Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/999baf3d-58b4-3fdf-9b5f-4c0d2801e3f5.roa
File: 999baf3d-58b4-3fdf-9b5f-4c0d2801e3f5.roa (raw, json)
Hash identifier: DI7GcTzMqX0XmvZ2BxLVAN4Y3oKqiSSsHil0/lmc9V4=
Subject key identifier: BB:54:71:EA:C3:3A:15:5D:E9:78:45:92:0C:F4:68:44:85:CB:9B:C9
Certificate issuer: /CN=9ac7679f-d727-44b3-9b13-6e689c3eff61
Certificate serial: 010D0C9F432858489E6B691343BA4364FF17B800
Authority key identifier: DC:0E:3A:0B:5D:E5:64:DB:67:5C:6B:12:6A:02:C5:BB:63:D7:41:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/999baf3d-58b4-3fdf-9b5f-4c0d2801e3f5.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 399385
IP address blocks: 205.137.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:69:13:43:ba:43:64:ff:17:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ac7679f-d727-44b3-9b13-6e689c3eff61
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=de2d811e-2362-44f4-97ca-a3207140cc0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:17:52:ad:cc:d8:ed:4f:04:fc:37:a3:2e:be:
75:d4:0c:58:90:40:09:aa:22:1d:6c:12:4f:59:8e:
56:e4:c2:4e:73:07:ff:2c:05:5a:ea:fa:cd:e9:9f:
82:22:da:54:7d:3c:f9:b9:3f:42:38:6e:77:07:fd:
fa:b3:ae:43:87:ff:b0:53:f3:e2:a7:2a:5d:71:9b:
3d:a0:c0:c5:c8:e8:a9:0e:d1:fd:36:f2:a1:72:74:
2e:a4:22:b1:da:83:44:ea:41:b3:d0:dc:23:e5:b8:
a4:a2:c5:23:63:61:1d:38:db:5d:f5:92:18:9f:34:
29:08:06:fb:4e:b1:d8:1c:44:3c:6d:a1:d9:ec:a5:
32:db:f2:be:b9:a5:20:e0:9a:1c:4f:aa:36:cd:b7:
45:ae:b3:42:42:1c:ef:d0:94:1d:98:e6:57:5d:d9:
fc:c1:56:e7:e5:44:75:c8:e3:9c:f7:f7:18:d4:d8:
b9:46:8f:95:6d:80:36:d0:73:70:d9:5b:1a:8d:90:
27:80:93:e9:c2:09:88:fa:79:b5:16:41:6c:ed:28:
56:28:05:2f:0b:cd:ad:7f:f6:90:79:3a:c4:fb:f0:
4f:10:aa:d8:4a:cb:ca:01:27:c2:fd:e3:aa:70:1e:
85:ca:64:d0:e6:ba:40:fa:17:05:c2:e9:5b:32:06:
1f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:54:71:EA:C3:3A:15:5D:E9:78:45:92:0C:F4:68:44:85:CB:9B:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/999baf3d-58b4-3fdf-9b5f-4c0d2801e3f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/9ac7679f-d727-44b3-9b13-6e689c3eff61.crl
X509v3 Authority Key Identifier:
keyid:DC:0E:3A:0B:5D:E5:64:DB:67:5C:6B:12:6A:02:C5:BB:63:D7:41:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61.cer
sbgp-ipAddrBlock: critical
IPv4:
205.137.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:b7:12:d4:05:d5:0b:0b:4d:f8:95:9b:d4:40:00:92:fe:a5:
09:0d:bc:84:6e:97:21:b4:74:b4:a8:53:b0:33:f4:86:43:29:
