Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/bef278fc-8194-3501-832d-baa7c8240251.roa
File: bef278fc-8194-3501-832d-baa7c8240251.roa (raw, json)
Hash identifier: HQEEShV1Dnw6MLAvM/JldtsaEnkAaGeAsPSvR/BCwRE=
Subject key identifier: 3F:67:04:1F:4D:07:C3:FA:0A:CC:CA:27:12:54:3F:96:2D:DB:D2:D5
Certificate issuer: /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
Certificate serial: 010D0C9F4328584898D60F3922DDDC0F406CBCD0
Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/bef278fc-8194-3501-832d-baa7c8240251.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 399244
IP address blocks: 170.205.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:0f:39:22:dd:dc:0f:40:6c:bc:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=9ad2da91-8c43-4696-ac68-1818a8db4f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3b:59:8b:38:f6:c0:08:9f:7a:8d:ea:f9:d4:
52:20:14:2e:88:c7:15:76:b6:bd:60:f1:e5:cd:34:
75:e6:87:e9:1f:9f:84:ce:24:7a:34:1c:14:cb:27:
6d:49:17:5d:87:ac:ae:eb:46:83:90:43:d1:eb:16:
81:18:ff:76:38:8c:d5:3b:cc:52:59:5f:d1:28:15:
54:59:fb:68:af:7d:d0:67:e4:c9:de:cc:6c:a5:b3:
97:36:c3:56:ba:6c:56:ad:a5:07:d8:ec:fc:b6:c4:
31:57:a3:cf:6a:be:a9:81:3f:c5:b4:f8:22:1b:8d:
73:73:69:30:07:d1:91:93:ed:30:e2:67:81:8a:5c:
8a:75:aa:b9:72:a5:72:af:6d:3e:13:da:f6:c7:b1:
5c:cd:2d:63:07:0e:41:4a:a5:93:16:0d:04:2b:36:
15:66:68:a1:fa:68:b9:ff:b1:91:00:f0:2d:cb:91:
bb:a5:e1:1c:dc:f9:15:10:b9:68:09:7f:3d:19:bd:
67:77:33:cb:f9:0d:fa:3f:40:b2:b0:0b:3b:22:d2:
15:e5:cd:f1:eb:47:ba:c4:64:94:94:c3:a0:16:3d:
b6:3f:a3:1f:3e:58:10:e3:a7:32:37:d3:28:43:f2:
59:55:d1:46:80:0e:d0:59:66:f7:07:89:1d:c3:70:
39:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:67:04:1F:4D:07:C3:FA:0A:CC:CA:27:12:54:3F:96:2D:DB:D2:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/bef278fc-8194-3501-832d-baa7c8240251.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl
X509v3 Authority Key Identifier:
keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
sbgp-ipAddrBlock: critical
IPv4:
170.205.27.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:61:9a:fd:d8:63:65:cf:77:42:06:ef:9c:a9:00:e4:26:20:
34:da:94:10:3e:35:24:ed:90:ea:63:aa:bc:0b:dd:89:0e:94:
95:07:f1:e0:9d:1b:5e:46:72:e9:e0:cd:b1:0e:f7:4f:f1:d3:
d6:ef:5c:68:7a:7c:d9:b6:7a:78:77:6c:c5:56:25:bf:01:a9:
74:2c:f9:ed:d8:f9:e1:81:e4:21:6b:6b:5b:7a:1b:09:49:aa:
27:61:b3:d5:6d:e7:62:fa:4f:32:1d:92:8c:bd:8b:9c:cf:67:
d5:01:84:b0:46:3c:ee:c6:35:b2:90:56:52:91:a0:ba:f5:b0:
25:85:62:af:14:6c:6e:67:58:7b:d8:44:80:dd:84:a7:3a:6a:
a9:c8:83:cf:54:6e:d4:7f:0a:20:a4:92:5a:70:2a:79:6a:5d:
89:ef:e7:37:8e:f6:5e:d3:b1:5a:e0:cd:2a:43:38:b7:7d:07:
d7:6b:bf:86:1c:03:d6:3e:f3:03:db:c2:5a:33:2b:d6:cc:40:
71:44:02:9d:32:6c:b0:f2:46:fa:7b:6d:d0:e3:72:14:73:a0:
4e:22:00:46:ca:a9:e8:ac:a7:40:ba:6b:3f:bd:9a:6d:5e:2e:
4a:f7:11:a1:90:83:ae:c9:ad:5a:1d:63:57:0b:de:1f:25:d2:
61:c5:47:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1g85It3cD0BsvNAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTAyZDgyZmUtOTVhNy00ZTA5LTlhMmEtYmUxZTE1NGJh
MzhkMB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk
OWFkMmRhOTEtOGM0My00Njk2LWFjNjgtMTgxOGE4ZGI0ZjBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjtZizj2wAifeo3q+dRSIBQuiMcVdra9YPHl
zTR15ofpH5+EziR6NBwUyydtSRddh6yu60aDkEPR6xaBGP92OIzVO8xSWV/RKBVU
Wftor33QZ+TJ3sxspbOXNsNWumxWraUH2Oz8tsQxV6PPar6pgT/FtPgiG41zc2kw
B9GRk+0w4meBilyKdaq5cqVyr20+E9r2x7FczS1jBw5BSqWTFg0EKzYVZmih+mi5
/7GRAPAty5G7peEc3PkVELloCX89Gb1ndzPL+Q36P0CysAs7ItIV5c3x60e6xGSU
lMOgFj22P6MfPlgQ46cyN9MoQ/JZVdFGgA7QWWb3B4kdw3A5sQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD9nBB9NB8P6CszKJxJUP5Yt29LVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJk
ODJmZS05NWE3LTRlMDktOWEyYS1iZTFlMTU0YmEzOGQvYmVmMjc4ZmMtODE5NC0z
NTAxLTgzMmQtYmFhN2M4MjQwMjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTAyZDgyZmUtOTVhNy00ZTA5LTlh
MmEtYmUxZTE1NGJhMzhkL2UwMmQ4MmZlLTk1YTctNGUwOS05YTJhLWJlMWUxNTRi
YTM4ZC5jcmwwHwYDVR0jBBgwFoAUpMW3Uwr3bKTh98MEI6vYWwVwhGwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJkODJmZS05NWE3LTRlMDktOWEyYS1iZTFl
MTU0YmEzOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqs0bMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACNhmv3YY2XPd0IG75ypAOQmIDTalBA+NSTtkOpjqrwL3YkOlJUH8eCd
G15GcungzbEO90/x09bvXGh6fNm2enh3bMVWJb8BqXQs+e3Y+eGB5CFra1t6GwlJ
qidhs9Vt52L6TzIdkoy9i5zPZ9UBhLBGPO7GNbKQVlKRoLr1sCWFYq8UbG5nWHvY
RIDdhKc6aqnIg89UbtR/CiCkklpwKnlqXYnv5zeO9l7TsVrgzSpDOLd9B9drv4Yc
A9Y+8wPbwlozK9bMQHFEAp0ybLDyRvp7bdDjchRzoE4iAEbKqeisp0C6az+9mm1e
Lkr3EaGQg67JrVodY1cL3h8l0mHFRyo=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:12:39 2025 by rpki-client