Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/af32fbce-aa9e-3fc9-94c2-0e7e2f63d398.roa
File: af32fbce-aa9e-3fc9-94c2-0e7e2f63d398.roa (raw, json)
Hash identifier: 1b+d6f+NQ7/gso7X4GIldmt6H8sHnj9eFMa9ppRxOgQ=
Subject key identifier: B9:84:AD:F0:F5:BA:A2:C2:C0:86:12:A9:75:C1:D7:3A:7E:4F:A9:F4
Certificate issuer: /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial: 010D0C9F43285849380E5A6553DEBD5239127D40
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/af32fbce-aa9e-3fc9-94c2-0e7e2f63d398.roa
Signing time: Mon 17 Mar 2025 14:48:01 +0000
ROA not before: Mon 17 Mar 2025 14:48:01 +0000
ROA not after: Sun 15 Jun 2025 14:48:01 +0000
asID: 13213
IP address blocks: 206.217.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:38:0e:5a:65:53:de:bd:52:39:12:7d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Validity
Not Before: Mar 17 14:48:01 2025 GMT
Not After : Jun 15 14:48:01 2025 GMT
Subject: CN=8e768652-7cbc-40a3-9393-507e62cbfc99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d0:f8:87:49:2a:3d:4d:cd:6e:87:02:74:da:
74:7a:c7:f5:9c:e2:a7:c9:a0:c4:b2:af:48:af:80:
0c:85:a3:dd:0a:be:29:18:cf:91:91:ba:ee:6d:4e:
f2:d0:74:a4:92:4b:a1:38:78:35:86:62:73:e2:5b:
97:1c:a3:67:c4:86:54:1a:ea:03:14:a1:5d:54:63:
5a:15:15:96:e4:d1:4d:30:e4:c8:9c:cf:40:c3:7c:
47:7f:7a:62:3d:b7:24:ee:2c:dd:78:1a:a2:57:fd:
f7:81:e6:d3:3d:a8:8b:63:a6:04:d1:b3:79:be:e8:
62:99:77:41:3a:fa:12:e1:9f:d7:0e:47:49:51:c8:
4e:8e:2f:a6:54:e2:65:60:9e:d0:9a:bd:70:22:33:
88:a8:ed:6e:b1:37:4d:9e:d3:f8:40:22:93:fe:df:
45:06:35:2d:5d:da:cd:f5:e2:b6:15:e6:a1:e6:f2:
bb:d7:fe:8a:9b:5d:8e:de:39:e8:ea:82:2f:53:1d:
e4:b6:fa:58:f4:b2:d7:26:17:a0:53:5d:f6:10:20:
c2:b2:96:42:9f:24:85:bc:0d:a3:c2:c9:a2:4c:ed:
43:00:c7:c3:9f:48:b1:1a:a4:dd:cc:4e:97:e4:e3:
b6:88:16:dc:b7:05:8f:90:06:41:39:90:11:69:ef:
8b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:84:AD:F0:F5:BA:A2:C2:C0:86:12:A9:75:C1:D7:3A:7E:4F:A9:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/af32fbce-aa9e-3fc9-94c2-0e7e2f63d398.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
X509v3 Authority Key Identifier:
keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
sbgp-ipAddrBlock: critical
IPv4:
206.217.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:d0:75:50:ae:51:97:5f:8f:2c:f2:e7:9b:bd:ac:32:31:af:
57:fc:5d:9a:6b:6c:f9:c8:e7:36:45:15:3c:01:08:6e:98:dd:
1c:c2:1a:b8:78:0d:6f:73:9b:d5:fe:2b:34:96:a2:90:47:28:
