Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/6088769e-3429-32bd-88b7-3ac8d54f15a8.roa
File: 6088769e-3429-32bd-88b7-3ac8d54f15a8.roa (raw, json)
Hash identifier: aQuZDkg8HF5ldp22u2UyVC1bb5s+q6tNHwlT/2+dw2k=
Subject key identifier: 2B:A0:F8:E3:F2:CA:35:B1:75:29:C9:D0:79:DD:B8:7F:6D:94:90:29
Certificate issuer: /CN=c58f92f8-4d8d-41da-af9d-d8fdec2e3025
Certificate serial: 010D0C9F43285847FC7F95826757704BB1AF7140
Authority key identifier: F5:28:F3:E5:4E:A6:20:65:57:C7:7A:3E:38:AA:D0:31:93:86:0B:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/6088769e-3429-32bd-88b7-3ac8d54f15a8.roa
Signing time: Sun 24 Nov 2024 14:00:39 +0000
ROA not before: Sun 24 Nov 2024 14:00:39 +0000
ROA not after: Sat 22 Feb 2025 14:00:39 +0000
asID: 33359
IP address blocks: 208.89.28.0/24 maxlen: 24
208.89.29.0/24 maxlen: 24
208.89.30.0/24 maxlen: 24
208.89.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fc:7f:95:82:67:57:70:4b:b1:af:71:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c58f92f8-4d8d-41da-af9d-d8fdec2e3025
Validity
Not Before: Nov 24 14:00:39 2024 GMT
Not After : Feb 22 14:00:39 2025 GMT
Subject: CN=4f73c80c-fbf8-4c97-8b9c-4856cf4b5521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fd:ff:c7:8a:0d:11:cd:20:fd:c3:f2:f9:98:
e2:4b:18:7c:79:60:5a:73:94:8b:4e:81:bf:4b:ac:
23:0e:72:b0:fc:ec:f8:a6:e8:6f:cb:7c:53:9c:70:
f1:2a:57:00:96:73:d6:55:67:59:c0:2e:53:3e:bc:
48:bf:a3:74:04:09:6e:1b:78:be:48:9e:da:42:08:
08:59:0a:c4:17:d0:69:9a:af:ec:3d:a2:27:bb:b3:
f7:ab:be:fc:62:cf:10:e3:b7:0e:2e:ba:28:80:44:
42:72:ab:f4:0c:0c:15:84:2d:a3:3c:04:6a:74:9e:
60:8f:4a:12:eb:56:e8:95:e4:ba:a0:5f:37:c1:95:
d0:d1:5a:11:d4:f6:03:83:ee:7b:72:43:33:b7:80:
c9:36:74:35:b8:24:f3:2d:09:46:e8:f7:04:d8:17:
a5:1a:00:0b:e8:2c:89:f6:4a:a0:05:93:95:64:9c:
4c:4d:00:a6:2c:ca:d0:61:86:bb:87:fa:9e:d2:cb:
88:ce:dd:21:96:4c:cd:18:45:c0:b7:60:60:1d:33:
78:b1:ca:5f:e9:c5:a1:06:a6:8d:4b:fb:27:c1:a0:
92:cf:97:0c:e7:d3:6c:56:65:2f:65:d0:14:0d:13:
31:86:69:88:c2:90:87:2d:3d:43:88:2b:32:ff:16:
3d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A0:F8:E3:F2:CA:35:B1:75:29:C9:D0:79:DD:B8:7F:6D:94:90:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/6088769e-3429-32bd-88b7-3ac8d54f15a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.crl
X509v3 Authority Key Identifier:
keyid:F5:28:F3:E5:4E:A6:20:65:57:C7:7A:3E:38:AA:D0:31:93:86:0B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.cer
sbgp-ipAddrBlock: critical
IPv4:
208.89.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:8c:ae:ba:c0:5b:19:12:0a:ae:51:82:de:72:d7:19:36:51:
