Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/38c17b7a-0754-332b-ad37-ba79d152d002.roa
File: 38c17b7a-0754-332b-ad37-ba79d152d002.roa (raw, json)
Hash identifier: ZVWSWH8RG91Dhz64lf1diU6eP5n3RcB5hNvNDNXkoOI=
Subject key identifier: BD:C2:28:E5:34:97:41:7A:FA:6D:1A:F7:D1:D6:98:70:CD:3B:C6:99
Certificate issuer: /CN=bad5af20-8385-44d4-815f-bb83497d4a0e
Certificate serial: 010D0C9F43285848E16BD2702215E466EAD92DC0
Authority key identifier: 11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/38c17b7a-0754-332b-ad37-ba79d152d002.roa
Signing time: Fri 14 Feb 2025 14:00:52 +0000
ROA not before: Fri 14 Feb 2025 14:00:52 +0000
ROA not after: Thu 15 May 2025 13:00:52 +0000
asID: 399726
IP address blocks: 204.144.180.0/24 maxlen: 24
204.144.182.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:6b:d2:70:22:15:e4:66:ea:d9:2d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad5af20-8385-44d4-815f-bb83497d4a0e
Validity
Not Before: Feb 14 14:00:52 2025 GMT
Not After : May 15 13:00:52 2025 GMT
Subject: CN=39d9d245-7ae2-440f-9c38-e561cea4450e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:32:03:5f:06:72:dd:c8:f1:fc:da:d5:87:19:
64:d3:8b:4f:49:bf:d0:ee:c1:2b:28:ec:2b:1d:49:
e6:f1:d1:c8:87:ce:7a:da:9f:9b:0d:b2:1b:42:fa:
f1:3f:1c:96:ec:14:8a:1a:92:4f:ce:55:30:25:81:
f7:e9:97:d8:db:04:bd:6e:da:a8:4f:06:48:fe:45:
3e:ab:84:a3:ff:44:00:2e:4a:20:cf:1b:ff:99:30:
c4:fe:d1:7f:df:94:b7:4b:6b:ae:dc:67:22:67:ad:
da:71:fa:f4:bb:7d:cb:75:95:37:37:c7:2c:fd:91:
83:d0:f8:a1:d9:4d:1d:1a:0d:58:66:d7:10:d6:c2:
4e:5d:6f:ec:81:63:d5:cd:27:92:a5:ff:2f:e9:ba:
e7:4c:cc:70:38:85:03:23:ec:e8:2b:af:e8:6c:e1:
ee:bd:6d:7b:86:59:94:bd:09:37:ec:04:a3:bb:e7:
f5:d6:c1:2c:3f:bc:23:5c:66:5c:56:e7:7b:af:44:
c4:ca:ca:17:09:18:bb:b1:69:de:dd:0c:c3:63:63:
91:94:5b:32:6e:e5:56:32:da:d9:fa:aa:9f:4a:4c:
8a:6e:4c:67:24:c0:c4:26:78:c6:00:d8:96:48:e5:
3f:2f:26:09:ca:92:ae:4b:85:03:60:73:83:8a:94:
f2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C2:28:E5:34:97:41:7A:FA:6D:1A:F7:D1:D6:98:70:CD:3B:C6:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/38c17b7a-0754-332b-ad37-ba79d152d002.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl
X509v3 Authority Key Identifier:
keyid:11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer
sbgp-ipAddrBlock: critical
IPv4:
204.144.180.0/24
204.144.182.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:39:59:df:b4:5f:54:b8:34:90:31:bf:54:71:76:eb:18:05:
47:3d:70:8f:77:c7:92:27:60:f5:43:b9:66:e4:90:d0:63:34:
