Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/663dfbd5-7f2f-3791-bba5-4b83f30c62e1.roa
File: 663dfbd5-7f2f-3791-bba5-4b83f30c62e1.roa (raw, json)
Hash identifier: wE8edB4iznSt89IoTgS6P0uaUvtvzu67/V27vwvUWu8=
Subject key identifier: 25:82:E6:B6:8C:F7:AE:D3:02:B8:9E:41:8D:26:41:BE:53:80:E6:ED
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F43285848705AF631FB6DF8C554AEC7C0
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/663dfbd5-7f2f-3791-bba5-4b83f30c62e1.roa
Signing time: Sun 05 Jan 2025 02:00:39 +0000
ROA not before: Sun 05 Jan 2025 02:00:39 +0000
ROA not after: Sat 05 Apr 2025 01:00:39 +0000
asID: 393249
IP address blocks: 206.87.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:70:5a:f6:31:fb:6d:f8:c5:54:ae:c7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Jan 5 02:00:39 2025 GMT
Not After : Apr 5 01:00:39 2025 GMT
Subject: CN=512141ae-193f-42e3-8498-9241cb8a0a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d7:c3:fd:ac:cf:94:4e:4d:1c:7a:f8:c5:55:
18:ba:3c:fe:59:3b:16:40:1c:82:22:7f:b6:f3:80:
20:ce:d6:0e:d4:9f:cf:31:6c:29:3d:03:ad:90:cc:
6f:08:d6:e2:f1:d2:0e:8b:9d:b5:ef:39:db:3c:71:
bc:44:a7:6b:32:d4:c0:15:cc:5b:ef:58:f0:cb:3a:
a8:59:72:62:30:87:99:fc:67:45:13:96:b5:21:3d:
bf:0d:2c:87:df:27:d9:04:96:f5:fd:d4:c6:56:9f:
5e:0b:33:c4:e9:5d:fa:74:cc:11:ec:8a:7f:31:c2:
50:33:74:c1:b3:44:f8:05:b7:fa:90:eb:b5:58:a2:
2a:c2:e8:e9:66:72:cc:25:03:1c:9d:03:29:57:62:
e5:59:84:25:1c:a6:eb:19:87:a4:4e:d8:ef:b4:37:
44:4f:53:38:d9:bb:94:95:73:59:bc:9d:6e:54:07:
8e:73:77:db:46:2e:71:6e:cb:e8:df:ee:b4:d9:13:
23:0e:1b:3d:05:5a:81:27:b6:94:3b:23:24:03:a1:
d6:99:94:a9:79:17:1d:bb:a5:7a:5a:e4:d4:45:84:
92:b0:aa:7a:fb:b7:0f:44:5c:53:e8:cc:3c:2e:ee:
ba:e2:b3:3f:cb:48:87:03:d4:ac:f1:54:91:e9:cc:
bf:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:82:E6:B6:8C:F7:AE:D3:02:B8:9E:41:8D:26:41:BE:53:80:E6:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/663dfbd5-7f2f-3791-bba5-4b83f30c62e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
206.87.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:45:1e:5d:64:0d:7e:2c:3d:db:5d:cf:b8:5f:c3:74:bf:5d:
f4:a4:bb:a1:74:50:01:ee:e7:2e:36:d1:ca:5c:49:f9:76:e4:
10:5b:eb:63:0f:2c:1c:92:a5:d5:39:f0:e7:fe:f3:9f:88:4b:
37:b2:cf:06:c2:e4:e4:fb:dc:da:78:c0:7a:83:e2:34:1b:da:
48:5f:dc:11:5e:de:03:47:d0:c5:8b:d3:e8:f6:43:11:c7:18:
9f:48:4d:41:3d:ae:2e:04:e7:bf:27:ab:82:7b:4d:dd:89:2e:
8a:99:e8:ca:6f:6b:5a:71:54:6d:f4:54:9f:0b:73:e5:ff:f0:
00:6e:98:91:21:06:f8:f7:ea:64:22:ad:e5:09:23:a0:b9:d8:
68:57:a2:f0:a1:52:7f:42:81:ee:26:e4:c5:8f:ae:6a:21:2d:
c8:24:7d:07:ac:9e:95:60:38:63:86:55:c6:60:a9:47:e6:b9:
64:83:b2:4e:74:91:0f:ef:b7:0f:4f:2e:4e:23:b4:18:6b:5d:
75:46:ca:1d:40:f5:b9:39:e8:96:e5:97:55:cf:df:26:b2:eb:
55:91:ab:9f:19:51:25:26:f6:6c:f8:27:a6:50:02:26:68:48:
c3:d0:00:33:e7:54:72:c9:ff:05:b0:83:3e:e8:ba:b5:24:32:
3c:36:52:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhwWvYx+234xVSux8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI1MDEwNTAyMDAzOVoXDTI1MDQwNTAxMDAzOVowLzEtMCsGA1UEAxMk
NTEyMTQxYWUtMTkzZi00MmUzLTg0OTgtOTI0MWNiOGEwYTg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9fD/azPlE5NHHr4xVUYujz+WTsWQByCIn+2
84AgztYO1J/PMWwpPQOtkMxvCNbi8dIOi5217znbPHG8RKdrMtTAFcxb71jwyzqo
WXJiMIeZ/GdFE5a1IT2/DSyH3yfZBJb1/dTGVp9eCzPE6V36dMwR7Ip/McJQM3TB
s0T4Bbf6kOu1WKIqwujpZnLMJQMcnQMpV2LlWYQlHKbrGYekTtjvtDdET1M42buU
lXNZvJ1uVAeOc3fbRi5xbsvo3+602RMjDhs9BVqBJ7aUOyMkA6HWmZSpeRcdu6V6
WuTURYSSsKp6+7cPRFxT6Mw8Lu664rM/y0iHA9Ss8VSR6cy/IwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCWC5raM967TArieQY0mQb5TgObtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvNjYzZGZiZDUtN2YyZi0z
NzkxLWJiYTUtNGI4M2YzMGM2MmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzlfwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAENFHl1kDX4sPdtdz7hfw3S/XfSku6F0UAHu5y420cpcSfl25BBb62MP
LBySpdU58Of+85+ISzeyzwbC5OT73Np4wHqD4jQb2khf3BFe3gNH0MWL0+j2QxHH
GJ9ITUE9ri4E578nq4J7Td2JLoqZ6Mpva1pxVG30VJ8Lc+X/8ABumJEhBvj36mQi
reUJI6C52GhXovChUn9Cge4m5MWPrmohLcgkfQesnpVgOGOGVcZgqUfmuWSDsk50
kQ/vtw9PLk4jtBhrXXVGyh1A9bk56Jbll1XP3yay61WRq58ZUSUm9mz4J6ZQAiZo
SMPQADPnVHLJ/wWwgz7ourUkMjw2Utw=
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:14:11 2025 by rpki-client