Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/8d0f3289-4f04-3390-b0f7-ead2fa143cd4.roa
File: 8d0f3289-4f04-3390-b0f7-ead2fa143cd4.roa (raw, json)
Hash identifier: P8OhAT1pd05IKDVCFbmot2rYwIaVdrSOSy8kOS4JQuU=
Subject key identifier: C6:02:E1:3D:98:5D:9A:A7:A9:05:10:FC:DC:B5:FB:ED:C1:F5:EA:06
Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial: 010D0C9F432858481C9A89E11B2B8461ACC3B580
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/8d0f3289-4f04-3390-b0f7-ead2fa143cd4.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 13807
IP address blocks: 223.165.96.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:89:e1:1b:2b:84:61:ac:c3:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=7d583ba3-aa2b-4732-91b7-b47dbdfff443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e1:f3:b4:60:39:43:13:92:5d:11:85:0f:f4:
c9:92:8a:73:b2:71:ac:4b:3d:e1:94:4d:c6:6d:b0:
57:dc:dc:04:11:2f:1a:11:49:96:58:a1:f3:30:90:
91:50:8e:f6:eb:f0:75:40:ee:be:a5:76:e6:f8:aa:
2b:08:e6:57:13:3b:ff:5d:1d:0f:08:e1:6a:ed:b8:
2d:be:f1:91:7b:4c:9d:1b:4c:a8:03:37:9b:89:4a:
50:fd:23:47:da:31:18:52:10:a2:eb:0b:a0:0d:04:
29:91:53:aa:42:45:aa:6d:c2:3f:80:ba:b9:15:a4:
48:bd:61:f9:8b:24:af:e9:31:a7:9f:a9:2e:4f:24:
ef:ee:2f:02:8b:00:5a:1d:6c:a8:7f:5f:3e:c6:84:
1d:a5:fb:a9:f2:d4:f6:ed:90:50:b3:05:49:68:e1:
da:6f:16:32:44:f1:94:38:50:92:ce:ed:c9:d5:bd:
2f:c2:48:37:46:12:46:6c:4f:9a:a7:7b:03:ce:24:
fb:49:b2:1e:85:f8:ac:f1:11:b0:3d:17:17:f7:bb:
c8:40:0b:3a:d5:33:ee:83:0f:18:3e:08:46:71:40:
fe:24:0e:40:2a:36:2f:a0:c1:e1:04:5e:89:88:ae:
c6:20:34:80:cc:d1:29:f0:55:98:c7:df:42:e2:1e:
66:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:02:E1:3D:98:5D:9A:A7:A9:05:10:FC:DC:B5:FB:ED:C1:F5:EA:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/8d0f3289-4f04-3390-b0f7-ead2fa143cd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
X509v3 Authority Key Identifier:
keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
sbgp-ipAddrBlock: critical
IPv4:
223.165.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:c9:bc:33:1f:89:e3:4d:0e:78:2e:48:51:27:79:ce:72:98:
ff:d5:5f:c4:88:9e:75:7c:dd:12:89:89:fa:30:93:28:07:f3:
8a:20:be:ac:a8:0f:1b:7f:c1:41:26:a0:03:f1:dd:6a:ee:9c:
9a:3d:b7:94:52:5d:71:82:94:36:11:52:59:24:66:d9:54:65:
56:e1:39:04:b2:46:38:01:c6:22:89:ea:2d:76:84:ae:be:4e:
d1:76:3b:a6:cb:df:91:9f:55:fd:2b:9d:68:7a:16:bf:46:4a:
47:4b:41:d8:3b:79:d1:e3:34:33:8f:12:b2:5f:4a:f5:d5:7d:
34:29:e4:b7:de:fb:cf:f9:60:f0:37:9a:21:d1:77:d4:ab:01:
50:d0:85:4f:c3:fe:e1:04:2b:a2:57:af:f9:b4:90:c6:1e:b6:
07:71:12:29:ef:7e:fb:8d:e8:76:91:7a:4e:ab:b7:d1:be:41:
de:30:ed:45:b2:7b:e8:40:2d:ab:7c:65:f5:57:12:a1:d5:3a:
c2:fa:0b:4e:4a:8d:be:23:68:f0:12:e9:67:ef:79:e8:ae:c4:
4a:2f:90:f9:c4:60:4b:a1:8f:87:d1:67:4f:ab:84:6f:57:8d:
87:38:5d:e0:b0:fb:93:79:74:60:ca:f1:0f:98:47:e5:18:93:
4d:b0:cc:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgcmonhGyuEYazDtYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw
NTM2MB4XDTI0MTIwNjAyMDAzOVoXDTI1MDMwNjAyMDAzOVowLzEtMCsGA1UEAxMk
N2Q1ODNiYTMtYWEyYi00NzMyLTkxYjctYjQ3ZGJkZmZmNDQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeHztGA5QxOSXRGFD/TJkopzsnGsSz3hlE3G
bbBX3NwEES8aEUmWWKHzMJCRUI726/B1QO6+pXbm+KorCOZXEzv/XR0PCOFq7bgt
vvGRe0ydG0yoAzebiUpQ/SNH2jEYUhCi6wugDQQpkVOqQkWqbcI/gLq5FaRIvWH5
iySv6TGnn6kuTyTv7i8CiwBaHWyof18+xoQdpfup8tT27ZBQswVJaOHabxYyRPGU
OFCSzu3J1b0vwkg3RhJGbE+ap3sDziT7SbIehfis8RGwPRcX97vIQAs61TPugw8Y
PghGcUD+JA5AKjYvoMHhBF6JiK7GIDSAzNEp8FWYx99C4h5mgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMYC4T2YXZqnqQUQ/Ny1++3B9eoGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm
MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvOGQwZjMyODktNGYwNC0z
MzkwLWIwZjctZWFkMmZhMTQzY2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3
OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj
MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh
ZWUwYzA1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE36VgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHTJvDMfieNNDnguSFEnec5ymP/VX8SInnV83RKJifowkygH84ogvqyo
Dxt/wUEmoAPx3WrunJo9t5RSXXGClDYRUlkkZtlUZVbhOQSyRjgBxiKJ6i12hK6+
TtF2O6bL35GfVf0rnWh6Fr9GSkdLQdg7edHjNDOPErJfSvXVfTQp5Lfe+8/5YPA3
miHRd9SrAVDQhU/D/uEEK6JXr/m0kMYetgdxEinvfvuN6HaRek6rt9G+Qd4w7UWy
e+hALat8ZfVXEqHVOsL6C05Kjb4jaPAS6WfveeiuxEovkPnEYEuhj4fRZ0+rhG9X
jYc4XeCw+5N5dGDK8Q+YR+UYk02wzAE=
-----END CERTIFICATE-----
Generated at Wed Apr 30 01:00:31 2025 by rpki-client