Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/53a2f17f-0941-3e22-b339-2a69a7e5dba3.roa
File: 53a2f17f-0941-3e22-b339-2a69a7e5dba3.roa (raw, json)
Hash identifier: qBz/2chl8b/YP7wZhu9xt+SkhHJ8o+FiZBciW22HhMI=
Subject key identifier: A5:75:18:2A:1F:61:DB:D5:82:30:01:5C:A5:6B:87:38:2F:47:9F:3D
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F43285848BFEB9FEBB86D4D984FB17F00
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/53a2f17f-0941-3e22-b339-2a69a7e5dba3.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 13536
IP address blocks: 209.198.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:9f:eb:b8:6d:4d:98:4f:b1:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=0b45a4da-cfeb-41a2-a833-84f9d5139bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e0:5c:a6:36:cc:c8:dd:ce:f5:e0:ca:51:f9:
ce:9e:2f:d7:ed:7e:fe:1b:cb:d2:d7:9b:13:44:52:
06:70:d1:b4:e6:d2:2f:1b:99:d3:5d:7a:a1:9c:f7:
fb:94:65:c6:20:74:f6:4a:0d:19:c3:99:74:68:d6:
22:ff:b1:4f:27:dc:bf:73:5d:71:6c:77:76:cf:9b:
a3:b9:8f:0c:bb:ce:3c:c7:25:3b:1b:50:54:fb:1e:
8e:3e:11:6b:8f:3d:19:93:3d:7c:cc:b6:d5:1b:40:
5f:ac:46:7a:48:46:e6:ed:eb:a8:c7:df:d0:09:51:
ea:56:d9:08:f2:e7:f5:49:0b:c7:ec:50:f7:3c:f7:
0f:13:0f:ba:4d:32:80:b7:36:12:12:fe:b6:58:42:
94:41:0b:21:74:96:aa:80:96:04:c3:d4:ce:8a:57:
b7:5e:95:da:72:65:2a:d8:3a:20:6f:f9:49:30:4b:
ad:c3:a9:fe:8e:0f:70:e7:d9:19:50:49:71:e0:1f:
9e:e6:96:e9:8c:81:14:e3:9a:5c:d6:7b:65:44:22:
c2:fa:fe:28:56:66:13:8c:a0:24:73:24:e7:36:73:
28:d0:2f:f1:24:b0:c3:99:7e:05:e0:f8:b1:8c:9b:
d2:2d:7a:6f:5a:13:b1:f7:a4:13:67:f5:d3:91:0c:
e5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:75:18:2A:1F:61:DB:D5:82:30:01:5C:A5:6B:87:38:2F:47:9F:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/53a2f17f-0941-3e22-b339-2a69a7e5dba3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
209.198.80.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:f5:d2:c6:0a:8e:7e:58:dc:65:f1:7d:96:57:a4:e5:41:9c:
82:85:85:d9:4b:77:13:07:53:8b:91:c4:c3:e1:98:9c:e1:f6:
19:48:93:9a:93:00:40:e7:43:3b:72:2a:5c:2c:3f:d5:85:d3:
ae:5c:11:a4:2f:94:cc:51:9a:e4:89:28:2b:cc:ce:39:9f:c4:
24:07:fc:cd:53:78:29:fa:d6:84:23:17:d7:34:a5:f5:02:94:
5b:b0:5f:68:3f:0e:86:62:bb:fc:c7:04:d1:c3:87:77:4f:c5:
de:52:09:6c:04:60:91:c7:1b:35:98:a0:5b:9c:d0:2b:1a:60:
6c:fb:dd:69:8c:c1:ac:81:86:70:1b:0c:13:c1:59:7d:5c:0c:
a6:bb:c2:28:8a:16:53:db:37:84:99:9b:60:c4:cb:d4:c6:70:
b6:15:6c:d2:e9:28:67:69:8d:9b:ba:f5:02:33:e4:ca:8c:f6:
7d:e1:aa:c4:4f:f1:af:bb:da:af:ab:91:44:87:01:98:74:5a:
e4:b5:eb:57:fc:88:8e:fc:43:4b:cf:1f:4c:98:a9:f3:a1:93:
5a:3d:8c:e6:bc:50:9e:28:5c:e2:bf:72:bf:b1:74:96:cc:43:
bd:a5:68:d3:84:3d:fc:86:7a:a3:76:6a:8b:06:5e:be:af:b4:
f0:ac:68:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/65/ruG1NmE+xfwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz
OTdkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
MGI0NWE0ZGEtY2ZlYi00MWEyLWE4MzMtODRmOWQ1MTM5YmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeBcpjbMyN3O9eDKUfnOni/X7X7+G8vS15sT
RFIGcNG05tIvG5nTXXqhnPf7lGXGIHT2Sg0Zw5l0aNYi/7FPJ9y/c11xbHd2z5uj
uY8Mu848xyU7G1BU+x6OPhFrjz0Zkz18zLbVG0BfrEZ6SEbm7euox9/QCVHqVtkI
8uf1SQvH7FD3PPcPEw+6TTKAtzYSEv62WEKUQQshdJaqgJYEw9TOile3XpXacmUq
2Dogb/lJMEutw6n+jg9w59kZUElx4B+e5pbpjIEU45pc1ntlRCLC+v4oVmYTjKAk
cyTnNnMo0C/xJLDDmX4F4PixjJvSLXpvWhOx96QTZ/XTkQzlPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKV1GCofYdvVgjABXKVrhzgvR589MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh
NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvNTNhMmYxN2YtMDk0MS0z
ZTIyLWIzMzktMmE2OWE3ZTVkYmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4
NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi
Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz
MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cZQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKz10sYKjn5Y3GXxfZZXpOVBnIKFhdlLdxMHU4uRxMPhmJzh9hlIk5qT
AEDnQztyKlwsP9WF065cEaQvlMxRmuSJKCvMzjmfxCQH/M1TeCn61oQjF9c0pfUC
lFuwX2g/DoZiu/zHBNHDh3dPxd5SCWwEYJHHGzWYoFuc0CsaYGz73WmMwayBhnAb
DBPBWX1cDKa7wiiKFlPbN4SZm2DEy9TGcLYVbNLpKGdpjZu69QIz5MqM9n3hqsRP
8a+72q+rkUSHAZh0WuS161f8iI78Q0vPH0yYqfOhk1o9jOa8UJ4oXOK/cr+xdJbM
Q72laNOEPfyGeqN2aosGXr6vtPCsaGw=
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:20:06 2025 by rpki-client