Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/6bbb594e-e3ef-3fd1-984d-e91a32db0cbd.roa
File: 6bbb594e-e3ef-3fd1-984d-e91a32db0cbd.roa (raw, json)
Hash identifier: x6tDwCbns1tchLL7ZheKyC4KVN6yZSXiS2+Rn5znp78=
Subject key identifier: F8:FD:B3:10:1F:E5:60:C6:AE:50:1D:1D:9E:E6:18:FC:CF:92:AF:87
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F432858492CAE8AC3CFDE7894C3D70CA0
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/6bbb594e-e3ef-3fd1-984d-e91a32db0cbd.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 30238
IP address blocks: 207.54.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:8a:c3:cf:de:78:94:c3:d7:0c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=0c8c7ef3-f2c2-49ad-a02e-6a8331ae29dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5d:33:50:2c:d4:29:59:13:25:d9:3f:a7:82:
e2:23:88:3d:9a:ed:2d:8a:d8:66:3f:be:2c:7f:d4:
ca:05:08:c2:e8:cf:32:d4:45:53:23:4b:28:74:0a:
0e:bb:3f:73:cf:c4:94:18:cb:ec:11:33:6b:4b:4c:
81:05:e7:de:11:16:e8:0f:57:51:27:90:10:ff:c6:
3b:16:e5:2a:7b:f5:fb:32:76:cd:59:66:c0:fa:1a:
08:13:97:e1:aa:b1:22:e8:cd:f5:a1:41:d6:74:31:
ae:82:de:ca:ed:43:33:05:e1:e6:b7:d3:1c:1a:8c:
f0:5e:5d:ca:c0:8a:e7:3d:57:20:d1:4e:38:b6:2d:
86:b5:15:78:1c:9c:ac:2d:c5:1b:21:78:f8:7e:44:
82:50:f9:0c:a7:16:38:39:4d:ca:8b:69:f2:fc:a4:
63:01:a7:f9:92:27:5f:88:fd:6f:41:86:d6:51:39:
34:72:3f:7f:17:be:33:b5:b2:2d:b4:e6:9a:e1:d2:
f1:a1:ba:e4:7f:7b:1a:2a:5a:55:6e:54:01:20:47:
7f:2a:4d:2a:fd:f8:6e:28:54:23:99:42:2d:21:e8:
d4:b5:19:22:38:fa:67:34:b9:8a:49:0d:90:43:da:
ef:b1:ea:bf:1f:49:cc:b2:65:4e:6b:e9:ac:0e:d6:
11:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FD:B3:10:1F:E5:60:C6:AE:50:1D:1D:9E:E6:18:FC:CF:92:AF:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/6bbb594e-e3ef-3fd1-984d-e91a32db0cbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
207.54.91.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:28:83:46:26:6e:84:57:ed:8d:3d:ac:bf:cb:e6:57:5e:cd:
98:c7:c7:f3:58:69:e5:65:e3:48:c7:c3:ae:85:91:db:2c:10:
19:7f:3a:42:c8:ed:45:04:cf:5b:bf:17:83:7a:cf:c0:0f:e8:
70:4f:bb:7f:c5:ad:6d:63:09:7d:53:3c:c7:6a:04:92:28:68:
b2:c2:2b:06:ab:dd:ba:91:ac:18:9f:41:30:3c:bc:c7:45:8f:
46:7b:98:89:41:72:29:b0:92:4a:62:4c:b7:a7:4f:9f:b4:33:
fd:b2:74:cf:4d:f4:f8:89:7b:43:df:50:4d:53:e0:63:82:dc:
6d:4d:6e:eb:00:3a:9e:af:42:2c:2a:1e:14:06:23:fc:d1:53:
f2:e2:ab:0f:76:f9:f1:9f:90:86:7d:4d:45:08:50:86:7a:c9:
4e:e6:17:89:8f:24:b7:f6:5f:cf:cc:14:bd:08:9e:50:9a:16:
ea:a6:41:d8:91:46:c1:06:d1:91:0a:5b:1c:96:e1:24:f4:89:
4d:69:87:55:2b:19:c7:79:77:62:51:f2:7c:bc:be:2a:27:e3:
5a:ac:b0:b9:af:30:22:56:7f:8d:3d:7b:d0:f2:9f:d4:d3:01:
7d:0a:62:25:b3:d5:27:59:cc:58:82:75:e9:5d:1b:c1:82:e5:
7f:cf:bd:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrorDz954lMPXDKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm
NGM5MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
MGM4YzdlZjMtZjJjMi00OWFkLWEwMmUtNmE4MzMxYWUyOWRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF0zUCzUKVkTJdk/p4LiI4g9mu0tithmP74s
f9TKBQjC6M8y1EVTI0sodAoOuz9zz8SUGMvsETNrS0yBBefeERboD1dRJ5AQ/8Y7
FuUqe/X7MnbNWWbA+hoIE5fhqrEi6M31oUHWdDGugt7K7UMzBeHmt9McGozwXl3K
wIrnPVcg0U44ti2GtRV4HJysLcUbIXj4fkSCUPkMpxY4OU3Ki2ny/KRjAaf5kidf
iP1vQYbWUTk0cj9/F74ztbIttOaa4dLxobrkf3saKlpVblQBIEd/Kk0q/fhuKFQj
mUItIejUtRkiOPpnNLmKSQ2QQ9rvseq/H0nMsmVOa+msDtYRJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPj9sxAf5WDGrlAdHZ7mGPzPkq+HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4
OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvNmJiYjU5NGUtZTNlZi0z
ZmQxLTk4NGQtZTkxYTMyZGIwY2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4
NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm
ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0
ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzZbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKoog0YmboRX7Y09rL/L5ldezZjHx/NYaeVl40jHw66FkdssEBl/OkLI
7UUEz1u/F4N6z8AP6HBPu3/FrW1jCX1TPMdqBJIoaLLCKwar3bqRrBifQTA8vMdF
j0Z7mIlBcimwkkpiTLenT5+0M/2ydM9N9PiJe0PfUE1T4GOC3G1NbusAOp6vQiwq
HhQGI/zRU/Liqw92+fGfkIZ9TUUIUIZ6yU7mF4mPJLf2X8/MFL0InlCaFuqmQdiR
RsEG0ZEKWxyW4ST0iU1ph1UrGcd5d2JR8ny8vion41qssLmvMCJWf409e9Dyn9TT
AX0KYiWz1SdZzFiCdeldG8GC5X/PvU4=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:58:19 2025 by rpki-client