1d:c8:ab:0a:6e:d5:a0:56:9d:cc:2b:86:36:76:cc:0e:3b:6a:
e2:3c:52:03:ca:43:8a:2e:17:cf:41:94:20:33:ab:3a:7f:24:
10:0a:1f:0a:2d:a0:4d:56:4f:15:e2:7c:d0:c1:32:30:1d:aa:
a1:5a:af:7c:b3:17:31:21:06:00:77:14:12:d0:03:be:ac:39:
57:09:8e:77:53:ee:01:be:79:d0:96:82:df:aa:d0:1d:43:26:
18:39:4f:83:29:e8:d5:af:7c:48:81:dd:8b:75:17:98:40:2c:
cc:a7:ce:59:d0:19:fc:3a:35:4d:ef:69:9a:dc:3b:f8:7f:23:
2c:24:6f:53:d3:62:7b:c2:aa:47:77:f4:c9:d0:a2:af:67:51:
3d:96:94:50:29:92:2f:e0:ae:ed:2f:3b:cb:a2:4c:28:2b:9a:
39:57:9c:7c:4b:48:89:48:ef:07:8f:2e:13:5e:46:78:6a:9f:
1f:2a:3d:60:d9:5a:ac:36:7a:07:e8:d7:d0:75:80:c3:33:3f:
97:72:f7:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk4DlplU969UjkSfUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0MDdjZDgtYzgzMC00OWU2LTlkYjQtN2RkYWM3NWVi
MDNmMB4XDTI1MDMxNzE0NDgwMVoXDTI1MDYxNTE0NDgwMVowLzEtMCsGA1UEAxMk
OGU3Njg2NTItN2NiYy00MGEzLTkzOTMtNTA3ZTYyY2JmYzk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9D4h0kqPU3NbocCdNp0esf1nOKnyaDEsq9I
r4AMhaPdCr4pGM+RkbrubU7y0HSkkkuhOHg1hmJz4luXHKNnxIZUGuoDFKFdVGNa
FRWW5NFNMOTInM9Aw3xHf3piPbck7izdeBqiV/33gebTPaiLY6YE0bN5vuhimXdB
OvoS4Z/XDkdJUchOji+mVOJlYJ7Qmr1wIjOIqO1usTdNntP4QCKT/t9FBjUtXdrN
9eK2Feah5vK71/6Km12O3jno6oIvUx3ktvpY9LLXJhegU132ECDCspZCnySFvA2j
wsmiTO1DAMfDn0ixGqTdzE6X5OO2iBbctwWPkAZBOZARae+LiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLmErfD1uqLCwIYSqXXB1zp+T6n0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81MTQw
N2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRhYzc1ZWIwM2YvYWYzMmZiY2UtYWE5ZS0z
ZmM5LTk0YzItMGU3ZTJmNjNkMzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTE0MDdjZDgtYzgzMC00OWU2LTlk
YjQtN2RkYWM3NWViMDNmLzUxNDA3Y2Q4LWM4MzAtNDllNi05ZGI0LTdkZGFjNzVl
YjAzZi5jcmwwHwYDVR0jBBgwFoAUy7XVgkiqTdjWioVCA8Spu4nGVq4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81MTQwN2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRh
Yzc1ZWIwM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEztnQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGTQdVCuUZdfjyzy55u9rDIxr1f8XZprbPnI5zZFFTwBCG6Y3RzCGrh4
DW9zm9X+KzSWopBHKB3Iqwpu1aBWncwrhjZ2zA47auI8UgPKQ4ouF89BlCAzqzp/
JBAKHwotoE1WTxXifNDBMjAdqqFar3yzFzEhBgB3FBLQA76sOVcJjndT7gG+edCW
gt+q0B1DJhg5T4Mp6NWvfEiB3Yt1F5hALMynzlnQGfw6NU3vaZrcO/h/Iywkb1PT
YnvCqkd39MnQoq9nUT2WlFApki/gru0vO8uiTCgrmjlXnHxLSIlI7wePLhNeRnhq
nx8qPWDZWqw2egfo19B1gMMzP5dy94Y=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:38:07 2025 by rpki-client