Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/b7f49026-ae81-329a-8ec0-a16f2a074f88.roa
File: b7f49026-ae81-329a-8ec0-a16f2a074f88.roa (raw, json)
Hash identifier: Vxd003lXnfnT6DNXS4Z5Pc//75chmLLL2M+cMSTe5Ik=
Subject key identifier: C0:18:9D:38:76:50:A1:EE:50:B6:A5:43:82:79:CF:0D:FA:DA:B9:36
Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial: 010D0C9F4328584944693EE650D415A6CB4E1C80
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/b7f49026-ae81-329a-8ec0-a16f2a074f88.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 14618
IP address blocks: 207.202.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:3e:e6:50:d4:15:a6:cb:4e:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=9c1f1c23-0866-4225-b616-3652ec90aa0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e5:a8:05:c3:03:c9:41:af:0d:fc:32:89:b1:
89:23:fc:2c:f6:4a:ca:e9:77:7f:1a:6e:74:53:a9:
b6:44:9c:9d:94:0f:37:9a:23:07:7e:79:6d:65:df:
f9:0c:3e:fd:56:2c:dc:c6:1b:70:93:53:3b:2a:c3:
9a:1e:97:22:0a:a0:af:80:19:b7:31:4f:ab:08:ec:
b1:fb:24:6e:1e:a4:0f:a9:3e:fe:fa:cb:fe:af:0b:
38:df:16:c7:8c:6b:8e:e5:3a:3c:9d:ae:7f:58:50:
bc:77:9a:79:16:b2:49:a5:d8:42:72:df:c1:14:b4:
3d:69:cf:f5:c1:8d:f5:9a:43:25:7a:bc:16:f8:58:
a8:4b:41:fe:49:c1:5f:53:40:6d:44:ce:4d:e0:79:
66:18:ca:83:7e:5c:e2:d3:51:31:c0:51:4e:1a:9a:
18:d2:73:3b:6e:28:17:e7:c7:35:11:cc:71:c9:88:
23:d7:5b:0a:85:04:cf:da:7e:3b:5d:50:34:99:37:
7c:21:1d:25:8b:33:3e:5b:2f:fc:eb:34:dd:4b:44:
4e:32:ad:a1:08:7f:fc:89:ea:d7:0d:08:b3:82:ba:
af:17:eb:c4:fa:ac:ed:3a:d6:00:c7:af:0b:3b:93:
14:e2:79:13:ce:ca:05:3a:40:43:e5:8f:79:1d:73:
5a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:18:9D:38:76:50:A1:EE:50:B6:A5:43:82:79:CF:0D:FA:DA:B9:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/b7f49026-ae81-329a-8ec0-a16f2a074f88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
X509v3 Authority Key Identifier:
keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
sbgp-ipAddrBlock: critical
IPv4:
207.202.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:6c:6c:58:31:56:b7:a5:4d:7f:c0:26:d5:04:38:63:01:c2:
d1:87:87:af:6a:de:b9:4a:3b:4b:ad:dc:4c:9a:15:7e:67:69:
44:a3:b9:0f:98:19:c7:eb:d1:07:ef:78:37:dc:bb:76:58:3f:
86:f8:f0:8f:bf:a1:8f:5a:48:40:32:89:5a:a5:2e:0b:3c:3f:
07:40:a4:26:a4:92:02:f9:e5:fc:40:3b:f7:d6:4f:28:19:8d:
64:c2:7c:70:a6:34:f8:d0:f9:e8:22:0a:d0:b9:b5:e8:94:63:
63:99:aa:eb:c9:6d:55:14:37:60:06:f9:54:3a:38:76:5c:9e:
18:8d:de:6b:20:43:0c:a8:ed:80:5f:55:90:f5:77:62:0c:1a:
56:b1:6d:8a:1e:fc:05:75:66:61:b0:14:9e:c9:84:ea:b1:9c:
48:2e:42:dc:11:a7:81:b3:32:49:79:26:9d:e9:67:50:27:7a:
7c:ce:cc:2f:a8:8b:d4:2a:30:85:e8:2b:f3:ed:47:fc:bb:25:
d3:95:30:a2:bd:57:bb:3a:01:92:a9:52:70:79:4e:78:39:67:
27:34:ad:eb:a9:d0:e6:3c:35:b1:27:58:e9:3a:0a:cf:65:ab:
03:e5:8f:08:e6:c5:0d:6b:81:ee:05:21:41:c9:99:c4:01:87:
03:8b:ce:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaT7mUNQVpstOHIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3
NzNlMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk
OWMxZjFjMjMtMDg2Ni00MjI1LWI2MTYtMzY1MmVjOTBhYTBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eWoBcMDyUGvDfwyibGJI/ws9krK6Xd/Gm50
U6m2RJydlA83miMHfnltZd/5DD79Vizcxhtwk1M7KsOaHpciCqCvgBm3MU+rCOyx
+yRuHqQPqT7++sv+rws43xbHjGuO5To8na5/WFC8d5p5FrJJpdhCct/BFLQ9ac/1
wY31mkMlerwW+FioS0H+ScFfU0BtRM5N4HlmGMqDflzi01ExwFFOGpoY0nM7bigX
58c1EcxxyYgj11sKhQTP2n47XVA0mTd8IR0lizM+Wy/86zTdS0ROMq2hCH/8ierX
DQizgrqvF+vE+qztOtYAx68LO5MU4nkTzsoFOkBD5Y95HXNaewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMAYnTh2UKHuULalQ4J5zw362rk2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl
ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvYjdmNDkwMjYtYWU4MS0z
MjlhLThlYzAtYTE2ZjJhMDc0Zjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4
YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj
NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1
MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8oUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD9sbFgxVrelTX/AJtUEOGMBwtGHh69q3rlKO0ut3EyaFX5naUSjuQ+Y
Gcfr0QfveDfcu3ZYP4b48I+/oY9aSEAyiVqlLgs8PwdApCakkgL55fxAO/fWTygZ
jWTCfHCmNPjQ+egiCtC5teiUY2OZquvJbVUUN2AG+VQ6OHZcnhiN3msgQwyo7YBf
VZD1d2IMGlaxbYoe/AV1ZmGwFJ7JhOqxnEguQtwRp4GzMkl5Jp3pZ1AnenzOzC+o
i9QqMIXoK/PtR/y7JdOVMKK9V7s6AZKpUnB5Tng5Zyc0reup0OY8NbEnWOk6Cs9l
qwPljwjmxQ1rge4FIUHJmcQBhwOLzgY=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:40:06 2025 by rpki-client