Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/67fc149a-eb9f-318c-ba3b-8790e3682297.roa
File: 67fc149a-eb9f-318c-ba3b-8790e3682297.roa (raw, json)
Hash identifier: pS51Daytw1MRZ9ynN1KB8rY66es1x4ATj81ulqMud/8=
Subject key identifier: D8:79:D8:A1:C0:36:90:38:96:3D:D3:81:65:02:4E:58:BB:D6:7D:4C
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584863CB14D00632B273F75D6600
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/67fc149a-eb9f-318c-ba3b-8790e3682297.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 64267
IP address blocks: 208.89.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:14:d0:06:32:b2:73:f7:5d:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=35d4f40a-64ca-42bf-ade1-eca8cc9761d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:64:39:33:88:ee:92:76:8a:19:d1:c3:85:
64:75:e2:68:5c:f7:48:0d:04:92:df:31:98:03:1e:
4d:ee:8e:0b:d0:b9:df:97:74:20:3b:c6:9f:86:07:
28:10:75:d7:53:35:e2:f1:7b:e5:45:72:68:44:7e:
df:d8:01:84:64:1d:2f:56:22:f8:e2:d5:db:2c:4e:
4e:25:ba:5d:9e:2c:58:d2:3c:14:46:4b:94:d2:f3:
14:92:82:5a:f4:59:0e:d9:44:a0:c0:16:38:e8:5a:
ae:cc:17:dd:04:30:69:f1:5a:2d:71:a0:37:4f:b9:
86:54:8b:0c:aa:a5:e2:6e:2f:14:50:f5:4d:14:f3:
8a:d1:e8:91:6a:9f:80:03:04:24:bb:18:92:1b:cc:
a6:55:01:f8:03:e1:c0:89:35:c7:b8:67:38:a2:da:
10:5b:f6:ca:f3:46:40:9a:84:d2:56:5d:13:55:cb:
8e:b6:39:37:5c:38:e1:8a:40:78:b2:b5:47:60:23:
6f:44:c5:7e:d0:0b:44:86:26:df:69:71:0e:ad:04:
53:ce:78:1e:a5:d4:12:a3:08:7d:a6:c2:4a:ef:21:
3e:72:58:34:05:08:27:ed:9b:66:87:a8:4b:fd:62:
1e:cf:dc:ef:76:c0:05:4a:cc:10:f2:d0:2f:2e:0a:
cc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:79:D8:A1:C0:36:90:38:96:3D:D3:81:65:02:4E:58:BB:D6:7D:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/67fc149a-eb9f-318c-ba3b-8790e3682297.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
208.89.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:b1:b9:fe:46:ef:e6:6d:30:08:c7:6f:3e:c9:c6:3b:50:9e:
9c:76:82:fb:4a:92:38:64:11:96:c0:1b:57:65:7b:a2:32:b1:
5a:82:94:50:9a:b4:30:b4:3c:ef:fa:fd:aa:c8:a0:05:99:88:
b2:b8:20:34:9e:79:d1:87:99:b3:0e:c7:d8:a8:a0:f3:9e:d4:
34:c0:48:a3:ee:b4:29:0c:77:f4:9d:39:ae:5b:e9:65:68:f4:
31:d6:b9:8b:1d:3b:76:d1:13:a7:0c:24:8c:80:22:ab:3a:53:
0f:ad:ff:1e:0e:89:24:6c:b1:02:eb:df:56:62:a5:8a:7b:b9:
2e:23:c8:34:ce:11:ab:5d:ff:56:54:9f:66:c7:40:a0:66:4b:
ad:a7:03:7b:66:a8:df:f3:5a:d7:4e:de:e5:61:13:4d:e5:8a:
25:a0:88:35:c3:f0:fc:15:c6:cb:9c:4d:53:5e:dd:52:62:b2:
fb:f3:7e:0b:60:42:3d:3d:ed:fb:57:1c:ed:c8:89:d8:43:04:
f8:a6:cf:ec:81:0e:fe:03:04:38:9d:e8:11:cc:5a:49:79:1f:
0a:4f:6e:49:8f:37:9d:24:30:29:28:2e:ba:69:31:e3:8e:e8:
46:ee:8b:ae:18:ec:22:42:23:ec:b2:83:49:0a:e2:5f:05:db:
c9:e0:0b:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhjyxTQBjKyc/ddZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI0MTIzMTE0MDA1M1oXDTI1MDMzMTEzMDA1M1owLzEtMCsGA1UEAxMk
MzVkNGY0MGEtNjRjYS00MmJmLWFkZTEtZWNhOGNjOTc2MWQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywxkOTOI7pJ2ihnRw4VkdeJoXPdIDQSS3zGY
Ax5N7o4L0Lnfl3QgO8afhgcoEHXXUzXi8XvlRXJoRH7f2AGEZB0vViL44tXbLE5O
JbpdnixY0jwURkuU0vMUkoJa9FkO2USgwBY46FquzBfdBDBp8VotcaA3T7mGVIsM
qqXibi8UUPVNFPOK0eiRap+AAwQkuxiSG8ymVQH4A+HAiTXHuGc4otoQW/bK80ZA
moTSVl0TVcuOtjk3XDjhikB4srVHYCNvRMV+0AtEhibfaXEOrQRTzngepdQSowh9
psJK7yE+clg0BQgn7Ztmh6hL/WIez9zvdsAFSswQ8tAvLgrMTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNh52KHANpA4lj3TgWUCTli71n1MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNjdmYzE0OWEtZWI5Zi0z
MThjLWJhM2ItODc5MGUzNjgyMjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FnxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKSxuf5G7+ZtMAjHbz7JxjtQnpx2gvtKkjhkEZbAG1dle6IysVqClFCa
tDC0PO/6/arIoAWZiLK4IDSeedGHmbMOx9iooPOe1DTASKPutCkMd/SdOa5b6WVo
9DHWuYsdO3bRE6cMJIyAIqs6Uw+t/x4OiSRssQLr31ZipYp7uS4jyDTOEatd/1ZU
n2bHQKBmS62nA3tmqN/zWtdO3uVhE03liiWgiDXD8PwVxsucTVNe3VJisvvzfgtg
Qj097ftXHO3IidhDBPimz+yBDv4DBDid6BHMWkl5HwpPbkmPN50kMCkoLrppMeOO
6Ebui64Y7CJCI+yyg0kK4l8F28ngCyU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:55:49 2025 by rpki-client