Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/8d7b7a60-ed08-3ef1-afee-8da2a6a09e15.roa
File: 8d7b7a60-ed08-3ef1-afee-8da2a6a09e15.roa (raw, json)
Hash identifier: aO2gTYasVPEwTVh6sf2ds4MVfd1oUaygOtbJR+Qb8I4=
Subject key identifier: D6:8D:8F:18:4F:03:EB:28:B3:69:C6:93:E6:78:6C:AA:A2:F4:F0:78
Certificate issuer: /CN=bfe5a38f-5ff4-4b97-a459-e25cfc9caa71
Certificate serial: 010D0C9F4328584953C41233D046BE6300EDFB80
Authority key identifier: BC:36:F0:C3:90:91:7B:B8:CB:F7:FE:00:75:72:5B:AF:FB:59:8B:01
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/8d7b7a60-ed08-3ef1-afee-8da2a6a09e15.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 27
IP address blocks: 206.196.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:12:33:d0:46:be:63:00:ed:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe5a38f-5ff4-4b97-a459-e25cfc9caa71
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=af990199-ef42-4538-9ba4-59803fbc30de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:68:23:e6:f8:a1:42:1a:51:9e:bf:7c:e5:d2:
19:03:1c:84:15:24:a0:ed:65:bd:df:5d:6e:2e:c6:
da:16:49:86:95:d3:c7:83:53:da:ac:ea:bd:a7:6c:
6a:9c:44:68:6a:33:7d:da:b8:e3:3e:09:e0:51:13:
3d:2d:2e:f8:26:6d:36:8f:a6:26:4b:0e:5f:30:31:
45:60:66:ab:7a:c0:58:ae:85:94:49:6b:a1:9c:06:
aa:b8:ea:3e:d4:0f:2c:b9:ab:47:0d:9d:42:ff:43:
bf:bb:69:87:d6:3f:2b:6f:44:76:45:9c:61:a1:36:
41:42:c7:12:64:78:cf:34:13:8b:e3:11:13:dc:74:
5b:7d:6f:45:28:4d:b9:14:0a:c4:51:70:71:52:b8:
76:04:6d:7f:56:a5:f2:9b:2b:82:50:97:7f:23:bb:
09:51:83:ec:47:13:b3:5e:f0:94:e9:89:1f:bd:d0:
0a:29:c0:b2:09:53:43:a2:39:93:bd:48:78:a0:66:
98:d2:61:a8:0e:2d:09:3b:f9:98:50:c6:5d:bc:8d:
65:78:17:e8:18:8d:8d:f0:35:91:a8:73:10:89:89:
9a:5e:96:dd:af:ae:aa:ac:3a:bf:c3:34:4f:f3:19:
99:7d:fa:59:2e:82:04:8e:73:ae:52:b1:22:b0:f5:
7d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8D:8F:18:4F:03:EB:28:B3:69:C6:93:E6:78:6C:AA:A2:F4:F0:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/8d7b7a60-ed08-3ef1-afee-8da2a6a09e15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.crl
X509v3 Authority Key Identifier:
keyid:BC:36:F0:C3:90:91:7B:B8:CB:F7:FE:00:75:72:5B:AF:FB:59:8B:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.cer
sbgp-ipAddrBlock: critical
IPv4:
206.196.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:85:58:b6:d4:20:a3:96:b0:43:ce:08:a1:3f:c9:a5:de:c3:
58:0d:0c:20:c0:4d:91:ea:91:51:86:85:80:9d:39:15:c3:27:
