Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/5fab9697-e14f-34f9-ba2d-3db8a9bf8de3.roa
File: 5fab9697-e14f-34f9-ba2d-3db8a9bf8de3.roa (raw, json)
Hash identifier: 9iaLmHqmvw5rhb9QzQY4Dgiws8A0EoSeORhmG2Y+Sic=
Subject key identifier: BE:44:BF:3C:80:A6:E7:16:BD:27:CE:35:52:72:09:05:37:36:E2:F0
Certificate issuer: /CN=4091c99f-9cd5-4db2-8733-67e22036ebb5
Certificate serial: 010D0C9F43285848BBBB793610F336B0DA2C0200
Authority key identifier: 9D:EE:31:DA:BE:20:EA:2A:96:A5:4D:36:81:FA:52:AB:BE:72:25:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/5fab9697-e14f-34f9-ba2d-3db8a9bf8de3.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 32274
IP address blocks: 207.190.174.0/24 maxlen: 24
207.190.175.0/24 maxlen: 24
207.190.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:79:36:10:f3:36:b0:da:2c:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4091c99f-9cd5-4db2-8733-67e22036ebb5
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=bbbc4b3c-0773-4be9-a128-a04f5e1c124e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ba:2f:e8:d3:05:2e:d7:cb:da:18:77:a1:46:
b2:ab:8d:ea:33:7c:e7:57:79:8f:97:5f:49:3a:41:
96:7c:61:10:6d:48:d7:c9:81:f7:50:8e:ab:81:2c:
1d:ff:83:47:f3:83:89:55:1a:4f:b5:24:3a:d9:95:
d8:ea:dd:b6:b5:df:82:40:ce:99:51:c9:37:9a:75:
12:7b:2a:88:a3:2d:45:71:7d:47:74:94:ab:43:b9:
f0:d1:a2:96:2a:9f:7d:90:dc:9c:e5:8f:a5:cc:7d:
9a:a6:3b:2b:03:9a:71:ec:10:02:3a:6e:13:e2:0d:
53:b0:fe:76:e2:a4:eb:6b:e9:68:32:4b:c4:8b:51:
f1:4d:57:22:3a:17:94:47:98:d1:6a:17:0f:7e:96:
4a:aa:54:b7:eb:00:7f:ea:14:60:44:ce:db:48:01:
d0:6a:13:59:34:2d:26:a3:71:20:01:dd:57:f8:70:
46:5f:bc:36:10:a2:10:43:84:cd:45:51:f1:84:bd:
42:92:fe:28:f6:23:f8:43:3e:16:3e:98:d7:0b:22:
be:55:57:1e:6b:57:c9:a2:eb:ac:2e:02:5e:2d:a7:
e0:b9:3b:e8:41:34:73:a8:de:1d:f3:b4:35:28:aa:
5a:37:53:e5:7b:0a:14:68:57:e3:68:2b:bd:fe:0a:
de:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:44:BF:3C:80:A6:E7:16:BD:27:CE:35:52:72:09:05:37:36:E2:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/5fab9697-e14f-34f9-ba2d-3db8a9bf8de3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5/4091c99f-9cd5-4db2-8733-67e22036ebb5.crl
X509v3 Authority Key Identifier:
keyid:9D:EE:31:DA:BE:20:EA:2A:96:A5:4D:36:81:FA:52:AB:BE:72:25:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4091c99f-9cd5-4db2-8733-67e22036ebb5.cer
sbgp-ipAddrBlock: critical
IPv4:
207.190.174.0/23
207.190.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:b5:8d:46:14:d2:4f:74:9f:c0:13:12:0b:58:6e:ba:90:cc:
