Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b1c86e78-67c7-333a-928e-a0cff3179bb3.roa
File: b1c86e78-67c7-333a-928e-a0cff3179bb3.roa (raw, json)
Hash identifier: zuk+p32j+wrE6SIUvnlub10rR4MHKR580sfujLD5UxU=
Subject key identifier: 8B:9A:60:A8:87:5B:5F:31:46:EE:51:A8:A6:71:87:02:39:3A:CD:DF
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F43285848467ABD273A2EAED468366600
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b1c86e78-67c7-333a-928e-a0cff3179bb3.roa
Signing time: Sat 21 Dec 2024 02:00:39 +0000
ROA not before: Sat 21 Dec 2024 02:00:39 +0000
ROA not after: Fri 21 Mar 2025 01:00:39 +0000
asID: 13576
IP address blocks: 208.53.224.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:46:7a:bd:27:3a:2e:ae:d4:68:36:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Dec 21 02:00:39 2024 GMT
Not After : Mar 21 01:00:39 2025 GMT
Subject: CN=92382ec7-f5f1-4dd6-b67d-32ca8541aead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:26:e2:fe:27:05:d9:fb:56:06:6f:9a:21:99:
c1:a9:7c:fe:f6:27:32:13:a0:7f:8f:c8:a4:69:a3:
45:df:27:78:ac:57:68:83:ed:01:f4:9a:1a:8d:7f:
de:60:2b:d9:c3:13:e0:5b:dc:6d:01:9c:38:7f:97:
5d:fc:89:4b:86:9f:c4:64:b9:a0:b5:a6:37:9a:67:
9a:22:fe:85:00:16:5f:66:e1:a5:df:b6:02:8b:b7:
e3:0d:d1:1e:d3:fd:84:c3:08:49:c5:34:cc:f6:a4:
c3:12:02:9e:e8:86:51:24:7c:47:03:bb:37:d7:4c:
2e:0e:15:08:5b:c1:25:c2:ad:ac:a8:4c:60:b5:de:
37:96:3a:0e:26:15:82:34:37:a6:e2:8a:eb:3e:7b:
eb:87:f2:38:0d:fb:15:0c:cb:69:79:e4:76:bd:9a:
f0:e7:f4:70:c9:ff:e2:0a:86:91:f4:88:34:56:ac:
1d:b5:f4:ee:df:23:6d:69:a4:7e:48:37:93:a4:3d:
4c:e9:fa:0a:c0:39:ed:f6:6c:d8:62:ea:0e:f2:76:
ec:7c:af:36:ab:c1:ea:dc:e2:0e:59:e0:f1:b1:04:
66:ff:9e:b1:de:a6:c7:3e:02:7b:f1:4f:fe:18:da:
eb:1c:03:91:f6:df:5b:b6:b5:ed:d9:41:fa:f3:3a:
58:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9A:60:A8:87:5B:5F:31:46:EE:51:A8:A6:71:87:02:39:3A:CD:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b1c86e78-67c7-333a-928e-a0cff3179bb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
208.53.224.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:7d:a1:fe:9d:09:02:71:be:df:34:f1:75:c7:5c:4c:d2:95:
b1:25:c7:f1:32:aa:a5:08:74:ca:48:21:ca:45:6b:bf:9d:97:
6d:af:43:99:49:de:c7:d8:c1:8f:f5:9c:af:4e:7e:22:2f:8c:
ed:e8:da:4b:44:c1:6c:1f:9b:5b:59:6f:11:be:5a:a1:9f:a3:
80:a2:35:2c:2c:95:2e:f5:88:50:d3:f9:0b:f3:bd:38:f0:aa:
fe:4b:bb:e9:45:4e:a2:c4:46:f4:b4:63:23:4c:1e:3a:37:4f:
b6:40:ef:71:33:0d:f3:b0:9c:f1:cb:bb:5c:21:03:de:59:8e:
c2:94:59:e8:a0:97:87:66:89:49:06:38:bb:b7:31:63:1d:a5:
e4:fb:2b:38:d2:71:f6:20:cc:80:a9:2f:36:6e:a3:66:02:e7:
ce:c5:58:bc:a9:3c:a0:91:10:06:0a:88:80:24:23:6f:5e:6d:
fd:ac:5c:f8:ba:fa:b9:a7:0a:45:65:71:29:c2:13:75:fa:3e:
d0:1c:66:7b:9a:d4:d6:45:a4:6f:e4:22:d2:c2:aa:5e:f1:f1:
46:85:24:e8:0f:a6:b6:dc:38:b8:30:47:f3:b3:aa:02:59:92:
2d:6f:16:4f:37:b3:c2:a7:94:5e:18:9c:14:79:b3:bc:38:3c:
98:85:aa:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhGer0nOi6u1Gg2ZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4
NWVmMB4XDTI0MTIyMTAyMDAzOVoXDTI1MDMyMTAxMDAzOVowLzEtMCsGA1UEAxMk
OTIzODJlYzctZjVmMS00ZGQ2LWI2N2QtMzJjYTg1NDFhZWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyibi/icF2ftWBm+aIZnBqXz+9icyE6B/j8ik
aaNF3yd4rFdog+0B9JoajX/eYCvZwxPgW9xtAZw4f5dd/IlLhp/EZLmgtaY3mmea
Iv6FABZfZuGl37YCi7fjDdEe0/2EwwhJxTTM9qTDEgKe6IZRJHxHA7s310wuDhUI
W8Elwq2sqExgtd43ljoOJhWCNDem4orrPnvrh/I4DfsVDMtpeeR2vZrw5/Rwyf/i
CoaR9Ig0VqwdtfTu3yNtaaR+SDeTpD1M6foKwDnt9mzYYuoO8nbsfK82q8Hq3OIO
WeDxsQRm/56x3qbHPgJ78U/+GNrrHAOR9t9btrXt2UH68zpY1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIuaYKiHW18xRu5RqKZxhwI5Os3fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm
YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYjFjODZlNzgtNjdjNy0z
MzNhLTkyOGUtYTBjZmYzMTc5YmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2
ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm
ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh
ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0DXgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALl9of6dCQJxvt808XXHXEzSlbElx/EyqqUIdMpIIcpFa7+dl22vQ5lJ
3sfYwY/1nK9OfiIvjO3o2ktEwWwfm1tZbxG+WqGfo4CiNSwslS71iFDT+QvzvTjw
qv5Lu+lFTqLERvS0YyNMHjo3T7ZA73EzDfOwnPHLu1whA95ZjsKUWeigl4dmiUkG
OLu3MWMdpeT7KzjScfYgzICpLzZuo2YC587FWLypPKCREAYKiIAkI29ebf2sXPi6
+rmnCkVlcSnCE3X6PtAcZnua1NZFpG/kItLCql7x8UaFJOgPprbcOLgwR/OzqgJZ
ki1vFk83s8KnlF4YnBR5s7w4PJiFqq8=
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:25:52 2025 by rpki-client