Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/83793cf0-8922-3a54-a4ff-b97894638f5b.roa
File: 83793cf0-8922-3a54-a4ff-b97894638f5b.roa (raw, json)
Hash identifier: tw96iSlGwHB9Z2Lbka5lN82xd/gVxF+KCJN/6p3CkfA=
Subject key identifier: 61:58:01:A0:29:31:4F:D4:06:6B:3C:7A:A2:2F:B4:2C:3B:74:9D:40
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F4328584905B6B5D090A95916BD978080
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/83793cf0-8922-3a54-a4ff-b97894638f5b.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 16696
IP address blocks: 209.20.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:b5:d0:90:a9:59:16:bd:97:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=6a5117f9-88da-412f-b630-101acc7e74db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e5:e3:0c:be:4e:e8:dd:e5:8e:1c:ea:c5:9e:
2b:ab:ca:56:e6:3b:1d:26:35:5e:a6:97:74:89:4f:
3a:b0:cf:6f:16:74:56:0b:42:30:19:78:8d:d8:8e:
ad:fa:1c:3a:6e:cd:a5:bc:f6:c4:47:a7:dc:e2:cd:
85:c6:46:b7:b7:85:65:51:7f:52:02:7d:6e:63:64:
4a:f3:c9:e8:c7:48:df:a0:ad:8a:88:f8:03:d5:e3:
7d:05:fa:df:dd:a2:c1:de:a2:25:28:75:a3:80:12:
56:4d:4f:12:b3:42:1d:1e:ed:a5:bd:eb:be:22:f0:
f1:dd:09:f4:21:fc:60:0d:fc:b1:bd:86:21:5d:81:
bb:e3:29:cf:42:c2:b1:d0:a0:5d:0b:fe:07:c8:7e:
9e:5b:b9:14:e9:b1:19:f0:30:0b:45:e9:7e:10:d5:
ca:04:5c:d6:cf:a9:f4:bb:24:15:95:28:ba:24:72:
cc:fe:40:92:c4:68:c0:38:c1:a6:dd:ee:6f:78:46:
ff:75:66:b1:3c:80:4d:6e:46:2b:ae:92:4a:31:22:
8b:1a:a3:75:b3:85:ed:4a:b3:10:bc:c1:6a:0b:4f:
1f:cc:7d:07:99:17:d1:8d:3b:75:4c:97:78:5f:59:
8d:8a:3d:42:89:34:cd:cc:78:6a:56:11:dc:45:69:
59:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:58:01:A0:29:31:4F:D4:06:6B:3C:7A:A2:2F:B4:2C:3B:74:9D:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/83793cf0-8922-3a54-a4ff-b97894638f5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
209.20.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:06:61:79:ac:38:9d:b5:53:bb:4a:ad:0d:ae:43:b2:e5:79:
a6:b3:a9:e2:4c:87:f1:ed:cb:68:3a:3c:39:a7:52:8b:e7:b6:
37:11:ba:84:09:8c:2a:50:98:6d:54:c4:45:d3:9d:1d:80:b1:
68:dc:66:3e:7c:2e:62:38:db:93:9b:26:68:0b:32:18:2c:78:
98:d0:ce:1a:5c:3b:3b:a5:40:2b:7b:0f:e3:ad:2e:b5:ff:0b:
c9:96:b4:01:86:07:d4:c9:8f:ff:71:9c:b8:35:78:f8:65:30:
3f:a4:44:b2:f7:0f:fe:5b:9b:4b:a8:83:20:9a:7b:2e:0c:f8:
45:89:f7:52:cc:5e:e6:95:66:18:f2:a6:bb:c3:aa:91:f3:93:
25:57:ec:dd:d5:3b:94:8e:89:92:df:c3:0c:38:15:cf:df:ab:
67:43:7a:86:d7:f7:81:65:b8:86:28:70:dd:d7:e0:8a:0d:f9:
22:26:cd:11:ec:6a:8f:4e:46:0f:a1:38:8c:0c:8a:77:30:a6:
ea:89:82:22:99:5c:98:24:d4:e1:5c:43:42:4a:e4:f6:8d:a2:
36:5f:1c:0c:99:21:29:67:45:0f:9f:14:3a:d5:55:bf:e1:e8:
fa:79:61:9e:67:1e:70:5a:4f:f2:f9:22:17:90:4c:d6:d8:e6:
12:d9:03:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtrXQkKlZFr2XgIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm
YzYwMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk
NmE1MTE3ZjktODhkYS00MTJmLWI2MzAtMTAxYWNjN2U3NGRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheXjDL5O6N3ljhzqxZ4rq8pW5jsdJjVeppd0
iU86sM9vFnRWC0IwGXiN2I6t+hw6bs2lvPbER6fc4s2Fxka3t4VlUX9SAn1uY2RK
88nox0jfoK2KiPgD1eN9Bfrf3aLB3qIlKHWjgBJWTU8Ss0IdHu2lveu+IvDx3Qn0
IfxgDfyxvYYhXYG74ynPQsKx0KBdC/4HyH6eW7kU6bEZ8DALRel+ENXKBFzWz6n0
uyQVlSi6JHLM/kCSxGjAOMGm3e5veEb/dWaxPIBNbkYrrpJKMSKLGqN1s4XtSrMQ
vMFqC08fzH0HmRfRjTt1TJd4X1mNij1CiTTNzHhqVhHcRWlZtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGFYAaApMU/UBms8eqIvtCw7dJ1AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl
OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvODM3OTNjZjAtODkyMi0z
YTU0LWE0ZmYtYjk3ODk0NjM4ZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz
YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh
ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1
YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RSCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI0GYXmsOJ21U7tKrQ2uQ7LleaazqeJMh/Hty2g6PDmnUovntjcRuoQJ
jCpQmG1UxEXTnR2AsWjcZj58LmI425ObJmgLMhgseJjQzhpcOzulQCt7D+OtLrX/
C8mWtAGGB9TJj/9xnLg1ePhlMD+kRLL3D/5bm0uogyCaey4M+EWJ91LMXuaVZhjy
prvDqpHzkyVX7N3VO5SOiZLfwww4Fc/fq2dDeobX94FluIYocN3X4IoN+SImzRHs
ao9ORg+hOIwMincwpuqJgiKZXJgk1OFcQ0JK5PaNojZfHAyZISlnRQ+fFDrVVb/h
6Pp5YZ5nHnBaT/L5IheQTNbY5hLZA4Q=
-----END CERTIFICATE-----
Generated at Wed Apr 9 20:38:02 2025 by rpki-client