Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/59645cd8-9633-3577-8cc6-4685bcbd83f2.roa
File: 59645cd8-9633-3577-8cc6-4685bcbd83f2.roa (raw, json)
Hash identifier: WBQGfHfPld6HnfMCm5pZttTjEBDAQ4hfWeNdXODi/2g=
Subject key identifier: EB:D2:6E:D3:AF:E6:7D:DE:EE:2D:4F:71:48:6D:70:F7:09:97:6C:A2
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F432858488280950D31C9E0B090615850
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/59645cd8-9633-3577-8cc6-4685bcbd83f2.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 11105
IP address blocks: 207.23.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:95:0d:31:c9:e0:b0:90:61:58:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=50c4226b-b5c6-4586-89b1-9d7cefa68829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c3:37:f0:a5:15:4c:81:01:7c:0a:dc:22:4b:
61:bf:21:3b:e5:2f:58:52:a5:c0:b0:ff:04:82:2c:
49:16:e6:96:e2:60:5b:c4:52:90:b5:a7:91:e9:b2:
5f:b1:d7:4a:2b:77:99:d2:b7:49:4b:91:6d:51:7a:
c2:b8:57:4e:16:08:fe:d0:0a:aa:3e:b5:9a:5d:4f:
ec:77:50:30:08:ff:14:90:19:00:20:1d:70:42:d6:
11:dd:12:f8:12:9b:e5:95:b1:2e:70:6c:1d:3f:4e:
29:8e:b0:81:4b:f4:45:0f:b0:5b:32:96:0e:a7:8f:
1c:9b:35:4b:bd:81:f9:f8:b7:7e:51:59:cf:e6:48:
28:f2:10:a8:19:58:d6:03:3f:dd:0e:17:88:27:16:
6b:a6:4c:83:2b:a5:ff:02:a3:c2:57:30:17:ca:ce:
b8:13:25:05:88:3d:46:57:d6:08:b0:ea:2b:15:93:
f4:99:39:22:f7:1c:42:85:12:5d:c3:d1:be:fb:cd:
c3:60:a6:c8:c5:96:e4:e0:0d:43:73:2d:88:f9:6c:
08:40:69:91:1a:0e:e1:c7:51:38:c8:b1:b1:74:11:
e8:65:44:75:41:03:ae:d8:dd:fa:ee:c4:17:41:32:
5e:0d:bc:b1:18:00:c0:e9:37:28:c6:64:43:d1:6e:
41:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D2:6E:D3:AF:E6:7D:DE:EE:2D:4F:71:48:6D:70:F7:09:97:6C:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/59645cd8-9633-3577-8cc6-4685bcbd83f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
207.23.85.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:36:38:83:44:0f:c7:8d:8b:7a:99:be:3e:11:6f:57:4b:73:
c2:db:7d:a5:b9:36:14:cd:30:06:eb:96:57:2a:ac:1b:e1:35:
aa:91:2f:fc:99:16:7a:ac:57:87:0d:1b:2b:83:e7:e4:63:26:
b7:b0:af:1c:24:15:e5:35:85:1a:f2:d4:1f:28:dd:6f:0f:19:
80:35:5e:42:25:2a:65:df:cd:0c:97:da:13:78:c2:0c:ca:7f:
4f:0d:20:a6:ba:e4:54:6d:9b:9a:a5:35:3d:5a:be:a1:97:b6:
fa:90:63:14:cb:98:de:dc:41:29:b4:49:5b:b9:32:da:7c:e6:
64:dd:e5:b1:e3:39:ce:d1:92:06:de:6e:58:16:44:90:b6:90:
d1:f9:86:a0:b0:d8:8e:ba:e5:04:97:f8:4b:8a:9e:03:b5:02:
23:5b:66:ec:52:2e:f7:fa:96:7f:3a:59:88:ed:3d:0a:e9:7b:
0d:7b:cf:75:5c:47:f1:a2:0e:a0:45:bd:c7:b8:d4:6e:4e:db:
73:a3:bf:f5:40:43:14:ee:d1:2a:87:c5:52:dd:bb:91:07:08:
9a:12:c1:77:9e:6d:13:36:2c:ad:0b:f0:66:73:3c:e1:e4:d5:
ee:65:86:28:65:d5:df:40:74:d1:d7:79:80:46:1f:04:ae:de:
3c:bd:9f:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiCgJUNMcngsJBhWFAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NTBjNDIyNmItYjVjNi00NTg2LTg5YjEtOWQ3Y2VmYTY4ODI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMM38KUVTIEBfArcIkthvyE75S9YUqXAsP8E
gixJFuaW4mBbxFKQtaeR6bJfsddKK3eZ0rdJS5FtUXrCuFdOFgj+0AqqPrWaXU/s
d1AwCP8UkBkAIB1wQtYR3RL4EpvllbEucGwdP04pjrCBS/RFD7BbMpYOp48cmzVL
vYH5+Ld+UVnP5kgo8hCoGVjWAz/dDheIJxZrpkyDK6X/AqPCVzAXys64EyUFiD1G
V9YIsOorFZP0mTki9xxChRJdw9G++83DYKbIxZbk4A1Dcy2I+WwIQGmRGg7hx1E4
yLGxdBHoZUR1QQOu2N367sQXQTJeDbyxGADA6TcoxmRD0W5BewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOvSbtOv5n3e7i1PcUhtcPcJl2yiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvNTk2NDVjZDgtOTYzMy0z
NTc3LThjYzYtNDY4NWJjYmQ4M2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzxdVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADA2OINED8eNi3qZvj4Rb1dLc8LbfaW5NhTNMAbrllcqrBvhNaqRL/yZ
FnqsV4cNGyuD5+RjJrewrxwkFeU1hRry1B8o3W8PGYA1XkIlKmXfzQyX2hN4wgzK
f08NIKa65FRtm5qlNT1avqGXtvqQYxTLmN7cQSm0SVu5Mtp85mTd5bHjOc7Rkgbe
blgWRJC2kNH5hqCw2I665QSX+EuKngO1AiNbZuxSLvf6ln86WYjtPQrpew17z3Vc
R/GiDqBFvce41G5O23Ojv/VAQxTu0SqHxVLdu5EHCJoSwXeebRM2LK0L8GZzPOHk
1e5lhihl1d9AdNHXeYBGHwSu3jy9n6A=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:02:38 2025 by rpki-client