Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d1257739-bf6e-3070-9da4-3f33df2e0607.roa
File: d1257739-bf6e-3070-9da4-3f33df2e0607.roa (raw, json)
Hash identifier: KHFRqYFPELfKiLNK8cM1vF2WS9Scu9F9A2+y0Qsit3A=
Subject key identifier: EA:00:CA:59:F5:DB:19:10:61:54:D3:59:4F:2D:DB:8B:ED:6B:BB:11
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848037B0F6A1F8D4E8E7D133B00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d1257739-bf6e-3070-9da4-3f33df2e0607.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 32891
IP address blocks: 208.125.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:0f:6a:1f:8d:4e:8e:7d:13:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=2bf62f95-be38-4c6f-a387-067142ac729b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d9:ff:85:d0:ba:af:a2:91:2e:5a:bc:35:6b:
14:f1:5a:6c:78:a7:26:3a:6c:59:fd:f9:bc:93:5e:
2a:fd:2c:18:c1:61:95:30:51:5a:87:e1:dc:f3:ae:
e4:13:3d:35:2e:32:9d:30:0c:ab:cd:eb:a1:7d:68:
27:52:e9:c5:5b:ce:e9:fe:74:e2:c0:de:e9:b0:fe:
52:39:c6:12:62:7f:c5:f2:59:04:49:df:b4:6b:cf:
f0:c2:b6:6e:ae:ba:03:0f:f5:f4:28:23:64:35:94:
55:74:13:0e:9d:02:f2:8f:43:93:a2:cf:ce:6a:a2:
ac:9b:1d:7d:9f:58:a8:d3:78:ec:1f:56:9e:4e:ce:
a8:35:4d:63:20:f7:9d:86:e5:8b:78:e6:cd:33:5f:
b1:2c:c8:83:9d:71:72:91:8d:45:d3:66:13:15:47:
68:35:df:4b:b3:0d:28:b3:74:34:5c:b0:e1:06:0e:
82:30:40:d9:7f:52:d4:c2:ba:1b:eb:b5:e9:18:dd:
36:19:22:13:eb:39:56:a9:e2:92:df:e2:50:a7:a5:
1b:f7:7b:08:31:39:e4:61:a5:00:ee:dc:7c:92:4d:
57:0d:60:52:12:b6:3f:b0:0b:26:13:af:64:29:f6:
a8:ed:90:a1:c2:e1:57:02:77:ce:25:f4:eb:5e:67:
f7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:00:CA:59:F5:DB:19:10:61:54:D3:59:4F:2D:DB:8B:ED:6B:BB:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d1257739-bf6e-3070-9da4-3f33df2e0607.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
208.125.230.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:41:6a:83:2b:5e:69:96:3c:1c:0c:0a:9e:ec:c9:2c:cd:09:
24:59:eb:c9:ad:3a:fe:be:89:0f:75:33:51:69:f9:6b:43:4d:
86:c8:89:03:98:08:c6:17:01:e9:04:0d:24:d8:05:be:ad:2d:
32:ea:c2:92:d4:72:85:4e:ce:c6:1d:0e:f4:40:79:a4:d4:b3:
99:7b:7d:dd:63:d2:bd:d1:f0:3a:72:37:90:a6:15:41:a7:10:
fe:17:71:1c:35:f4:9e:3d:2d:f4:0a:a3:05:40:5e:95:1d:f6:
71:d7:28:4a:83:e7:04:ed:51:c2:96:d0:64:7b:a3:80:0f:a6:
db:2d:44:ed:15:a1:77:a7:5f:f9:93:dd:2b:9f:3b:ed:5f:1d:
40:50:87:80:b7:2c:9a:58:1c:21:5c:b6:73:0a:d5:31:80:09:
e4:0f:1f:f7:fc:9f:80:64:17:af:e7:02:70:8c:43:81:c0:d9:
f2:6a:a0:67:d4:26:30:c6:f7:0c:a9:76:89:50:58:ba:df:a2:
7d:f4:f0:d0:35:32:28:b8:f3:e2:bf:a3:2a:7d:33:74:25:da:
22:1e:ba:de:fb:34:f2:49:ab:d3:a4:c5:f3:cd:27:6e:55:29:
a7:c3:ec:bf:77:42:ae:1f:87:b6:af:f9:23:54:45:28:c6:e6:
73:9c:36:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDew9qH41Ojn0TOwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
MmJmNjJmOTUtYmUzOC00YzZmLWEzODctMDY3MTQyYWM3MjliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tn/hdC6r6KRLlq8NWsU8VpseKcmOmxZ/fm8
k14q/SwYwWGVMFFah+Hc867kEz01LjKdMAyrzeuhfWgnUunFW87p/nTiwN7psP5S
OcYSYn/F8lkESd+0a8/wwrZurroDD/X0KCNkNZRVdBMOnQLyj0OTos/OaqKsmx19
n1io03jsH1aeTs6oNU1jIPedhuWLeObNM1+xLMiDnXFykY1F02YTFUdoNd9Lsw0o
s3Q0XLDhBg6CMEDZf1LUwrob67XpGN02GSIT6zlWqeKS3+JQp6Ub93sIMTnkYaUA
7tx8kk1XDWBSErY/sAsmE69kKfao7ZChwuFXAnfOJfTrXmf3/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOoAyln12xkQYVTTWU8t24vta7sRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZDEyNTc3MzktYmY2ZS0z
MDcwLTlkYTQtM2YzM2RmMmUwNjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0H3mMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADtBaoMrXmmWPBwMCp7sySzNCSRZ68mtOv6+iQ91M1Fp+WtDTYbIiQOY
CMYXAekEDSTYBb6tLTLqwpLUcoVOzsYdDvRAeaTUs5l7fd1j0r3R8DpyN5CmFUGn
EP4XcRw19J49LfQKowVAXpUd9nHXKEqD5wTtUcKW0GR7o4APptstRO0VoXenX/mT
3SufO+1fHUBQh4C3LJpYHCFctnMK1TGACeQPH/f8n4BkF6/nAnCMQ4HA2fJqoGfU
JjDG9wypdolQWLrfon308NA1Mii48+K/oyp9M3Ql2iIeut77NPJJq9OkxfPNJ25V
KafD7L93Qq4fh7av+SNURSjG5nOcNt0=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:03:58 2025 by rpki-client