Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/706fac37-3e2e-329f-94f6-1c53acc6e6dc.roa
File: 706fac37-3e2e-329f-94f6-1c53acc6e6dc.roa (raw, json)
Hash identifier: kOXghWy+Kf6WGmaGDO0LzLgMgZF4+hViAWuyddaYlDo=
Subject key identifier: FC:C8:EB:5C:09:C4:44:2D:0D:6D:8B:BD:6E:44:95:17:8A:EF:1B:A0
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F432858491ED6ED10F959231F23438200
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/706fac37-3e2e-329f-94f6-1c53acc6e6dc.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 16839
IP address blocks: 199.91.140.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:ed:10:f9:59:23:1f:23:43:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=8c9dcbc3-c762-4500-9a28-a049bdb749d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4c:3c:7e:ef:ec:dc:e8:9c:1e:af:04:70:00:
68:18:9f:ab:26:8c:25:6d:5c:fb:1e:f1:7a:4b:fa:
c3:5e:6a:43:5b:1a:b2:84:dc:88:85:0d:85:e1:b5:
f3:08:33:ed:1c:c3:43:4f:da:4a:22:f9:4b:b9:7f:
a3:3e:c3:92:3b:09:00:c3:6a:04:0d:e1:77:0e:75:
a8:03:6d:f7:0b:44:9d:8d:e0:15:a7:54:4b:f2:01:
25:f3:97:84:82:41:d0:60:5f:3e:af:74:cc:26:c5:
79:93:05:6e:64:9c:be:c1:b6:74:25:b3:29:a8:fb:
b5:3b:1c:c0:56:93:45:fa:6f:68:98:e3:b3:d3:aa:
0d:9d:a1:c4:fc:99:05:ff:d3:ed:71:a8:8a:3b:7f:
dd:cb:ed:13:47:0f:9e:33:88:82:b0:3e:e7:36:94:
4a:e3:49:e5:b0:05:8e:5a:ff:be:f3:96:77:86:b7:
8f:87:82:14:33:2f:d0:22:e5:90:0e:f1:c3:ac:41:
4d:c0:78:ad:b2:51:56:33:41:ce:c8:80:21:56:ec:
6f:24:a7:ad:11:09:f4:8e:7e:dc:fa:4d:42:6e:32:
be:e9:98:21:cd:a3:0c:c2:96:ee:e0:b1:3a:a8:95:
93:d5:72:d0:a1:59:b5:c8:8a:6a:24:16:2a:44:c3:
5b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C8:EB:5C:09:C4:44:2D:0D:6D:8B:BD:6E:44:95:17:8A:EF:1B:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/706fac37-3e2e-329f-94f6-1c53acc6e6dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
199.91.140.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:d2:ad:10:1a:47:9d:d8:c4:8d:8e:df:70:37:a9:cd:5f:1b:
a2:2e:58:05:4a:43:40:7b:07:86:a1:a3:23:48:5b:b7:8f:4d:
28:4f:45:46:2d:fc:03:71:46:da:ff:da:3b:f7:e8:dd:50:10:
94:ec:47:18:e9:7a:59:3f:e9:31:39:0c:24:27:a2:7a:26:a1:
0e:58:b9:e1:dc:da:cf:0a:25:ba:63:fd:0d:28:9a:85:3a:8a:
63:c6:7a:0e:53:d6:e5:89:da:1a:2d:62:a5:3b:76:90:27:fb:
d6:6e:d0:b2:cb:60:94:eb:ae:4c:de:f2:2a:86:5f:11:0e:c2:
d7:a6:11:d9:9a:0a:cf:f0:81:33:0b:2f:41:c0:e8:ae:5a:fb:
d8:2d:55:0e:d2:1c:b7:dc:9b:fe:5b:7e:70:59:fe:18:ec:8e:
5a:dc:7b:15:c3:e4:50:1a:a8:ba:25:db:08:17:f0:0d:fe:cf:
63:9f:9f:07:14:63:6a:68:f3:af:eb:e3:b1:a7:fe:b0:83:06:
3a:b3:96:06:74:c9:f6:d8:15:a7:c1:30:fe:1c:d9:90:4e:89:
fb:a3:49:dd:c9:f5:f0:5b:c3:82:ca:4e:e7:4c:5e:70:5d:5c:
50:70:7e:e9:12:e3:9e:dc:ee:9c:64:22:ca:76:98:58:b3:9d:
5a:a1:bd:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1u0Q+VkjHyNDggAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm
MjlhMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk
OGM5ZGNiYzMtYzc2Mi00NTAwLTlhMjgtYTA0OWJkYjc0OWQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEw8fu/s3OicHq8EcABoGJ+rJowlbVz7HvF6
S/rDXmpDWxqyhNyIhQ2F4bXzCDPtHMNDT9pKIvlLuX+jPsOSOwkAw2oEDeF3DnWo
A233C0SdjeAVp1RL8gEl85eEgkHQYF8+r3TMJsV5kwVuZJy+wbZ0JbMpqPu1OxzA
VpNF+m9omOOz06oNnaHE/JkF/9PtcaiKO3/dy+0TRw+eM4iCsD7nNpRK40nlsAWO
Wv++85Z3hrePh4IUMy/QIuWQDvHDrEFNwHitslFWM0HOyIAhVuxvJKetEQn0jn7c
+k1CbjK+6ZghzaMMwpbu4LE6qJWT1XLQoVm1yIpqJBYqRMNbGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPzI61wJxEQtDW2LvW5ElReK7xugMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm
NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvNzA2ZmFjMzctM2UyZS0z
MjlmLTk0ZjYtMWM1M2FjYzZlNmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk
N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk
ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh
NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx1uMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIjSrRAaR53YxI2O33A3qc1fG6IuWAVKQ0B7B4ahoyNIW7ePTShPRUYt
/ANxRtr/2jv36N1QEJTsRxjpelk/6TE5DCQnonomoQ5YueHc2s8KJbpj/Q0omoU6
imPGeg5T1uWJ2hotYqU7dpAn+9Zu0LLLYJTrrkze8iqGXxEOwtemEdmaCs/wgTML
L0HA6K5a+9gtVQ7SHLfcm/5bfnBZ/hjsjlrcexXD5FAaqLol2wgX8A3+z2OfnwcU
Y2po86/r47Gn/rCDBjqzlgZ0yfbYFafBMP4c2ZBOifujSd3J9fBbw4LKTudMXnBd
XFBwfukS457c7pxkIsp2mFiznVqhvTo=
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:16:02 2025 by rpki-client