Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2c12998d-60f7-3c30-a85e-91c82147a7c4.roa
File: 2c12998d-60f7-3c30-a85e-91c82147a7c4.roa (raw, json)
Hash identifier: WgQNrhwlMYpUaVUT3+X7x4/7mCEC/XJN6mJN/CKiBRE=
Subject key identifier: 0A:7A:75:58:29:99:48:9C:B6:6E:67:00:1F:C1:82:11:59:03:68:FD
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F43285848F92685101B38B86909243700
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2c12998d-60f7-3c30-a85e-91c82147a7c4.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 39960
IP address blocks: 208.185.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:85:10:1b:38:b8:69:09:24:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=57a4a694-ea6f-4213-bcd7-0b5df2a1ac50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:23:03:81:86:20:9e:e2:94:32:fe:da:38:c8:
00:df:db:b7:2c:50:56:a3:75:a4:c3:64:57:02:75:
41:d3:5b:e5:8c:05:3f:10:84:88:63:60:c4:58:9a:
31:e4:bc:e2:83:bb:bf:8d:05:cd:89:8d:51:94:f4:
60:8c:c2:79:45:1f:c7:3b:8a:4e:4b:e8:98:50:0c:
35:9b:80:65:f6:27:e4:78:46:9a:73:9e:10:f2:10:
f9:13:96:c9:09:aa:d6:1d:7c:48:b8:b7:7c:e9:38:
9c:3f:8c:8d:b5:a1:71:22:e3:5b:ef:d2:59:bf:96:
f0:8c:54:92:41:c4:de:e6:34:f4:bd:0c:ca:81:66:
84:33:30:13:4b:a4:fd:7c:36:de:67:2c:01:00:2a:
fd:8e:4c:e4:35:92:21:a7:cc:ce:09:9a:a0:87:35:
3e:e8:ec:0d:a9:a0:1b:ae:e4:a0:92:ad:16:1e:33:
fe:34:99:9d:d3:52:51:45:ca:9f:8c:f7:28:c3:88:
e2:de:2c:71:0e:de:85:77:7c:41:7d:3e:3c:ef:cd:
53:9f:b6:a6:39:15:69:45:26:42:5e:cc:a2:85:81:
98:a1:43:35:60:11:34:d2:b6:7b:b3:ae:55:a5:09:
44:ad:30:04:d5:2e:4d:1a:5b:b9:99:53:7d:b7:10:
2f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7A:75:58:29:99:48:9C:B6:6E:67:00:1F:C1:82:11:59:03:68:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2c12998d-60f7-3c30-a85e-91c82147a7c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
208.185.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:6b:92:04:a0:25:4c:4b:cc:7b:d6:82:9a:8b:1b:96:09:a5:
25:9e:33:20:76:04:51:bb:11:89:d6:5f:98:73:16:cd:ee:a5:
3d:cb:cf:93:f1:de:2a:a7:06:16:9b:5e:98:c1:5d:f4:99:61:
55:ea:6c:3d:33:b0:58:37:28:c2:70:50:7a:29:0d:20:9c:7b:
5d:39:dc:8d:56:5e:6b:42:7c:bd:0d:57:31:17:4c:ac:7a:7f:
df:7e:64:da:08:11:61:78:4f:bd:ee:c9:c4:20:17:03:c2:28:
89:37:6b:9c:ae:0a:81:2c:2c:25:dc:9c:74:4c:9b:7c:2b:ec:
ef:c6:1e:b7:0a:ed:f6:be:e8:a2:2c:44:cb:00:ec:99:82:d4:
f0:8e:2d:e2:1d:eb:84:af:5f:10:d5:b1:1c:0b:f6:b2:6b:3a:
09:ee:dd:b5:13:74:d8:5c:cf:de:10:03:18:f3:78:bc:89:a1:
68:73:73:9b:3b:00:b8:79:15:58:cf:3d:d8:9f:78:db:ab:fc:
e7:4a:55:98:be:67:86:a1:80:1b:41:c5:ea:e0:81:8d:03:07:
5b:49:bb:01:42:88:59:1c:b3:8d:c7:34:aa:14:5c:c7:03:5d:
e0:da:e8:fd:53:d4:3c:de:27:38:a6:f7:84:a6:20:8b:bc:4b:
31:ca:fd:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JoUQGzi4aQkkNwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
NTdhNGE2OTQtZWE2Zi00MjEzLWJjZDctMGI1ZGYyYTFhYzUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiMDgYYgnuKUMv7aOMgA39u3LFBWo3Wkw2RX
AnVB01vljAU/EISIY2DEWJox5Lzig7u/jQXNiY1RlPRgjMJ5RR/HO4pOS+iYUAw1
m4Bl9ifkeEaac54Q8hD5E5bJCarWHXxIuLd86TicP4yNtaFxIuNb79JZv5bwjFSS
QcTe5jT0vQzKgWaEMzATS6T9fDbeZywBACr9jkzkNZIhp8zOCZqghzU+6OwNqaAb
ruSgkq0WHjP+NJmd01JRRcqfjPcow4ji3ixxDt6Fd3xBfT48781Tn7amORVpRSZC
XsyihYGYoUM1YBE00rZ7s65VpQlErTAE1S5NGlu5mVN9txAv7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAp6dVgpmUictm5nAB/BghFZA2j9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvMmMxMjk5OGQtNjBmNy0z
YzMwLWE4NWUtOTFjODIxNDdhN2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0LmsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABRrkgSgJUxLzHvWgpqLG5YJpSWeMyB2BFG7EYnWX5hzFs3upT3Lz5Px
3iqnBhabXpjBXfSZYVXqbD0zsFg3KMJwUHopDSCce1053I1WXmtCfL0NVzEXTKx6
f99+ZNoIEWF4T73uycQgFwPCKIk3a5yuCoEsLCXcnHRMm3wr7O/GHrcK7fa+6KIs
RMsA7JmC1PCOLeId64SvXxDVsRwL9rJrOgnu3bUTdNhcz94QAxjzeLyJoWhzc5s7
ALh5FVjPPdifeNur/OdKVZi+Z4ahgBtBxerggY0DB1tJuwFCiFkcs43HNKoUXMcD
XeDa6P1T1DzeJzim94SmIIu8SzHK/c4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:59:59 2025 by rpki-client