f5:4a:c4:9a:4c:95:61:4f:44:09:88:a6:c2:dc:63:2e:6c:ac:
20:7c:d4:84:00:a5:77:a6:36:75:3a:18:61:54:72:1c:85:fa:
77:8f:52:d7:75:d4:8d:e6:6a:7e:53:28:57:62:e7:1e:5a:55:
e9:8b:31:00:b7:0f:8e:44:fb:bf:fb:8e:80:88:ca:56:48:c2:
f0:ca:8e:b4:07:e2:63:c9:4b:15:cc:99:d8:2b:4f:e5:f4:31:
64:d3:5d:0d:5f:e2:5d:28:e5:25:b6:39:49:5a:ce:84:cf:39:
2c:bf:21:76:56:81:b5:87:e7:d6:30:eb:85:d3:bb:7f:e5:4f:
a0:60:2e:fd:b0:55:8f:38:6c:9c:64:c6:2a:a0:8b:02:4a:91:
9e:d0:bb:ee:49:a7:57:3a:1a:c2:f0:93:58:e8:08:4f:9d:09:
66:69:87:a8:f3:60:d2:80:a5:71:34:65:08:20:87:e3:ca:a3:
82:75:76:65:c0:da:f7:d6:e3:bd:aa:fa:68:34:8a:9f:60:b0:
49:f0:40:73:cc:8a:a5:3e:c8:7a:a0:b0:0b:91:43:82:43:bf:
0a:c1:78:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea2kTQ7pDZP8XuAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWFjNzY3OWYtZDcyNy00NGIzLTliMTMtNmU2ODljM2Vm
ZjYxMB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
ZGUyZDgxMWUtMjM2Mi00NGY0LTk3Y2EtYTMyMDcxNDBjYzBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxdSrczY7U8E/DejLr511AxYkEAJqiIdbBJP
WY5W5MJOcwf/LAVa6vrN6Z+CItpUfTz5uT9COG53B/36s65Dh/+wU/PipypdcZs9
oMDFyOipDtH9NvKhcnQupCKx2oNE6kGz0Nwj5bikosUjY2EdONtd9ZIYnzQpCAb7
TrHYHEQ8baHZ7KUy2/K+uaUg4JocT6o2zbdFrrNCQhzv0JQdmOZXXdn8wVbn5UR1
yOOc9/cY1Ni5Ro+VbYA20HNw2VsajZAngJPpwgmI+nm1FkFs7ShWKAUvC82tf/aQ
eTrE+/BPEKrYSsvKASfC/eOqcB6FymTQ5rpA+hcFwulbMgYfXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLtUcerDOhVd6XhFkgz0aESFy5vJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YWM3
Njc5Zi1kNzI3LTQ0YjMtOWIxMy02ZTY4OWMzZWZmNjEvOTk5YmFmM2QtNThiNC0z
ZmRmLTliNWYtNGMwZDI4MDFlM2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWFjNzY3OWYtZDcyNy00NGIzLTli
MTMtNmU2ODljM2VmZjYxLzlhYzc2NzlmLWQ3MjctNDRiMy05YjEzLTZlNjg5YzNl
ZmY2MS5jcmwwHwYDVR0jBBgwFoAU3A46C13lZNtnXGsSagLFu2PXQWAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85YWM3Njc5Zi1kNzI3LTQ0YjMtOWIxMy02ZTY4
OWMzZWZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzYn5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHK3EtQF1QsLTfiVm9RAAJL+pQkNvIRulyG0dLSoU7Az9IZDKfVKxJpM
lWFPRAmIpsLcYy5srCB81IQApXemNnU6GGFUchyF+nePUtd11I3man5TKFdi5x5a
VemLMQC3D45E+7/7joCIylZIwvDKjrQH4mPJSxXMmdgrT+X0MWTTXQ1f4l0o5SW2
OUlazoTPOSy/IXZWgbWH59Yw64XTu3/lT6BgLv2wVY84bJxkxiqgiwJKkZ7Qu+5J
p1c6GsLwk1joCE+dCWZph6jzYNKApXE0ZQggh+PKo4J1dmXA2vfW472q+mg0ip9g
sEnwQHPMiqU+yHqgsAuRQ4JDvwrBeI4=
-----END CERTIFICATE-----
Generated at Tue Apr 29 23:45:09 2025 by rpki-client