Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/bfa3188f-a0e1-34ed-adac-4444a7b639b8.roa
File: bfa3188f-a0e1-34ed-adac-4444a7b639b8.roa (raw, json)
Hash identifier: gQAk9F3byJ27jRKtgflUuQQbqrcmW0wCgLTtdtqVYkw=
Subject key identifier: 22:04:73:64:A2:39:73:6C:3E:B2:B3:9D:24:19:48:6A:16:D3:12:93
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F432858486D9D47626EB7596AB26D2340
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/bfa3188f-a0e1-34ed-adac-4444a7b639b8.roa
Signing time: Sat 04 Jan 2025 02:26:54 +0000
ROA not before: Sat 04 Jan 2025 02:26:54 +0000
ROA not after: Fri 04 Apr 2025 01:26:54 +0000
asID: 394437
IP address blocks: 206.198.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:9d:47:62:6e:b7:59:6a:b2:6d:23:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Jan 4 02:26:54 2025 GMT
Not After : Apr 4 01:26:54 2025 GMT
Subject: CN=9cb7bbf2-6e0b-467c-87fa-15babe9843a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d0:f1:fc:0e:91:d3:77:15:c9:83:d7:2d:6f:
27:87:c3:1b:05:b5:fb:9b:45:17:ab:fd:c5:16:db:
8c:bb:b7:d7:cd:73:0d:f7:f8:88:19:21:4e:36:a5:
70:99:b5:4f:30:4f:7a:96:d4:15:33:4f:6a:4e:cf:
38:bd:ae:01:99:44:d7:30:78:fd:02:54:1a:7e:ad:
2c:00:29:e3:16:7d:5f:02:89:7c:87:e1:e8:da:4a:
f7:4e:ef:62:53:c2:11:2e:5f:23:42:21:ed:41:d6:
b9:ec:7c:67:1b:5b:4f:3a:28:a6:87:f6:87:30:0c:
0c:b7:20:74:98:0b:c3:f1:c3:c0:6e:b3:4a:ef:5f:
15:6a:af:51:dc:e0:fc:1a:94:d0:33:f8:d7:77:22:
31:e5:9c:ed:f0:ce:5d:1a:5e:62:8b:aa:84:06:e6:
f6:6d:5f:5a:be:14:f9:df:5a:63:36:2b:27:88:36:
62:a4:32:83:e4:46:10:55:24:51:a6:f5:86:77:aa:
48:19:3b:83:c6:ea:a8:e0:48:46:8a:26:7a:9a:6a:
d6:cd:0e:8f:29:c0:cd:c7:59:d2:f5:e7:ba:7e:aa:
1a:51:ad:d7:e0:54:71:f1:2d:dd:3f:61:85:1c:27:
b9:11:80:7b:3c:e8:f4:c8:ac:d4:70:dc:b1:37:25:
21:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:04:73:64:A2:39:73:6C:3E:B2:B3:9D:24:19:48:6A:16:D3:12:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/bfa3188f-a0e1-34ed-adac-4444a7b639b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
206.198.215.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d3:a7:e6:67:d9:d2:c8:c6:b2:1d:d2:05:22:f9:7b:a7:f6:8b:
94:06:d3:05:9c:b8:39:0d:a7:bc:d9:e3:e7:77:f6:00:a7:b0:
58:dc:20:73:c9:99:d6:98:c2:1d:b5:ac:fa:41:30:b6:dc:09:
4c:8a:8c:94:65:43:e5:75:28:cc:14:8e:48:5a:95:61:50:fa:
57:5a:15:3f:1b:5c:45:f6:12:c6:d6:40:32:ee:6d:11:62:8b:
f9:62:0d:46:3c:45:96:88:c0:26:45:49:76:ef:28:c5:40:f0:
cb:22:a0:53:33:57:9c:58:87:b6:ab:6d:28:ce:f7:e2:73:29:
45:5e:05:19:6f:82:82:52:e1:21:41:c3:5b:fe:ba:d0:ab:7a:
92:b6:6f:98:24:8c:33:fb:72:b4:45:12:6a:3d:39:0f:62:22:
af:25:9a:b9:80:e8:42:fd:aa:13:b1:25:3e:2a:68:20:d3:bb:
c6:73:0e:e7:d9:80:c8:f5:ad:b6:d9:20:1e:a9:6a:5c:da:8f:
cb:d0:13:1e:24:bd:a1:b0:b7:d8:f8:04:9d:32:6e:df:e5:62:
2e:ef:e9:36:a1:81:91:52:87:7a:e5:57:92:fc:e0:60:04:23:
8e:7e:bb:68:15:58:3c:bb:9e:03:fe:97:5a:de:69:b8:8b:f4:
2e:da:03:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtnUdibrdZarJtI0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi
MjRmMB4XDTI1MDEwNDAyMjY1NFoXDTI1MDQwNDAxMjY1NFowLzEtMCsGA1UEAxMk
OWNiN2JiZjItNmUwYi00NjdjLTg3ZmEtMTViYWJlOTg0M2EyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdDx/A6R03cVyYPXLW8nh8MbBbX7m0UXq/3F
FtuMu7fXzXMN9/iIGSFONqVwmbVPME96ltQVM09qTs84va4BmUTXMHj9AlQafq0s
ACnjFn1fAol8h+Ho2kr3Tu9iU8IRLl8jQiHtQda57HxnG1tPOiimh/aHMAwMtyB0
mAvD8cPAbrNK718Vaq9R3OD8GpTQM/jXdyIx5Zzt8M5dGl5ii6qEBub2bV9avhT5
31pjNisniDZipDKD5EYQVSRRpvWGd6pIGTuDxuqo4EhGiiZ6mmrWzQ6PKcDNx1nS
9ee6fqoaUa3X4FRx8S3dP2GFHCe5EYB7POj0yKzUcNyxNyUhhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCIEc2SiOXNsPrKznSQZSGoW0xKTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh
MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvYmZhMzE4OGYtYTBlMS0z
NGVkLWFkYWMtNDQ0NGE3YjYzOWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk
NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj
YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx
ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzsbXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANOn5mfZ0sjGsh3SBSL5e6f2i5QG0wWcuDkNp7zZ4+d39gCnsFjcIHPJ
mdaYwh21rPpBMLbcCUyKjJRlQ+V1KMwUjkhalWFQ+ldaFT8bXEX2EsbWQDLubRFi
i/liDUY8RZaIwCZFSXbvKMVA8MsioFMzV5xYh7arbSjO9+JzKUVeBRlvgoJS4SFB
w1v+utCrepK2b5gkjDP7crRFEmo9OQ9iIq8lmrmA6EL9qhOxJT4qaCDTu8ZzDufZ
gMj1rbbZIB6palzaj8vQEx4kvaGwt9j4BJ0ybt/lYi7v6TahgZFSh3rlV5L84GAE
I45+u2gVWDy7ngP+l1reabiL9C7aA0o=
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:43:25 2025 by rpki-client