Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/c081ebc4-6d1b-361f-b2cb-2e9b4ded8c8f.roa
File: c081ebc4-6d1b-361f-b2cb-2e9b4ded8c8f.roa (raw, json)
Hash identifier: 2GA8xaRW1o4JqD+k9tdXntv0GD1riE4wjjAw/as+RBA=
Subject key identifier: C4:65:9C:9A:99:D6:1B:82:81:C3:5D:56:5E:BC:FC:35:C4:DC:9E:A6
Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial: 010D0C9F43285848F926A64A2A379C47B2570854
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/c081ebc4-6d1b-361f-b2cb-2e9b4ded8c8f.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 16509
IP address blocks: 208.70.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:a6:4a:2a:37:9c:47:b2:57:08:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=663f805e-f722-40e0-a83b-0295c089df32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:36:e8:fe:03:80:68:09:4d:b4:da:50:17:bb:
51:8e:f2:02:67:3f:bc:a0:60:67:4c:97:57:17:9f:
d3:70:04:4a:78:e7:5e:c3:76:11:7f:02:07:d7:e2:
48:49:ef:a2:53:34:82:03:45:93:53:0e:a6:77:1e:
9d:d9:5f:26:94:88:35:df:90:76:f7:c7:ff:ea:1b:
b8:73:94:ac:5d:78:d3:4d:d6:aa:c3:f7:a3:c1:95:
a4:d0:58:0c:4c:f1:c6:3e:2e:62:c6:fa:4d:21:46:
06:83:c1:6d:38:10:7d:db:90:19:af:b2:d0:39:41:
0f:bb:91:24:e9:ad:06:df:33:8f:e7:5e:b3:ab:8e:
80:8b:a2:07:ab:54:ce:c2:1e:cb:88:32:7c:42:cb:
42:13:d5:a2:b2:d9:c1:53:4f:b6:a2:09:fb:1c:69:
2d:f7:0f:7b:0c:21:40:d6:43:77:53:64:87:b8:67:
99:2a:42:00:67:35:e1:b1:e4:9b:c8:ec:dd:d8:df:
f6:43:0c:fa:bd:cb:61:92:18:fa:e9:08:aa:a2:40:
62:2c:cb:31:c3:61:fd:21:e0:e7:93:95:d7:53:8c:
05:f7:d6:e6:4a:ab:52:d0:be:cf:69:0f:1e:dd:93:
48:d4:2a:4c:09:63:c4:a3:dc:92:1b:8d:12:ff:ac:
21:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:65:9C:9A:99:D6:1B:82:81:C3:5D:56:5E:BC:FC:35:C4:DC:9E:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/c081ebc4-6d1b-361f-b2cb-2e9b4ded8c8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
X509v3 Authority Key Identifier:
keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
sbgp-ipAddrBlock: critical
IPv4:
208.70.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:64:59:30:31:9d:c8:29:25:1c:ff:ba:3e:9d:e5:a7:dd:40:
21:e7:34:3e:28:60:11:6f:79:05:79:71:3b:75:b1:e7:6f:96:
58:5e:e7:f5:ef:c9:26:47:50:c1:d0:bd:98:3b:dc:38:a8:38:
e4:04:78:e0:24:1d:a3:46:48:b1:87:be:89:1a:bd:b6:70:38:
40:e6:35:59:f0:16:b3:5f:0c:93:e9:f4:24:7b:2b:50:cf:1c:
4a:38:f7:d2:b0:81:1d:d3:a4:95:34:62:9c:8e:0c:fa:ab:f6:
5c:f2:f2:25:d0:85:31:0b:7c:39:6a:2c:dd:07:f2:0b:89:a9:
ec:40:e4:82:7c:63:0a:e5:04:a7:13:d6:42:e2:54:12:fa:69:
8b:0a:c8:14:d1:0a:f2:20:74:32:33:22:b3:ec:86:bc:53:3c:
ab:f0:df:ed:f4:5b:5b:01:4a:28:d9:1c:f9:10:2b:50:cc:1a:
e5:fb:80:3b:b8:8c:10:53:94:4a:77:a3:bc:b5:16:02:81:bf:
c9:22:6b:5b:71:ea:cb:ef:9b:a6:3e:1a:12:1c:1a:99:4c:35:
3d:fa:05:ae:aa:18:2b:89:f8:b3:5a:46:9d:29:cc:18:74:2d:
22:09:a7:85:46:69:cf:7d:28:1d:89:10:c9:50:9e:ad:02:9a:
2d:f3:25:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JqZKKjecR7JXCFQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1
YTA0MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
NjYzZjgwNWUtZjcyMi00MGUwLWE4M2ItMDI5NWMwODlkZjMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Tbo/gOAaAlNtNpQF7tRjvICZz+8oGBnTJdX
F5/TcARKeOdew3YRfwIH1+JISe+iUzSCA0WTUw6mdx6d2V8mlIg135B298f/6hu4
c5SsXXjTTdaqw/ejwZWk0FgMTPHGPi5ixvpNIUYGg8FtOBB925AZr7LQOUEPu5Ek
6a0G3zOP516zq46Ai6IHq1TOwh7LiDJ8QstCE9WistnBU0+2ogn7HGkt9w97DCFA
1kN3U2SHuGeZKkIAZzXhseSbyOzd2N/2Qwz6vcthkhj66QiqokBiLMsxw2H9IeDn
k5XXU4wF99bmSqtS0L7PaQ8e3ZNI1CpMCWPEo9ySG40S/6wh8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMRlnJqZ1huCgcNdVl68/DXE3J6mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh
Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvYzA4MWViYzQtNmQxYi0z
NjFmLWIyY2ItMmU5YjRkZWQ4YzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh
M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi
NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx
OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGFkWTAxncgpJRz/uj6d5afdQCHnND4oYBFveQV5cTt1sedvllhe5/Xv
ySZHUMHQvZg73DioOOQEeOAkHaNGSLGHvokavbZwOEDmNVnwFrNfDJPp9CR7K1DP
HEo499KwgR3TpJU0YpyODPqr9lzy8iXQhTELfDlqLN0H8guJqexA5IJ8YwrlBKcT
1kLiVBL6aYsKyBTRCvIgdDIzIrPshrxTPKvw3+30W1sBSijZHPkQK1DMGuX7gDu4
jBBTlEp3o7y1FgKBv8kia1tx6svvm6Y+GhIcGplMNT36Ba6qGCuJ+LNaRp0pzBh0
LSIJp4VGac99KB2JEMlQnq0Cmi3zJZo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:02 2025 by rpki-client