Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/879a586a-5dbd-3989-ac66-822d1f92f8f6.roa
File: 879a586a-5dbd-3989-ac66-822d1f92f8f6.roa (raw, json)
Hash identifier: EGuNr8yJROGdH687cI1XmMZ2Kep1qYxgNuoTHFoqBn8=
Subject key identifier: 75:32:2B:8F:B1:67:45:D7:F3:9B:F5:8D:F4:AB:E0:EA:A2:51:D8:57
Certificate issuer: /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Certificate serial: 010D0C9F43285848EC969567CF52C8942EE7BF00
Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/879a586a-5dbd-3989-ac66-822d1f92f8f6.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 16509
IP address blocks: 142.202.36.0/24 maxlen: 24
142.202.37.0/24 maxlen: 24
142.202.38.0/24 maxlen: 24
142.202.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:95:67:cf:52:c8:94:2e:e7:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=c2cbdefa-7d38-453e-95f1-55adbdf4c32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:dd:53:5f:aa:02:ee:c2:65:d4:8c:9b:2c:f0:
4d:4e:d3:df:0c:57:69:2d:b6:cc:a6:24:c6:90:6f:
06:4f:22:6a:5c:d3:cc:4d:59:1f:57:5f:fb:a4:0d:
72:f2:28:04:cc:95:78:20:c3:e2:79:bd:8e:b3:73:
bb:09:dc:4a:94:54:f4:3a:36:3f:37:b3:18:ea:10:
00:8e:bd:f7:9b:61:46:71:ba:2b:6a:37:2f:c7:2e:
a6:dc:24:71:2d:54:e8:ac:86:4a:70:e6:7d:a4:91:
44:0f:ff:33:00:7c:4a:a6:25:5f:6f:2b:06:14:0f:
c3:3b:ba:34:55:2a:6b:44:09:88:c7:34:01:b7:5c:
81:1d:69:e4:9f:2a:00:60:cc:c8:7f:3e:97:da:ed:
01:13:ba:2f:89:80:07:54:e9:80:3d:5c:98:df:2b:
3a:32:48:2e:85:be:e6:cf:fa:37:ff:c9:42:05:de:
ba:74:dd:aa:3b:6a:64:c7:87:20:c6:31:cf:d4:71:
8e:fd:05:6b:30:a3:64:1b:0b:9a:20:0c:51:5a:51:
7b:79:c2:1c:08:d1:1e:ca:cc:fe:2d:d3:ed:44:6a:
da:d7:45:9a:4f:39:85:e9:8f:ac:db:5c:17:24:8a:
91:69:5f:be:44:6a:7e:98:89:2c:2f:99:d3:4e:ce:
fc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:32:2B:8F:B1:67:45:D7:F3:9B:F5:8D:F4:AB:E0:EA:A2:51:D8:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/879a586a-5dbd-3989-ac66-822d1f92f8f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl
X509v3 Authority Key Identifier:
keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
sbgp-ipAddrBlock: critical
IPv4:
142.202.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:60:aa:01:a1:cb:0c:7c:3f:2c:e9:2f:c0:5c:56:5e:e5:90:
37:cc:29:5e:5a:dc:dc:0d:f6:f4:d0:63:f8:85:cc:92:12:9a:
8d:e1:78:bf:72:3a:52:9f:ce:78:65:38:3a:dd:7f:fa:db:59:
b2:59:f0:39:02:a8:6a:92:3e:74:22:c5:c9:bd:9c:59:e2:6d:
f9:63:3c:9a:13:dd:bd:d8:ca:b9:8e:62:fb:5e:ac:1d:ec:a9:
40:62:b2:c6:c7:cb:2a:c4:0b:9d:be:a6:d1:f1:8e:2b:58:a9:
25:d3:31:d0:bc:f2:10:dd:06:f3:e4:f0:86:7b:96:fa:da:be:
c2:24:37:fb:04:28:41:c7:e0:c2:81:cd:6e:78:e4:2c:18:c0:
d3:cc:5c:19:5c:d4:f1:ba:d0:5e:c9:8c:a4:67:36:e8:f3:66:
cd:25:ea:cc:2a:65:e2:7e:01:f1:f3:4d:0a:64:87:4f:70:ec:
14:d3:72:5e:9f:4a:50:b3:0a:83:fa:2d:99:f4:54:fd:bb:25:
08:82:87:0b:d4:f6:70:74:c4:99:75:19:e5:84:d3:c1:97:21:
86:8d:5c:40:d4:4b:1d:cd:6c:b6:c3:ea:a8:d5:a7:ce:15:8c:
a5:24:8b:cb:34:14:63:76:3d:d1:c8:8a:ba:da:d3:30:66:2b:
40:dd:bd:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslpVnz1LIlC7nvwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODZiY2RhNjgtMTVmZC00YzdkLTk4ODctZDlkNjdmMmNh
OTY5MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk
YzJjYmRlZmEtN2QzOC00NTNlLTk1ZjEtNTVhZGJkZjRjMzJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh91TX6oC7sJl1IybLPBNTtPfDFdpLbbMpiTG
kG8GTyJqXNPMTVkfV1/7pA1y8igEzJV4IMPieb2Os3O7CdxKlFT0OjY/N7MY6hAA
jr33m2FGcborajcvxy6m3CRxLVTorIZKcOZ9pJFED/8zAHxKpiVfbysGFA/DO7o0
VSprRAmIxzQBt1yBHWnknyoAYMzIfz6X2u0BE7oviYAHVOmAPVyY3ys6Mkguhb7m
z/o3/8lCBd66dN2qO2pkx4cgxjHP1HGO/QVrMKNkGwuaIAxRWlF7ecIcCNEeysz+
LdPtRGra10WaTzmF6Y+s21wXJIqRaV++RGp+mIksL5nTTs78ywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHUyK4+xZ0XX85v1jfSr4OqiUdhXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NmJj
ZGE2OC0xNWZkLTRjN2QtOTg4Ny1kOWQ2N2YyY2E5NjkvODc5YTU4NmEtNWRiZC0z
OTg5LWFjNjYtODIyZDFmOTJmOGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODZiY2RhNjgtMTVmZC00YzdkLTk4
ODctZDlkNjdmMmNhOTY5Lzg2YmNkYTY4LTE1ZmQtNGM3ZC05ODg3LWQ5ZDY3ZjJj
YTk2OS5jcmwwHwYDVR0jBBgwFoAU3aPE+YsUoOm+qk9Hqd0Wrjr3/jEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84NmJjZGE2OC0xNWZkLTRjN2QtOTg4Ny1kOWQ2
N2YyY2E5NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjsokMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGlgqgGhywx8PyzpL8BcVl7lkDfMKV5a3NwN9vTQY/iFzJISmo3heL9y
OlKfznhlODrdf/rbWbJZ8DkCqGqSPnQixcm9nFnibfljPJoT3b3YyrmOYvterB3s
qUBissbHyyrEC52+ptHxjitYqSXTMdC88hDdBvPk8IZ7lvravsIkN/sEKEHH4MKB
zW545CwYwNPMXBlc1PG60F7JjKRnNujzZs0l6swqZeJ+AfHzTQpkh09w7BTTcl6f
SlCzCoP6LZn0VP27JQiChwvU9nB0xJl1GeWE08GXIYaNXEDUSx3NbLbD6qjVp84V
jKUki8s0FGN2PdHIirra0zBmK0Ddvf8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:36 2025 by rpki-client