Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658/0f27ebf8-d0aa-3b13-a977-43b5417b0f8c.roa
File: 0f27ebf8-d0aa-3b13-a977-43b5417b0f8c.roa (raw, json)
Hash identifier: 4DTbsB3Xho1a/CaM6tx3jrBaAs0lyeil2JtJ/tgfO6o=
Subject key identifier: 84:8B:84:20:3D:E8:B8:F5:04:2A:FF:8A:0E:B3:A2:16:61:C3:6F:F7
Certificate issuer: /CN=b9304eb0-eda9-4524-affd-0a6aa181a658
Certificate serial: 010D0C9F4328584905B6B3E11A74D65CB77AC680
Authority key identifier: B9:4B:A5:8B:B9:79:8F:6E:40:C6:25:98:8C:46:F6:CA:44:15:E4:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658/0f27ebf8-d0aa-3b13-a977-43b5417b0f8c.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 397283
IP address blocks: 206.168.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:b3:e1:1a:74:d6:5c:b7:7a:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9304eb0-eda9-4524-affd-0a6aa181a658
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=0a5e22f7-80fc-4756-afca-399ec2fd8ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:19:36:63:8b:00:c6:7e:3e:eb:98:ca:98:46:
2c:9e:e0:16:3a:9f:62:26:2f:3a:92:48:42:e7:65:
fa:e2:07:70:84:d5:bd:2e:ee:92:60:6d:8d:35:76:
e4:ef:21:ac:32:c5:ad:b3:71:76:32:eb:e1:9a:51:
ae:91:7a:46:d2:c1:a9:12:b1:f3:ce:60:ff:2b:f9:
ca:c1:f6:a3:5a:4a:97:89:f3:7c:9c:95:7c:50:e2:
c0:a4:9e:e9:5f:d3:a2:d0:e1:cc:ed:24:20:ef:a0:
eb:8f:d1:9a:c1:be:a7:b3:1a:e9:d6:ef:1a:3e:e4:
5f:6b:cb:2e:38:f3:fd:42:fa:8b:16:77:8b:35:4f:
c3:07:09:31:dd:f9:14:c1:aa:60:42:79:bb:ed:65:
5c:14:eb:93:01:8c:e8:7e:a8:ac:8d:c4:f2:1a:c9:
9e:cf:7d:6f:4f:c5:51:e1:17:b0:00:25:0a:e1:23:
38:b4:77:a8:99:a2:d7:e2:ed:6f:de:dd:8e:a3:23:
7a:df:35:b4:13:1e:33:ad:a6:ed:a9:e9:7c:b5:6a:
f8:8c:1f:5c:1c:49:7b:da:8e:8e:de:77:4c:d2:64:
a4:27:46:90:7e:9a:a1:36:e5:1e:72:21:0c:b7:d6:
e2:36:60:d6:f8:a4:3c:bd:a1:89:56:ff:f9:bd:2c:
b7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8B:84:20:3D:E8:B8:F5:04:2A:FF:8A:0E:B3:A2:16:61:C3:6F:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658/0f27ebf8-d0aa-3b13-a977-43b5417b0f8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658/b9304eb0-eda9-4524-affd-0a6aa181a658.crl
X509v3 Authority Key Identifier:
keyid:B9:4B:A5:8B:B9:79:8F:6E:40:C6:25:98:8C:46:F6:CA:44:15:E4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:e8:82:2f:04:57:68:fb:55:40:e4:77:aa:bd:ff:75:9c:2c:
98:dd:61:bb:23:20:4e:10:88:0e:de:a7:19:37:27:33:b0:30:
7b:d9:ff:6b:9d:52:13:ba:a4:d2:6e:55:0d:a4:b2:e3:d7:32:
