Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/baa267c2-c777-355e-9ac0-05859b6805bc.roa
File: baa267c2-c777-355e-9ac0-05859b6805bc.roa (raw, json)
Hash identifier: PjglMauNKVji0lmEenK28jyEDeJ63/Ah2+q0jKzaYcY=
Subject key identifier: B5:37:64:00:48:8E:13:07:EA:19:C9:4E:00:0F:0E:AD:54:2C:46:61
Certificate issuer: /CN=ae55b5de-dd92-467b-8e52-a8892152f63e
Certificate serial: 010D0C9F43285849384369F3B1AD277F43935F00
Authority key identifier: 3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/baa267c2-c777-355e-9ac0-05859b6805bc.roa
Signing time: Mon 17 Mar 2025 16:34:55 +0000
ROA not before: Mon 17 Mar 2025 16:34:55 +0000
ROA not after: Sun 15 Jun 2025 16:34:55 +0000
asID: 399300
IP address blocks: 167.88.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:38:43:69:f3:b1:ad:27:7f:43:93:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae55b5de-dd92-467b-8e52-a8892152f63e
Validity
Not Before: Mar 17 16:34:55 2025 GMT
Not After : Jun 15 16:34:55 2025 GMT
Subject: CN=2ca0f6cf-4292-4384-8626-20855d39a8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:df:93:c8:33:e4:9a:93:55:ca:b3:f2:e9:7c:
93:fd:50:6c:13:22:d5:87:19:3b:6c:a4:67:15:00:
3f:a4:0f:65:4d:6a:fd:61:c8:56:f2:47:27:c5:9c:
c0:92:a1:a3:60:0d:c9:d5:80:9e:47:a1:da:9b:af:
52:da:53:01:db:f9:fe:fc:92:b1:04:80:68:06:b5:
79:eb:c4:e9:a2:87:4a:40:6c:09:2b:fc:4c:9f:9a:
09:b1:7f:df:27:f0:b3:81:f2:0a:4a:52:b2:84:d2:
70:ec:75:3f:7e:13:5b:75:59:dd:19:29:a6:94:56:
f5:82:d0:28:48:6a:c5:e0:be:87:1b:8c:e0:8f:0c:
ed:b4:2c:3d:2d:21:a8:6e:07:d7:b5:a9:a7:f6:5a:
79:42:28:92:d5:bf:33:92:64:d7:7e:a5:18:e5:00:
23:98:16:b4:d2:86:f7:d2:5f:38:46:06:77:74:b0:
cd:a7:4c:24:ab:3a:09:7a:06:0b:37:81:ac:5a:64:
e7:49:d4:18:fc:e3:0a:3a:c3:e2:62:53:8e:14:bd:
7b:ab:17:10:6b:c4:20:fd:ce:e7:a9:c1:e2:02:42:
54:71:0f:18:b0:ff:46:6f:fd:20:3b:67:5c:51:82:
50:15:76:07:52:6f:bb:7f:ff:e3:d6:17:22:e1:2d:
cc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:37:64:00:48:8E:13:07:EA:19:C9:4E:00:0F:0E:AD:54:2C:46:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/baa267c2-c777-355e-9ac0-05859b6805bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.crl
X509v3 Authority Key Identifier:
keyid:3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer
sbgp-ipAddrBlock: critical
IPv4:
167.88.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:fb:02:4f:75:84:3c:42:d1:8f:97:50:63:f3:44:d2:f4:8f:
cf:64:81:81:9f:7f:a5:10:05:e5:3d:d4:3a:ce:14:a9:fa:9e:
87:fd:15:d9:3e:56:9e:f5:64:b7:1f:a8:6b:2d:c6:10:60:20:
22:6f:61:76:a4:32:09:49:cc:be:df:24:b1:21:c3:ba:04:58:
ad:66:8f:e3:b4:99:ae:5f:0d:05:b2:f1:ba:0d:01:5b:d2:b7:
90:14:28:6a:16:3b:bb:a9:8d:21:35:3b:4b:6c:6a:e7:6f:09:
81:b5:b5:ab:6d:75:87:2b:98:80:4e:3e:40:7b:cc:d5:95:1f:
98:51:d0:c7:93:e1:af:b0:78:50:de:a8:03:ef:a9:c4:88:62:
87:8f:f0:e7:05:7c:b4:82:97:ce:7d:a3:bf:9f:4c:53:51:8f:
f9:2f:48:26:2d:d1:3e:0b:13:a0:45:ab:0e:36:dc:4b:35:37:
1d:2f:bb:98:99:70:6f:9d:c3:89:07:3a:a2:4e:b8:87:f7:74:
89:c0:30:ff:66:15:72:20:ae:33:13:2d:3d:33:e5:ff:b5:fa:
86:3d:17:4b:ee:8f:fd:b3:0e:70:6a:d3:79:50:06:2e:dc:2a:
5a:32:ed:eb:fb:b3:18:6e:6e:36:6a:57:f2:9a:d9:6d:32:f8:
40:98:54:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk4Q2nzsa0nf0OTXwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWU1NWI1ZGUtZGQ5Mi00NjdiLThlNTItYTg4OTIxNTJm
NjNlMB4XDTI1MDMxNzE2MzQ1NVoXDTI1MDYxNTE2MzQ1NVowLzEtMCsGA1UEAxMk
MmNhMGY2Y2YtNDI5Mi00Mzg0LTg2MjYtMjA4NTVkMzlhOGYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqd+TyDPkmpNVyrPy6XyT/VBsEyLVhxk7bKRn
FQA/pA9lTWr9YchW8kcnxZzAkqGjYA3J1YCeR6Ham69S2lMB2/n+/JKxBIBoBrV5
68TpoodKQGwJK/xMn5oJsX/fJ/CzgfIKSlKyhNJw7HU/fhNbdVndGSmmlFb1gtAo
SGrF4L6HG4zgjwzttCw9LSGobgfXtamn9lp5QiiS1b8zkmTXfqUY5QAjmBa00ob3
0l84RgZ3dLDNp0wkqzoJegYLN4GsWmTnSdQY/OMKOsPiYlOOFL17qxcQa8Qg/c7n
qcHiAkJUcQ8YsP9Gb/0gO2dcUYJQFXYHUm+7f//j1hci4S3MJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLU3ZABIjhMH6hnJTgAPDq1ULEZhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hZTU1
YjVkZS1kZDkyLTQ2N2ItOGU1Mi1hODg5MjE1MmY2M2UvYmFhMjY3YzItYzc3Ny0z
NTVlLTlhYzAtMDU4NTliNjgwNWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWU1NWI1ZGUtZGQ5Mi00NjdiLThl
NTItYTg4OTIxNTJmNjNlL2FlNTViNWRlLWRkOTItNDY3Yi04ZTUyLWE4ODkyMTUy
ZjYzZS5jcmwwHwYDVR0jBBgwFoAUPMt/qLOjKT6wfi+/0Gt1PNCFnFMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9hZTU1YjVkZS1kZDkyLTQ2N2ItOGU1Mi1hODg5
MjE1MmY2M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp1jQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEz7Ak91hDxC0Y+XUGPzRNL0j89kgYGff6UQBeU91DrOFKn6nof9Fdk+
Vp71ZLcfqGstxhBgICJvYXakMglJzL7fJLEhw7oEWK1mj+O0ma5fDQWy8boNAVvS
t5AUKGoWO7upjSE1O0tsaudvCYG1tattdYcrmIBOPkB7zNWVH5hR0MeT4a+weFDe
qAPvqcSIYoeP8OcFfLSCl859o7+fTFNRj/kvSCYt0T4LE6BFqw423Es1Nx0vu5iZ
cG+dw4kHOqJOuIf3dInAMP9mFXIgrjMTLT0z5f+1+oY9F0vuj/2zDnBq03lQBi7c
Kloy7ev7sxhubjZqV/Ka2W0y+ECYVGI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:49:55 2025 by rpki-client