Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0ccb59bd-63b8-3e31-be93-67c47a31a715.roa
File: 0ccb59bd-63b8-3e31-be93-67c47a31a715.roa (raw, json)
Hash identifier: zJO1S9YTn3QnsO4Ta9DF8Nu4cUj4oFJJY/BxJWttWWE=
Subject key identifier: 16:85:E3:1A:6D:2F:D9:FA:9F:64:10:11:1B:00:E1:C4:63:08:1C:53
Certificate issuer: /CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105
Certificate serial: 010D0C9F43285848AC60D19932AE31D028E63680
Authority key identifier: E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0ccb59bd-63b8-3e31-be93-67c47a31a715.roa
Signing time: Sun 26 Jan 2025 14:00:52 +0000
ROA not before: Sun 26 Jan 2025 14:00:52 +0000
ROA not after: Sat 26 Apr 2025 13:00:52 +0000
asID: 14618
IP address blocks: 150.9.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ac:60:d1:99:32:ae:31:d0:28:e6:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105
Validity
Not Before: Jan 26 14:00:52 2025 GMT
Not After : Apr 26 13:00:52 2025 GMT
Subject: CN=612f4853-e2a2-4715-a434-875841c4db0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:07:9b:c0:a5:e2:f7:28:28:54:a2:f4:0f:57:
da:a0:66:93:64:9e:f3:b1:97:97:5c:67:5b:1f:e8:
9b:b5:a2:6f:ca:18:25:a6:b2:b2:6e:91:96:12:e5:
9a:e7:ad:7e:4e:e6:af:fe:24:1e:60:1d:d1:3d:47:
8f:52:d7:19:35:1b:00:85:f1:c6:a4:66:15:f3:42:
5a:f1:cd:0a:22:d0:31:d9:cd:c1:88:d7:d4:ea:b7:
ab:fb:d1:fd:6c:ba:22:e2:da:7c:3d:59:f2:b5:50:
fa:63:0d:f2:f5:70:06:6a:c8:0e:bb:0d:08:6e:08:
43:03:31:cb:62:61:1d:e1:67:64:19:2e:97:db:dd:
56:3d:6d:bc:3a:ce:1b:e5:69:30:61:f6:6f:4c:f0:
96:1c:72:61:00:84:e2:99:de:67:6f:ba:4f:a8:6d:
a5:98:84:e7:53:bd:f8:b1:ed:14:14:76:09:8a:21:
86:e9:a9:47:6b:e8:df:05:b2:fa:32:46:13:18:e1:
81:f2:b5:67:aa:78:ec:d3:a7:47:da:c4:d1:94:02:
08:fc:87:07:65:c9:48:c0:b9:75:be:13:91:3a:12:
c1:59:70:05:f5:1e:11:1c:02:80:2b:76:57:27:b6:
58:44:7b:6d:ac:a1:e8:dc:72:5c:ed:15:4e:b6:80:
30:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:85:E3:1A:6D:2F:D9:FA:9F:64:10:11:1B:00:E1:C4:63:08:1C:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0ccb59bd-63b8-3e31-be93-67c47a31a715.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl
X509v3 Authority Key Identifier:
keyid:E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer
sbgp-ipAddrBlock: critical
IPv4:
150.9.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:13:97:e8:ef:d0:34:be:33:95:c6:87:f7:de:47:53:13:ed:
e4:ba:6a:6f:1a:7e:99:96:a3:6b:94:55:ac:02:90:64:25:78:
