Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/90a480f7-b9cd-345d-888a-55fe06a0ea64.roa
File: 90a480f7-b9cd-345d-888a-55fe06a0ea64.roa (raw, json)
Hash identifier: MuThxp/I67nx6GBE9WjHoMD2HVCtkQTM66xT8XahPmI=
Subject key identifier: 20:81:CD:2C:2A:0F:0A:D4:5B:CD:89:79:63:FB:04:9A:5C:FE:86:70
Certificate issuer: /CN=e02382c7-abd5-4293-a7a2-334013e1284b
Certificate serial: 010D0C9F4328584424694581F4807D0B751C6AC0
Authority key identifier: 95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/90a480f7-b9cd-345d-888a-55fe06a0ea64.roa
Signing time: Fri 08 Dec 2023 02:00:16 +0000
ROA not before: Fri 08 Dec 2023 02:00:16 +0000
ROA not after: Thu 07 Mar 2024 02:00:16 +0000
asID: 20278
IP address blocks: 192.210.208.0/24 maxlen: 24
192.210.211.0/24 maxlen: 24
192.210.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:24:69:45:81:f4:80:7d:0b:75:1c:6a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02382c7-abd5-4293-a7a2-334013e1284b
Validity
Not Before: Dec 8 02:00:16 2023 GMT
Not After : Mar 7 02:00:16 2024 GMT
Subject: CN=af02f080-3433-4617-8284-0fce974b06eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:03:b7:e1:f0:e7:c2:19:a9:33:e1:bb:b2:1d:
69:91:42:f7:77:89:c9:da:1f:a1:74:3e:ec:53:e2:
ee:cd:2e:9e:42:cc:ce:21:91:dd:92:31:51:52:ea:
a6:cb:64:c4:b0:90:45:d3:41:0a:4b:1d:bd:00:6e:
53:56:81:37:52:f4:a0:98:3d:e9:ea:73:5a:51:e3:
26:1e:3c:37:5a:19:fc:90:ed:80:5e:fe:a9:c5:ae:
5d:a6:e9:34:74:01:a0:c2:55:e4:23:dc:b8:56:e3:
34:d6:7e:18:6d:39:ec:2f:5b:43:b2:b9:c2:d8:87:
34:f6:d8:a7:29:1b:4c:43:f2:ba:a8:67:c5:b1:d1:
ad:64:f4:30:36:20:df:5d:9c:40:35:dd:5b:3e:61:
0c:ab:60:ae:69:a5:a3:ad:d5:38:65:ef:76:c9:cb:
4f:d2:40:ff:30:1b:d5:2f:9b:48:2f:94:94:36:f8:
50:23:c2:39:92:e0:50:47:af:b0:69:6a:8a:61:54:
68:c3:b1:21:13:1f:e9:ff:83:bb:a4:f9:05:49:d9:
1d:7b:b8:9b:a1:94:4c:7e:01:8f:47:2a:81:8d:61:
a2:4a:c0:54:18:3d:0b:5c:52:f3:d9:13:2e:c1:2a:
03:44:ac:b8:a7:74:f7:b2:9a:2b:06:54:7d:3e:4e:
aa:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:81:CD:2C:2A:0F:0A:D4:5B:CD:89:79:63:FB:04:9A:5C:FE:86:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/90a480f7-b9cd-345d-888a-55fe06a0ea64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/e02382c7-abd5-4293-a7a2-334013e1284b.crl
X509v3 Authority Key Identifier:
keyid:95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer
sbgp-ipAddrBlock: critical
IPv4:
192.210.208.0/23
192.210.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:9e:cc:be:8a:c8:67:7d:15:5a:12:e2:a8:74:74:53:f6:8e:
1a:42:dd:7e:47:d0:d4:a3:5f:aa:f5:2e:84:03:10:6a:75:25:
61:6c:79:fc:37:48:0e:fc:fb:dc:8a:49:5c:17:57:a3:96:29:
20:72:ea:dd:7e:86:90:8e:d2:40:5f:bf:c1:f1:90:9e:e9:91:
c4:7a:5f:46:0c:12:c2:48:f8:bd:6e:49:a7:f2:03:66:e6:58:
6d:36:04:90:a5:46:60:06:60:19:e7:d5:d1:00:b4:0a:13:8a:
1f:99:04:8d:6e:be:35:0d:54:08:ef:96:40:a6:c0:c2:d6:f3:
b7:3d:bf:d9:7f:02:dc:1c:03:98:2e:89:87:e1:5a:f9:fc:a3:
f6:33:a1:73:c5:93:e5:50:72:26:20:34:a0:f9:5c:12:c1:24:
14:83:bd:f0:f2:70:25:1b:b0:85:54:67:f6:e9:bb:7e:91:90:
44:66:ff:e9:91:b2:cc:3e:62:5c:e9:a1:02:4f:da:ec:ee:ff:
db:97:c9:ad:9e:ad:7a:d7:8f:00:02:55:2d:33:4d:e6:28:1e:
fb:f3:b1:a7:53:96:3c:73:d4:c9:dd:e9:65:2a:ea:1b:fb:34:
70:31:e6:b6:33:a9:d3:f6:52:9d:8a:d4:fc:7c:48:80:71:1f:
93:e1:c9:8c
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEQkaUWB9IB9C3UcasAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTAyMzgyYzctYWJkNS00MjkzLWE3YTItMzM0MDEzZTEy
ODRiMB4XDTIzMTIwODAyMDAxNloXDTI0MDMwNzAyMDAxNlowLzEtMCsGA1UEAxMk
YWYwMmYwODAtMzQzMy00NjE3LTgyODQtMGZjZTk3NGIwNmViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QO34fDnwhmpM+G7sh1pkUL3d4nJ2h+hdD7s
U+LuzS6eQszOIZHdkjFRUuqmy2TEsJBF00EKSx29AG5TVoE3UvSgmD3p6nNaUeMm
Hjw3Whn8kO2AXv6pxa5dpuk0dAGgwlXkI9y4VuM01n4YbTnsL1tDsrnC2Ic09tin
KRtMQ/K6qGfFsdGtZPQwNiDfXZxANd1bPmEMq2CuaaWjrdU4Ze92yctP0kD/MBvV
L5tIL5SUNvhQI8I5kuBQR6+waWqKYVRow7EhEx/p/4O7pPkFSdkde7iboZRMfgGP
RyqBjWGiSsBUGD0LXFLz2RMuwSoDRKy4p3T3sporBlR9Pk6qWwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFCCBzSwqDwrUW82JeWP7BJpc/oZwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMDIz
ODJjNy1hYmQ1LTQyOTMtYTdhMi0zMzQwMTNlMTI4NGIvOTBhNDgwZjctYjljZC0z
NDVkLTg4OGEtNTVmZTA2YTBlYTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTAyMzgyYzctYWJkNS00MjkzLWE3
YTItMzM0MDEzZTEyODRiL2UwMjM4MmM3LWFiZDUtNDI5My1hN2EyLTMzNDAxM2Ux
Mjg0Yi5jcmwwHwYDVR0jBBgwFoAUlTu5dQ4dUDZOf9DY3qJs8GzvRUEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMDIzODJjNy1hYmQ1LTQyOTMtYTdhMi0zMzQw
MTNlMTI4NGIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwNLQAwQA
wNLTMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAJSezL6KyGd9FVoS4qh0dFP2jhpC3X5H0NSjX6r1LoQDEGp1
JWFsefw3SA78+9yKSVwXV6OWKSBy6t1+hpCO0kBfv8HxkJ7pkcR6X0YMEsJI+L1u
SafyA2bmWG02BJClRmAGYBnn1dEAtAoTih+ZBI1uvjUNVAjvlkCmwMLW87c9v9l/
AtwcA5guiYfhWvn8o/YzoXPFk+VQciYgNKD5XBLBJBSDvfDycCUbsIVUZ/bpu36R
kERm/+mRssw+YlzpoQJP2uzu/9uXya2erXrXjwACVS0zTeYoHvvzsadTljxz1Mnd
6WUq6hv7NHAx5rYzqdP2Up2K1Px8SIBxH5PhyYw=
-----END CERTIFICATE-----
Generated at Thu Jan 4 18:54:42 2024 by rpki-client on console-ams.rpki-client.org