Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/39a0738d-bd81-3dc4-bada-007779bfb3e8.roa
File: 39a0738d-bd81-3dc4-bada-007779bfb3e8.roa (raw, json)
Hash identifier: HKpozLQx2G5LrmaCGy6CK0sEPZRq56CcHSO2T2+Cl0U=
Subject key identifier: AD:FF:06:5F:A5:61:04:25:01:75:3C:B8:AB:CB:F1:7E:2A:EF:9E:84
Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Certificate serial: 010D0C9F43285847F2BA2FE81D090F9E1CF8DFC0
Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/39a0738d-bd81-3dc4-bada-007779bfb3e8.roa
Signing time: Thu 21 Nov 2024 02:00:38 +0000
ROA not before: Thu 21 Nov 2024 02:00:38 +0000
ROA not after: Wed 19 Feb 2025 02:00:38 +0000
asID: 14618
IP address blocks: 204.194.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f2:ba:2f:e8:1d:09:0f:9e:1c:f8:df:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Validity
Not Before: Nov 21 02:00:38 2024 GMT
Not After : Feb 19 02:00:38 2025 GMT
Subject: CN=17cfe091-11a9-42d3-805f-3846504f52b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4e:01:a8:f6:8a:ae:65:6e:e1:1a:dd:57:e6:
0f:15:27:4b:ad:01:5e:02:14:58:bd:d7:38:d2:a0:
36:31:4c:9d:44:e2:06:6d:1e:d0:8a:67:62:b5:68:
ee:f2:83:a3:ba:e3:1e:fc:a8:d0:7f:71:8f:59:1d:
82:b2:3c:86:40:09:87:cc:f6:63:67:fa:36:23:11:
4c:0c:aa:7e:4a:1e:e6:c7:a0:7d:50:0f:9a:04:43:
62:53:fb:32:55:a7:0e:12:4f:9f:c1:58:51:61:c7:
7e:8b:29:4a:25:a8:14:65:60:fd:15:90:29:e2:9b:
89:75:4b:b6:0e:28:2d:52:5d:11:66:1b:5c:63:2f:
32:66:08:fa:0b:3d:c3:00:7f:5f:95:cc:2c:a0:6c:
c6:18:48:b4:ee:15:93:4b:c9:1f:1b:4c:ac:3e:d8:
53:63:20:49:13:ba:71:a3:05:d9:40:cc:f8:e5:ba:
d3:dc:2f:8e:3b:11:19:24:f8:ec:85:1a:e0:aa:f1:
bf:a0:3c:b6:91:f2:cb:a8:8c:04:c8:ad:05:03:66:
e1:44:5f:20:b2:12:7b:c6:62:31:b0:e1:50:b2:83:
9b:80:ab:7c:96:52:c9:86:b0:e7:2c:36:b9:4c:b3:
41:98:1a:15:45:fa:9a:6f:00:c9:e3:97:83:06:d6:
c0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FF:06:5F:A5:61:04:25:01:75:3C:B8:AB:CB:F1:7E:2A:EF:9E:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/39a0738d-bd81-3dc4-bada-007779bfb3e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
X509v3 Authority Key Identifier:
keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
sbgp-ipAddrBlock: critical
IPv4:
204.194.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:42:da:48:90:9c:a9:df:c0:fe:ff:4f:ec:26:3c:f7:c3:62:
67:9a:e0:4f:94:f3:d9:51:02:0f:26:65:b5:79:d9:e7:5c:f8:
b0:4f:bd:21:5b:36:3c:66:df:b6:91:36:54:4f:22:60:7f:bc:
d8:ca:5a:d5:ba:de:0c:5c:60:e3:78:82:35:3d:03:5e:ae:d9:
ea:78:aa:67:b2:0d:12:e3:cd:74:30:ab:b7:7c:7e:c1:c6:82:
88:2f:67:53:66:8e:2a:c3:c4:f9:8b:96:7e:8f:bc:18:56:cd:
88:7a:30:ae:53:99:03:97:54:ce:c9:46:fb:26:2c:9b:19:2d:
a7:8a:93:75:76:7b:4a:74:be:30:83:19:8d:2f:b1:d7:53:be:
9c:06:50:45:f1:20:c3:2a:9e:0f:d1:08:89:f7:6c:cd:9c:44:
03:6a:19:5e:f6:79:fb:9f:63:8d:a2:98:94:c9:f5:3a:71:58:
6f:ae:c3:d8:93:b5:f9:64:06:a0:52:47:04:7e:50:dc:bc:d8:
99:e4:b6:2b:78:bf:35:e4:81:d1:49:4e:f7:d4:91:cc:61:e7:
4a:09:05:49:5f:f3:67:81:bd:46:2e:e4:56:43:28:42:52:47:
6f:3b:c6:4f:52:f0:07:c1:5e:48:94:15:02:cf:a4:9f:b6:07:
6b:ec:a9:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfyui/oHQkPnhz438AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWIxOGIyMDktN2VjYy00MzYxLWI4ZjYtZDg2YTVhNTUw
NGRhMB4XDTI0MTEyMTAyMDAzOFoXDTI1MDIxOTAyMDAzOFowLzEtMCsGA1UEAxMk
MTdjZmUwOTEtMTFhOS00MmQzLTgwNWYtMzg0NjUwNGY1MmI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhk4BqPaKrmVu4RrdV+YPFSdLrQFeAhRYvdc4
0qA2MUydROIGbR7QimditWju8oOjuuMe/KjQf3GPWR2CsjyGQAmHzPZjZ/o2IxFM
DKp+Sh7mx6B9UA+aBENiU/syVacOEk+fwVhRYcd+iylKJagUZWD9FZAp4puJdUu2
DigtUl0RZhtcYy8yZgj6Cz3DAH9flcwsoGzGGEi07hWTS8kfG0ysPthTYyBJE7px
owXZQMz45brT3C+OOxEZJPjshRrgqvG/oDy2kfLLqIwEyK0FA2bhRF8gshJ7xmIx
sOFQsoObgKt8llLJhrDnLDa5TLNBmBoVRfqabwDJ45eDBtbAvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK3/Bl+lYQQlAXU8uKvL8X4q756EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4
YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZhNWE1NTA0ZGEvMzlhMDczOGQtYmQ4MS0z
ZGM0LWJhZGEtMDA3Nzc5YmZiM2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxOGIyMDktN2VjYy00MzYxLWI4
ZjYtZDg2YTVhNTUwNGRhL2FiMThiMjA5LTdlY2MtNDM2MS1iOGY2LWQ4NmE1YTU1
MDRkYS5jcmwwHwYDVR0jBBgwFoAU0idx0DJJoJ2AHgnnZ2CCOTtp0mkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZh
NWE1NTA0ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMLfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAtC2kiQnKnfwP7/T+wmPPfDYmea4E+U89lRAg8mZbV52edc+LBPvSFb
Njxm37aRNlRPImB/vNjKWtW63gxcYON4gjU9A16u2ep4qmeyDRLjzXQwq7d8fsHG
gogvZ1NmjirDxPmLln6PvBhWzYh6MK5TmQOXVM7JRvsmLJsZLaeKk3V2e0p0vjCD
GY0vsddTvpwGUEXxIMMqng/RCIn3bM2cRANqGV72efufY42imJTJ9TpxWG+uw9iT
tflkBqBSRwR+UNy82Jnktit4vzXkgdFJTvfUkcxh50oJBUlf82eBvUYu5FZDKEJS
R287xk9S8AfBXkiUFQLPpJ+2B2vsqdk=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:09:15 2025 by rpki-client