Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/8b90aae1-d30f-3d2a-a082-6f0cd473e493.roa
File: 8b90aae1-d30f-3d2a-a082-6f0cd473e493.roa (raw, json)
Hash identifier: 5gzz3uP8k0PnX+gLI+S6p5bqbBtUoAwf1cHq8n5lQ68=
Subject key identifier: 0B:41:88:BE:A1:E7:BA:0D:FB:4F:58:23:BB:B1:CA:87:D3:EF:A0:54
Certificate issuer: /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial: 010D0C9F4328584851A57D7BF5DAAFF4FA3F2780
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/8b90aae1-d30f-3d2a-a082-6f0cd473e493.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 13213
IP address blocks: 198.105.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:7d:7b:f5:da:af:f4:fa:3f:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=6c078a39-e02d-4550-8895-19c9711f42c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5f:a8:28:d0:4d:52:c8:aa:ef:f6:66:81:af:
11:91:fc:d9:06:ca:5c:ef:62:ed:96:80:8c:20:f1:
3f:f0:fe:2e:ed:6a:b8:e4:9e:2d:12:f8:5d:63:d7:
31:db:b7:73:0a:f2:57:06:6c:7a:89:3f:85:6d:70:
7a:3e:34:f1:d9:9e:8e:5b:61:7e:6d:15:96:c0:bb:
d0:00:20:d5:7f:f4:bb:8b:35:84:ad:cd:48:ed:cd:
1f:a9:3e:13:82:60:ca:3f:5f:15:42:a6:84:39:25:
b1:d2:1b:04:3a:70:cf:82:62:71:9b:5c:36:26:59:
6b:47:1a:62:17:71:2c:15:77:34:c8:d2:ae:a2:8a:
b8:08:97:37:1b:87:9d:33:48:4b:a1:1a:65:32:e7:
da:3b:ec:fd:5d:92:20:ef:03:98:be:84:23:55:7c:
34:69:58:ce:4d:48:52:28:45:9b:2b:b9:d5:62:1d:
ea:3e:ff:24:10:a0:4c:b5:df:4c:aa:82:a5:bc:cd:
2a:cf:8b:8a:19:99:09:db:22:a5:da:13:c1:0f:4d:
60:7e:53:da:fc:b5:5c:20:b9:c1:51:f1:25:40:a5:
2d:ad:a1:74:47:d2:60:e0:5a:f5:4b:e0:77:a6:d8:
17:ce:b7:58:c1:8f:c9:0d:0f:7b:15:cd:33:0d:d0:
ca:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:41:88:BE:A1:E7:BA:0D:FB:4F:58:23:BB:B1:CA:87:D3:EF:A0:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/8b90aae1-d30f-3d2a-a082-6f0cd473e493.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
X509v3 Authority Key Identifier:
keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
sbgp-ipAddrBlock: critical
IPv4:
198.105.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:39:65:49:d7:d4:aa:ef:05:71:05:a0:bb:c7:7d:c5:8b:36:
b8:3f:cf:75:c5:43:e5:ef:43:2c:f8:6c:43:21:2c:4e:f7:5c:
2b:38:a4:c3:46:3e:38:40:3f:b2:75:8c:ac:e1:28:e4:30:83:
79:7f:02:b6:eb:27:ed:93:69:50:c1:20:8e:93:8d:bd:ef:52:
32:73:15:ee:0b:6c:56:e5:85:97:d4:2b:30:8c:39:97:14:3a:
5f:cd:ab:0c:03:e1:b3:52:ba:68:55:68:01:9c:07:04:6d:28:
ee:15:f4:01:df:5b:57:c5:ad:b5:f5:fb:0a:15:da:5a:e3:7f:
6d:76:4a:0d:3b:2b:d1:ef:64:47:49:a6:74:c7:c8:d5:6e:53:
fb:59:b5:5f:0e:d6:58:90:2c:43:1b:41:7a:7e:f4:94:4a:fa:
59:bd:7e:49:e7:ca:be:cd:a3:c4:81:db:dd:81:fe:d5:e1:ed:
fc:11:93:cc:47:ae:52:af:f5:32:25:15:e1:ac:cf:e3:98:20:
96:5f:4c:7a:00:b6:c4:01:61:60:92:c8:29:8c:63:2c:76:c4:
06:e6:93:e9:3a:ae:05:d4:0d:6c:64:39:db:15:84:e3:5c:81:
c1:74:17:4b:71:27:39:41:30:1e:5d:0f:7e:6a:02:ee:ef:90:
de:0a:2e:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhRpX179dqv9Po/J4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0MDdjZDgtYzgzMC00OWU2LTlkYjQtN2RkYWM3NWVi
MDNmMB4XDTI0MTIyNTAyMDAzOFoXDTI1MDMyNTAxMDAzOFowLzEtMCsGA1UEAxMk
NmMwNzhhMzktZTAyZC00NTUwLTg4OTUtMTljOTcxMWY0MmM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31+oKNBNUsiq7/Zmga8RkfzZBspc72LtloCM
IPE/8P4u7Wq45J4tEvhdY9cx27dzCvJXBmx6iT+FbXB6PjTx2Z6OW2F+bRWWwLvQ
ACDVf/S7izWErc1I7c0fqT4TgmDKP18VQqaEOSWx0hsEOnDPgmJxm1w2JllrRxpi
F3EsFXc0yNKuooq4CJc3G4edM0hLoRplMufaO+z9XZIg7wOYvoQjVXw0aVjOTUhS
KEWbK7nVYh3qPv8kEKBMtd9MqoKlvM0qz4uKGZkJ2yKl2hPBD01gflPa/LVcILnB
UfElQKUtraF0R9Jg4Fr1S+B3ptgXzrdYwY/JDQ97Fc0zDdDKIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAtBiL6h57oN+09YI7uxyofT76BUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81MTQw
N2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRhYzc1ZWIwM2YvOGI5MGFhZTEtZDMwZi0z
ZDJhLWEwODItNmYwY2Q0NzNlNDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTE0MDdjZDgtYzgzMC00OWU2LTlk
YjQtN2RkYWM3NWViMDNmLzUxNDA3Y2Q4LWM4MzAtNDllNi05ZGI0LTdkZGFjNzVl
YjAzZi5jcmwwHwYDVR0jBBgwFoAUy7XVgkiqTdjWioVCA8Spu4nGVq4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81MTQwN2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRh
Yzc1ZWIwM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExmnQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGs5ZUnX1KrvBXEFoLvHfcWLNrg/z3XFQ+XvQyz4bEMhLE73XCs4pMNG
PjhAP7J1jKzhKOQwg3l/ArbrJ+2TaVDBII6Tjb3vUjJzFe4LbFblhZfUKzCMOZcU
Ol/NqwwD4bNSumhVaAGcBwRtKO4V9AHfW1fFrbX1+woV2lrjf212Sg07K9HvZEdJ
pnTHyNVuU/tZtV8O1liQLEMbQXp+9JRK+lm9fknnyr7No8SB292B/tXh7fwRk8xH
rlKv9TIlFeGsz+OYIJZfTHoAtsQBYWCSyCmMYyx2xAbmk+k6rgXUDWxkOdsVhONc
gcF0F0txJzlBMB5dD35qAu7vkN4KLm4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:31:48 2025 by rpki-client