Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/357ebc88-908a-340f-8f67-988f1efd1714.roa
File: 357ebc88-908a-340f-8f67-988f1efd1714.roa (raw, json)
Hash identifier: odbQWg2OX2yUHWqMm9t8naS7a6ZcabeAskv63dlaLLg=
Subject key identifier: BD:BE:8F:62:FC:04:2F:2F:44:D8:C6:DC:81:7E:48:65:76:91:FC:13
Certificate issuer: /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial: 010D0C9F43285847E35F6916DDA9A5AA07320000
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/357ebc88-908a-340f-8f67-988f1efd1714.roa
Signing time: Fri 15 Nov 2024 14:00:39 +0000
ROA not before: Fri 15 Nov 2024 14:00:39 +0000
ROA not after: Thu 13 Feb 2025 14:00:39 +0000
asID: 2914
IP address blocks: 208.80.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e3:5f:69:16:dd:a9:a5:aa:07:32:00:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Validity
Not Before: Nov 15 14:00:39 2024 GMT
Not After : Feb 13 14:00:39 2025 GMT
Subject: CN=0add6892-b624-4ace-a99f-cd0bc7d1f9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c5:d9:ef:1a:34:e6:73:53:cf:14:30:8f:f1:
ec:70:67:a9:96:69:56:c7:96:c3:d7:aa:4e:83:69:
ed:28:f8:7a:f3:00:a8:8b:02:4c:dc:ae:f3:3d:ef:
5b:bc:81:c9:e7:60:d1:d1:39:ce:c5:83:f7:8c:62:
d4:f3:3f:fb:1d:ff:06:eb:d0:66:53:15:d6:41:89:
3e:9f:ab:18:ee:16:6f:10:7f:16:a3:4b:5f:eb:17:
86:1b:44:ed:8e:0a:6c:b0:33:c2:f7:10:06:8f:7c:
1b:d4:d7:fd:57:5a:3d:4e:63:a4:0e:65:75:00:21:
9a:9c:17:d6:a7:94:87:44:78:5c:52:3c:4f:60:54:
97:6d:87:3f:10:97:24:73:ba:76:e3:b1:2e:0c:f2:
60:6f:1c:ea:f8:1b:fc:9b:de:86:dc:6c:af:bd:cb:
cc:76:c2:8f:09:2a:b7:80:a4:0a:0e:7f:86:d8:d1:
75:f9:b7:57:a0:0d:42:84:d5:33:5e:7d:bc:1f:b5:
36:bd:fa:88:65:cf:af:61:3c:98:f2:3d:fa:a1:b1:
e8:17:89:dc:c6:9b:6f:75:bd:cd:14:89:aa:e8:26:
97:45:82:56:f0:50:6e:97:08:d9:88:c9:ff:4e:26:
11:1d:4d:a4:4e:a2:87:c5:18:0e:ce:52:24:be:b6:
63:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BE:8F:62:FC:04:2F:2F:44:D8:C6:DC:81:7E:48:65:76:91:FC:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/357ebc88-908a-340f-8f67-988f1efd1714.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
X509v3 Authority Key Identifier:
keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
sbgp-ipAddrBlock: critical
IPv4:
208.80.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:0b:16:e0:fc:27:5a:e8:f4:d8:a2:3e:49:85:6d:31:88:9a:
5e:9e:4f:72:f4:0d:f3:03:b5:81:2d:11:f3:36:fe:df:f0:19:
01:29:32:14:90:c7:48:bd:10:a3:e2:8b:11:50:1b:12:da:6b:
