c:6f:5c:42:
3a:ba:04:9f:38:37:85:f5:40:fe:a7:4a:f5:5f:48:
ad:c4:aa:06:53:a3:5f:52:5a:14:14:66:a7:f8:9e:
a6:95:84:a3:a4:69:01:bf:80:be:42:3d:db:ea:05:
a8:ae:9f:ae:67:63:1c:45:21:44:08:65:b2:4f:c7:
58:19:2c:c2:48:1d:b5:ba:97:4f:b5:82:42:85:97:
c4:ac:3b:ce:2f:97:69:95:75:04:72:43:98:cf:46:
fb:ab:23:22:97:df:99:1c:37:fb:cb:e8:5c:78:7d:
65:64:28:d4:e2:a2:2b:d2:54:e9:3e:39:9d:cd:d7:
2a:b3:36:61:47:f2:c2:5a:3f:7f:b4:d2:49:c0:cb:
68:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A0:F1:5E:CE:FB:26:40:AC:7A:50:CD:3C:A7:52:60:25:8F:65:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/d9b3d2af-88b0-3b3b-a075-b21514d98bb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
X509v3 Authority Key Identifier:
keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
sbgp-ipAddrBlock: critical
IPv4:
216.230.19.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:63:c6:4b:d2:e5:f4:3f:05:79:52:3b:40:46:5b:87:9e:1c:
a2:b4:a9:6b:84:4c:22:ca:32:a3:9e:92:c7:83:64:00:05:cb:
3d:e3:76:4e:e4:6f:44:7b:88:d1:e4:33:b3:b6:95:c8:8a:36:
18:72:7c:e9:b8:10:d8:d5:24:d1:cb:96:ae:25:84:d3:d4:0f:
00:0d:f1:b5:da:d4:fa:72:38:ce:77:b6:b6:5d:80:3a:39:ca:
60:c9:fb:7f:e5:fc:c3:7c:39:ff:9e:af:57:3f:87:ec:95:64:
ec:05:f0:21:9b:fd:e2:88:d9:5e:cd:80:0c:39:25:dc:b2:6a:
4d:d0:bf:6f:6e:0f:4b:29:ff:3d:24:28:7b:db:a3:87:86:4c:
bd:cb:7e:46:ff:99:d3:64:f8:1f:f6:7e:df:5c:64:3f:3a:4d:
d8:fa:41:36:97:3a:1d:4b:30:7f:9d:e9:88:e6:71:58:c5:3c:
d6:dd:c0:b3:8a:99:10:d0:13:0c:00:43:bd:25:98:b7:1b:d8:
75:c8:62:85:f6:6a:6c:6d:64:83:16:57:02:27:a6:48:a2:58:
3f:a0:49:f4:18:fd:02:d8:c7:15:d9:73:18:86:f5:fe:4b:eb:
91:05:0f:79:62:2e:b4:de:b7:c6:01:7b:28:36:99:70:29:40:
48:b3:86:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhfmubyDMTVXdL7hYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5
Y2ZjMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk
OGFiNThjZTgtZWI0OC00OTNiLTk1NDUtZDE2MTAyYThlY2FmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh60JDIeQ8xn4HR8jr4EwHXue+WABYy/ScriY
I1e3A2b9GO8bkDm15EFGSubDCUmNY0Q46y8744k7Eh36BiCk2daaNBxd4x4Wgjw9
HpDWR5lIOiQcW4yhyq21UswUo7PgDF8pvu15DIXAOpRtFJS6vLfUYSxvXEI6ugSf
ODeF9UD+p0r1X0itxKoGU6NfUloUFGan+J6mlYSjpGkBv4C+Qj3b6gWorp+uZ2Mc
RSFECGWyT8dYGSzCSB21updPtYJChZfErDvOL5dplXUEckOYz0b7qyMil9+ZHDf7
y+hceH1lZCjU4qIr0lTpPjmdzdcqszZhR/LCWj9/tNJJwMtoRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOOg8V7O+yZArHpQzTynUmAlj2XfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl
ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvZDliM2QyYWYtODhiMC0z
YjNiLWEwNzUtYjIxNTE0ZDk4YmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl
MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk
OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1
ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OYTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAApjxkvS5fQ/BXlSO0BGW4eeHKK0qWuETCLKMqOekseDZAAFyz3jdk7k
b0R7iNHkM7O2lciKNhhyfOm4ENjVJNHLlq4lhNPUDwAN8bXa1PpyOM53trZdgDo5
ymDJ+3/l/MN8Of+er1c/h+yVZOwF8CGb/eKI2V7NgAw5Jdyyak3Qv29uD0sp/z0k
KHvbo4eGTL3Lfkb/mdNk+B/2ft9cZD86Tdj6QTaXOh1LMH+d6YjmcVjFPNbdwLOK
mRDQEwwAQ70lmLcb2HXIYoX2amxtZIMWVwInpkiiWD+gSfQY/QLYxxXZcxiG9f5L
65EFD3liLrTet8YBeyg2mXApQEizhnQ=
-----END CERTIFICATE-----
Generated at Sun May 4 07:48:37 2025 by rpki-client