Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/f8375e10-8d1d-3484-aaeb-e58fd215889e.roa
File: f8375e10-8d1d-3484-aaeb-e58fd215889e.roa (raw, json)
Hash identifier: s279b3sJaMH6guI1cxPkuM6+bl71+BT7jFs3tfrVBSU=
Subject key identifier: C2:E5:D1:8F:76:C1:FE:D4:88:48:CE:B7:B1:65:72:C2:C2:78:F2:92
Certificate issuer: /CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
Certificate serial: 010D0C9F432858481F6522A5A4E5AE0187F6EE00
Authority key identifier: 5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/f8375e10-8d1d-3484-aaeb-e58fd215889e.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 30698
IP address blocks: 209.221.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:22:a5:a4:e5:ae:01:87:f6:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=601892c6-05c0-4f82-9d32-093cd5d175e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2a:01:92:e4:47:a7:ec:ea:05:f3:1d:00:1a:
92:86:40:5b:c3:a2:98:53:32:ac:9b:4e:ea:42:40:
b0:25:9a:c8:98:ed:2f:fc:74:bd:82:6f:2e:69:7d:
46:67:85:aa:40:50:f7:20:0a:5d:df:9d:53:db:e8:
4b:af:85:81:84:67:11:6c:42:c3:7b:6f:1f:f4:a8:
2b:93:e1:0f:78:73:9f:d3:e7:93:b3:aa:2a:11:c2:
7d:c2:24:04:5d:06:63:5e:2f:2a:91:7a:e0:bf:9e:
af:79:69:dc:76:58:d1:bc:23:1c:da:df:68:89:75:
dd:bb:13:ea:5c:dd:10:48:17:b4:39:81:ec:e5:28:
57:25:f8:c7:39:3d:59:e0:f5:74:3b:87:a2:59:01:
96:8e:05:5d:c3:3f:38:b4:10:ee:c4:19:34:d0:e4:
52:33:4e:54:59:27:57:74:a5:2d:9a:e5:f2:b2:01:
83:f8:06:e3:cc:04:6b:18:5f:3a:62:61:40:0e:39:
3e:02:ba:f9:29:dd:15:4b:2a:56:bb:15:a1:72:08:
b5:66:e2:c7:74:8d:00:58:89:a3:b4:59:25:f0:e1:
ba:b4:14:1d:8b:fd:85:ec:9c:95:90:42:29:d5:18:
5a:1a:8b:b2:3f:40:97:78:67:b4:67:a5:9c:dc:06:
e4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E5:D1:8F:76:C1:FE:D4:88:48:CE:B7:B1:65:72:C2:C2:78:F2:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/f8375e10-8d1d-3484-aaeb-e58fd215889e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl
X509v3 Authority Key Identifier:
keyid:5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
sbgp-ipAddrBlock: critical
IPv4:
209.221.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:3f:57:ed:ae:fa:ad:53:00:e1:27:71:9e:a0:6f:6c:89:42:
f4:52:e2:82:e2:2a:cc:63:12:67:31:87:ab:15:57:bf:31:b6:
63:c9:89:9b:84:c0:2e:f6:e9:9d:e9:1d:2a:e6:8c:6f:0b:d9:
16:49:43:20:33:35:be:92:97:fb:ca:07:7b:94:dc:71:a8:14:
a2:0e:00:fe:22:17:f1:0e:cf:80:ef:e9:b8:8a:33:ba:37:9d:
fe:11:42:46:40:3c:54:95:2c:e9:a0:ca:13:0d:c9:e3:f1:69:
d7:4c:86:8c:2e:d2:c6:f6:5b:24:6a:d6:fc:43:d2:1b:65:3f:
d9:ff:53:b0:42:77:d7:bd:2e:f9:5b:34:d2:ea:03:0d:68:c1:
f6:5f:f5:3f:fd:af:58:08:a9:1d:a7:9e:36:28:83:e9:60:cb:
27:cf:1f:2f:4f:ea:dc:f4:b1:21:15:d8:ca:98:7a:b5:bd:69:
d3:ed:07:0b:b2:ce:89:9a:7d:76:d9:96:31:85:7b:73:a4:1d:
70:50:0f:d1:8f:e4:12:b0:20:4a:cd:9e:98:8f:a4:6f:60:80:
04:20:ed:6b:ad:be:a0:ba:c5:da:37:8c:78:08:95:6f:dc:1d:
dc:a0:8b:bb:34:c3:b7:63:e6:6b:75:9a:47:06:e8:fb:dc:86:
54:82:31:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgfZSKlpOWuAYf27gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQ1NDkxZmUtM2MxMS00ZWEzLThlYTgtN2U0MDNhNmVl
YjQ5MB4XDTI0MTIwNzAyMDAzOVoXDTI1MDMwNzAyMDAzOVowLzEtMCsGA1UEAxMk
NjAxODkyYzYtMDVjMC00ZjgyLTlkMzItMDkzY2Q1ZDE3NWUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSoBkuRHp+zqBfMdABqShkBbw6KYUzKsm07q
QkCwJZrImO0v/HS9gm8uaX1GZ4WqQFD3IApd351T2+hLr4WBhGcRbELDe28f9Kgr
k+EPeHOf0+eTs6oqEcJ9wiQEXQZjXi8qkXrgv56veWncdljRvCMc2t9oiXXduxPq
XN0QSBe0OYHs5ShXJfjHOT1Z4PV0O4eiWQGWjgVdwz84tBDuxBk00ORSM05UWSdX
dKUtmuXysgGD+AbjzARrGF86YmFADjk+Arr5Kd0VSypWuxWhcgi1ZuLHdI0AWImj
tFkl8OG6tBQdi/2F7JyVkEIp1RhaGouyP0CXeGe0Z6Wc3AbkxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMLl0Y92wf7UiEjOt7FlcsLCePKSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDU0
OTFmZS0zYzExLTRlYTMtOGVhOC03ZTQwM2E2ZWViNDkvZjgzNzVlMTAtOGQxZC0z
NDg0LWFhZWItZTU4ZmQyMTU4ODllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmQ1NDkxZmUtM2MxMS00ZWEzLThl
YTgtN2U0MDNhNmVlYjQ5L2ZkNTQ5MWZlLTNjMTEtNGVhMy04ZWE4LTdlNDAzYTZl
ZWI0OS5jcmwwHwYDVR0jBBgwFoAUW/p9bVG8ca1+tu35CIL3rF9SK3YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDU0OTFmZS0zYzExLTRlYTMtOGVhOC03ZTQw
M2E2ZWViNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0d3wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAII/V+2u+q1TAOEncZ6gb2yJQvRS4oLiKsxjEmcxh6sVV78xtmPJiZuE
wC726Z3pHSrmjG8L2RZJQyAzNb6Sl/vKB3uU3HGoFKIOAP4iF/EOz4Dv6biKM7o3
nf4RQkZAPFSVLOmgyhMNyePxaddMhowu0sb2WyRq1vxD0htlP9n/U7BCd9e9Lvlb
NNLqAw1owfZf9T/9r1gIqR2nnjYog+lgyyfPHy9P6tz0sSEV2MqYerW9adPtBwuy
zomafXbZljGFe3OkHXBQD9GP5BKwIErNnpiPpG9ggAQg7WutvqC6xdo3jHgIlW/c
Hdygi7s0w7dj5mt1mkcG6PvchlSCMWQ=
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:28:04 2025 by rpki-client