Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/d8562bb0-a47c-37d4-826f-14fe53abc6f5.roa
File: d8562bb0-a47c-37d4-826f-14fe53abc6f5.roa (raw, json)
Hash identifier: +MIGACTwMVlPXT2LMaDQIEMvgGOVM2Kr8bpYXC2NhSA=
Subject key identifier: DD:3F:3C:08:63:51:6D:BF:92:2A:28:46:F3:B0:E4:16:6C:8B:BF:EE
Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial: 010D0C9F432858480D3FC8A559D2C74751E0C280
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/d8562bb0-a47c-37d4-826f-14fe53abc6f5.roa
Signing time: Sat 30 Nov 2024 14:00:50 +0000
ROA not before: Sat 30 Nov 2024 14:00:50 +0000
ROA not after: Fri 28 Feb 2025 14:00:50 +0000
asID: 203724
IP address blocks: 208.81.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0d:3f:c8:a5:59:d2:c7:47:51:e0:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Validity
Not Before: Nov 30 14:00:50 2024 GMT
Not After : Feb 28 14:00:50 2025 GMT
Subject: CN=ba98e6a9-2842-41d2-a83b-405cec4083d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e0:e9:3f:a8:33:25:fd:96:fd:35:97:c5:e3:
72:36:97:07:ba:bc:24:4a:92:6d:e5:31:28:b9:63:
d7:cb:46:bc:c0:a9:17:4c:0d:1c:85:94:8a:f9:7f:
49:d4:0e:6b:ab:d0:ba:03:27:51:3d:68:ad:f9:36:
83:54:0c:8c:50:99:97:63:f7:54:a3:4a:17:56:f3:
43:b3:a2:d9:50:99:c6:75:5a:da:db:f6:81:1f:d1:
ec:24:c6:52:09:27:7e:ab:aa:ed:e2:00:19:00:fe:
f8:30:43:4a:e7:c5:95:14:c8:9a:24:27:d9:32:5a:
5a:54:fb:b0:7d:69:a4:11:94:6a:75:46:e9:8a:8e:
ef:03:53:ef:32:53:b6:e3:13:48:aa:3e:74:8f:29:
1f:8c:c1:be:dc:ef:7e:e1:87:32:71:5a:b1:21:d2:
ee:08:dd:be:7e:aa:91:01:88:47:2f:6e:18:37:72:
13:df:ed:3e:c0:47:82:0b:90:53:b4:cf:c8:13:62:
b8:b6:c4:f6:38:4a:90:34:45:c9:2a:8f:61:be:02:
48:3c:37:9a:7d:31:84:a1:f1:cc:ff:1b:45:35:ae:
5b:25:b8:c4:89:b4:b3:4d:50:34:33:bd:b9:03:47:
2a:83:c6:a1:4a:82:3c:44:4c:72:32:59:65:4c:3d:
74:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3F:3C:08:63:51:6D:BF:92:2A:28:46:F3:B0:E4:16:6C:8B:BF:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/d8562bb0-a47c-37d4-826f-14fe53abc6f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
X509v3 Authority Key Identifier:
keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
sbgp-ipAddrBlock: critical
IPv4:
208.81.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:14:8b:e4:9d:64:3d:8f:57:74:40:eb:ea:4d:29:1a:10:16:
1d:43:7a:70:f2:97:57:cd:bd:8a:4d:50:d3:21:4e:a9:eb:ae:
49:59:e8:37:fe:90:9b:e7:65:35:c2:8c:c8:e3:dc:24:09:77:
da:f1:02:e4:a8:b0:5d:d9:e7:68:4d:e5:bc:f0:fa:9c:b6:4f:
d6:df:f7:21:fa:c4:dd:1e:83:cf:cc:37:54:e8:df:a1:99:3e:
d9:e8:40:f7:ca:d9:c1:ff:ed:8c:e5:ee:e9:16:d8:27:15:32:
16:97:80:07:05:a1:67:3e:c0:15:f1:23:25:fb:0c:a0:3f:ce:
01:00:c1:ee:19:21:0c:ae:67:fe:61:5f:3c:4c:04:0f:5e:ba:
93:56:af:ba:00:5e:74:5f:a7:20:15:51:e4:90:a7:3e:29:f4:
b2:4d:3d:47:05:80:dd:ce:c5:d8:c7:81:89:10:a8:a1:8e:e0:
0a:07:75:f5:83:14:c8:c2:4e:64:92:02:1b:ff:b4:7d:2e:e7:
ff:29:2f:5a:c9:2f:93:d8:f5:8c:71:83:7c:a8:fd:aa:fb:db:
75:b9:14:58:f4:7a:ed:db:b6:83:94:b9:ed:07:37:a5:e4:1b:
1a:6d:ce:f2:40:c6:dd:94:0b:50:f4:4e:f0:c8:41:e2:2f:56:
e3:2f:5b:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgNP8ilWdLHR1HgwoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3
Yjc0MB4XDTI0MTEzMDE0MDA1MFoXDTI1MDIyODE0MDA1MFowLzEtMCsGA1UEAxMk
YmE5OGU2YTktMjg0Mi00MWQyLWE4M2ItNDA1Y2VjNDA4M2Q1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+DpP6gzJf2W/TWXxeNyNpcHurwkSpJt5TEo
uWPXy0a8wKkXTA0chZSK+X9J1A5rq9C6AydRPWit+TaDVAyMUJmXY/dUo0oXVvND
s6LZUJnGdVra2/aBH9HsJMZSCSd+q6rt4gAZAP74MENK58WVFMiaJCfZMlpaVPuw
fWmkEZRqdUbpio7vA1PvMlO24xNIqj50jykfjMG+3O9+4YcycVqxIdLuCN2+fqqR
AYhHL24YN3IT3+0+wEeCC5BTtM/IE2K4tsT2OEqQNEXJKo9hvgJIPDeafTGEofHM
/xtFNa5bJbjEibSzTVA0M725A0cqg8ahSoI8RExyMlllTD10kQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN0/PAhjUW2/kiooRvOw5BZsi7/uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5
MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvZDg1NjJiYjAtYTQ3Yy0z
N2Q0LTgyNmYtMTRmZTUzYWJjNmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl
ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5
N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll
OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FFCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG4Ui+SdZD2PV3RA6+pNKRoQFh1DenDyl1fNvYpNUNMhTqnrrklZ6Df+
kJvnZTXCjMjj3CQJd9rxAuSosF3Z52hN5bzw+py2T9bf9yH6xN0eg8/MN1To36GZ
PtnoQPfK2cH/7Yzl7ukW2CcVMhaXgAcFoWc+wBXxIyX7DKA/zgEAwe4ZIQyuZ/5h
XzxMBA9eupNWr7oAXnRfpyAVUeSQpz4p9LJNPUcFgN3OxdjHgYkQqKGO4AoHdfWD
FMjCTmSSAhv/tH0u5/8pL1rJL5PY9Yxxg3yo/ar723W5FFj0eu3btoOUue0HN6Xk
GxptzvJAxt2UC1D0TvDIQeIvVuMvWwg=
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:26:15 2025 by rpki-client