Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/2baa4345-9972-39b4-8f3b-fc39fc293a8c.roa
File: 2baa4345-9972-39b4-8f3b-fc39fc293a8c.roa (raw, json)
Hash identifier: IYlvxBA3ukx6HyTpRMGAo8iwe6Wy7IzRh5QC17dsgH4=
Subject key identifier: 3F:D9:DF:7A:42:91:30:74:96:62:26:D2:88:75:F0:FD:2A:0A:B9:30
Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial: 010D0C9F43285848E9CBEDBC7CD2FFC7496DA988
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/2baa4345-9972-39b4-8f3b-fc39fc293a8c.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 8100
IP address blocks: 186.190.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:ed:bc:7c:d2:ff:c7:49:6d:a9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=c95a2fc6-df7c-4c50-bf89-9f85072250e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4e:c9:0d:d4:0a:3d:9d:e8:6b:ed:2d:2d:2f:
06:d2:48:7e:ec:0a:45:55:0b:1d:22:94:53:55:d8:
b0:33:86:37:26:08:92:8b:66:90:51:42:1b:ea:d7:
c4:b1:1d:40:e1:0d:fb:89:29:6d:80:d8:5b:a7:a3:
a4:73:aa:87:13:a3:33:8d:21:f6:55:6e:10:dd:84:
35:af:a9:ba:01:be:e1:0a:b1:30:54:46:fd:af:18:
1d:1b:b2:ea:52:4c:92:b5:30:32:5a:76:3e:fd:53:
41:75:75:92:ef:ce:5f:21:49:50:3a:20:0f:09:5c:
75:c4:90:b0:f4:3b:92:6c:ba:61:38:cf:c3:30:13:
ce:e7:63:5f:1d:a7:37:97:d6:d1:88:da:cc:a6:1c:
aa:a7:a7:65:73:c3:69:be:52:c9:a0:6a:0b:39:94:
0f:27:53:0d:b2:0d:a9:3c:82:af:0c:e9:bd:0c:f5:
52:60:ce:9f:c1:e9:4e:8c:6c:5b:b5:7a:63:97:1c:
ee:78:de:33:e7:fa:6c:06:12:82:d1:38:df:c8:8a:
4b:73:d1:65:53:7e:b1:50:93:4c:3f:3b:9e:33:bc:
8a:98:de:9d:e5:52:5a:3e:d3:8c:38:78:ea:4c:25:
54:02:d2:3b:ef:dc:a6:06:15:a3:3c:af:5f:c2:2b:
c6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D9:DF:7A:42:91:30:74:96:62:26:D2:88:75:F0:FD:2A:0A:B9:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/2baa4345-9972-39b4-8f3b-fc39fc293a8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
X509v3 Authority Key Identifier:
keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
sbgp-ipAddrBlock: critical
IPv4:
186.190.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:2d:1a:6c:6b:44:71:88:d3:c7:bf:3f:c4:34:91:cc:68:1a:
e9:85:20:81:c0:a2:cf:00:a1:05:8f:01:9e:41:ac:66:8d:f8:
70:d2:2f:02:80:da:af:6f:63:c2:3a:60:f5:bf:9b:ed:d0:b2:
1f:e4:56:f9:fd:e5:48:8a:87:ec:d7:63:0c:27:e0:17:ab:8b:
be:5d:62:2d:ae:41:4e:6a:9a:a0:7c:b7:94:af:52:8d:0e:a8:
51:a7:3f:d4:d4:82:5f:c5:a2:ef:2a:35:15:81:f1:70:11:c6:
52:c0:6f:5c:6c:1a:a2:42:14:01:01:ec:09:fe:d3:0b:23:f1:
eb:80:cb:44:9c:25:ed:0a:e9:11:57:c9:17:f9:57:c5:92:98:
a5:9a:59:6a:96:db:ff:00:c7:47:35:b8:d9:87:f9:0b:ec:fe:
19:32:f6:e3:8e:b8:56:77:4c:f7:2f:61:b2:32:97:ee:58:6f:
be:ab:ad:f9:32:8d:74:59:c7:a9:85:7b:ce:0c:e5:13:89:fb:
5e:8d:4e:9c:6c:e7:2b:51:1e:38:2e:9b:76:d2:80:19:b0:1f:
d3:d6:de:ad:ad:cc:4a:15:bb:2a:79:e1:87:c6:aa:76:7f:54:
b6:fd:ce:e7:c3:c2:38:4f:81:ef:53:be:17:d9:b2:48:da:54:
72:63:f5:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy+28fNL/x0ltqYgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0
Mzg4MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk
Yzk1YTJmYzYtZGY3Yy00YzUwLWJmODktOWY4NTA3MjI1MGU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjk7JDdQKPZ3oa+0tLS8G0kh+7ApFVQsdIpRT
VdiwM4Y3JgiSi2aQUUIb6tfEsR1A4Q37iSltgNhbp6Okc6qHE6MzjSH2VW4Q3YQ1
r6m6Ab7hCrEwVEb9rxgdG7LqUkyStTAyWnY+/VNBdXWS785fIUlQOiAPCVx1xJCw
9DuSbLphOM/DMBPO52NfHac3l9bRiNrMphyqp6dlc8NpvlLJoGoLOZQPJ1MNsg2p
PIKvDOm9DPVSYM6fwelOjGxbtXpjlxzueN4z5/psBhKC0TjfyIpLc9FlU36xUJNM
PzueM7yKmN6d5VJaPtOMOHjqTCVUAtI779ymBhWjPK9fwivGjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD/Z33pCkTB0lmIm0oh18P0qCrkwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl
YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvMmJhYTQzNDUtOTk3Mi0z
OWI0LThmM2ItZmMzOWZjMjkzYThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm
NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4
NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi
N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAur7cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACktGmxrRHGI08e/P8Q0kcxoGumFIIHAos8AoQWPAZ5BrGaN+HDSLwKA
2q9vY8I6YPW/m+3Qsh/kVvn95UiKh+zXYwwn4Beri75dYi2uQU5qmqB8t5SvUo0O
qFGnP9TUgl/Fou8qNRWB8XARxlLAb1xsGqJCFAEB7An+0wsj8euAy0ScJe0K6RFX
yRf5V8WSmKWaWWqW2/8Ax0c1uNmH+Qvs/hky9uOOuFZ3TPcvYbIyl+5Yb76rrfky
jXRZx6mFe84M5ROJ+16NTpxs5ytRHjgum3bSgBmwH9PW3q2tzEoVuyp54YfGqnZ/
VLb9zufDwjhPge9TvhfZskjaVHJj9XY=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:11:14 2025 by rpki-client