Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/ef2e8c86-6f5d-3989-a9bd-02f9f2212c22.roa
File: ef2e8c86-6f5d-3989-a9bd-02f9f2212c22.roa (raw, json)
Hash identifier: 99GNwFjWc8cTaD1sbUcQScyMTFsR/IyWGAjQLtCB0S0=
Subject key identifier: BA:FF:61:66:8A:CF:36:38:7D:83:E5:BC:B9:4F:BF:98:04:81:37:C8
Certificate issuer: /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Certificate serial: 010D0C9F4328584930DE7972A17BEE63D31C7B00
Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/ef2e8c86-6f5d-3989-a9bd-02f9f2212c22.roa
Signing time: Sat 15 Mar 2025 01:00:39 +0000
ROA not before: Sat 15 Mar 2025 01:00:39 +0000
ROA not after: Fri 13 Jun 2025 01:00:39 +0000
asID: 10578
IP address blocks: 192.5.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:de:79:72:a1:7b:ee:63:d3:1c:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Validity
Not Before: Mar 15 01:00:39 2025 GMT
Not After : Jun 13 01:00:39 2025 GMT
Subject: CN=fd2698ab-25e5-4250-aa04-74a952dce0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3a:85:da:1d:db:3c:cd:49:bb:52:16:8c:43:
09:ce:83:a7:4e:20:51:19:1c:7c:3d:b0:cb:f9:e7:
fa:0c:77:f2:92:51:ca:cf:3d:77:22:e4:58:be:42:
b9:bf:1b:97:d9:7a:85:68:33:1f:d6:e3:ea:e1:47:
55:4b:b9:b7:2f:3d:ce:51:87:78:2e:a5:95:a8:83:
87:0c:49:24:0d:71:f4:00:96:30:08:1b:cd:be:b7:
96:78:ca:bf:09:d5:6c:c6:e8:c5:12:0c:9b:02:a4:
a8:6a:f7:8c:40:cd:d1:29:c4:21:0e:86:55:53:c6:
9f:81:2a:60:18:3f:11:bc:32:55:6e:88:f8:db:98:
b4:02:66:2f:ba:bc:2a:57:71:40:ae:15:e4:34:7d:
c1:b9:37:26:57:ba:17:53:65:93:f0:d9:b2:b1:6c:
bd:a4:0f:cf:03:42:22:34:43:bb:83:cd:da:e3:ff:
4d:e8:2c:0c:60:48:19:7b:d0:77:45:b1:de:73:bb:
cd:6c:c4:19:62:09:de:45:02:ff:9c:5e:51:9b:f8:
0d:48:0c:19:c8:4b:07:86:a5:28:11:8b:f6:7e:e5:
59:0b:be:2b:5f:d5:38:3a:92:32:05:6b:b0:9e:f6:
f8:7b:f5:86:2f:3d:0e:06:f9:7c:f9:4d:ff:ca:6a:
85:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FF:61:66:8A:CF:36:38:7D:83:E5:BC:B9:4F:BF:98:04:81:37:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/ef2e8c86-6f5d-3989-a9bd-02f9f2212c22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl
X509v3 Authority Key Identifier:
keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
sbgp-ipAddrBlock: critical
IPv4:
192.5.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:83:7e:b0:c0:00:69:cd:bd:eb:c0:f0:d1:70:08:4e:89:14:
3e:46:45:60:96:0f:b8:a4:2d:63:24:70:7d:a1:f7:cf:6f:58:
7e:28:4a:15:f0:96:62:8a:f6:62:d3:c4:1d:e1:9e:96:1c:e2:
c2:2c:62:a4:f9:58:76:d1:9c:9f:43:20:9b:e5:db:0a:21:4a:
1f:7a:11:28:95:2e:58:c9:e5:44:24:95:35:16:48:d7:06:e2:
17:3c:49:09:89:1d:98:9e:90:81:b2:92:a6:6b:16:8b:2b:29:
59:91:b9:04:37:40:d1:91:fa:1e:f3:07:c0:62:4e:37:ae:5f:
c9:54:54:a1:20:13:92:ce:2c:07:ff:cb:78:8b:f5:c0:0a:3f:
2e:d2:e9:eb:14:93:f4:98:70:a6:40:cf:2d:da:28:2e:06:81:
0b:de:8b:ab:9c:8b:ed:5c:71:48:7e:3b:e8:4e:23:89:10:0b:
6c:4c:86:12:d5:c0:6d:23:5c:5a:12:dd:6d:52:9e:bd:c7:1c:
af:b4:7d:67:47:10:e4:44:6e:50:d2:86:a3:cd:d7:78:e6:57:
14:a4:ef:65:23:8c:1b:1d:bc:57:9b:e6:42:80:c0:29:12:3e:
45:4e:ef:73:1d:42:43:0e:53:94:87:9c:72:b7:3d:56:67:ac:
69:56:d2:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3nlyoXvuY9McewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODc0MTdmZTYtMTc5MC00ODFhLTliZGMtNjU3NGMwZWY3
ZDdjMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk
ZmQyNjk4YWItMjVlNS00MjUwLWFhMDQtNzRhOTUyZGNlMGQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TqF2h3bPM1Ju1IWjEMJzoOnTiBRGRx8PbDL
+ef6DHfyklHKzz13IuRYvkK5vxuX2XqFaDMf1uPq4UdVS7m3Lz3OUYd4LqWVqIOH
DEkkDXH0AJYwCBvNvreWeMq/CdVsxujFEgybAqSoaveMQM3RKcQhDoZVU8afgSpg
GD8RvDJVboj425i0AmYvurwqV3FArhXkNH3BuTcmV7oXU2WT8NmysWy9pA/PA0Ii
NEO7g83a4/9N6CwMYEgZe9B3RbHec7vNbMQZYgneRQL/nF5Rm/gNSAwZyEsHhqUo
EYv2fuVZC74rX9U4OpIyBWuwnvb4e/WGLz0OBvl8+U3/ymqFFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLr/YWaKzzY4fYPlvLlPv5gEgTfIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NzQx
N2ZlNi0xNzkwLTQ4MWEtOWJkYy02NTc0YzBlZjdkN2MvZWYyZThjODYtNmY1ZC0z
OTg5LWE5YmQtMDJmOWYyMjEyYzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODc0MTdmZTYtMTc5MC00ODFhLTli
ZGMtNjU3NGMwZWY3ZDdjLzg3NDE3ZmU2LTE3OTAtNDgxYS05YmRjLTY1NzRjMGVm
N2Q3Yy5jcmwwHwYDVR0jBBgwFoAUurcPAt6acXKk8OlAE68ADtiaXP0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84NzQxN2ZlNi0xNzkwLTQ4MWEtOWJkYy02NTc0
YzBlZjdkN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAVZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFiDfrDAAGnNvevA8NFwCE6JFD5GRWCWD7ikLWMkcH2h989vWH4oShXw
lmKK9mLTxB3hnpYc4sIsYqT5WHbRnJ9DIJvl2wohSh96ESiVLljJ5UQklTUWSNcG
4hc8SQmJHZiekIGykqZrFosrKVmRuQQ3QNGR+h7zB8BiTjeuX8lUVKEgE5LOLAf/
y3iL9cAKPy7S6esUk/SYcKZAzy3aKC4GgQvei6uci+1ccUh+O+hOI4kQC2xMhhLV
wG0jXFoS3W1Snr3HHK+0fWdHEOREblDShqPN13jmVxSk72UjjBsdvFeb5kKAwCkS
PkVO73MdQkMOU5SHnHK3PVZnrGlW0ho=
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:45:28 2025 by rpki-client