Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b/f9d49657-6d05-3b8c-b970-634f3d73d3d8.roa
File: f9d49657-6d05-3b8c-b970-634f3d73d3d8.roa (raw, json)
Hash identifier: fTP/b2GbJvutTzHVP9fxFIT9Bjjh0w9wBuc8pF0EadI=
Subject key identifier: D2:8B:D6:4C:AC:E9:77:01:3D:6F:A4:15:07:42:1B:DE:46:21:63:4F
Certificate issuer: /CN=293ffb60-5163-4ccd-8c12-c520cba4608b
Certificate serial: 010D0C9F43285848222FCEB64C063DD0E8707660
Authority key identifier: 6D:A3:88:72:CF:F2:A2:88:34:FF:26:E8:6E:73:11:06:0D:DF:B1:39
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b/f9d49657-6d05-3b8c-b970-634f3d73d3d8.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 54598
IP address blocks: 208.76.213.0/24 maxlen: 24
208.76.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:ce:b6:4c:06:3d:d0:e8:70:76:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293ffb60-5163-4ccd-8c12-c520cba4608b
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=c3204a1d-d0e5-482b-a187-4bb8ad64b0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:64:1d:53:99:86:21:43:7a:f6:a1:dd:97:11:
f1:9e:5f:1b:af:51:42:fa:be:9f:8d:17:25:41:bf:
1f:11:c2:da:52:ef:36:bf:bc:29:d3:61:af:52:80:
31:a2:d0:0a:03:01:b9:d4:00:21:fd:83:82:b5:19:
44:10:48:94:4a:61:b9:bc:24:9e:03:8b:f5:a7:7a:
cd:8f:73:8f:d3:c2:0d:b8:8f:9a:bd:05:79:54:d9:
b1:61:d6:3a:07:d3:1d:18:83:2d:42:57:fd:fd:33:
41:53:1e:30:34:de:cf:37:09:e6:fd:89:30:e2:5d:
5b:3a:35:1f:7b:56:10:a2:ff:ce:06:25:f5:e8:e0:
6c:e0:25:b8:8e:5c:97:44:83:d2:f5:79:0c:ae:86:
04:e8:23:05:2d:80:95:df:69:43:36:11:00:7c:d3:
6e:02:c3:ce:0f:d6:b7:83:de:95:28:18:ad:bc:9b:
e6:b6:37:45:01:53:e6:92:52:fb:04:aa:8d:29:2e:
fc:92:48:43:0c:03:83:31:86:15:50:b0:f7:79:8e:
78:43:45:bd:01:6e:ce:d4:5b:84:7d:c0:48:61:f5:
8a:55:36:7d:3a:f4:62:41:0d:18:9c:c1:24:7f:67:
d3:9c:dc:ff:4a:0b:81:b4:d0:a3:62:79:6a:b2:eb:
41:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8B:D6:4C:AC:E9:77:01:3D:6F:A4:15:07:42:1B:DE:46:21:63:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b/f9d49657-6d05-3b8c-b970-634f3d73d3d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b/293ffb60-5163-4ccd-8c12-c520cba4608b.crl
X509v3 Authority Key Identifier:
keyid:6D:A3:88:72:CF:F2:A2:88:34:FF:26:E8:6E:73:11:06:0D:DF:B1:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b.cer
sbgp-ipAddrBlock: critical
IPv4:
208.76.213.0-208.76.214.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:6f:3e:e6:43:b8:ca:e8:88:58:25:78:15:d3:71:a1:97:77:
d6:d8:c0:00:00:28:5e:a6:ee:a8:52:32:c5:45:b7:b5:6a:00:
