Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/409dcb1b-8e11-32f3-b345-ba1e33a44598.roa
File: 409dcb1b-8e11-32f3-b345-ba1e33a44598.roa (raw, json)
Hash identifier: PekjPfDukdr3L83YPYRlXdKMI0FCeeJ7GB3eeCCkHyg=
Subject key identifier: 78:DC:F3:08:AE:C8:99:5A:C4:3C:1D:4F:A1:79:47:B4:38:D2:96:78
Certificate issuer: /CN=d3bf923d-6c9d-4713-887f-1f30075cf850
Certificate serial: 010D0C9F43285848265FFCC1DB734C287565B200
Authority key identifier: 5B:7E:94:69:FB:8F:16:3F:CC:C9:25:52:54:45:FB:6D:BB:DA:C5:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/409dcb1b-8e11-32f3-b345-ba1e33a44598.roa
Signing time: Mon 09 Dec 2024 14:00:51 +0000
ROA not before: Mon 09 Dec 2024 14:00:51 +0000
ROA not after: Sun 09 Mar 2025 13:00:51 +0000
asID: 32746
IP address blocks: 204.8.88.0/22 maxlen: 24
208.86.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:5f:fc:c1:db:73:4c:28:75:65:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3bf923d-6c9d-4713-887f-1f30075cf850
Validity
Not Before: Dec 9 14:00:51 2024 GMT
Not After : Mar 9 13:00:51 2025 GMT
Subject: CN=363d7ce6-010d-48f8-9949-e39cd8e96769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:63:11:40:53:90:9a:9f:e0:c8:b9:82:0e:4a:
d4:0b:27:7a:a4:02:4f:7c:84:24:a9:b8:2e:96:f4:
b0:06:23:5c:8b:12:86:18:b3:92:d7:87:d2:36:f9:
5e:c2:84:e0:34:1a:b9:e0:ad:8b:c4:9c:84:ce:89:
0b:bc:e0:bd:68:9b:43:3b:0d:4b:64:19:c6:7e:f9:
50:7c:09:0f:c3:51:5f:30:52:9a:12:7d:9f:b3:9f:
0e:fc:0f:12:d1:dd:cc:d4:2c:eb:3b:0b:6a:20:3e:
b9:31:fc:52:5d:a5:54:58:e8:ef:93:64:68:8a:a1:
c1:7d:b0:80:87:09:15:e4:d9:c8:d3:5c:5d:6a:30:
69:0d:01:c2:2e:26:27:34:32:04:16:d6:73:51:76:
02:48:a0:07:2f:02:4b:79:40:6c:3c:20:13:5c:24:
82:42:98:ee:2b:d3:e4:71:f6:72:cc:c9:00:23:60:
16:c4:36:4c:9d:fe:59:06:2f:42:7d:9e:a4:38:2a:
36:33:42:9b:f2:a2:0a:35:e8:c1:e1:00:93:56:f3:
0b:6f:b7:5c:1c:7e:ae:8e:5d:68:c2:b0:54:fa:ea:
30:ea:42:6a:fb:e6:3f:74:8e:df:71:e1:c1:5e:4c:
81:07:9c:a2:2e:df:04:14:82:0d:e2:53:2c:5f:57:
2f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DC:F3:08:AE:C8:99:5A:C4:3C:1D:4F:A1:79:47:B4:38:D2:96:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/409dcb1b-8e11-32f3-b345-ba1e33a44598.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/d3bf923d-6c9d-4713-887f-1f30075cf850.crl
X509v3 Authority Key Identifier:
keyid:5B:7E:94:69:FB:8F:16:3F:CC:C9:25:52:54:45:FB:6D:BB:DA:C5:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850.cer
sbgp-ipAddrBlock: critical
IPv4:
204.8.88.0/22
208.86.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:cf:60:f7:50:fe:de:c9:d5:b6:08:bb:1a:56:31:a9:7b:cc:
