Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9872dc64-0988-3b5c-9553-f5d1b290496b.roa
File: 9872dc64-0988-3b5c-9553-f5d1b290496b.roa (raw, json)
Hash identifier: LUT478K8XAiQDf8NqqLwdTzA9QKPDY8zUTNnEz08Ls0=
Subject key identifier: 62:BF:B1:AB:B4:09:B4:1C:F9:95:FF:D5:AA:9E:31:3A:60:2C:A7:44
Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial: 010D0C9F43285848E22F5A6E21F1826E1D4DEFD0
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9872dc64-0988-3b5c-9553-f5d1b290496b.roa
Signing time: Fri 14 Feb 2025 20:34:59 +0000
ROA not before: Fri 14 Feb 2025 20:34:59 +0000
ROA not after: Thu 15 May 2025 19:34:59 +0000
asID: 397514
IP address blocks: 208.109.153.0/24 maxlen: 24
208.109.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:2f:5a:6e:21:f1:82:6e:1d:4d:ef:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Validity
Not Before: Feb 14 20:34:59 2025 GMT
Not After : May 15 19:34:59 2025 GMT
Subject: CN=76879928-13ba-4edc-a6ee-774e0bcd5f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d4:aa:67:21:d7:46:0e:61:1b:96:6d:07:91:
60:c2:2e:0e:4f:b2:24:07:fa:44:18:24:d6:1c:12:
08:e2:ae:42:fd:1f:43:e7:2e:48:96:da:b3:0f:85:
9e:75:f2:2b:f1:e4:0c:d4:2c:94:97:3d:ea:d5:69:
3e:c5:67:60:c3:47:39:51:4e:a9:0c:72:07:af:82:
9b:71:5e:05:95:a2:a1:e3:81:92:d6:07:59:b2:30:
70:1e:b2:5d:30:23:a8:93:82:c7:bf:a0:c9:d5:e5:
31:35:6b:30:dd:f4:08:9c:95:7e:64:6a:76:60:10:
4a:5a:54:30:94:97:6a:06:1a:da:07:d7:8d:8a:31:
e6:f9:a4:6a:8e:ad:0e:ab:75:21:e8:e7:0b:51:1c:
fb:30:bc:a2:cf:79:3b:75:bc:1c:e2:44:a7:64:44:
cd:c5:68:49:80:1f:cb:6e:c2:e4:ec:8e:fd:63:a6:
15:87:3d:70:df:46:60:94:3c:a8:60:48:a8:76:e1:
b0:6c:29:2e:73:6c:ee:72:14:23:14:50:5b:5a:57:
99:39:a8:db:38:6c:1e:89:1f:b1:94:f4:29:15:cc:
c0:8b:e4:b7:a3:83:17:4b:2e:91:8d:a0:d6:6f:9e:
ac:f1:80:52:10:40:77:72:c1:95:43:30:7e:f4:e6:
8a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BF:B1:AB:B4:09:B4:1C:F9:95:FF:D5:AA:9E:31:3A:60:2C:A7:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9872dc64-0988-3b5c-9553-f5d1b290496b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
X509v3 Authority Key Identifier:
keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
sbgp-ipAddrBlock: critical
IPv4:
208.109.153.0-208.109.154.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:3b:11:0e:00:aa:c1:01:60:8a:0a:47:a0:68:9c:83:9d:c4:
e6:7b:9b:b6:80:01:bc:e2:b3:99:15:a4:d5:85:09:c0:2f:cd:
ab:a0:db:58:88:09:86:87:b9:a1:e1:fd:a8:4f:ab:21:e2:1a:
