Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/17fc3f96-ff5e-3589-864f-e6492e7b5200.roa
File: 17fc3f96-ff5e-3589-864f-e6492e7b5200.roa (raw, json)
Hash identifier: wE+yd69eWurYk86WSr7HmjrdKmJ1Yz8+gOPCZCMrKo8=
Subject key identifier: 69:7A:EE:94:6C:E0:F4:ED:0B:C0:4D:14:2C:FC:67:A5:B5:A5:A1:68
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584832F0108E22FD934FD5F37EC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/17fc3f96-ff5e-3589-864f-e6492e7b5200.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 397240
IP address blocks: 209.173.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:10:8e:22:fd:93:4f:d5:f3:7e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=1045fea1-6ad0-4cc2-8ed4-49148115cdea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:46:48:f1:20:59:ed:45:1b:47:5c:a5:ec:55:
cc:c6:9f:ac:47:6e:e2:48:e6:68:c1:cb:15:a7:ca:
4b:99:ab:d0:9a:53:b6:dd:eb:c3:00:1e:aa:4a:d2:
23:d5:2b:c3:30:a5:fd:0c:51:d1:e7:f8:86:9f:0c:
ac:d9:db:dc:2e:c7:4f:64:c0:82:39:51:84:0b:d7:
74:57:26:ef:d0:bd:78:9e:92:40:31:3f:57:b3:49:
b8:92:1a:8d:38:5a:e7:7e:3a:a2:93:27:ff:01:e7:
8f:76:fa:5b:f4:10:23:53:44:f3:ba:f4:6f:dd:4f:
1d:e8:bb:4c:76:5c:0d:5f:f3:b5:7f:90:1b:c2:40:
46:db:52:bd:d8:85:7c:c3:16:9a:c2:a0:c0:72:bb:
6e:2d:3a:79:72:da:7d:99:9c:f6:9b:e7:1a:0f:dd:
92:f0:66:aa:fc:a6:ef:81:49:83:eb:35:65:e7:36:
1e:12:90:66:ba:7e:35:0a:38:fc:b6:a4:79:3a:bf:
fe:13:02:ca:4d:00:6c:f6:b2:f0:26:34:71:37:e1:
68:81:f4:00:05:e9:b7:90:3f:e8:c3:97:d2:b8:e1:
0c:ae:42:ad:54:1d:d5:0c:1f:99:71:51:79:27:78:
37:dd:8e:20:eb:bf:0e:ca:72:df:24:f9:c8:91:03:
99:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7A:EE:94:6C:E0:F4:ED:0B:C0:4D:14:2C:FC:67:A5:B5:A5:A1:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/17fc3f96-ff5e-3589-864f-e6492e7b5200.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
209.173.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:7b:d4:ad:57:4b:b8:3a:0c:8b:8a:68:59:cd:ef:3d:97:14:
fd:37:6b:d9:11:54:40:ae:d3:7b:7f:93:4a:99:3e:07:38:be:
1c:fc:0c:51:fb:5d:12:1c:82:b2:42:14:1f:52:9d:de:b0:70:
10:f7:32:33:e5:9a:f2:ee:33:f9:40:62:67:44:2b:41:ed:10:
eb:45:1f:7e:00:e5:9b:63:8a:b3:5f:b3:7b:78:29:90:8b:5c:
16:29:7e:26:ab:3d:00:df:1e:9b:0b:ae:58:31:cb:79:1e:12:
98:2d:91:46:27:c2:ca:17:8f:62:4a:b7:35:91:ff:bd:67:5c:
7a:55:43:68:6c:bd:42:19:5d:21:37:fa:6e:04:66:81:4c:76:
6e:82:32:70:ce:15:14:b4:b2:82:07:b4:7e:87:bc:cf:39:e0:
de:29:88:76:df:c7:6f:e7:3a:19:f7:0e:1a:c3:11:8c:69:93:
50:18:e1:3d:66:08:0e:55:71:5d:89:49:d0:3a:19:5d:88:35:
95:6b:3e:4f:d4:ed:a1:e2:ea:24:ff:2e:44:a6:0a:10:3c:a8:
f5:c3:56:b8:29:76:e1:31:86:b0:9a:df:ae:17:c5:55:4a:04:
ee:53:b5:4e:52:de:34:7f:ef:a1:df:8a:54:a9:d3:83:6e:80:
fd:72:ac:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8BCOIv2TT9XzfsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
MTA0NWZlYTEtNmFkMC00Y2MyLThlZDQtNDkxNDgxMTVjZGVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUZI8SBZ7UUbR1yl7FXMxp+sR27iSOZowcsV
p8pLmavQmlO23evDAB6qStIj1SvDMKX9DFHR5/iGnwys2dvcLsdPZMCCOVGEC9d0
Vybv0L14npJAMT9Xs0m4khqNOFrnfjqikyf/AeePdvpb9BAjU0TzuvRv3U8d6LtM
dlwNX/O1f5AbwkBG21K92IV8wxaawqDAcrtuLTp5ctp9mZz2m+caD92S8Gaq/Kbv
gUmD6zVl5zYeEpBmun41Cjj8tqR5Or/+EwLKTQBs9rLwJjRxN+FogfQABem3kD/o
w5fSuOEMrkKtVB3VDB+ZcVF5J3g33Y4g678OynLfJPnIkQOZhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGl67pRs4PTtC8BNFCz8Z6W1paFoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMTdmYzNmOTYtZmY1ZS0z
NTg5LTg2NGYtZTY0OTJlN2I1MjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0a06MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGt71K1XS7g6DIuKaFnN7z2XFP03a9kRVECu03t/k0qZPgc4vhz8DFH7
XRIcgrJCFB9Snd6wcBD3MjPlmvLuM/lAYmdEK0HtEOtFH34A5ZtjirNfs3t4KZCL
XBYpfiarPQDfHpsLrlgxy3keEpgtkUYnwsoXj2JKtzWR/71nXHpVQ2hsvUIZXSE3
+m4EZoFMdm6CMnDOFRS0soIHtH6HvM854N4piHbfx2/nOhn3DhrDEYxpk1AY4T1m
CA5VcV2JSdA6GV2INZVrPk/U7aHi6iT/LkSmChA8qPXDVrgpduExhrCa364XxVVK
BO5TtU5S3jR/76HfilSp04NugP1yrDg=
-----END CERTIFICATE-----
Generated at Fri May 2 01:12:50 2025 by rpki-client