5b:80:cd:86:6c:8e:56:d0:68:24:11:cd:1d:ef:7a:b9:10:95:
9c:39:72:40:6b:86:d7:74:9b:08:fc:35:6e:c7:d2:93:8b:0e:
99:93:ef:6a:63:35:06:92:7e:b8:84:2b:c2:e9:81:6e:16:c6:
89:f1:e9:5b:6b:a6:9d:f1:d8:dc:7e:8d:aa:dd:fa:f5:cf:21:
a9:ef:02:b2:dd:49:18:b3:3f:b3:d2:cc:7b:e8:a5:ca:9b:e2:
7c:5b:88:1b:aa:b9:25:02:55:6d:9d:6b:89:56:de:39:a0:3f:
bc:9f:21:b4:9d:c5:3c:3c:f4:7f:d1:ff:02:33:3c:df:0a:62:
a4:cc:8d:65:80:af:e6:be:49:55:87:ef:91:5f:59:c5:88:7b:
1e:52:85:48:43:ec:ec:37:da:fa:0a:b9:04:a7:54:5e:a7:38:
b4:90:d5:f4:1d:3a:89:b8:dd:5b:a1:34:97:38:5e:c8:69:be:
80:4b:04:4b:0a:4a:8d:f8:5a:3a:18:d6:e7:ef:ab:80:c4:bc:
0d:a0:fd:39:31:28:b7:2d:c0:d5:e4:ea:ea:2f:9d:c4:3c:d4:
df:94:80:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxBIz0Ea+YwDt+4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmZlNWEzOGYtNWZmNC00Yjk3LWE0NTktZTI1Y2ZjOWNh
YTcxMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
YWY5OTAxOTktZWY0Mi00NTM4LTliYTQtNTk4MDNmYmMzMGRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmgj5vihQhpRnr985dIZAxyEFSSg7WW9311u
LsbaFkmGldPHg1ParOq9p2xqnERoajN92rjjPgngURM9LS74Jm02j6YmSw5fMDFF
YGaresBYroWUSWuhnAaquOo+1A8suatHDZ1C/0O/u2mH1j8rb0R2RZxhoTZBQscS
ZHjPNBOL4xET3HRbfW9FKE25FArEUXBxUrh2BG1/VqXymyuCUJd/I7sJUYPsRxOz
XvCU6YkfvdAKKcCyCVNDojmTvUh4oGaY0mGoDi0JO/mYUMZdvI1leBfoGI2N8DWR
qHMQiYmaXpbdr66qrDq/wzRP8xmZffpZLoIEjnOuUrEisPV9kQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNaNjxhPA+sos2nGk+Z4bKqi9PB4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iZmU1
YTM4Zi01ZmY0LTRiOTctYTQ1OS1lMjVjZmM5Y2FhNzEvOGQ3YjdhNjAtZWQwOC0z
ZWYxLWFmZWUtOGRhMmE2YTA5ZTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmZlNWEzOGYtNWZmNC00Yjk3LWE0
NTktZTI1Y2ZjOWNhYTcxL2JmZTVhMzhmLTVmZjQtNGI5Ny1hNDU5LWUyNWNmYzlj
YWE3MS5jcmwwHwYDVR0jBBgwFoAUvDbww5CRe7jL9/4AdXJbr/tZiwEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iZmU1YTM4Zi01ZmY0LTRiOTctYTQ1OS1lMjVj
ZmM5Y2FhNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzsSgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACKFWLbUIKOWsEPOCKE/yaXew1gNDCDATZHqkVGGhYCdORXDJ1uAzYZs
jlbQaCQRzR3verkQlZw5ckBrhtd0mwj8NW7H0pOLDpmT72pjNQaSfriEK8LpgW4W
xonx6Vtrpp3x2Nx+jard+vXPIanvArLdSRizP7PSzHvopcqb4nxbiBuquSUCVW2d
a4lW3jmgP7yfIbSdxTw89H/R/wIzPN8KYqTMjWWAr+a+SVWH75FfWcWIex5ShUhD
7Ow32voKuQSnVF6nOLSQ1fQdOom43VuhNJc4XshpvoBLBEsKSo34WjoY1ufvq4DE
vA2g/TkxKLctwNXk6uovncQ81N+UgBg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:26:57 2025 by rpki-client