Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/2d512d2b-840f-30cb-88f8-f79128126588.roa
File: 2d512d2b-840f-30cb-88f8-f79128126588.roa (raw, json)
Hash identifier: 2bm/GwJ+p2z9uFTUIgXE93Sv7di8qdZRpCfaN6EbT8w=
Subject key identifier: C3:A5:8E:FF:F5:0B:43:05:76:80:A7:D4:06:EC:22:86:C8:04:C9:C3
Certificate issuer: /CN=d3bf28f7-eba5-4254-a572-761a872427b5
Certificate serial: 010D0C9F4328584937D93042020FD14AC2074E00
Authority key identifier: 05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/2d512d2b-840f-30cb-88f8-f79128126588.roa
Signing time: Mon 17 Mar 2025 13:00:52 +0000
ROA not before: Mon 17 Mar 2025 13:00:52 +0000
ROA not after: Sun 15 Jun 2025 13:00:52 +0000
asID: 16509
IP address blocks: 192.103.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:37:d9:30:42:02:0f:d1:4a:c2:07:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3bf28f7-eba5-4254-a572-761a872427b5
Validity
Not Before: Mar 17 13:00:52 2025 GMT
Not After : Jun 15 13:00:52 2025 GMT
Subject: CN=49676a51-439a-4bd4-aa38-cb6c79551ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:34:79:93:05:3f:66:91:da:85:32:f8:17:25:
c4:b9:13:86:bd:07:17:d4:db:da:3f:e2:fc:75:ff:
36:2a:35:cd:a4:b7:d1:1e:07:2e:d0:9f:77:3b:19:
4c:2c:6d:bd:83:eb:b6:32:38:4e:00:2e:5a:49:0a:
e2:3a:60:61:cc:90:bc:0e:cd:fc:81:e2:95:bb:d2:
eb:d6:b5:f9:9b:2c:0a:c5:d7:ac:b3:f5:87:9a:33:
94:9e:c4:97:60:be:10:17:e7:21:98:bf:07:ab:45:
4e:08:70:05:3e:16:c4:ab:79:77:18:5d:c0:a0:05:
84:dd:da:67:ce:dc:14:86:ce:c2:fb:a3:79:f1:43:
15:37:a8:63:a5:87:b2:b4:be:c4:df:77:40:0f:fb:
ce:26:af:62:d2:42:14:15:c4:d0:14:c2:34:1c:6f:
63:e7:42:45:b5:a6:8a:32:89:56:ad:12:62:e5:ae:
9f:ec:3a:31:ad:0a:f7:86:d7:a0:06:36:a6:bb:0c:
2b:01:66:e0:c4:16:1a:d1:db:5b:f2:21:2c:4f:3b:
a8:c4:13:69:64:53:7d:af:93:4b:a6:e9:f7:f8:e1:
38:45:fd:63:e1:bf:0f:46:a1:f2:e4:96:cd:e2:96:
10:0c:94:a2:ca:6d:66:fa:4a:e9:cf:d7:a2:ed:0c:
f6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A5:8E:FF:F5:0B:43:05:76:80:A7:D4:06:EC:22:86:C8:04:C9:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/2d512d2b-840f-30cb-88f8-f79128126588.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl
X509v3 Authority Key Identifier:
keyid:05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
sbgp-ipAddrBlock: critical
IPv4:
192.103.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:58:18:17:ef:30:1b:04:05:ef:a7:bc:b6:19:73:5c:f9:dc:
58:7f:e9:18:0b:02:e1:d5:8f:0e:41:fa:3b:e8:4f:ad:35:67:
d1:36:a8:eb:0e:70:35:1b:9c:34:40:d8:de:94:12:9f:b8:67:
a4:9c:02:99:b7:83:f4:42:eb:61:db:90:42:95:60:aa:67:28:
fc:18:4f:f9:83:68:77:f6:7f:b2:45:1d:08:c9:11:ec:3a:cb:
c5:4d:ad:d5:25:79:f9:fa:d3:b0:d6:b8:4e:7b:6e:96:f7:27:
28:23:04:e9:55:68:fa:a4:05:d0:83:1e:ca:c9:20:1c:e3:e2:
06:88:5e:b5:cc:a0:c3:b1:fd:97:9c:00:94:55:66:cb:d9:60:
99:47:77:14:a4:1f:74:d1:92:00:60:21:55:0f:45:f2:84:b9:
f9:c0:61:19:4f:09:36:de:b2:e0:9f:d4:2e:ec:49:8f:1f:d5:
d3:18:b0:a8:93:1d:3a:f4:80:cd:09:5d:d0:5f:81:cb:87:59:
d4:e1:70:59:22:3f:8a:3d:19:1d:4e:6a:0d:01:a7:7d:68:04:
ce:92:1c:e4:19:39:5f:96:2f:9e:54:f0:0a:8d:6a:63:e7:d8:
50:5d:07:54:3a:9d:27:8c:99:23:98:bb:1b:55:fd:32:09:f9:
2c:71:1e:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk32TBCAg/RSsIHTgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDNiZjI4ZjctZWJhNS00MjU0LWE1NzItNzYxYTg3MjQy
N2I1MB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk
NDk2NzZhNTEtNDM5YS00YmQ0LWFhMzgtY2I2Yzc5NTUxYWUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDR5kwU/ZpHahTL4FyXEuROGvQcX1NvaP+L8
df82KjXNpLfRHgcu0J93OxlMLG29g+u2MjhOAC5aSQriOmBhzJC8Ds38geKVu9Lr
1rX5mywKxdess/WHmjOUnsSXYL4QF+chmL8Hq0VOCHAFPhbEq3l3GF3AoAWE3dpn
ztwUhs7C+6N58UMVN6hjpYeytL7E33dAD/vOJq9i0kIUFcTQFMI0HG9j50JFtaaK
MolWrRJi5a6f7DoxrQr3htegBjamuwwrAWbgxBYa0dtb8iEsTzuoxBNpZFN9r5NL
pun3+OE4Rf1j4b8PRqHy5JbN4pYQDJSiym1m+krpz9ei7Qz2DQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMOljv/1C0MFdoCn1AbsIobIBMnDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kM2Jm
MjhmNy1lYmE1LTQyNTQtYTU3Mi03NjFhODcyNDI3YjUvMmQ1MTJkMmItODQwZi0z
MGNiLTg4ZjgtZjc5MTI4MTI2NTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDNiZjI4ZjctZWJhNS00MjU0LWE1
NzItNzYxYTg3MjQyN2I1L2QzYmYyOGY3LWViYTUtNDI1NC1hNTcyLTc2MWE4NzI0
MjdiNS5jcmwwHwYDVR0jBBgwFoAUBYO/RQRVyIycbPigW3Yx/vdqjBkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kM2JmMjhmNy1lYmE1LTQyNTQtYTU3Mi03NjFh
ODcyNDI3YjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGf/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAENYGBfvMBsEBe+nvLYZc1z53Fh/6RgLAuHVjw5B+jvoT601Z9E2qOsO
cDUbnDRA2N6UEp+4Z6ScApm3g/RC62HbkEKVYKpnKPwYT/mDaHf2f7JFHQjJEew6
y8VNrdUlefn607DWuE57bpb3JygjBOlVaPqkBdCDHsrJIBzj4gaIXrXMoMOx/Zec
AJRVZsvZYJlHdxSkH3TRkgBgIVUPRfKEufnAYRlPCTbesuCf1C7sSY8f1dMYsKiT
HTr0gM0JXdBfgcuHWdThcFkiP4o9GR1Oag0Bp31oBM6SHOQZOV+WL55U8AqNamPn
2FBdB1Q6nSeMmSOYuxtV/TIJ+SxxHhg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:15 2025 by rpki-client