Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/890db329-2478-3442-b6b3-ec84331a6a0a.roa
File: 890db329-2478-3442-b6b3-ec84331a6a0a.roa (raw, json)
Hash identifier: ozjFf+qFsomvniXVVjZq6HeCp81aDJBEj4VkPw53Xxo=
Subject key identifier: 4E:2C:B8:96:71:38:E4:06:C3:F3:C4:B3:A4:5E:C1:1B:C1:0A:85:62
Certificate issuer: /CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333
Certificate serial: 010D0C9F432858482BF04C92DDE50C1FE810E1C0
Authority key identifier: E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/890db329-2478-3442-b6b3-ec84331a6a0a.roa
Signing time: Wed 11 Dec 2024 13:50:49 +0000
ROA not before: Wed 11 Dec 2024 13:50:49 +0000
ROA not after: Tue 11 Mar 2025 12:50:49 +0000
asID: 198949
IP address blocks: 205.208.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f0:4c:92:dd:e5:0c:1f:e8:10:e1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333
Validity
Not Before: Dec 11 13:50:49 2024 GMT
Not After : Mar 11 12:50:49 2025 GMT
Subject: CN=c5176b32-3896-4b5f-9a45-1be6d4aea832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cc:eb:d3:79:e0:db:01:b2:b8:28:b9:67:b5:
4a:4a:de:31:19:20:96:96:7f:e5:97:e9:6d:46:00:
b2:be:c8:11:4e:d1:58:eb:25:87:8d:2a:ed:1c:23:
0f:ff:a7:70:50:97:f2:97:ae:e2:ee:a0:80:b8:3e:
19:ab:99:01:62:49:58:71:42:1a:78:ac:15:94:d8:
fa:c1:d7:d5:f5:c5:cc:d3:0f:fa:09:65:77:dc:fa:
26:2f:3a:fa:64:7b:3a:68:e6:07:ed:95:58:5d:44:
f2:06:2b:ba:1f:98:93:4f:75:19:35:51:7d:f5:d9:
9f:da:80:c0:c4:df:58:d9:50:6b:11:81:6b:ae:c6:
ac:68:6f:d6:c4:6e:84:6d:be:7a:11:92:fb:92:d2:
13:a2:c0:03:c9:ec:58:eb:18:14:d2:41:67:56:05:
66:56:d6:fc:00:ba:ad:7a:13:61:b6:32:33:27:9a:
ad:84:6b:70:50:1e:40:16:c6:1d:56:fe:cf:83:8f:
0c:af:b4:c0:31:94:cc:be:e7:bd:3d:ba:64:37:c6:
38:8c:b7:f6:54:9c:0e:86:5f:d0:80:68:d1:dd:fc:
bf:29:13:4f:0d:b5:10:50:80:90:86:a1:05:5b:36:
0c:19:21:39:4f:41:a4:27:d3:b3:7a:c9:94:0f:24:
a5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2C:B8:96:71:38:E4:06:C3:F3:C4:B3:A4:5E:C1:1B:C1:0A:85:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/890db329-2478-3442-b6b3-ec84331a6a0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl
X509v3 Authority Key Identifier:
keyid:E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer
sbgp-ipAddrBlock: critical
IPv4:
205.208.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:d4:1f:c2:55:56:82:99:0a:98:c8:14:30:91:4e:8a:6f:5b:
ba:42:3d:6f:5f:2a:cb:37:8a:04:09:df:db:59:48:11:5a:58:
d1:24:db:ea:56:21:ea:99:28:8d:1e:b2:e8:91:95:22:a5:d7:
e8:48:ac:8d:5c:2b:42:53:0c:68:4d:7c:c6:ba:9d:a5:48:ee:
a8:f4:4f:89:3b:ba:3e:b6:ad:e7:7d:56:a6:31:c6:98:c6:92:
32:fc:98:2c:81:26:a2:b2:e7:e4:74:7f:23:bd:56:64:00:df:
4c:df:90:fe:7a:38:ea:9f:a3:91:a6:41:98:62:9f:63:b6:36:
4f:bd:0b:1a:74:e5:a9:35:9c:3b:11:03:37:1b:c7:cf:12:09:
0d:be:4e:9e:a9:3b:53:c5:c8:d6:d7:67:af:b2:4e:f2:d1:14:
56:fb:59:19:a3:ad:72:0a:5e:b4:a7:05:ef:2d:21:f9:27:cc:
2b:61:be:22:f2:39:11:07:c7:63:41:70:7f:f1:42:96:a8:ca:
aa:8d:c5:22:93:d4:89:24:2f:d8:c5:82:1f:fe:19:d8:22:47:
3f:1c:ea:6d:e3:3b:9a:33:f2:3f:84:c9:e6:fe:66:de:73:d8:
85:e4:30:7c:52:d2:d6:3c:5d:c3:bb:db:4c:4e:84:e6:f2:18:
88:dc:7b:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgr8EyS3eUMH+gQ4cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTgyMjE1MGYtMmU2Zi00ZmM5LWIwZDMtNWE4ZTA5MDNi
MzMzMB4XDTI0MTIxMTEzNTA0OVoXDTI1MDMxMTEyNTA0OVowLzEtMCsGA1UEAxMk
YzUxNzZiMzItMzg5Ni00YjVmLTlhNDUtMWJlNmQ0YWVhODMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhczr03ng2wGyuCi5Z7VKSt4xGSCWln/ll+lt
RgCyvsgRTtFY6yWHjSrtHCMP/6dwUJfyl67i7qCAuD4Zq5kBYklYcUIaeKwVlNj6
wdfV9cXM0w/6CWV33PomLzr6ZHs6aOYH7ZVYXUTyBiu6H5iTT3UZNVF99dmf2oDA
xN9Y2VBrEYFrrsasaG/WxG6Ebb56EZL7ktITosADyexY6xgU0kFnVgVmVtb8ALqt
ehNhtjIzJ5qthGtwUB5AFsYdVv7Pg48Mr7TAMZTMvue9PbpkN8Y4jLf2VJwOhl/Q
gGjR3fy/KRNPDbUQUICQhqEFWzYMGSE5T0GkJ9OzesmUDySlNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE4suJZxOOQGw/PEs6RewRvBCoViMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ODIy
MTUwZi0yZTZmLTRmYzktYjBkMy01YThlMDkwM2IzMzMvODkwZGIzMjktMjQ3OC0z
NDQyLWI2YjMtZWM4NDMzMWE2YTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTgyMjE1MGYtMmU2Zi00ZmM5LWIw
ZDMtNWE4ZTA5MDNiMzMzLzk4MjIxNTBmLTJlNmYtNGZjOS1iMGQzLTVhOGUwOTAz
YjMzMy5jcmwwHwYDVR0jBBgwFoAU6PtTQ2MJkFBb6KTESgm8RptQc+MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi85ODIyMTUwZi0yZTZmLTRmYzktYjBkMy01YThl
MDkwM2IzMzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzdAAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAzUH8JVVoKZCpjIFDCRTopvW7pCPW9fKss3igQJ39tZSBFaWNEk2+pW
IeqZKI0esuiRlSKl1+hIrI1cK0JTDGhNfMa6naVI7qj0T4k7uj62red9VqYxxpjG
kjL8mCyBJqKy5+R0fyO9VmQA30zfkP56OOqfo5GmQZhin2O2Nk+9Cxp05ak1nDsR
Azcbx88SCQ2+Tp6pO1PFyNbXZ6+yTvLRFFb7WRmjrXIKXrSnBe8tIfknzCthviLy
OREHx2NBcH/xQpaoyqqNxSKT1IkkL9jFgh/+GdgiRz8c6m3jO5oz8j+Eyeb+Zt5z
2IXkMHxS0tY8XcO720xOhObyGIjcezY=
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:18:52 2025 by rpki-client