0a:b1:0f:ae:6e:83:0a:93:db:cf:49:9e:b6:39:6e:89:eb:13:
d1:ce:5e:38:85:cf:06:86:52:f2:e6:41:3e:aa:f8:9d:80:0c:
46:bc:12:ee:22:24:de:74:6c:7b:31:f6:cc:fa:14:1c:18:da:
f2:67:07:e2:7b:c3:f6:96:79:54:b5:4b:0d:0f:d6:fa:30:80:
fa:1a:e3:e6:c5:27:d1:15:bb:c9:92:91:47:c5:1d:1c:bd:3e:
3c:0b:bf:12:e4:8a:45:6c:8a:8d:56:41:55:f7:45:e6:6c:f6:
64:4a:55:34:66:69:f6:a7:96:c3:d7:80:84:f4:c6:11:b9:e5:
16:5e:1c:f6:f9:5f:94:06:5b:3e:43:9c:24:25:6d:dd:ab:d0:
cf:63:f7:00:0d:18:91:bb:d0:f5:b6:2e:f4:4c:2f:f8:f9:8e:
c8:64:d8:17:1d:68:fe:cf:3a:1e:1a:55:b4:23:fb:9e:05:59:
35:e2:71:43:8d:a6:21:46:5e:4e:59:07:6a:d4:0d:57:09:4a:
90:d1:fa:5f
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEjiL1puIfGCbh1N79AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWVkNWNlODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4Y2Nm
MTNmMB4XDTI1MDIxNDIwMzQ1OVoXDTI1MDUxNTE5MzQ1OVowLzEtMCsGA1UEAxMk
NzY4Nzk5MjgtMTNiYS00ZWRjLWE2ZWUtNzc0ZTBiY2Q1Zjk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9SqZyHXRg5hG5ZtB5Fgwi4OT7IkB/pEGCTW
HBII4q5C/R9D5y5IltqzD4WedfIr8eQM1CyUlz3q1Wk+xWdgw0c5UU6pDHIHr4Kb
cV4FlaKh44GS1gdZsjBwHrJdMCOok4LHv6DJ1eUxNWsw3fQInJV+ZGp2YBBKWlQw
lJdqBhraB9eNijHm+aRqjq0Oq3Uh6OcLURz7MLyiz3k7dbwc4kSnZETNxWhJgB/L
bsLk7I79Y6YVhz1w30ZglDyoYEioduGwbCkuc2zuchQjFFBbWleZOajbOGweiR+x
lPQpFczAi+S3o4MXSy6RjaDWb56s8YBSEEB3csGVQzB+9OaKhwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFGK/sau0CbQc+ZX/1aqeMTpgLKdEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1
Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZjZThjY2YxM2YvOTg3MmRjNjQtMDk4OC0z
YjVjLTk1NTMtZjVkMWIyOTA0OTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWVkNWNlODAtMjI0ZS00NmFiLTk0
ZjEtMWFmY2U4Y2NmMTNmLzllZDVjZTgwLTIyNGUtNDZhYi05NGYxLTFhZmNlOGNj
ZjEzZi5jcmwwHwYDVR0jBBgwFoAUOB2fprp8wahErgn+WgCWnTv84Q8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZj
ZThjY2YxM2YuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADQbZkD
BADQbZowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAJDsRDgCqwQFgigpHoGicg53E5nubtoABvOKzmRWk1YUJ
wC/Nq6DbWIgJhoe5oeH9qE+rIeIaCrEPrm6DCpPbz0metjluiesT0c5eOIXPBoZS
8uZBPqr4nYAMRrwS7iIk3nRsezH2zPoUHBja8mcH4nvD9pZ5VLVLDQ/W+jCA+hrj
5sUn0RW7yZKRR8UdHL0+PAu/EuSKRWyKjVZBVfdF5mz2ZEpVNGZp9qeWw9eAhPTG
EbnlFl4c9vlflAZbPkOcJCVt3avQz2P3AA0YkbvQ9bYu9Ewv+PmOyGTYFx1o/s86
HhpVtCP7ngVZNeJxQ42mIUZeTlkHatQNVwlKkNH6Xw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:07 2025 by rpki-client