04:6c:00:f4:24:da:d4:20:e7:35:21:d4:fc:6f:af:10:a7:1f:
38:de:3d:2c:a3:c4:32:2f:d4:54:26:ae:43:8a:61:50:b5:dd:
82:49:b3:81:71:02:b2:22:c2:a2:31:79:87:18:f9:3d:1e:d9:
f5:1b:0c:0a:49:27:56:8f:47:db:cd:eb:46:e4:d0:65:5d:a0:
c5:92:58:27:43:4a:7f:76:92:f3:ec:4f:a3:5d:a1:14:9b:45:
d2:b0:fd:ca:64:d2:e7:95:75:de:fe:10:52:b6:27:4c:0e:4a:
a2:74:48:5b:96:98:ef:96:d7:e7:d0:f5:37:35:a6:50:c6:5c:
71:5d:e7:f0:9b:1d:96:0c:48:2f:5c:f1:09:cb:67:eb:71:56:
7d:73:c4:fc:0f:cb:92:d3:8c:bb:bf:38:eb:e3:96:21:04:b0:
b7:27:02:e7:20:38:35:77:b0:27:9e:0a:fd:ab:b6:4f:93:77:
06:2a:21:93:2a:a0:ff:70:20:46:9f:80:ee:36:af:3f:b6:1b:
ea:cf:bf:e6:7d:18:c7:49:69:2c:c0:c7:f8:90:3d:09:9c:83:
a2:f8:06:40:93:3b:23:7c:d9:f1:b1:72:86:73:79:e6:a6:21:
b4:25:dd:bd
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEi7u3k2EPM2sNosAgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDA5MWM5OWYtOWNkNS00ZGIyLTg3MzMtNjdlMjIwMzZl
YmI1MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk
YmJiYzRiM2MtMDc3My00YmU5LWExMjgtYTA0ZjVlMWMxMjRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLov6NMFLtfL2hh3oUayq43qM3znV3mPl19J
OkGWfGEQbUjXyYH3UI6rgSwd/4NH84OJVRpPtSQ62ZXY6t22td+CQM6ZUck3mnUS
eyqIoy1FcX1HdJSrQ7nw0aKWKp99kNyc5Y+lzH2apjsrA5px7BACOm4T4g1TsP52
4qTra+loMkvEi1HxTVciOheUR5jRahcPfpZKqlS36wB/6hRgRM7bSAHQahNZNC0m
o3EgAd1X+HBGX7w2EKIQQ4TNRVHxhL1Ckv4o9iP4Qz4WPpjXCyK+VVcea1fJouus
LgJeLafguTvoQTRzqN4d87Q1KKpaN1PlewoUaFfjaCu9/greuwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFL5EvzyApucWvSfONVJyCQU3NuLwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MDkx
Yzk5Zi05Y2Q1LTRkYjItODczMy02N2UyMjAzNmViYjUvNWZhYjk2OTctZTE0Zi0z
NGY5LWJhMmQtM2RiOGE5YmY4ZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDA5MWM5OWYtOWNkNS00ZGIyLTg3
MzMtNjdlMjIwMzZlYmI1LzQwOTFjOTlmLTljZDUtNGRiMi04NzMzLTY3ZTIyMDM2
ZWJiNS5jcmwwHwYDVR0jBBgwFoAUne4x2r4g6iqWpU02gfpSq75yJXAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80MDkxYzk5Zi05Y2Q1LTRkYjItODczMy02N2Uy
MjAzNmViYjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBz76uAwQA
z768MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBACS1jUYU0k90n8ATEgtYbrqQzARsAPQk2tQg5zUh1PxvrxCn
HzjePSyjxDIv1FQmrkOKYVC13YJJs4FxArIiwqIxeYcY+T0e2fUbDApJJ1aPR9vN
60bk0GVdoMWSWCdDSn92kvPsT6NdoRSbRdKw/cpk0ueVdd7+EFK2J0wOSqJ0SFuW
mO+W1+fQ9Tc1plDGXHFd5/CbHZYMSC9c8QnLZ+txVn1zxPwPy5LTjLu/OOvjliEE
sLcnAucgODV3sCeeCv2rtk+TdwYqIZMqoP9wIEafgO42rz+2G+rPv+Z9GMdJaSzA
x/iQPQmcg6L4BkCTOyN82fGxcoZzeeamIbQl3b0=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:26 2025 by rpki-client