Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/975fe1e6-b0f2-3517-bae5-1e51fd63c635.roa
File: 975fe1e6-b0f2-3517-bae5-1e51fd63c635.roa (raw, json)
Hash identifier: xFPvwW5kFWZ1xaLwJe8Ct+UnFtJLfQBd06X/fWay/zo=
Subject key identifier: 61:39:04:C0:EE:2D:E2:01:A9:8D:BB:2D:93:F3:DD:DC:E9:DC:73:0C
Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial: 010D0C9F43285848EC96880A96E1B44AF9F270C0
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/975fe1e6-b0f2-3517-bae5-1e51fd63c635.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 395213
IP address blocks: 208.118.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:88:0a:96:e1:b4:4a:f9:f2:70:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=03bd7d50-9657-4fd0-a6da-55f5f9e285a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3a:98:86:56:76:61:8b:e1:0c:5f:44:2b:05:
09:72:de:d1:40:a7:c3:4a:aa:9b:68:ee:bd:a5:33:
f4:6c:bf:f3:dd:b0:e0:5f:29:29:b2:54:d1:92:e5:
41:bd:0c:a5:66:f1:5f:14:5a:73:59:04:43:57:ea:
20:65:e8:7d:d5:82:c2:7d:8c:8e:18:5d:35:6c:40:
1e:8d:f2:82:df:70:94:89:6a:db:46:74:3f:0f:15:
53:3f:95:fe:02:7f:cd:5e:88:d9:b9:90:5b:16:92:
86:6d:de:96:b6:fa:71:88:a0:ad:64:cd:93:67:39:
96:83:58:e7:26:27:01:1c:c3:1b:ae:fa:77:98:2e:
7d:e6:40:b3:3b:61:bb:6e:47:b8:fe:3b:e9:e6:b9:
28:20:ac:64:8b:e7:47:d4:e1:1a:09:35:6d:d3:9f:
7c:98:0f:38:e8:a4:44:6a:31:70:45:f6:54:39:2b:
0f:98:63:5f:40:e6:e4:ba:21:86:fe:fc:ac:e5:43:
53:e8:93:08:fd:6c:4e:7b:fc:3d:46:09:17:d9:3e:
e2:1a:88:66:c3:cc:71:77:6f:ee:8d:2e:21:2d:8f:
65:f7:17:a9:ae:32:56:1c:f7:d8:2d:38:74:cb:5f:
a5:a6:fd:79:43:80:d1:82:40:eb:29:b0:0b:9e:2a:
e6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:39:04:C0:EE:2D:E2:01:A9:8D:BB:2D:93:F3:DD:DC:E9:DC:73:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/975fe1e6-b0f2-3517-bae5-1e51fd63c635.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
X509v3 Authority Key Identifier:
keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
sbgp-ipAddrBlock: critical
IPv4:
208.118.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:f0:9e:07:c7:25:75:7a:88:e6:bc:35:45:02:77:46:e4:c2:
d8:57:68:c4:1a:ef:08:e6:53:2f:e1:6b:ac:7b:dc:48:87:9a:
6f:30:ef:45:6d:9b:51:f2:1d:41:87:7e:2f:e8:2b:d6:fc:f2:
cc:38:a2:16:bb:d1:c9:cf:e0:2e:82:8e:59:e3:1c:3c:c4:3e:
20:a0:c2:4f:3d:0f:52:b0:c1:31:be:37:a2:fd:62:a3:72:41:
cb:8f:bd:13:7f:c6:4c:e1:a7:bf:39:09:28:05:39:4b:38:2b:
b4:ae:23:69:ec:9e:64:a8:7c:c8:43:03:53:99:8a:6b:43:1c:
cb:c6:2c:0e:f8:b7:01:80:e5:6a:ee:38:96:80:77:1e:8c:67:
f6:b8:ad:6d:ce:9b:bc:07:79:66:c3:99:08:22:b8:d7:dc:da:
6f:8a:42:57:05:93:7f:a6:03:ea:fe:3e:5a:63:5b:d5:55:4e:
8d:4e:b6:21:0d:86:68:df:13:18:50:a5:14:ae:d4:74:82:6d:
9a:ef:e5:e2:02:24:f1:89:d6:18:8d:99:90:23:16:30:de:c3:
09:fc:8e:23:95:c3:96:1f:3c:6d:7b:20:5b:d3:71:18:91:0a:
f7:1f:ff:87:ea:ee:3d:b1:5d:ae:dc:90:c0:fe:13:e2:a4:d0:
48:34:b9:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslogKluG0SvnycMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5
MWRkMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk
MDNiZDdkNTAtOTY1Ny00ZmQwLWE2ZGEtNTVmNWY5ZTI4NWE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzqYhlZ2YYvhDF9EKwUJct7RQKfDSqqbaO69
pTP0bL/z3bDgXykpslTRkuVBvQylZvFfFFpzWQRDV+ogZeh91YLCfYyOGF01bEAe
jfKC33CUiWrbRnQ/DxVTP5X+An/NXojZuZBbFpKGbd6WtvpxiKCtZM2TZzmWg1jn
JicBHMMbrvp3mC595kCzO2G7bke4/jvp5rkoIKxki+dH1OEaCTVt0598mA846KRE
ajFwRfZUOSsPmGNfQObkuiGG/vys5UNT6JMI/WxOe/w9RgkX2T7iGohmw8xxd2/u
jS4hLY9l9xeprjJWHPfYLTh0y1+lpv15Q4DRgkDrKbALnirm9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGE5BMDuLeIBqY27LZPz3dzp3HMMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2
MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvOTc1ZmUxZTYtYjBmMi0z
NTE3LWJhZTUtMWU1MWZkNjNjNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1
NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx
OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl
ZGQ4MTkxZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HbtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB3wngfHJXV6iOa8NUUCd0bkwthXaMQa7wjmUy/ha6x73EiHmm8w70Vt
m1HyHUGHfi/oK9b88sw4oha70cnP4C6CjlnjHDzEPiCgwk89D1KwwTG+N6L9YqNy
QcuPvRN/xkzhp785CSgFOUs4K7SuI2nsnmSofMhDA1OZimtDHMvGLA74twGA5Wru
OJaAdx6MZ/a4rW3Om7wHeWbDmQgiuNfc2m+KQlcFk3+mA+r+PlpjW9VVTo1OtiEN
hmjfExhQpRSu1HSCbZrv5eICJPGJ1hiNmZAjFjDewwn8jiOVw5YfPG17IFvTcRiR
Cvcf/4fq7j2xXa7ckMD+E+Kk0Eg0uQQ=
-----END CERTIFICATE-----
Generated at Wed Apr 9 16:57:58 2025 by rpki-client