c7:a0:c6:4c:86:66:5c:c3:ac:bc:93:eb:8b:c3:bd:0f:26:5a:
47:84:0d:37:dd:40:c7:3f:30:de:f8:0c:cf:08:d8:b3:2f:3a:
bf:7d:c2:81:c7:2b:30:a9:a5:0c:5f:aa:5c:99:3a:22:3a:6e:
a1:00:36:c3:43:6a:6b:65:79:7a:13:c7:d4:93:66:e8:47:87:
d9:c8:29:8c:41:0d:20:76:79:88:ae:91:0e:76:a8:ac:bf:25:
0f:42:23:4c:c1:ee:b6:f4:ca:59:ef:0e:01:14:25:89:6a:a2:
0f:23:81:d7:b4:e4:b4:e0:4c:43:b0:28:4f:81:00:ef:41:5a:
df:c1:82:0f:5e:6a:18:54:58:33:8c:0f:e1:ca:84:57:5c:6d:
37:39:d3:e2:7b:5c:72:1a:2a:02:9f:05:b9:3a:93:40:e6:72:
f6:e9:41:63:d4:ae:2e:fd:e2:cb:30:5d:79:ec:50:2b:0b:e6:
66:54:c9:b4:dc:86:18:18:cf:ea:8f:64:78:30:20:7c:44:ab:
1f:65:55:7e:63:98:b8:f4:b4:9a:81:c0:c0:09:1a:d5:e7:bd:
19:aa:0c:c8:fd:89:24:bb:88:43:9b:b1:69:71:15:aa:7f:08:
c2:9f:b9:ef
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEgmX/zB23NMKHVlsgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDNiZjkyM2QtNmM5ZC00NzEzLTg4N2YtMWYzMDA3NWNm
ODUwMB4XDTI0MTIwOTE0MDA1MVoXDTI1MDMwOTEzMDA1MVowLzEtMCsGA1UEAxMk
MzYzZDdjZTYtMDEwZC00OGY4LTk5NDktZTM5Y2Q4ZTk2NzY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWMRQFOQmp/gyLmCDkrUCyd6pAJPfIQkqbgu
lvSwBiNcixKGGLOS14fSNvlewoTgNBq54K2LxJyEzokLvOC9aJtDOw1LZBnGfvlQ
fAkPw1FfMFKaEn2fs58O/A8S0d3M1CzrOwtqID65MfxSXaVUWOjvk2RoiqHBfbCA
hwkV5NnI01xdajBpDQHCLiYnNDIEFtZzUXYCSKAHLwJLeUBsPCATXCSCQpjuK9Pk
cfZyzMkAI2AWxDZMnf5ZBi9CfZ6kOCo2M0Kb8qIKNejB4QCTVvMLb7dcHH6ujl1o
wrBU+uow6kJq++Y/dI7fceHBXkyBB5yiLt8EFIIN4lMsX1cvpwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFHjc8wiuyJlaxDwdT6F5R7Q40pZ4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kM2Jm
OTIzZC02YzlkLTQ3MTMtODg3Zi0xZjMwMDc1Y2Y4NTAvNDA5ZGNiMWItOGUxMS0z
MmYzLWIzNDUtYmExZTMzYTQ0NTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDNiZjkyM2QtNmM5ZC00NzEzLTg4
N2YtMWYzMDA3NWNmODUwL2QzYmY5MjNkLTZjOWQtNDcxMy04ODdmLTFmMzAwNzVj
Zjg1MC5jcmwwHwYDVR0jBBgwFoAUW36UafuPFj/MySVSVEX7bbvaxbswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9kM2JmOTIzZC02YzlkLTQ3MTMtODg3Zi0xZjMw
MDc1Y2Y4NTAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCzAhYAwQC
0FYoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAAjPYPdQ/t7J1bYIuxpWMal7zMegxkyGZlzDrLyT64vDvQ8m
WkeEDTfdQMc/MN74DM8I2LMvOr99woHHKzCppQxfqlyZOiI6bqEANsNDamtleXoT
x9STZuhHh9nIKYxBDSB2eYiukQ52qKy/JQ9CI0zB7rb0ylnvDgEUJYlqog8jgde0
5LTgTEOwKE+BAO9BWt/Bgg9eahhUWDOMD+HKhFdcbTc50+J7XHIaKgKfBbk6k0Dm
cvbpQWPUri794sswXXnsUCsL5mZUybTchhgYz+qPZHgwIHxEqx9lVX5jmLj0tJqB
wMAJGtXnvRmqDMj9iSS7iEObsWlxFap/CMKfue8=
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:43:33 2025 by rpki-client