0e:e8:ff:7b:b2:b7:57:a3:bd:8b:77:a6:21:1c:83:86:e9:3a:
45:f1:e6:9a:97:56:12:ce:26:8b:4a:47:5a:22:45:cd:79:41:
aa:be:98:dc:43:a9:b4:60:ad:6d:05:ab:e6:71:b0:22:74:1c:
03:6c:5b:7c:2e:d1:61:39:e6:65:db:2e:e1:9f:61:a4:c4:be:
a7:41:0a:1d:73:63:82:c7:f4:43:cb:9d:b3:9e:34:03:63:dd:
2c:6c:fe:41:5a:d1:c7:ee:92:2e:43:8b:c5:a1:8f:4e:e3:25:
e2:21:eb:c4:c5:e6:ae:e9:98:25:bf:db:14:6f:d2:81:88:ad:
55:e3:57:24:2e:27:60:30:bc:18:60:32:35:a8:77:93:cb:4b:
e7:22:cd:4b:7f:c2:97:10:12:bf:0d:f6:f9:5b:50:c1:d8:45:
5a:5d:e1:d3:9b:1c:78:bb:7c:dc:69:46:c3:33:d9:56:47:df:
8c:ce:8d:e5:69:e5:47:e3:35:f6:2c:b7:6b:8a:1c:1f:44:dd:
24:34:3a:ad:89:29:14:5d:bc:4b:44:c1:61:06:28:46:28:7e:
f0:02:bd:ca
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEjha9JwIhXkZurZLcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmFkNWFmMjAtODM4NS00NGQ0LTgxNWYtYmI4MzQ5N2Q0
YTBlMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk
MzlkOWQyNDUtN2FlMi00NDBmLTljMzgtZTU2MWNlYTQ0NTBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzIDXwZy3cjx/NrVhxlk04tPSb/Q7sErKOwr
HUnm8dHIh8562p+bDbIbQvrxPxyW7BSKGpJPzlUwJYH36ZfY2wS9btqoTwZI/kU+
q4Sj/0QALkogzxv/mTDE/tF/35S3S2uu3GciZ63acfr0u33LdZU3N8cs/ZGD0Pih
2U0dGg1YZtcQ1sJOXW/sgWPVzSeSpf8v6brnTMxwOIUDI+zoK6/obOHuvW17hlmU
vQk37ASju+f11sEsP7wjXGZcVud7r0TEysoXCRi7sWne3QzDY2ORlFsybuVWMtrZ
+qqfSkyKbkxnJMDEJnjGANiWSOU/LyYJypKuS4UDYHODipTy+wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFL3CKOU0l0F6+m0a99HWmHDNO8aZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1
YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgzNDk3ZDRhMGUvMzhjMTdiN2EtMDc1NC0z
MzJiLWFkMzctYmE3OWQxNTJkMDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFkNWFmMjAtODM4NS00NGQ0LTgx
NWYtYmI4MzQ5N2Q0YTBlL2JhZDVhZjIwLTgzODUtNDRkNC04MTVmLWJiODM0OTdk
NGEwZS5jcmwwHwYDVR0jBBgwFoAUEapw8wRQo6yCOXMUtq3WNdHdOZQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgz
NDk3ZDRhMGUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAzJC0AwQB
zJC2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFM5Wd+0X1S4NJAxv1RxdusYBUc9cI93x5InYPVDuWbkkNBj
NA7o/3uyt1ejvYt3piEcg4bpOkXx5pqXVhLOJotKR1oiRc15Qaq+mNxDqbRgrW0F
q+ZxsCJ0HANsW3wu0WE55mXbLuGfYaTEvqdBCh1zY4LH9EPLnbOeNANj3Sxs/kFa
0cfuki5Di8Whj07jJeIh68TF5q7pmCW/2xRv0oGIrVXjVyQuJ2AwvBhgMjWod5PL
S+cizUt/wpcQEr8N9vlbUMHYRVpd4dObHHi7fNxpRsMz2VZH34zOjeVp5UfjNfYs
t2uKHB9E3SQ0Oq2JKRRdvEtEwWEGKEYofvACvco=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:53:31 2025 by rpki-client