Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/f8375e10-8d1d-3484-aaeb-e58fd215889e.roa
File: f8375e10-8d1d-3484-aaeb-e58fd215889e.roa (raw, json)
Hash identifier: vlQ0ufBmMD3Szk2JD5U5TZ25e0mO3a8bTkN6Wgpc21I=
Subject key identifier: 0D:56:A2:D5:33:C5:26:02:94:89:49:E8:B2:F5:4B:CD:AE:DF:B8:C8
Certificate issuer: /CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
Certificate serial: 010D0C9F4328584900214DD7BD7ABF8550D48380
Authority key identifier: 5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/f8375e10-8d1d-3484-aaeb-e58fd215889e.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 30698
IP address blocks: 209.221.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:4d:d7:bd:7a:bf:85:50:d4:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=f68822c0-4e03-425d-9eaa-bd65c12362d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7f:41:89:a3:7a:bb:53:6a:67:2d:62:be:d0:
9e:c0:37:a4:30:48:4b:05:7c:b4:68:4d:9d:30:f7:
85:4e:17:0e:a6:99:4a:9c:87:e5:1d:fb:71:6d:8f:
57:99:cc:20:44:d6:c7:a3:82:09:0b:8b:80:24:4e:
42:b5:c7:a2:67:49:d5:16:67:bf:66:3a:36:a1:09:
19:c3:dd:19:d7:e1:b2:6a:15:b0:28:6c:d9:26:c3:
75:48:7f:e4:e3:71:2f:e4:a3:bd:35:45:87:8a:96:
4f:68:ac:ec:bc:fa:cb:bb:17:3a:7c:2a:53:27:3e:
31:c5:18:b3:40:3f:d7:86:fa:a8:52:10:60:c6:34:
65:33:2d:4d:cb:65:41:ec:a5:88:e9:ab:e7:87:9d:
c1:53:85:bb:58:94:76:5d:ca:ea:19:65:ae:79:5d:
15:b1:c2:cb:a7:f0:28:ef:ef:e6:89:1b:a9:59:c5:
6b:e3:66:a5:70:f4:8b:b2:98:63:2e:e4:27:ca:a4:
27:ab:c8:43:59:98:28:19:44:2d:c3:7f:43:81:82:
75:a8:ed:d6:5a:44:1b:f4:e4:0b:0c:cb:38:ec:68:
47:34:bb:a2:e6:c8:f7:f9:3c:c9:33:38:9a:74:43:
f7:c9:db:f7:54:d9:58:35:53:2f:31:e9:c0:76:cc:
b9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:56:A2:D5:33:C5:26:02:94:89:49:E8:B2:F5:4B:CD:AE:DF:B8:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/f8375e10-8d1d-3484-aaeb-e58fd215889e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl
X509v3 Authority Key Identifier:
keyid:5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
sbgp-ipAddrBlock: critical
IPv4:
209.221.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d3:85:e4:bf:e7:e5:8c:f6:9b:18:04:52:1c:6b:bc:6a:49:25:
f7:8b:a6:4f:d5:7a:35:55:23:71:e7:7b:32:f3:9b:65:69:35:
52:b0:2d:ec:4d:d2:fb:0c:af:27:24:e7:a7:63:04:94:18:91:
d2:5e:14:5e:e1:f2:26:a3:e1:ab:36:3c:98:6e:82:cd:51:0a:
df:fe:8d:ea:00:06:11:c2:d7:a2:52:6a:f8:77:cc:82:87:61:
7b:8e:f9:80:81:72:c9:41:dc:94:7c:9c:c7:34:41:9b:5a:04:
03:a8:14:67:5c:65:36:57:e4:6a:36:8d:71:3d:84:47:ce:5b:
d3:2b:c7:1a:b2:bb:9c:3e:0c:54:95:3e:79:6b:b2:25:df:08:
50:c2:97:8f:0d:ca:06:b0:aa:26:9c:cc:a8:2b:2e:99:6d:2d:
1a:d0:f4:91:af:b2:ec:e5:21:97:a6:7c:71:e3:9d:d4:0e:3c:
1c:d3:5e:c6:9a:d4:ed:23:7e:99:3d:6d:19:eb:af:97:39:e3:
80:e4:e5:19:d0:9a:7b:7b:e2:12:c6:04:73:94:a8:ab:80:fb:
32:17:f2:00:34:d0:60:3d:4e:7c:7b:07:49:fb:f4:28:f1:d5:
04:ca:64:8f:b0:cd:04:52:d2:d5:be:68:6f:a1:e0:5e:40:a6:
e0:74:64:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIU3XvXq/hVDUg4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQ1NDkxZmUtM2MxMS00ZWEzLThlYTgtN2U0MDNhNmVl
YjQ5MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk
ZjY4ODIyYzAtNGUwMy00MjVkLTllYWEtYmQ2NWMxMjM2MmQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkn9BiaN6u1NqZy1ivtCewDekMEhLBXy0aE2d
MPeFThcOpplKnIflHftxbY9XmcwgRNbHo4IJC4uAJE5CtceiZ0nVFme/Zjo2oQkZ
w90Z1+GyahWwKGzZJsN1SH/k43Ev5KO9NUWHipZPaKzsvPrLuxc6fCpTJz4xxRiz
QD/XhvqoUhBgxjRlMy1Ny2VB7KWI6avnh53BU4W7WJR2XcrqGWWueV0VscLLp/Ao
7+/miRupWcVr42alcPSLsphjLuQnyqQnq8hDWZgoGUQtw39DgYJ1qO3WWkQb9OQL
DMs47GhHNLui5sj3+TzJMziadEP3ydv3VNlYNVMvMenAdsy5iwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA1WotUzxSYClIlJ6LL1S82u37jIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDU0
OTFmZS0zYzExLTRlYTMtOGVhOC03ZTQwM2E2ZWViNDkvZjgzNzVlMTAtOGQxZC0z
NDg0LWFhZWItZTU4ZmQyMTU4ODllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmQ1NDkxZmUtM2MxMS00ZWEzLThl
YTgtN2U0MDNhNmVlYjQ5L2ZkNTQ5MWZlLTNjMTEtNGVhMy04ZWE4LTdlNDAzYTZl
ZWI0OS5jcmwwHwYDVR0jBBgwFoAUW/p9bVG8ca1+tu35CIL3rF9SK3YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDU0OTFmZS0zYzExLTRlYTMtOGVhOC03ZTQw
M2E2ZWViNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0d3wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANOF5L/n5Yz2mxgEUhxrvGpJJfeLpk/VejVVI3HnezLzm2VpNVKwLexN
0vsMryck56djBJQYkdJeFF7h8iaj4as2PJhugs1RCt/+jeoABhHC16JSavh3zIKH
YXuO+YCBcslB3JR8nMc0QZtaBAOoFGdcZTZX5Go2jXE9hEfOW9Mrxxqyu5w+DFSV
PnlrsiXfCFDCl48NygawqiaczKgrLpltLRrQ9JGvsuzlIZemfHHjndQOPBzTXsaa
1O0jfpk9bRnrr5c544Dk5RnQmnt74hLGBHOUqKuA+zIX8gA00GA9Tnx7B0n79Cjx
1QTKZI+wzQRS0tW+aG+h4F5ApuB0ZIg=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:08 2025 by rpki-client