8d:86:aa:4e:ed:aa:2f:59:0f:14:d6:23:31:c8:df:3f:c9:c3:
86:30:16:6a:6d:5a:1d:04:38:b1:3a:14:04:78:f0:8f:68:b1:
ca:08:d7:14:97:aa:52:44:29:a4:67:59:ee:a4:65:65:0d:a0:
c4:c6:12:64:21:8f:3c:05:19:e1:8f:d2:d6:9a:39:47:b4:0c:
33:f1:17:43:66:03:52:c3:1b:0a:44:c6:d2:ff:47:e5:62:7a:
d5:38:70:a9:58:d1:b3:30:7b:84:9d:e9:dc:b8:db:80:20:2b:
a1:d5:84:50:1f:ce:3c:d8:ce:4a:63:d7:77:40:74:9f:dc:52:
dd:16:8e:63:d8:aa:92:50:95:65:97:d1:b3:78:d4:c5:32:fa:
38:ab:66:07:8d:1b:cc:12:16:86:b7:f4:0b:65:60:c1:de:2d:
de:59:ab:9b:bd:09:c9:b1:92:b6:d1:0e:88:ae:72:ce:6e:8e:
18:f2:74:f9:26:b2:68:42:3c:c2:d2:f2:f7:de:c1:20:f1:1f:
74:52:3b:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtrPhGnTWXLd6xoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjkzMDRlYjAtZWRhOS00NTI0LWFmZmQtMGE2YWExODFh
NjU4MB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk
MGE1ZTIyZjctODBmYy00NzU2LWFmY2EtMzk5ZWMyZmQ4YWIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhk2Y4sAxn4+65jKmEYsnuAWOp9iJi86kkhC
52X64gdwhNW9Lu6SYG2NNXbk7yGsMsWts3F2MuvhmlGukXpG0sGpErHzzmD/K/nK
wfajWkqXifN8nJV8UOLApJ7pX9Oi0OHM7SQg76Drj9Gawb6nsxrp1u8aPuRfa8su
OPP9QvqLFneLNU/DBwkx3fkUwapgQnm77WVcFOuTAYzofqisjcTyGsmez31vT8VR
4RewACUK4SM4tHeomaLX4u1v3t2OoyN63zW0Ex4zrabtqel8tWr4jB9cHEl72o6O
3ndM0mSkJ0aQfpqhNuUeciEMt9biNmDW+KQ8vaGJVv/5vSy3UwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFISLhCA96Lj1BCr/ig6zohZhw2/3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iOTMw
NGViMC1lZGE5LTQ1MjQtYWZmZC0wYTZhYTE4MWE2NTgvMGYyN2ViZjgtZDBhYS0z
YjEzLWE5NzctNDNiNTQxN2IwZjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjkzMDRlYjAtZWRhOS00NTI0LWFm
ZmQtMGE2YWExODFhNjU4L2I5MzA0ZWIwLWVkYTktNDUyNC1hZmZkLTBhNmFhMTgx
YTY1OC5jcmwwHwYDVR0jBBgwFoAUuUuli7l5j25AxiWYjEb2ykQV5CYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9iOTMwNGViMC1lZGE5LTQ1MjQtYWZmZC0wYTZh
YTE4MWE2NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqitMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEnogi8EV2j7VUDkd6q9/3WcLJjdYbsjIE4QiA7epxk3JzOwMHvZ/2ud
UhO6pNJuVQ2ksuPXMo2Gqk7tqi9ZDxTWIzHI3z/Jw4YwFmptWh0EOLE6FAR48I9o
scoI1xSXqlJEKaRnWe6kZWUNoMTGEmQhjzwFGeGP0taaOUe0DDPxF0NmA1LDGwpE
xtL/R+VietU4cKlY0bMwe4Sd6dy424AgK6HVhFAfzjzYzkpj13dAdJ/cUt0WjmPY
qpJQlWWX0bN41MUy+jirZgeNG8wSFoa39AtlYMHeLd5Zq5u9CcmxkrbRDoiucs5u
jhjydPkmsmhCPMLS8vfewSDxH3RSO8Y=
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:03:08 2025 by rpki-client