Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1486557d-cc87-3dfe-9024-c71d699e3222.roa
File: 1486557d-cc87-3dfe-9024-c71d699e3222.roa (raw, json)
Hash identifier: w9xCQMnMKfUJuZmQvSpl1AEFiA+xyp8Q7OQd7tqcrO4=
Subject key identifier: EC:B3:83:AB:C5:EB:29:EB:6E:59:EA:49:C7:F7:CC:2C:9A:35:36:63
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848B1B44BB9AA6D615E35AA6880
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1486557d-cc87-3dfe-9024-c71d699e3222.roa
Signing time: Tue 28 Jan 2025 11:48:14 +0000
ROA not before: Tue 28 Jan 2025 11:48:14 +0000
ROA not after: Mon 28 Apr 2025 10:48:14 +0000
asID: 208485
IP address blocks: 206.123.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:b4:4b:b9:aa:6d:61:5e:35:aa:68:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jan 28 11:48:14 2025 GMT
Not After : Apr 28 10:48:14 2025 GMT
Subject: CN=814f2426-853e-43e5-a46b-8ef070f7fe78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:55:9e:e9:dc:df:35:6d:19:40:46:5f:18:39:
c7:44:4e:03:52:7f:ab:ae:22:91:2b:77:9e:5f:1b:
2d:c7:22:f7:9a:1e:98:1d:e5:ce:7a:97:ff:7c:75:
31:32:a8:84:7c:59:31:a3:11:bf:de:ea:12:7e:58:
85:44:8c:1d:be:14:ad:d8:d0:bc:d7:0f:5d:a0:2d:
55:7f:d2:5f:14:af:ee:45:9f:7d:20:4c:a3:a2:78:
25:93:15:e5:2f:05:d0:4f:e1:43:65:25:14:40:88:
3e:d2:43:f2:c4:4d:4f:c8:79:b6:a8:a8:22:79:fa:
9f:7e:2b:7d:4e:72:57:0e:37:8d:27:79:8e:1f:38:
c1:d3:45:24:1f:0d:2a:8b:13:b0:99:90:28:3f:0c:
2a:a7:aa:42:ac:f5:07:f6:11:4a:12:33:08:af:7c:
dc:db:d7:ad:3e:ee:94:61:58:83:cd:bf:0f:90:24:
95:b9:a2:44:34:39:04:ac:b6:71:4d:d2:ee:87:2f:
6e:a6:08:22:a5:89:72:f2:96:80:58:74:44:75:0d:
b6:66:f4:c5:f9:59:8f:ee:d9:f3:89:3d:ae:d0:e9:
03:1c:34:a8:eb:5f:c8:9c:d0:2d:82:92:f0:53:7a:
33:f2:3d:3a:5d:bb:c4:65:c6:9c:54:e3:e3:1c:35:
9e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B3:83:AB:C5:EB:29:EB:6E:59:EA:49:C7:F7:CC:2C:9A:35:36:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1486557d-cc87-3dfe-9024-c71d699e3222.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
206.123.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:14:be:69:87:d9:2c:d1:82:e6:e2:6f:b2:2d:cd:65:1f:36:
d8:39:44:39:0a:b0:e5:55:bc:2c:89:08:02:1d:6f:3c:19:b9:
51:04:c8:ec:7b:20:ed:62:20:5c:8f:dc:45:0e:4f:9b:cb:a2:
99:b2:5c:aa:0d:04:c9:1d:d0:c8:13:86:57:cd:82:10:ca:11:
d4:0b:9e:09:70:25:90:19:92:67:aa:be:73:e8:fd:f7:59:64:
67:66:6e:a4:75:4d:9b:a9:79:9a:de:90:8f:45:1a:6c:50:e5:
04:bf:1b:5d:24:da:6a:e1:1a:bb:02:74:7a:26:ed:ea:28:e2:
ac:b0:a7:3c:c8:aa:c6:a9:d1:fc:42:77:b3:11:f4:73:c0:f0:
ea:65:87:0f:72:20:1b:15:f7:de:32:08:ec:41:a2:04:df:9e:
ca:2a:76:ff:a2:94:31:af:a3:dd:44:61:51:87:11:c4:00:cb:
de:73:f7:b8:36:ee:16:ed:16:8b:80:59:a7:c1:fa:81:6e:d9:
b8:14:5b:7b:41:07:b5:df:0c:89:cc:63:be:21:3e:33:f0:7d:
62:6a:27:a7:0a:fd:03:e3:b6:d2:6b:79:36:83:9c:bc:46:cf:
78:a5:ea:53:f5:74:04:1f:57:b0:7c:74:6e:c0:6c:0e:0d:84:
19:0a:87:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEixtEu5qm1hXjWqaIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDEyODExNDgxNFoXDTI1MDQyODEwNDgxNFowLzEtMCsGA1UEAxMk
ODE0ZjI0MjYtODUzZS00M2U1LWE0NmItOGVmMDcwZjdmZTc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFWe6dzfNW0ZQEZfGDnHRE4DUn+rriKRK3ee
XxstxyL3mh6YHeXOepf/fHUxMqiEfFkxoxG/3uoSfliFRIwdvhSt2NC81w9doC1V
f9JfFK/uRZ99IEyjonglkxXlLwXQT+FDZSUUQIg+0kPyxE1PyHm2qKgiefqffit9
TnJXDjeNJ3mOHzjB00UkHw0qixOwmZAoPwwqp6pCrPUH9hFKEjMIr3zc29etPu6U
YViDzb8PkCSVuaJENDkErLZxTdLuhy9upggipYly8paAWHREdQ22ZvTF+VmP7tnz
iT2u0OkDHDSo61/InNAtgpLwU3oz8j06XbvEZcacVOPjHDWeUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOyzg6vF6ynrblnqScf3zCyaNTZjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTQ4NjU1N2QtY2M4Ny0z
ZGZlLTkwMjQtYzcxZDY5OWUzMjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAMUvmmH2SzRgubib7ItzWUfNtg5RDkKsOVVvCyJCAIdbzwZuVEEyOx7
IO1iIFyP3EUOT5vLopmyXKoNBMkd0MgThlfNghDKEdQLnglwJZAZkmeqvnPo/fdZ
ZGdmbqR1TZupeZrekI9FGmxQ5QS/G10k2mrhGrsCdHom7eoo4qywpzzIqsap0fxC
d7MR9HPA8Oplhw9yIBsV994yCOxBogTfnsoqdv+ilDGvo91EYVGHEcQAy95z97g2
7hbtFouAWafB+oFu2bgUW3tBB7XfDInMY74hPjPwfWJqJ6cK/QPjttJreTaDnLxG
z3il6lP1dAQfV7B8dG7AbA4NhBkKh1c=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:47 2025 by rpki-client