Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/b468f5d9-7a72-39a4-a972-97bfc3b63415.roa
File: b468f5d9-7a72-39a4-a972-97bfc3b63415.roa (raw, json)
Hash identifier: VhzJq99zJMaTrWMVtKGW2B1Y0nycEMKevTmwlvug6/Q=
Subject key identifier: 80:0C:A9:A4:26:FA:B1:8D:22:E0:C8:01:06:6A:93:E8:1B:F6:42:4A
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F4328584955295334CB0B7633E8C87280
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/b468f5d9-7a72-39a4-a972-97bfc3b63415.roa
Signing time: Fri 28 Mar 2025 01:00:41 +0000
ROA not before: Fri 28 Mar 2025 01:00:41 +0000
ROA not after: Thu 26 Jun 2025 01:00:41 +0000
asID: 21949
IP address blocks: 192.69.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:55:29:53:34:cb:0b:76:33:e8:c8:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Mar 28 01:00:41 2025 GMT
Not After : Jun 26 01:00:41 2025 GMT
Subject: CN=068448d0-4084-4170-bddd-55a7d373fd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dd:48:af:93:c4:2e:8f:4f:ee:4f:9e:ab:e7:
50:ca:81:bb:48:34:4a:e1:f6:35:2e:d1:b6:ef:94:
48:36:5a:aa:12:d2:31:33:36:a9:47:88:38:83:fb:
f8:59:79:b7:79:2e:f0:92:ac:96:c3:99:98:8f:67:
4a:e0:e0:81:2c:81:54:2b:9a:42:72:a5:92:61:83:
15:95:6b:12:45:db:63:e0:9f:a6:91:73:40:41:eb:
c0:08:3b:a2:d1:22:cb:7f:c5:15:a7:68:c0:3c:9b:
1e:4b:37:49:5c:75:a2:32:f6:f4:8c:66:35:44:e8:
74:97:d2:df:8d:9b:36:b7:f3:85:c4:b3:5b:54:0a:
44:3f:f3:17:a8:0d:e9:3c:8c:d5:5c:6f:29:59:c3:
6a:07:4b:07:85:56:39:d2:db:5c:56:ef:41:23:8d:
23:48:06:1c:6e:3b:d0:ed:82:b6:41:7f:29:e4:61:
45:8b:1b:bb:7b:c0:2c:45:0d:d4:54:b4:ae:9e:f3:
c2:e9:d8:7c:13:d7:38:95:2b:d2:e5:98:5c:52:d7:
04:ff:60:57:bf:41:3f:d5:a6:b8:24:7d:32:3d:66:
f0:2f:5d:c0:4b:27:07:76:64:fc:dc:78:2e:5b:05:
fe:2c:d0:d3:d6:45:8b:f3:74:15:75:4c:1a:93:b5:
12:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0C:A9:A4:26:FA:B1:8D:22:E0:C8:01:06:6A:93:E8:1B:F6:42:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/b468f5d9-7a72-39a4-a972-97bfc3b63415.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
192.69.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:b1:3a:54:9d:de:7f:0c:99:fe:9b:1c:3c:c0:3b:3a:09:a0:
69:f1:b2:cf:05:6e:d0:6a:7e:20:71:b7:f5:7a:b2:76:39:45:
51:76:9f:c0:ce:c4:1a:0e:84:16:ea:ef:c9:2a:26:c4:70:79:
33:3b:b7:dc:30:f9:73:93:9c:a8:21:57:be:12:01:a3:93:fc:
d9:a3:68:d7:af:1e:fe:39:e2:d7:64:2a:83:e3:7c:4f:07:0c:
45:69:c3:fa:63:a6:f9:98:b0:ee:14:17:8d:b2:56:a8:4f:50:
af:06:01:00:4e:18:b2:9d:10:47:14:37:76:ce:db:56:71:f7:
1a:02:46:d8:3b:10:17:9f:a7:54:32:6c:60:9a:be:24:85:cd:
a8:50:da:78:8c:77:86:20:10:08:3c:8e:2b:cc:5b:8b:a8:ae:
b9:e3:b2:88:6f:5a:bf:9c:35:cf:d7:a3:fe:da:35:57:9c:c6:
a3:52:6f:4a:ce:36:aa:40:fb:28:33:b5:4b:10:bd:1e:60:d9:
08:58:e5:f6:b6:83:57:d7:98:4d:a0:dd:90:f9:4c:ed:21:5b:
a0:81:ae:bb:fe:2f:8b:0c:0d:9e:d6:d9:2e:cf:5b:f1:cf:79:
23:c6:04:ca:f3:93:5a:80:b0:95:86:5b:a6:91:4b:ac:52:83:
a5:9a:48:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElVKVM0ywt2M+jIcoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx
YzViMB4XDTI1MDMyODAxMDA0MVoXDTI1MDYyNjAxMDA0MVowLzEtMCsGA1UEAxMk
MDY4NDQ4ZDAtNDA4NC00MTcwLWJkZGQtNTVhN2QzNzNmZDg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn91Ir5PELo9P7k+eq+dQyoG7SDRK4fY1LtG2
75RINlqqEtIxMzapR4g4g/v4WXm3eS7wkqyWw5mYj2dK4OCBLIFUK5pCcqWSYYMV
lWsSRdtj4J+mkXNAQevACDui0SLLf8UVp2jAPJseSzdJXHWiMvb0jGY1ROh0l9Lf
jZs2t/OFxLNbVApEP/MXqA3pPIzVXG8pWcNqB0sHhVY50ttcVu9BI40jSAYcbjvQ
7YK2QX8p5GFFixu7e8AsRQ3UVLSunvPC6dh8E9c4lSvS5ZhcUtcE/2BXv0E/1aa4
JH0yPWbwL13ASycHdmT83HguWwX+LNDT1kWL83QVdUwak7US0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIAMqaQm+rGNIuDIAQZqk+gb9kJKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx
NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvYjQ2OGY1ZDktN2E3Mi0z
OWE0LWE5NzItOTdiZmMzYjYzNDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx
MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk
MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk
MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEUBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAECxOlSd3n8Mmf6bHDzAOzoJoGnxss8FbtBqfiBxt/V6snY5RVF2n8DO
xBoOhBbq78kqJsRweTM7t9ww+XOTnKghV74SAaOT/NmjaNevHv454tdkKoPjfE8H
DEVpw/pjpvmYsO4UF42yVqhPUK8GAQBOGLKdEEcUN3bO21Zx9xoCRtg7EBefp1Qy
bGCaviSFzahQ2niMd4YgEAg8jivMW4uorrnjsohvWr+cNc/Xo/7aNVecxqNSb0rO
NqpA+ygztUsQvR5g2QhY5fa2g1fXmE2g3ZD5TO0hW6CBrrv+L4sMDZ7W2S7PW/HP
eSPGBMrzk1qAsJWGW6aRS6xSg6WaSAw=
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:12:48 2025 by rpki-client