Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/b8588202-3ee7-3d3e-b393-6e90a6fe8d34.roa
File: b8588202-3ee7-3d3e-b393-6e90a6fe8d34.roa (raw, json)
Hash identifier: 5h0izJyS1o2dnGlepvmceSyUKjMRTlvZhyzmrGLpsUI=
Subject key identifier: 74:2B:5C:D2:74:86:E7:E9:FC:23:9E:5A:02:18:7D:23:58:12:FB:B0
Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial: 010D0C9F43285849388818BF1E3F349313C2CA80
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/b8588202-3ee7-3d3e-b393-6e90a6fe8d34.roa
Signing time: Mon 17 Mar 2025 18:53:19 +0000
ROA not before: Mon 17 Mar 2025 18:53:19 +0000
ROA not after: Sun 15 Jun 2025 18:53:19 +0000
asID: 398101
IP address blocks: 184.168.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:38:88:18:bf:1e:3f:34:93:13:c2:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Validity
Not Before: Mar 17 18:53:19 2025 GMT
Not After : Jun 15 18:53:19 2025 GMT
Subject: CN=23a813dc-44e5-4423-8820-5a09682636b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d0:bb:6d:e9:d4:b7:5a:f5:86:b5:9e:d7:79:
5b:10:11:2b:f7:91:cf:92:46:49:49:16:b2:e1:c4:
c6:12:1b:8d:bb:61:ac:3d:f7:7f:f8:29:4b:61:b3:
41:84:42:7d:94:19:91:e6:e1:90:80:26:50:59:a3:
2d:fa:2d:db:28:40:33:a1:c8:67:33:a7:53:fb:03:
79:e9:31:65:e7:45:b6:a4:e2:86:70:6c:60:95:10:
28:8d:01:9f:d6:34:c1:a7:5f:d1:61:90:fe:6b:d2:
8b:41:91:c1:bc:57:c3:9e:1d:b4:b2:e8:cc:da:cc:
60:7d:ff:b0:01:48:5b:f2:65:99:21:bd:17:dd:71:
47:22:00:32:0a:f2:c2:6b:c3:ce:d4:6d:3e:47:26:
23:ec:3b:53:ce:7f:cd:e6:23:ce:26:8e:74:09:e8:
6c:c8:7f:c9:f2:5c:b5:d9:a1:62:82:6d:a9:4b:6a:
a4:e1:bc:60:a1:14:c1:23:fa:a6:ec:07:d6:b5:e4:
0e:7f:67:aa:cd:7b:fe:44:00:83:51:39:37:e4:92:
bf:02:61:a8:5c:27:03:51:e6:88:2a:97:46:6b:6b:
b5:a8:fc:cf:4e:1c:51:f6:d9:fb:c3:e1:3f:45:4f:
1d:6e:b6:27:6f:07:dc:ca:02:3d:e0:52:f4:01:37:
80:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2B:5C:D2:74:86:E7:E9:FC:23:9E:5A:02:18:7D:23:58:12:FB:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/b8588202-3ee7-3d3e-b393-6e90a6fe8d34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
X509v3 Authority Key Identifier:
keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
sbgp-ipAddrBlock: critical
IPv4:
184.168.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:ca:67:5e:29:49:20:23:ee:9e:71:ee:8b:d8:ed:43:da:35:
7e:4d:65:65:38:ff:b1:fc:7e:8f:d7:05:b1:1c:30:3a:b5:53:
e2:e0:0d:cc:2b:b2:70:0d:a6:b1:78:a9:ad:f8:bb:f4:9c:b6:
a9:93:9a:36:2d:06:f7:6e:1b:36:b1:66:6d:46:66:c4:d6:3b:
69:f6:98:83:87:1c:ac:8d:b6:c5:6b:88:94:ec:de:d3:e2:ef:
8e:93:35:37:19:a5:f2:64:f0:f2:1a:7b:96:68:5e:42:f4:11:
2f:4c:f3:65:de:25:c9:3d:0d:14:cb:cc:af:05:cb:2b:e5:c7:
20:6d:f2:61:53:0a:97:01:3d:02:20:be:a9:7c:7c:6e:8f:6b:
f3:a0:69:51:fe:32:17:33:fb:2e:ec:ff:4b:8e:a8:1f:5c:8a:
f2:45:76:68:db:a0:c0:70:94:40:53:c8:a2:6a:2a:68:3d:f3:
f1:0f:ee:13:93:1d:f4:cb:4d:61:99:95:b4:d1:64:a4:02:4b:
ca:3f:0c:dd:67:e2:70:af:b6:ec:0e:af:35:03:a5:22:1e:b1:
49:50:17:cb:ec:d1:c1:9d:a3:e0:c1:b7:40:56:8d:5e:7d:20:
c8:a4:04:c6:c9:f6:15:8d:a5:3e:e1:53:0e:d1:08:00:34:d5:
cf:40:ba:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk4iBi/Hj80kxPCyoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWVkNWNlODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4Y2Nm
MTNmMB4XDTI1MDMxNzE4NTMxOVoXDTI1MDYxNTE4NTMxOVowLzEtMCsGA1UEAxMk
MjNhODEzZGMtNDRlNS00NDIzLTg4MjAtNWEwOTY4MjYzNmI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtC7benUt1r1hrWe13lbEBEr95HPkkZJSRay
4cTGEhuNu2GsPfd/+ClLYbNBhEJ9lBmR5uGQgCZQWaMt+i3bKEAzochnM6dT+wN5
6TFl50W2pOKGcGxglRAojQGf1jTBp1/RYZD+a9KLQZHBvFfDnh20sujM2sxgff+w
AUhb8mWZIb0X3XFHIgAyCvLCa8PO1G0+RyYj7DtTzn/N5iPOJo50CehsyH/J8ly1
2aFigm2pS2qk4bxgoRTBI/qm7AfWteQOf2eqzXv+RACDUTk35JK/AmGoXCcDUeaI
KpdGa2u1qPzPThxR9tn7w+E/RU8dbrYnbwfcygI94FL0ATeAGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHQrXNJ0hufp/COeWgIYfSNYEvuwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1
Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZjZThjY2YxM2YvYjg1ODgyMDItM2VlNy0z
ZDNlLWIzOTMtNmU5MGE2ZmU4ZDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWVkNWNlODAtMjI0ZS00NmFiLTk0
ZjEtMWFmY2U4Y2NmMTNmLzllZDVjZTgwLTIyNGUtNDZhYi05NGYxLTFhZmNlOGNj
ZjEzZi5jcmwwHwYDVR0jBBgwFoAUOB2fprp8wahErgn+WgCWnTv84Q8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZj
ZThjY2YxM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGuKgAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE7KZ14pSSAj7p5x7ovY7UPaNX5NZWU4/7H8fo/XBbEcMDq1U+LgDcwr
snANprF4qa34u/SctqmTmjYtBvduGzaxZm1GZsTWO2n2mIOHHKyNtsVriJTs3tPi
746TNTcZpfJk8PIae5ZoXkL0ES9M82XeJck9DRTLzK8FyyvlxyBt8mFTCpcBPQIg
vql8fG6Pa/OgaVH+Mhcz+y7s/0uOqB9civJFdmjboMBwlEBTyKJqKmg98/EP7hOT
HfTLTWGZlbTRZKQCS8o/DN1n4nCvtuwOrzUDpSIesUlQF8vs0cGdo+DBt0BWjV59
IMikBMbJ9hWNpT7hUw7RCAA01c9Auvs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:23:15 2025 by rpki-client