57:79:28:c0:e3:c5:d6:8b:ef:e8:6f:09:57:da:ea:d1:2d:e1:
db:b9:9a:81:dc:2e:7b:78:1d:6b:59:8e:3a:75:2c:9e:50:35:
a4:b9:aa:03:90:22:aa:e8:71:59:f5:8a:ef:bb:b9:53:77:fc:
f3:d1:ea:9c:d4:43:e6:b1:dc:68:9f:8a:8a:d9:b7:55:fa:00:
6a:0c:50:5c:3b:49:85:52:16:a8:ca:18:f8:d7:e9:c0:56:87:
c9:48:39:c5:b1:8d:4c:d7:17:72:96:1e:f1:df:02:43:69:82:
ec:43:f3:a5:c2:13:ed:ff:aa:46:4c:76:8a:ca:54:67:a4:4b:
c0:4c:d1:6d:25:e2:a4:cb:09:d1:84:3b:ad:4f:3e:0e:ae:6b:
ee:77:09:f8:9f:76:1d:ee:02:43:1d:7a:72:cd:ed:37:83:1b:
f6:81:7f:be:cc:f2:bb:ed:c6:52:cf:bc:66:48:c1:22:41:54:
90:78:c0:d3:6c:e5:ae:00:39:3d:8d:cf:c5:30:5b:a4:40:bf:
ca:13:01:a4:06:da:42:cd:5b:af:42:b5:d7:53:d4:be:57:b5:
f2:29:76:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEisYNGZMq4x0CjmNoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGRiYmYzZmQtY2Y2ZS00ZGU3LTgxMjYtZDZlNDE4MjRk
MTA1MB4XDTI1MDEyNjE0MDA1MloXDTI1MDQyNjEzMDA1MlowLzEtMCsGA1UEAxMk
NjEyZjQ4NTMtZTJhMi00NzE1LWE0MzQtODc1ODQxYzRkYjBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQebwKXi9ygoVKL0D1faoGaTZJ7zsZeXXGdb
H+ibtaJvyhglprKybpGWEuWa561+Tuav/iQeYB3RPUePUtcZNRsAhfHGpGYV80Ja
8c0KItAx2c3BiNfU6rer+9H9bLoi4tp8PVnytVD6Yw3y9XAGasgOuw0IbghDAzHL
YmEd4WdkGS6X291WPW28Os4b5WkwYfZvTPCWHHJhAITimd5nb7pPqG2lmITnU734
se0UFHYJiiGG6alHa+jfBbL6MkYTGOGB8rVnqnjs06dH2sTRlAII/IcHZclIwLl1
vhOROhLBWXAF9R4RHAKAK3ZXJ7ZYRHttrKHo3HJc7RVOtoAwgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBaF4xptL9n6n2QQERsA4cRjCBxTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wZGJi
ZjNmZC1jZjZlLTRkZTctODEyNi1kNmU0MTgyNGQxMDUvMGNjYjU5YmQtNjNiOC0z
ZTMxLWJlOTMtNjdjNDdhMzFhNzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMGRiYmYzZmQtY2Y2ZS00ZGU3LTgx
MjYtZDZlNDE4MjRkMTA1LzBkYmJmM2ZkLWNmNmUtNGRlNy04MTI2LWQ2ZTQxODI0
ZDEwNS5jcmwwHwYDVR0jBBgwFoAU6KeEIaxny2FbEjdjVeQkOnpskgkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8wZGJiZjNmZC1jZjZlLTRkZTctODEyNi1kNmU0
MTgyNGQxMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlgncMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGQTl+jv0DS+M5XGh/feR1MT7eS6am8afpmWo2uUVawCkGQleFd5KMDj
xdaL7+hvCVfa6tEt4du5moHcLnt4HWtZjjp1LJ5QNaS5qgOQIqrocVn1iu+7uVN3
/PPR6pzUQ+ax3GifiorZt1X6AGoMUFw7SYVSFqjKGPjX6cBWh8lIOcWxjUzXF3KW
HvHfAkNpguxD86XCE+3/qkZMdorKVGekS8BM0W0l4qTLCdGEO61PPg6ua+53Cfif
dh3uAkMdenLN7TeDG/aBf77M8rvtxlLPvGZIwSJBVJB4wNNs5a4AOT2Nz8UwW6RA
v8oTAaQG2kLNW69CtddT1L5XtfIpdqo=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:41:01 2025 by rpki-client