Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/cf7b1268-ef8f-34ed-9a98-703dd560e2ee.roa
File: cf7b1268-ef8f-34ed-9a98-703dd560e2ee.roa (raw, json)
Hash identifier: yWo1P1yFw7NTpAW6/1pSwgpFbJzwlXYml50i7HXaQQw=
Subject key identifier: C2:7F:FF:AE:C9:30:7B:2F:9C:99:D2:E2:17:3E:D4:47:AD:56:F6:F5
Certificate issuer: /CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9
Certificate serial: 010D0C9F43285848BBBB8829421B82CA131F0F20
Authority key identifier: B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/cf7b1268-ef8f-34ed-9a98-703dd560e2ee.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 400790
IP address blocks: 207.228.218.0/24 maxlen: 24
2606:f6c0:c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:88:29:42:1b:82:ca:13:1f:0f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=1e0b3b3e-7a74-4600-be98-eb4e76a687fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:74:d8:69:0e:31:6f:45:f9:6b:5a:94:93:37:
a5:f4:76:48:b0:ed:2d:56:ce:39:99:b8:4d:80:64:
77:ee:61:58:54:73:31:6e:31:ed:79:4a:39:1e:dc:
92:59:11:7a:65:01:f9:00:92:53:c2:f6:4d:f8:0d:
ea:37:0d:01:ae:b1:cc:af:1e:70:1e:d2:fc:53:17:
0f:85:f4:90:91:60:59:59:2f:3d:c3:50:03:4d:d6:
d2:fa:ac:8d:30:39:f4:18:f4:65:f7:f0:a7:f6:66:
9b:fa:cc:06:15:08:2d:14:91:91:44:28:6e:95:1c:
57:d8:34:46:ca:50:b3:fd:c2:2b:16:a1:c9:ff:46:
de:27:85:93:a1:48:af:8a:84:53:61:d1:dc:97:a2:
f7:d5:6f:92:ac:e3:3c:9b:75:59:4a:fb:e6:bd:a9:
3e:ef:cf:92:80:16:93:3d:2c:3e:17:2a:ce:a0:53:
73:f0:24:3d:e3:a7:1c:01:ee:fb:b6:d5:07:ea:3b:
4c:2f:6f:c6:6a:fd:f3:85:42:fe:7e:ad:e6:1b:7a:
ea:bc:3a:14:8e:4f:28:42:0f:d2:40:98:e8:4e:5c:
e4:a4:04:5d:e3:8b:70:66:ef:bd:ee:62:dc:2c:3e:
bf:13:5a:07:49:2a:5c:4a:c2:a8:98:30:67:26:40:
5c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7F:FF:AE:C9:30:7B:2F:9C:99:D2:E2:17:3E:D4:47:AD:56:F6:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/cf7b1268-ef8f-34ed-9a98-703dd560e2ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl
X509v3 Authority Key Identifier:
keyid:B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer
sbgp-ipAddrBlock: critical
IPv4:
207.228.218.0/24
IPv6:
2606:f6c0:c0::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:f5:ed:4e:0d:ba:29:75:84:ea:cd:ad:a8:57:83:c5:0f:8a:
f3:d3:84:b6:d3:97:57:b0:0d:14:54:37:6e:d8:d4:21:69:a0:
73:3d:8d:1e:4a:a8:4f:e1:57:f1:92:4f:71:44:64:84:d0:f5:
82:35:3b:f2:c5:a4:64:f8:46:d7:9f:9b:96:7b:6e:fd:22:b6:
60:98:be:1f:e9:18:ba:52:a1:8b:58:d4:0a:cd:e9:ab:45:b9:
ac:0e:98:3f:09:e6:36:89:df:32:fc:bf:dd:1c:d7:9e:1c:4d:
4c:c6:cb:4a:00:29:aa:72:c7:71:f3:bd:49:6a:7f:99:cc:ea:
87:6c:4d:58:8e:30:9f:a2:46:51:a4:88:f5:fe:0b:b5:da:3c:
d7:04:7c:86:a0:bc:26:63:f1:67:a4:c3:4b:95:29:e2:d5:06:
07:ab:9d:ce:fa:48:4a:f3:4e:45:96:ad:c1:2f:18:33:4c:b8:
13:82:44:4b:25:94:60:f4:8d:7c:51:05:2a:2e:0a:a8:82:69:
42:32:6d:27:06:86:e1:49:20:0e:4e:de:38:02:8f:69:48:9c:
1b:b8:c9:a3:db:e5:a3:da:2f:cb:c6:ca:5f:3d:b7:36:37:63:
6f:90:ee:d6:71:7c:62:c0:9b:95:98:1f:11:51:ae:ed:1f:c9:
60:b4:71:63
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEi7u4gpQhuCyhMfDyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmU2OWU1NWQtM2JhZi00MWU2LTllNjctYmJlNWVkODg4
YmU5MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk
MWUwYjNiM2UtN2E3NC00NjAwLWJlOTgtZWI0ZTc2YTY4N2ZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83TYaQ4xb0X5a1qUkzel9HZIsO0tVs45mbhN
gGR37mFYVHMxbjHteUo5HtySWRF6ZQH5AJJTwvZN+A3qNw0BrrHMrx5wHtL8UxcP
hfSQkWBZWS89w1ADTdbS+qyNMDn0GPRl9/Cn9mab+swGFQgtFJGRRChulRxX2DRG
ylCz/cIrFqHJ/0beJ4WToUivioRTYdHcl6L31W+SrOM8m3VZSvvmvak+78+SgBaT
PSw+FyrOoFNz8CQ946ccAe77ttUH6jtML2/Gav3zhUL+fq3mG3rqvDoUjk8oQg/S
QJjoTlzkpARd44twZu+97mLcLD6/E1oHSSpcSsKomDBnJkBcrwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFMJ//67JMHsvnJnS4hc+1EetVvb1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yZTY5
ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1ZWQ4ODhiZTkvY2Y3YjEyNjgtZWY4Zi0z
NGVkLTlhOTgtNzAzZGQ1NjBlMmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmU2OWU1NWQtM2JhZi00MWU2LTll
NjctYmJlNWVkODg4YmU5LzJlNjllNTVkLTNiYWYtNDFlNi05ZTY3LWJiZTVlZDg4
OGJlOS5jcmwwHwYDVR0jBBgwFoAUuOVt8qT8p5onhZVWGclu3DiFdDswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yZTY5ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1
ZWQ4ODhiZTkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAz+TaMA8E
AgACMAkDBwAmBvbAAMAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAefXtTg26KXWE6s2tqFeDxQ+K89OEttOX
V7ANFFQ3btjUIWmgcz2NHkqoT+FX8ZJPcURkhND1gjU78sWkZPhG15+blntu/SK2
YJi+H+kYulKhi1jUCs3pq0W5rA6YPwnmNonfMvy/3RzXnhxNTMbLSgApqnLHcfO9
SWp/mczqh2xNWI4wn6JGUaSI9f4Ltdo81wR8hqC8JmPxZ6TDS5Up4tUGB6udzvpI
SvNORZatwS8YM0y4E4JESyWUYPSNfFEFKi4KqIJpQjJtJwaG4UkgDk7eOAKPaUic
G7jJo9vlo9ovy8bKXz23Njdjb5Du1nF8YsCblZgfEVGu7R/JYLRxYw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:32 2025 by rpki-client