Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ca3dc49f-9faa-3fb9-bae8-8ebe5cf1f6e0.roa
File: ca3dc49f-9faa-3fb9-bae8-8ebe5cf1f6e0.roa (raw, json)
Hash identifier: d9QUkVToE4Oxf75FppThByaLvBb0Ds5BBB487XD4IcA=
Subject key identifier: 52:B6:B0:7D:74:A7:7B:A1:F0:16:01:2B:73:88:CF:D2:85:E9:BD:12
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F4328584839EACC6DB9598CB7FE4B6B00
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ca3dc49f-9faa-3fb9-bae8-8ebe5cf1f6e0.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 11105
IP address blocks: 206.12.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:cc:6d:b9:59:8c:b7:fe:4b:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=990d5ca9-7a88-4fa9-8d20-4260a7c567c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ad:8f:09:53:99:4d:ed:c3:7a:bb:55:30:97:
ff:c2:cd:e1:99:ad:c4:3c:cb:37:d8:40:de:2b:bb:
0b:a4:bb:32:56:59:82:33:23:85:d9:15:a1:c4:fd:
4c:d0:cd:27:31:64:cf:b5:4e:6a:40:37:82:95:c1:
7c:38:e8:ab:62:b5:b9:9b:64:56:6e:36:32:d1:3c:
80:4e:0c:3a:82:c2:a7:16:42:48:80:39:0a:d9:a1:
2d:84:e7:16:6b:11:c0:2f:37:58:56:7a:9f:6f:72:
9c:01:b3:a6:39:1e:81:92:a4:c2:5c:a3:b4:01:6c:
0b:30:74:a5:3e:c2:3a:b9:4d:d3:9c:4c:38:ff:de:
d9:7e:f7:18:55:33:85:d7:1e:43:7f:3f:2f:95:72:
5d:f6:85:3f:35:a6:69:d5:6b:31:14:a1:61:cc:7b:
ab:09:fe:17:84:32:15:99:bf:a8:95:2b:19:a1:26:
e7:a4:3a:17:7d:86:9a:22:5d:b0:fa:5b:a3:28:da:
02:a7:75:bd:84:73:24:c2:82:07:3d:7a:a8:0b:98:
ac:c3:0b:ad:1e:1b:1f:e6:0f:db:57:16:ab:c3:f7:
0c:84:db:03:a5:41:39:02:19:c7:02:6a:23:c5:a9:
a1:82:d0:09:ef:4c:5b:ac:f0:95:e0:f4:15:1c:aa:
ec:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B6:B0:7D:74:A7:7B:A1:F0:16:01:2B:73:88:CF:D2:85:E9:BD:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ca3dc49f-9faa-3fb9-bae8-8ebe5cf1f6e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
206.12.24.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:53:6a:54:63:31:d4:9d:4e:a7:e5:96:00:16:a5:8c:26:94:
d4:94:1d:dc:5e:ea:b1:b4:ce:d3:5e:ab:89:2e:11:af:c5:60:
67:7a:7d:e2:f4:ed:d2:9c:d7:83:2b:02:fc:5e:12:31:6d:a5:
e4:27:44:d7:15:b1:48:43:af:04:49:c5:54:5e:c8:f8:7d:86:
58:c6:85:fd:b5:7e:be:45:ff:a4:d6:d5:af:96:6f:72:91:82:
41:b7:c2:09:2c:a0:c0:f9:1c:aa:43:55:96:df:e6:05:55:7e:
a8:2e:0c:d3:5b:21:83:bb:64:c2:0a:d3:e6:f4:98:fc:00:2f:
7b:cf:a1:41:f3:d2:d4:45:e3:23:bc:a8:09:cb:79:ce:2e:6c:
96:f0:64:ea:5c:49:85:57:2b:6d:1b:f1:da:c5:48:c6:7a:b8:
1f:35:b3:e7:a7:9b:b9:1a:60:e6:5a:86:b1:cc:1d:3f:97:b0:
01:02:25:fd:9c:c6:26:f6:d0:e4:ad:72:43:1c:ad:9a:b5:41:
28:24:b6:7f:ae:fd:aa:13:d2:87:0b:95:88:1f:d3:dd:2e:b4:
2a:58:7c:ce:51:49:95:51:c3:0b:69:70:13:fd:69:8f:08:52:
41:d5:27:21:8d:5d:ef:14:8b:af:70:06:d6:7b:7b:fd:a9:22:
56:60:45:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg56sxtuVmMt/5LawAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI0MTIxNjE0MDA1MVoXDTI1MDMxNjEzMDA1MVowLzEtMCsGA1UEAxMk
OTkwZDVjYTktN2E4OC00ZmE5LThkMjAtNDI2MGE3YzU2N2MzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg62PCVOZTe3DertVMJf/ws3hma3EPMs32EDe
K7sLpLsyVlmCMyOF2RWhxP1M0M0nMWTPtU5qQDeClcF8OOirYrW5m2RWbjYy0TyA
Tgw6gsKnFkJIgDkK2aEthOcWaxHALzdYVnqfb3KcAbOmOR6BkqTCXKO0AWwLMHSl
PsI6uU3TnEw4/97ZfvcYVTOF1x5Dfz8vlXJd9oU/NaZp1WsxFKFhzHurCf4XhDIV
mb+olSsZoSbnpDoXfYaaIl2w+lujKNoCp3W9hHMkwoIHPXqoC5iswwutHhsf5g/b
Vxarw/cMhNsDpUE5AhnHAmojxamhgtAJ70xbrPCV4PQVHKrsMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFK2sH10p3uh8BYBK3OIz9KF6b0SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvY2EzZGM0OWYtOWZhYS0z
ZmI5LWJhZTgtOGViZTVjZjFmNmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzgwYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAARTalRjMdSdTqfllgAWpYwmlNSUHdxe6rG0ztNeq4kuEa/FYGd6feL0
7dKc14MrAvxeEjFtpeQnRNcVsUhDrwRJxVReyPh9hljGhf21fr5F/6TW1a+Wb3KR
gkG3wgksoMD5HKpDVZbf5gVVfqguDNNbIYO7ZMIK0+b0mPwAL3vPoUHz0tRF4yO8
qAnLec4ubJbwZOpcSYVXK20b8drFSMZ6uB81s+enm7kaYOZahrHMHT+XsAECJf2c
xib20OStckMcrZq1QSgktn+u/aoT0ocLlYgf090utCpYfM5RSZVRwwtpcBP9aY8I
UkHVJyGNXe8Ui69wBtZ7e/2pIlZgRQM=
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:01:11 2025 by rpki-client