Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/43b63ab6-b85b-3cb0-a726-20010fca26b3.roa
File: 43b63ab6-b85b-3cb0-a726-20010fca26b3.roa (raw, json)
Hash identifier: LWLFYmnlUtT03I5TgBVVjccd/JYUk9yTTf93RjHZMio=
Subject key identifier: 88:5C:1A:CF:E6:D8:3F:B8:89:0E:DA:76:FB:48:5E:8E:D3:32:99:1C
Certificate issuer: /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial: 010D0C9F4328584862658EE2AF3EA9FB3A6ED000
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/43b63ab6-b85b-3cb0-a726-20010fca26b3.roa
Signing time: Tue 31 Dec 2024 02:00:40 +0000
ROA not before: Tue 31 Dec 2024 02:00:40 +0000
ROA not after: Mon 31 Mar 2025 01:00:40 +0000
asID: 46265
IP address blocks: 208.52.177.2/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:62:65:8e:e2:af:3e:a9:fb:3a:6e:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Validity
Not Before: Dec 31 02:00:40 2024 GMT
Not After : Mar 31 01:00:40 2025 GMT
Subject: CN=12b36af9-b2ee-4857-bf98-8535f3ac33e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:74:fc:02:5b:1c:05:82:12:c2:71:0b:ab:53:
d4:59:22:2b:16:fb:ab:62:5e:03:37:17:98:bf:3a:
9e:f3:d0:ec:29:b1:2f:b3:1f:74:82:4a:e0:cf:0e:
be:4e:a0:5f:b9:4e:f8:ee:66:1a:03:79:a7:45:0c:
33:15:a1:69:03:94:63:9a:95:94:c1:b1:a1:85:03:
6e:19:8f:4a:ce:90:be:4f:f4:a2:d5:bc:85:0d:aa:
00:9b:46:b9:c8:33:d6:4f:9c:23:41:0f:83:f5:11:
26:b1:90:dd:85:19:3b:f8:78:83:5c:28:60:38:9a:
2a:4d:25:c5:a8:15:e4:a8:ca:e6:89:d9:35:bc:9b:
7d:3c:95:3d:6d:25:6d:c9:0c:0b:7c:7b:5c:46:96:
b5:bd:a5:85:6f:cf:c2:e7:9a:34:00:20:33:e9:cd:
2d:73:4e:95:35:8e:cd:17:c4:38:ce:bd:52:a3:3c:
71:5b:a1:eb:21:7b:31:e3:5a:43:15:3b:2d:6f:de:
86:7b:74:8b:0d:e7:19:3d:9d:80:a4:f8:81:1c:42:
b3:d4:1e:99:a0:ed:1f:33:c6:92:a5:da:46:a5:0b:
80:1e:b3:f5:9f:4a:ba:d5:91:41:56:d3:cb:92:2d:
29:f8:5e:2f:8b:1c:b4:80:1b:ef:b3:ca:05:ef:8a:
c0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5C:1A:CF:E6:D8:3F:B8:89:0E:DA:76:FB:48:5E:8E:D3:32:99:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/43b63ab6-b85b-3cb0-a726-20010fca26b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
X509v3 Authority Key Identifier:
keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
sbgp-ipAddrBlock: critical
IPv4:
208.52.177.2/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:76:62:57:f2:cf:1c:f1:7f:5c:ce:c0:95:e9:16:d0:94:34:
f0:cb:1e:fb:22:a0:90:44:63:63:1f:6e:0a:8e:9c:61:4f:a0:
3b:1b:e3:12:5e:97:2d:90:e7:73:95:33:be:ba:20:dc:45:9c:
cf:3a:c9:fe:37:4a:89:b7:f9:72:87:7c:f8:29:4c:18:19:6b:
a6:8c:b8:1e:d5:93:b9:cb:52:5b:99:08:e2:04:4f:af:86:06:
95:ab:57:0d:85:50:55:d7:8b:a4:42:c3:5b:d8:e6:fb:5f:ad:
b5:96:3b:b3:63:18:bb:71:8b:fe:0c:0b:0c:29:4d:eb:27:a5:
ce:34:c7:75:c2:a1:06:26:a0:00:11:2a:82:8e:dc:a4:8c:e2:
6f:21:3f:bc:d1:66:2b:2c:08:13:fc:52:cb:07:68:e0:05:2e:
81:95:35:77:fc:07:31:cc:b9:4d:56:d1:b7:4a:a2:ae:c7:15:
f8:b7:54:0b:6a:6f:10:a6:96:fb:5d:bd:59:4c:b7:77:db:bf:
71:06:e8:23:c1:e1:ba:b6:2f:63:c2:06:9f:47:d1:9f:fc:39:
58:37:c4:04:82:8c:f3:0d:15:bb:76:b5:48:99:65:a9:e2:95:
db:c2:15:56:92:57:6c:3f:51:0d:e7:2a:f8:5f:e6:86:a4:df:
ae:2f:4f:54
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhiZY7irz6p+zpu0AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmRlNWQ3NDYtMzQwMi00MjYzLWI4ODAtZWE0ZDdlY2Zj
MTY4MB4XDTI0MTIzMTAyMDA0MFoXDTI1MDMzMTAxMDA0MFowLzEtMCsGA1UEAxMk
MTJiMzZhZjktYjJlZS00ODU3LWJmOTgtODUzNWYzYWMzM2U2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHT8AlscBYISwnELq1PUWSIrFvurYl4DNxeY
vzqe89DsKbEvsx90gkrgzw6+TqBfuU747mYaA3mnRQwzFaFpA5RjmpWUwbGhhQNu
GY9KzpC+T/Si1byFDaoAm0a5yDPWT5wjQQ+D9REmsZDdhRk7+HiDXChgOJoqTSXF
qBXkqMrmidk1vJt9PJU9bSVtyQwLfHtcRpa1vaWFb8/C55o0ACAz6c0tc06VNY7N
F8Q4zr1SozxxW6HrIXsx41pDFTstb96Ge3SLDecZPZ2ApPiBHEKz1B6ZoO0fM8aS
pdpGpQuAHrP1n0q61ZFBVtPLki0p+F4vixy0gBvvs8oF74rAfQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIhcGs/m2D+4iQ7advtIXo7TMpkcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1
ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRkN2VjZmMxNjgvNDNiNjNhYjYtYjg1Yi0z
Y2IwLWE3MjYtMjAwMTBmY2EyNmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmRlNWQ3NDYtMzQwMi00MjYzLWI4
ODAtZWE0ZDdlY2ZjMTY4LzJkZTVkNzQ2LTM0MDItNDI2My1iODgwLWVhNGQ3ZWNm
YzE2OC5jcmwwHwYDVR0jBBgwFoAUa7vQBHnN1sRmwfvAalg6KhVtSHwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRk
N2VjZmMxNjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0DSxAjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAvdmJX8s8c8X9czsCV6RbQlDTwyx77IqCQRGNjH24KjpxhT6A7G+MS
XpctkOdzlTO+uiDcRZzPOsn+N0qJt/lyh3z4KUwYGWumjLge1ZO5y1JbmQjiBE+v
hgaVq1cNhVBV14ukQsNb2Ob7X621ljuzYxi7cYv+DAsMKU3rJ6XONMd1wqEGJqAA
ESqCjtykjOJvIT+80WYrLAgT/FLLB2jgBS6BlTV3/AcxzLlNVtG3SqKuxxX4t1QL
am8Qppb7Xb1ZTLd3279xBugjweG6ti9jwgafR9Gf/DlYN8QEgozzDRW7drVImWWp
4pXbwhVWkldsP1EN5yr4X+aGpN+uL09U
-----END CERTIFICATE-----
Generated at Tue Apr 29 19:53:03 2025 by rpki-client