Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/bcda651f-6a0b-32f4-8858-9ce12ed25332.roa
File: bcda651f-6a0b-32f4-8858-9ce12ed25332.roa (raw, json)
Hash identifier: Me8hIh4hrTjBSYz1dVMSYeZQzwqIbk6gnDOXtzWrCWc=
Subject key identifier: 2B:C9:2A:37:20:E2:9E:A0:AA:7A:3D:AD:CD:23:2D:B0:8D:E8:83:A7
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F4328584917DC29CBD8E95E30F90CF8A0
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/bcda651f-6a0b-32f4-8858-9ce12ed25332.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 20473
IP address blocks: 8.9.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:29:cb:d8:e9:5e:30:f9:0c:f8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=634081d5-ac94-4ab8-b721-f37296a82c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:17:cf:e5:23:01:c2:36:75:df:9d:fa:bd:30:
14:b2:bf:6b:36:aa:51:3d:35:ff:48:15:e4:0b:7b:
81:68:16:13:a5:53:5f:e6:e5:9a:60:75:2f:e1:83:
c8:77:65:a0:b1:d3:2a:77:d2:5f:02:93:bd:84:ac:
14:79:65:c3:7d:e8:e3:1a:f2:31:77:cd:a7:70:4b:
8c:f6:0f:ed:2d:22:c3:79:2a:e7:d7:42:6a:a4:34:
ee:cd:5e:e8:b7:20:c0:19:30:5c:fc:70:f8:ef:24:
f7:37:2d:60:86:83:5e:fd:ef:b8:86:cf:56:b4:aa:
ce:0e:90:48:7c:69:2b:91:d1:fc:72:7e:fb:ab:e6:
3b:3d:b0:93:c1:3e:7b:3c:81:de:92:1a:eb:4d:2c:
29:7b:69:d7:33:ea:78:c6:a4:0d:13:4c:ca:e0:fc:
eb:d1:7d:7d:c6:f5:92:16:7f:26:77:ec:d0:45:54:
d5:18:a8:56:92:12:c2:88:7b:9d:32:62:2e:09:7e:
54:dc:0d:6e:6a:be:61:be:3c:0e:2f:10:a0:3c:49:
61:af:f7:d0:68:3e:76:be:b7:ea:ad:66:b6:98:67:
d5:ab:ea:1c:8d:4d:bf:b2:4c:63:15:1d:67:a9:e8:
1f:01:27:3f:a6:18:27:94:d2:61:23:5f:f0:68:d4:
96:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C9:2A:37:20:E2:9E:A0:AA:7A:3D:AD:CD:23:2D:B0:8D:E8:83:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/bcda651f-6a0b-32f4-8858-9ce12ed25332.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.9.15.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:7b:5d:cb:e0:0e:f8:b3:64:1f:b8:df:10:e1:3c:be:77:ee:
08:ac:3c:71:fa:04:f5:99:32:e8:35:48:d3:bb:0c:d3:46:aa:
ac:f2:34:02:9e:af:aa:75:85:54:75:de:d1:5f:69:bb:09:fe:
76:88:c1:37:d9:8d:e8:b0:2a:67:f1:68:90:90:aa:fa:a0:a4:
c8:61:d4:d4:f1:d9:50:74:ed:f9:5a:44:59:50:3e:cd:85:d4:
e9:1d:01:7d:f7:34:e7:31:01:36:f4:f6:ba:b1:eb:68:3c:94:
29:62:dd:52:d6:20:a4:f6:ca:17:4a:99:70:72:2a:05:69:af:
d8:68:bd:a0:bb:34:d0:b6:5c:fa:21:06:3e:27:19:da:16:0d:
8f:c1:ea:11:cd:52:d7:b2:d7:dd:54:69:c6:58:97:f3:11:fd:
f5:77:5f:86:52:2e:b9:20:38:5e:af:76:d8:f0:3c:5f:3a:68:
4d:f1:9e:16:c1:f5:4a:3a:0e:f4:4c:b8:9a:a9:43:15:ee:80:
3a:2b:75:74:98:6e:f6:05:0b:ee:68:4f:bf:0f:1c:b8:c8:cf:
f5:9c:83:94:85:5c:06:33:f7:44:66:ed:d7:e9:df:3c:78:53:
5a:ef:b0:f4:a4:bf:51:5c:6f:3a:e1:f2:16:f5:50:d4:94:d6:
12:3e:4d:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3CnL2OleMPkM+KAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk
NjM0MDgxZDUtYWM5NC00YWI4LWI3MjEtZjM3Mjk2YTgyYzNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxfP5SMBwjZ13536vTAUsr9rNqpRPTX/SBXk
C3uBaBYTpVNf5uWaYHUv4YPId2WgsdMqd9JfApO9hKwUeWXDfejjGvIxd82ncEuM
9g/tLSLDeSrn10JqpDTuzV7otyDAGTBc/HD47yT3Ny1ghoNe/e+4hs9WtKrODpBI
fGkrkdH8cn77q+Y7PbCTwT57PIHekhrrTSwpe2nXM+p4xqQNE0zK4Pzr0X19xvWS
Fn8md+zQRVTVGKhWkhLCiHudMmIuCX5U3A1uar5hvjwOLxCgPElhr/fQaD52vrfq
rWa2mGfVq+ocjU2/skxjFR1nqegfASc/phgnlNJhI1/waNSW4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCvJKjcg4p6gqno9rc0jLbCN6IOnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYmNkYTY1MWYtNmEwYi0z
MmY0LTg4NTgtOWNlMTJlZDI1MzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAkPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI97XcvgDvizZB+43xDhPL537gisPHH6BPWZMug1SNO7DNNGqqzyNAKe
r6p1hVR13tFfabsJ/naIwTfZjeiwKmfxaJCQqvqgpMhh1NTx2VB07flaRFlQPs2F
1OkdAX33NOcxATb09rqx62g8lCli3VLWIKT2yhdKmXByKgVpr9hovaC7NNC2XPoh
Bj4nGdoWDY/B6hHNUtey191UacZYl/MR/fV3X4ZSLrkgOF6vdtjwPF86aE3xnhbB
9Uo6DvRMuJqpQxXugDordXSYbvYFC+5oT78PHLjIz/Wcg5SFXAYz90Rm7dfp3zx4
U1rvsPSkv1Fcbzrh8hb1UNSU1hI+TYc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:07 2025 by rpki-client