8d:2e:fc:c4:d7:ff:71:5b:62:4b:68:e0:fa:60:0c:19:e9:7c:
c3:5b:2a:73:aa:8e:46:ef:c6:07:4c:03:d6:8e:dd:44:39:31:
62:4a:01:97:69:ae:07:24:86:4e:28:fc:e4:10:36:f8:17:6f:
5e:e6:23:23:3c:99:54:09:73:73:6b:b8:98:95:03:73:a8:e8:
4f:57:16:4a:5d:0e:44:de:c1:db:ff:82:e3:e3:fd:1b:0b:90:
dd:78:63:dd:89:36:9a:e4:84:0d:fa:39:cb:5f:20:7a:6f:0d:
85:e3:14:a8:1a:4c:dd:6a:dd:06:5a:4d:eb:ed:97:e5:4d:c9:
7b:52:4d:c2:73:0f:c8:68:ae:7f:0c:ce:16:0d:6c:de:44:a6:
47:c2:9c:58:32:eb:61:e4:f5:20:5f:90:bf:0d:e2:70:73:c3:
b1:a0:b4:95:6e:7f:d5:ef:3d:49:0f:23:45:ae:06:c3:97:98:
a7:b4:8d:95:14:bb:73:1e:38:58:76:32:a1:8a:48:a1:f8:ae:
c8:49:f0:0d:6e:53:d0:32:8a:bd:46:53:92:1c:c8:9b:d4:dd:
4b:19:05:79
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEgiL862TAY90OhwdmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjkzZmZiNjAtNTE2My00Y2NkLThjMTItYzUyMGNiYTQ2
MDhiMB4XDTI0MTIwODAyMDAzOVoXDTI1MDMwODAyMDAzOVowLzEtMCsGA1UEAxMk
YzMyMDRhMWQtZDBlNS00ODJiLWExODctNGJiOGFkNjRiMGU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWQdU5mGIUN69qHdlxHxnl8br1FC+r6fjRcl
Qb8fEcLaUu82v7wp02GvUoAxotAKAwG51AAh/YOCtRlEEEiUSmG5vCSeA4v1p3rN
j3OP08INuI+avQV5VNmxYdY6B9MdGIMtQlf9/TNBUx4wNN7PNwnm/Ykw4l1bOjUf
e1YQov/OBiX16OBs4CW4jlyXRIPS9XkMroYE6CMFLYCV32lDNhEAfNNuAsPOD9a3
g96VKBitvJvmtjdFAVPmklL7BKqNKS78kkhDDAODMYYVULD3eY54Q0W9AW7O1FuE
fcBIYfWKVTZ9OvRiQQ0YnMEkf2fTnNz/SguBtNCjYnlqsutBgwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFNKL1kys6XcBPW+kFQdCG95GIWNPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yOTNm
ZmI2MC01MTYzLTRjY2QtOGMxMi1jNTIwY2JhNDYwOGIvZjlkNDk2NTctNmQwNS0z
YjhjLWI5NzAtNjM0ZjNkNzNkM2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjkzZmZiNjAtNTE2My00Y2NkLThj
MTItYzUyMGNiYTQ2MDhiLzI5M2ZmYjYwLTUxNjMtNGNjZC04YzEyLWM1MjBjYmE0
NjA4Yi5jcmwwHwYDVR0jBBgwFoAUbaOIcs/yoog0/ybobnMRBg3fsTkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yOTNmZmI2MC01MTYzLTRjY2QtOGMxMi1jNTIw
Y2JhNDYwOGIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADQTNUD
BADQTNYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAF28+5kO4yuiIWCV4FdNxoZd31tjAAAAoXqbuqFIyxUW3
tWoAjS78xNf/cVtiS2jg+mAMGel8w1sqc6qORu/GB0wD1o7dRDkxYkoBl2muBySG
Tij85BA2+BdvXuYjIzyZVAlzc2u4mJUDc6joT1cWSl0ORN7B2/+C4+P9GwuQ3Xhj
3Yk2muSEDfo5y18gem8NheMUqBpM3WrdBlpN6+2X5U3Je1JNwnMPyGiufwzOFg1s
3kSmR8KcWDLrYeT1IF+Qvw3icHPDsaC0lW5/1e89SQ8jRa4Gw5eYp7SNlRS7cx44
WHYyoYpIofiuyEnwDW5T0DKKvUZTkhzIm9TdSxkFeQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:11:57 2025 by rpki-client