Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/077094e0-9fa0-3b98-895b-14c130a8d3de.roa
File: 077094e0-9fa0-3b98-895b-14c130a8d3de.roa (raw, json)
Hash identifier: P23flPQ6kNeK2W6IG/E7uOwtNXRG9SGwiStuDWTunqI=
Subject key identifier: 51:2A:5A:23:6B:A6:BD:91:EA:55:35:B5:E0:27:A0:81:5D:9A:81:CB
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F43285848467ABE186C2D9C63902E8388
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/077094e0-9fa0-3b98-895b-14c130a8d3de.roa
Signing time: Sat 21 Dec 2024 02:00:39 +0000
ROA not before: Sat 21 Dec 2024 02:00:39 +0000
ROA not after: Fri 21 Mar 2025 01:00:39 +0000
asID: 13576
IP address blocks: 208.53.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:46:7a:be:18:6c:2d:9c:63:90:2e:83:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Dec 21 02:00:39 2024 GMT
Not After : Mar 21 01:00:39 2025 GMT
Subject: CN=a2353197-5009-4d33-a4f4-86114effcf85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1e:7d:cd:4e:99:98:de:8a:86:6f:c4:ce:6f:
8b:90:71:f2:f7:01:71:47:b6:b1:5a:1e:44:d0:47:
4d:c2:13:30:3b:45:c2:1f:95:2a:c1:d7:a2:af:93:
55:b2:d0:a2:f1:eb:2e:86:9b:74:6c:6b:8b:92:88:
c4:56:e9:9b:3f:ac:a5:9e:77:d4:44:a5:10:13:5d:
e1:e0:04:a3:f2:ec:d6:14:5c:b0:20:53:e8:6d:b2:
f6:5f:fe:63:05:21:78:70:6a:4d:cf:0d:0f:2b:c5:
b7:ed:40:45:c7:6f:35:a8:3c:6a:51:64:93:2d:ae:
a8:57:d7:b7:9a:f6:15:5f:90:a5:d0:a7:76:88:cf:
cd:0f:96:fb:41:24:6d:0b:28:24:a0:6c:9c:95:c2:
60:b3:fe:44:04:2f:53:1c:25:f6:cb:64:bf:25:08:
12:4f:4b:1d:7a:3c:85:5d:4b:d9:6d:3d:3c:a6:ce:
6a:fb:0e:21:f9:92:33:ab:ba:07:f9:b4:09:b3:aa:
9c:79:00:5e:65:06:aa:1b:6d:fc:77:4c:dd:43:7d:
29:1a:3f:cd:d8:f6:b9:27:00:22:16:4d:77:e2:b2:
77:e5:f7:24:76:af:2a:34:55:65:5a:5c:59:47:46:
ef:8d:0d:48:b3:7e:c8:1c:c4:b7:6b:b3:48:25:b2:
a1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2A:5A:23:6B:A6:BD:91:EA:55:35:B5:E0:27:A0:81:5D:9A:81:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/077094e0-9fa0-3b98-895b-14c130a8d3de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
208.53.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:99:26:0a:a2:96:c9:9f:e0:b9:7a:0e:d3:b3:6b:05:f4:47:
03:1a:69:7b:24:fc:52:b4:8a:88:d0:ae:d2:06:a2:56:e0:d5:
26:4f:4f:8e:27:a5:c5:ff:4e:55:77:77:62:e3:c2:30:2c:67:
54:33:1b:3c:79:d2:c4:17:83:00:f4:97:76:d5:60:2e:1b:4f:
06:54:1b:92:a8:bf:d0:93:20:e6:d8:0e:15:48:24:2a:4b:08:
be:b6:8d:51:e0:a3:69:2d:db:4d:fe:22:76:6d:7b:22:56:0f:
21:02:0d:fd:e8:f2:73:a2:91:53:ae:2a:b4:bc:39:47:e3:ff:
a8:51:c5:c0:b2:c1:1a:ba:e8:75:60:11:ed:6c:10:79:02:68:
84:df:9e:d6:cb:13:27:ae:79:37:c1:37:10:66:0b:64:15:0c:
e8:4e:a2:d0:e3:8d:e7:0c:9d:ac:58:1b:e7:19:15:71:26:f9:
ed:90:86:01:19:81:2b:f4:52:6f:9e:4d:7f:56:79:ba:39:30:
96:fe:47:5b:f8:2e:5b:9f:c7:80:34:34:55:9d:c4:0b:26:0c:
11:0a:48:be:fb:4f:ef:d9:7e:4c:0b:ce:1d:cc:84:cf:74:ce:
af:13:ba:ce:b9:ea:fe:97:fe:72:a7:64:82:f2:ea:8b:79:86:
a5:b2:a5:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhGer4YbC2cY5Aug4gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4
NWVmMB4XDTI0MTIyMTAyMDAzOVoXDTI1MDMyMTAxMDAzOVowLzEtMCsGA1UEAxMk
YTIzNTMxOTctNTAwOS00ZDMzLWE0ZjQtODYxMTRlZmZjZjg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh59zU6ZmN6Khm/Ezm+LkHHy9wFxR7axWh5E
0EdNwhMwO0XCH5Uqwdeir5NVstCi8esuhpt0bGuLkojEVumbP6ylnnfURKUQE13h
4ASj8uzWFFywIFPobbL2X/5jBSF4cGpNzw0PK8W37UBFx281qDxqUWSTLa6oV9e3
mvYVX5Cl0Kd2iM/ND5b7QSRtCygkoGyclcJgs/5EBC9THCX2y2S/JQgST0sdejyF
XUvZbT08ps5q+w4h+ZIzq7oH+bQJs6qceQBeZQaqG238d0zdQ30pGj/N2Pa5JwAi
Fk134rJ35fckdq8qNFVlWlxZR0bvjQ1Is37IHMS3a7NIJbKhawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFEqWiNrpr2R6lU1teAnoIFdmoHLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm
YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMDc3MDk0ZTAtOWZhMC0z
Yjk4LTg5NWItMTRjMTMwYThkM2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2
ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm
ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh
ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DXuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE2ZJgqilsmf4Ll6DtOzawX0RwMaaXsk/FK0iojQrtIGolbg1SZPT44n
pcX/TlV3d2LjwjAsZ1QzGzx50sQXgwD0l3bVYC4bTwZUG5Kov9CTIObYDhVIJCpL
CL62jVHgo2kt203+InZteyJWDyECDf3o8nOikVOuKrS8OUfj/6hRxcCywRq66HVg
Ee1sEHkCaITfntbLEyeueTfBNxBmC2QVDOhOotDjjecMnaxYG+cZFXEm+e2QhgEZ
gSv0Um+eTX9Webo5MJb+R1v4Llufx4A0NFWdxAsmDBEKSL77T+/ZfkwLzh3MhM90
zq8Tus656v6X/nKnZILy6ot5hqWypcM=
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:01:16 2025 by rpki-client