30:c9:11:28:5d:e8:a6:36:5d:e5:68:43:34:bd:b2:4b:c0:d7:
d1:14:62:e0:be:0c:e0:4e:df:c6:4a:29:fd:f5:10:da:50:93:
96:22:de:3d:59:8a:1e:fa:70:98:b5:84:0c:9a:f3:10:d4:2e:
3c:f2:c2:40:fe:a9:6b:ce:0b:b6:83:a7:c2:cc:e1:d8:3b:9a:
c0:b4:7c:69:05:f3:2f:db:d3:75:77:18:a8:ee:7b:69:46:fb:
af:5c:42:01:01:dd:f4:90:78:1f:d6:b0:42:e9:2f:a7:b5:59:
f1:d8:f8:0a:0a:fe:c4:48:a0:66:1a:17:80:a5:2a:cc:ad:e4:
31:bd:c1:85:2e:93:d6:84:15:07:87:c8:3a:7b:8e:4f:62:b9:
67:91:31:9e:e7:35:4b:64:b6:d6:76:1a:0c:ea:f7:4e:66:dc:
56:ce:83:67:18:dd:5f:3f:73:b4:2f:2a:e5:0f:dd:ce:4b:6f:
fe:95:ba:5d:9d:f2:6e:99:5f:97:cf:30:37:54:ad:27:51:5e:
4e:09:cf:96:b4:af:e1:cb:80:9a:3f:05:fd:3f:14:e8:f1:eb:
26:de:ef:63:b1:51:b8:18:aa:ec:fe:43:e8:0f:3f:07:1a:d5:
e1:d7:d1:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf8f5WCZ1dwS7GvcUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzU4ZjkyZjgtNGQ4ZC00MWRhLWFmOWQtZDhmZGVjMmUz
MDI1MB4XDTI0MTEyNDE0MDAzOVoXDTI1MDIyMjE0MDAzOVowLzEtMCsGA1UEAxMk
NGY3M2M4MGMtZmJmOC00Yzk3LThiOWMtNDg1NmNmNGI1NTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnv3/x4oNEc0g/cPy+ZjiSxh8eWBac5SLToG/
S6wjDnKw/Oz4puhvy3xTnHDxKlcAlnPWVWdZwC5TPrxIv6N0BAluG3i+SJ7aQggI
WQrEF9Bpmq/sPaInu7P3q778Ys8Q47cOLroogERCcqv0DAwVhC2jPARqdJ5gj0oS
61boleS6oF83wZXQ0VoR1PYDg+57ckMzt4DJNnQ1uCTzLQlG6PcE2BelGgAL6CyJ
9kqgBZOVZJxMTQCmLMrQYYa7h/qe0suIzt0hlkzNGEXAt2BgHTN4scpf6cWhBqaN
S/snwaCSz5cM59NsVmUvZdAUDRMxhmmIwpCHLT1DiCsy/xY99QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCug+OPyyjWxdSnJ0HnduH9tlJApMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jNThm
OTJmOC00ZDhkLTQxZGEtYWY5ZC1kOGZkZWMyZTMwMjUvNjA4ODc2OWUtMzQyOS0z
MmJkLTg4YjctM2FjOGQ1NGYxNWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzU4ZjkyZjgtNGQ4ZC00MWRhLWFm
OWQtZDhmZGVjMmUzMDI1L2M1OGY5MmY4LTRkOGQtNDFkYS1hZjlkLWQ4ZmRlYzJl
MzAyNS5jcmwwHwYDVR0jBBgwFoAU9Sjz5U6mIGVXx3o+OKrQMZOGC5UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jNThmOTJmOC00ZDhkLTQxZGEtYWY5ZC1kOGZk
ZWMyZTMwMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FkcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADWMrrrAWxkSCq5Rgt5y1xk2UTDJEShd6KY2XeVoQzS9skvA19EUYuC+
DOBO38ZKKf31ENpQk5Yi3j1Zih76cJi1hAya8xDULjzywkD+qWvOC7aDp8LM4dg7
msC0fGkF8y/b03V3GKjue2lG+69cQgEB3fSQeB/WsELpL6e1WfHY+AoK/sRIoGYa
F4ClKsyt5DG9wYUuk9aEFQeHyDp7jk9iuWeRMZ7nNUtkttZ2Ggzq905m3FbOg2cY
3V8/c7QvKuUP3c5Lb/6Vul2d8m6ZX5fPMDdUrSdRXk4Jz5a0r+HLgJo/Bf0/FOjx
6ybe72OxUbgYquz+Q+gPPwca1eHX0Ro=
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:37:09 2025 by rpki-client