Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/70cda7da-90d2-3883-af4c-05ac4b18d523.roa
File: 70cda7da-90d2-3883-af4c-05ac4b18d523.roa (raw, json)
Hash identifier: qLhJ1wqFI6hWWO/NU6hLLkSkL0nNxK6uIiFoOMePESE=
Subject key identifier: 71:9A:E7:2D:68:89:89:6C:B8:D1:22:3C:EE:51:69:10:6D:16:97:80
Certificate issuer: /CN=88e1646b-e1b3-42e7-8591-3a57fd436369
Certificate serial: 010D0C9F4328584824FA8CDAEB4149EFAB19FC80
Authority key identifier: BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/70cda7da-90d2-3883-af4c-05ac4b18d523.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 27316
IP address blocks: 205.221.78.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:8c:da:eb:41:49:ef:ab:19:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e1646b-e1b3-42e7-8591-3a57fd436369
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=9e13bbdf-5a92-4270-aa12-a3a29d990e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:20:ec:20:ff:93:e6:2c:bc:73:da:e3:68:05:
02:80:00:c0:51:25:90:3e:99:6f:4c:2a:1b:94:91:
74:6a:ca:90:38:b0:76:fc:b5:fa:6a:6e:28:ec:5e:
13:28:ac:cf:6f:b9:4b:38:87:d2:92:a5:f9:28:a4:
7a:c6:49:74:49:6e:b2:c3:2b:c0:4b:a0:9e:c9:2b:
3e:46:b0:29:86:0e:52:bd:62:41:8a:d2:de:24:e9:
d0:49:42:77:7a:b7:9f:84:7f:95:43:e3:e8:79:79:
0f:03:4d:48:0c:cd:bb:60:1a:9e:ab:7d:16:e7:6b:
b3:6f:c6:e3:b0:ff:f1:26:f7:46:4b:30:3a:bf:cb:
c4:ed:40:71:39:15:70:36:a9:47:03:81:b9:32:28:
b3:91:64:b2:1c:5b:dd:fb:59:46:d1:e0:50:f0:1e:
b7:b9:15:f3:85:5c:99:a8:74:27:5e:0e:28:e4:61:
be:a3:66:50:82:b3:8e:12:a7:3f:d4:08:32:b1:92:
6f:61:2a:3b:68:96:85:6a:b8:a9:82:d6:83:95:6c:
c2:20:5a:12:a7:b2:96:ac:d9:03:07:19:f0:a4:ad:
a7:82:c0:99:3a:8a:bf:40:f4:30:f6:0b:cb:65:6d:
b1:87:08:54:93:3c:37:17:11:98:fa:34:d2:26:57:
b6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9A:E7:2D:68:89:89:6C:B8:D1:22:3C:EE:51:69:10:6D:16:97:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/70cda7da-90d2-3883-af4c-05ac4b18d523.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl
X509v3 Authority Key Identifier:
keyid:BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer
sbgp-ipAddrBlock: critical
IPv4:
205.221.78.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:61:45:b7:d4:29:56:42:42:21:ed:48:84:ce:88:6e:a8:a1:
a0:98:09:23:52:ad:a4:a9:c1:df:84:77:8b:71:c1:9a:ab:0d:
52:63:d7:0c:ba:33:b0:a4:62:ff:a8:71:30:92:c8:c8:5c:11:
4d:2c:ae:d1:54:77:10:a6:06:9c:a7:3f:bf:16:81:bf:67:73:
6c:4c:45:ac:f7:bb:d3:e6:06:1a:b0:9f:a8:34:95:0c:c3:29:
0e:2d:a0:44:6e:79:ed:c4:db:4b:6b:db:f7:79:e5:33:5a:39:
70:df:9a:ec:56:ce:b3:80:9f:11:b8:b7:9d:23:23:85:df:2a:
59:75:1c:8a:93:c3:32:83:a5:40:5e:b6:e1:c1:f3:6e:c0:2a:
fb:bd:63:7f:91:da:20:d9:64:b2:cc:26:60:5c:d2:5f:02:4d:
28:3e:00:cb:eb:40:24:a2:d1:90:b4:68:8b:64:11:4b:09:34:
e9:5e:ad:dd:0f:4b:72:92:02:74:38:e6:69:68:8c:d9:95:10:
e1:8e:bd:40:44:48:56:9f:f1:d6:21:a4:14:50:a8:87:e9:d7:
75:d3:66:c6:5c:f4:94:d8:7a:b9:d5:2c:dc:d2:76:79:c1:c3:
f4:b3:db:d9:d9:eb:7c:3c:e3:fc:8e:61:a2:4e:9f:2f:10:70:
df:8c:42:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgk+oza60FJ76sZ/IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODhlMTY0NmItZTFiMy00MmU3LTg1OTEtM2E1N2ZkNDM2
MzY5MB4XDTI0MTIwOTAyMDA0MFoXDTI1MDMwOTAyMDA0MFowLzEtMCsGA1UEAxMk
OWUxM2JiZGYtNWE5Mi00MjcwLWFhMTItYTNhMjlkOTkwZTMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCDsIP+T5iy8c9rjaAUCgADAUSWQPplvTCob
lJF0asqQOLB2/LX6am4o7F4TKKzPb7lLOIfSkqX5KKR6xkl0SW6ywyvAS6CeySs+
RrAphg5SvWJBitLeJOnQSUJ3erefhH+VQ+PoeXkPA01IDM27YBqeq30W52uzb8bj
sP/xJvdGSzA6v8vE7UBxORVwNqlHA4G5MiizkWSyHFvd+1lG0eBQ8B63uRXzhVyZ
qHQnXg4o5GG+o2ZQgrOOEqc/1AgysZJvYSo7aJaFaripgtaDlWzCIFoSp7KWrNkD
BxnwpK2ngsCZOoq/QPQw9gvLZW2xhwhUkzw3FxGY+jTSJle2uQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHGa5y1oiYlsuNEiPO5RaRBtFpeAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84OGUx
NjQ2Yi1lMWIzLTQyZTctODU5MS0zYTU3ZmQ0MzYzNjkvNzBjZGE3ZGEtOTBkMi0z
ODgzLWFmNGMtMDVhYzRiMThkNTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODhlMTY0NmItZTFiMy00MmU3LTg1
OTEtM2E1N2ZkNDM2MzY5Lzg4ZTE2NDZiLWUxYjMtNDJlNy04NTkxLTNhNTdmZDQz
NjM2OS5jcmwwHwYDVR0jBBgwFoAUukMjcrv3l+XytBPr7L8gMlwthZkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy84OGUxNjQ2Yi1lMWIzLTQyZTctODU5MS0zYTU3
ZmQ0MzYzNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzd1OMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIhhRbfUKVZCQiHtSITOiG6ooaCYCSNSraSpwd+Ed4txwZqrDVJj1wy6
M7CkYv+ocTCSyMhcEU0srtFUdxCmBpynP78Wgb9nc2xMRaz3u9PmBhqwn6g0lQzD
KQ4toERuee3E20tr2/d55TNaOXDfmuxWzrOAnxG4t50jI4XfKll1HIqTwzKDpUBe
tuHB827AKvu9Y3+R2iDZZLLMJmBc0l8CTSg+AMvrQCSi0ZC0aItkEUsJNOlerd0P
S3KSAnQ45mlojNmVEOGOvUBESFaf8dYhpBRQqIfp13XTZsZc9JTYernVLNzSdnnB
w/Sz29nZ63w84/yOYaJOny8QcN+MQg8=
-----END CERTIFICATE-----
Generated at Tue May 13 22:33:58 2025 by rpki-client