Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa
File: 2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa (raw, json)
Hash identifier: mL9U/cpn/8VQnyKw6+MT5BXYuGXN2D7NUukycdtkXU8=
Subject key identifier: CE:44:B0:C3:3B:43:83:2C:0A:87:27:20:38:89:26:F0:A4:52:38:4E
Certificate issuer: /CN=0c71d09c-b853-44b9-8b34-8d5283774a5a
Certificate serial: 010D0C9F432858489340B0A518FC63C493B89B00
Authority key identifier: 32:3A:C9:26:DD:08:FC:97:E4:9D:F6:2A:A4:C0:C0:FA:26:AB:40:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 14721
IP address blocks: 208.86.116.0/22 maxlen: 24
208.91.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:b0:a5:18:fc:63:c4:93:b8:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c71d09c-b853-44b9-8b34-8d5283774a5a
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=9c6d919e-aece-44ee-808b-e332e048ae05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6b:e3:64:6f:8f:a1:89:35:54:73:d7:8a:a3:
87:dc:df:29:36:81:14:1e:05:51:7c:09:a0:0d:70:
26:ea:24:8f:fe:30:72:61:19:23:b9:10:e4:7c:70:
be:07:de:c9:b7:8d:0b:82:3e:b0:b2:2f:fd:b2:85:
1a:04:33:1f:18:07:41:05:60:56:42:58:c6:ce:ba:
ab:2e:37:0a:7e:39:f5:8b:77:a6:bd:84:4b:a2:2b:
ab:f3:ce:6d:61:4f:29:c6:81:03:79:ef:90:cb:51:
7c:ba:b9:15:2f:10:8a:b8:17:d8:85:d4:00:6c:44:
3d:b5:1e:da:7a:86:ee:8e:5f:13:41:71:de:11:b5:
f7:e4:bc:49:ba:13:75:a8:8b:10:2a:51:80:c8:ac:
97:3c:86:89:75:15:b3:66:f3:c7:6b:09:64:95:21:
64:14:4d:08:95:db:e7:a1:70:ba:2f:09:a1:7c:df:
04:da:0a:88:39:3d:aa:5c:ac:40:c7:d9:83:17:8e:
d4:64:d3:71:4e:03:29:45:95:b6:72:cd:d7:18:70:
0b:53:ac:8a:fe:bf:83:77:3e:8e:cc:04:79:1f:0e:
dc:29:37:7d:81:5a:36:fb:96:f8:46:81:3f:c3:df:
cb:eb:9d:de:d4:c2:e4:63:10:36:8a:58:82:1e:70:
61:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:44:B0:C3:3B:43:83:2C:0A:87:27:20:38:89:26:F0:A4:52:38:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/0c71d09c-b853-44b9-8b34-8d5283774a5a.crl
X509v3 Authority Key Identifier:
keyid:32:3A:C9:26:DD:08:FC:97:E4:9D:F6:2A:A4:C0:C0:FA:26:AB:40:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a.cer
sbgp-ipAddrBlock: critical
IPv4:
208.86.116.0/22
208.91.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:93:51:55:b4:ab:45:e3:de:ae:fb:2e:bf:10:78:3d:18:2e:
7e:5d:2a:61:db:84:0f:31:db:00:b9:20:ac:7d:73:52:f2:31:
9c:d1:b5:ac:9e:5a:c0:9b:57:40:5f:8b:0d:dd:d5:b0:97:00:
97:5a:25:01:92:2f:cc:f0:15:b8:58:ac:33:b1:8c:d2:ab:51:
bf:5c:18:fb:c7:4d:37:20:4e:4d:ba:6c:86:56:9c:a6:cd:31:
96:22:6f:0c:a0:68:17:0d:93:8c:10:78:09:d5:2a:06:17:c8:
67:a0:68:d5:62:3d:d3:04:a0:f8:f3:d8:06:d8:d3:0c:8b:74:
ba:d3:4e:7f:97:fd:83:de:52:54:b7:36:09:ac:96:d1:c5:04:
72:b3:d8:3a:1e:ff:5d:6d:c5:c3:af:86:6f:88:5d:0e:e2:aa:
c6:7a:61:4f:e5:40:2a:b8:a4:d6:93:46:d9:5a:70:10:08:b6:
0b:29:c7:b6:88:3c:a9:d9:1f:ac:e0:ee:85:fe:3e:3c:1a:af:
b9:e5:15:57:55:b7:24:7d:5b:49:a5:e1:a4:07:ed:71:1f:c6:
7b:7f:b7:40:62:ef:6f:65:c5:50:84:43:36:bf:10:bc:e7:5d:
96:26:96:7a:07:11:f5:7c:f0:a8:23:08:f6:70:ce:bc:b5:25:
17:65:3b:fc
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEiTQLClGPxjxJO4mwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGM3MWQwOWMtYjg1My00NGI5LThiMzQtOGQ1MjgzNzc0
YTVhMB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk
OWM2ZDkxOWUtYWVjZS00NGVlLTgwOGItZTMzMmUwNDhhZTA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2vjZG+PoYk1VHPXiqOH3N8pNoEUHgVRfAmg
DXAm6iSP/jByYRkjuRDkfHC+B97Jt40Lgj6wsi/9soUaBDMfGAdBBWBWQljGzrqr
LjcKfjn1i3emvYRLoiur885tYU8pxoEDee+Qy1F8urkVLxCKuBfYhdQAbEQ9tR7a
eobujl8TQXHeEbX35LxJuhN1qIsQKlGAyKyXPIaJdRWzZvPHawlklSFkFE0Ildvn
oXC6LwmhfN8E2gqIOT2qXKxAx9mDF47UZNNxTgMpRZW2cs3XGHALU6yK/r+Ddz6O
zAR5Hw7cKTd9gVo2+5b4RoE/w9/L653e1MLkYxA2iliCHnBhkQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFM5EsMM7Q4MsCocnIDiJJvCkUjhOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzcx
ZDA5Yy1iODUzLTQ0YjktOGIzNC04ZDUyODM3NzRhNWEvMmEyZjA1OWQtZTE4MS0z
M2JmLThiYmQtMmM0YTVkMDkwODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGM3MWQwOWMtYjg1My00NGI5LThi
MzQtOGQ1MjgzNzc0YTVhLzBjNzFkMDljLWI4NTMtNDRiOS04YjM0LThkNTI4Mzc3
NGE1YS5jcmwwHwYDVR0jBBgwFoAUMjrJJt0I/JfknfYqpMDA+iarQNswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzcxZDA5Yy1iODUzLTQ0YjktOGIzNC04ZDUy
ODM3NzRhNWEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC0FZ0AwQC
0FuYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAJGTUVW0q0Xj3q77Lr8QeD0YLn5dKmHbhA8x2wC5IKx9c1Ly
MZzRtayeWsCbV0Bfiw3d1bCXAJdaJQGSL8zwFbhYrDOxjNKrUb9cGPvHTTcgTk26
bIZWnKbNMZYibwygaBcNk4wQeAnVKgYXyGegaNViPdMEoPjz2AbY0wyLdLrTTn+X
/YPeUlS3NgmsltHFBHKz2Doe/11txcOvhm+IXQ7iqsZ6YU/lQCq4pNaTRtlacBAI
tgspx7aIPKnZH6zg7oX+Pjwar7nlFVdVtyR9W0ml4aQH7XEfxnt/t0Bi729lxVCE
Qza/ELznXZYmlnoHEfV88KgjCPZwzry1JRdlO/w=
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:41:44 2025 by rpki-client