49:f9:0d:27:eb:a9:70:c8:d7:fd:3f:4b:c4:a5:fb:2b:ea:7a:
e5:d3:b6:8a:52:53:17:9d:d4:3e:0b:bb:c8:cb:ac:04:da:23:
de:59:3f:12:fd:bf:73:80:c2:e4:41:94:f5:7a:9a:cb:da:fd:
61:2d:05:34:0c:e5:dd:84:82:d0:03:9f:eb:c6:fc:ff:e0:a3:
7d:f3:d0:74:69:86:a3:34:4c:23:fa:27:26:2e:37:98:4c:bf:
19:04:1d:21:2f:9f:be:01:db:23:36:ca:0a:2f:24:fd:f2:62:
f4:13:31:3c:00:5e:5b:b8:ae:b8:27:da:e3:c2:86:14:e7:13:
fa:e3:bb:b8:c6:ab:56:c1:c5:dd:61:84:c8:21:7d:8d:b4:16:
4e:12:70:b7:63:a7:b3:84:98:1c:f9:a6:ef:56:68:6f:21:bb:
2c:00:af:6f:96:60:30:bd:b6:49:1b:13:81:6c:38:c5:86:dd:
80:90:e1:23:43:65:0b:47:5f:09:02:37:6e:c3:42:e9:f5:4c:
61:a1:80:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfjX2kW3amlqgcyAAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGEyZGE3YjMtZDIwOC00MmM3LThiYmItYzA2M2EzOTQ3
MGE4MB4XDTI0MTExNTE0MDAzOVoXDTI1MDIxMzE0MDAzOVowLzEtMCsGA1UEAxMk
MGFkZDY4OTItYjYyNC00YWNlLWE5OWYtY2QwYmM3ZDFmOWEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8XZ7xo05nNTzxQwj/HscGeplmlWx5bD16pO
g2ntKPh68wCoiwJM3K7zPe9bvIHJ52DR0TnOxYP3jGLU8z/7Hf8G69BmUxXWQYk+
n6sY7hZvEH8Wo0tf6xeGG0TtjgpssDPC9xAGj3wb1Nf9V1o9TmOkDmV1ACGanBfW
p5SHRHhcUjxPYFSXbYc/EJckc7p247EuDPJgbxzq+Bv8m96G3GyvvcvMdsKPCSq3
gKQKDn+G2NF1+bdXoA1ChNUzXn28H7U2vfqIZc+vYTyY8j36obHoF4ncxptvdb3N
FImq6CaXRYJW8FBulwjZiMn/TiYRHU2kTqKHxRgOzlIkvrZjCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL2+j2L8BC8vRNjG3IF+SGV2kfwTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YTJk
YTdiMy1kMjA4LTQyYzctOGJiYi1jMDYzYTM5NDcwYTgvMzU3ZWJjODgtOTA4YS0z
NDBmLThmNjctOTg4ZjFlZmQxNzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGEyZGE3YjMtZDIwOC00MmM3LThi
YmItYzA2M2EzOTQ3MGE4LzhhMmRhN2IzLWQyMDgtNDJjNy04YmJiLWMwNjNhMzk0
NzBhOC5jcmwwHwYDVR0jBBgwFoAUBTUtzsWmL8l6PmdKARlp/0Mx6RYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84YTJkYTdiMy1kMjA4LTQyYzctOGJiYi1jMDYz
YTM5NDcwYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FD5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADkLFuD8J1ro9NiiPkmFbTGIml6eT3L0DfMDtYEtEfM2/t/wGQEpMhSQ
x0i9EKPiixFQGxLaa0n5DSfrqXDI1/0/S8Sl+yvqeuXTtopSUxed1D4Lu8jLrATa
I95ZPxL9v3OAwuRBlPV6msva/WEtBTQM5d2EgtADn+vG/P/go33z0HRphqM0TCP6
JyYuN5hMvxkEHSEvn74B2yM2ygovJP3yYvQTMTwAXlu4rrgn2uPChhTnE/rju7jG
q1bBxd1hhMghfY20Fk4ScLdjp7OEmBz5pu9WaG8huywAr2+WYDC9tkkbE4FsOMWG
3YCQ4SNDZQtHXwkCN27DQun1TGGhgPM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:18:19 2025 by rpki-client