Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/0a4ea47c-1151-36e1-9f1f-51fff629ea50.roa
File: 0a4ea47c-1151-36e1-9f1f-51fff629ea50.roa (raw, json)
Hash identifier: DWIPKERCLsXQqSSmRtlcCkTWTgMGKHw3XgOWk1c5BAw=
Subject key identifier: 8C:FE:87:F9:E6:62:98:C6:26:AC:D2:4F:21:89:A2:1E:E5:9B:57:49
Certificate issuer: /CN=4c7af685-9e64-44e4-ac36-719ad5b8bf68
Certificate serial: 010D0C9F432858489E6B68C305686B72ACFDA040
Authority key identifier: 83:1F:FA:45:E1:13:40:75:27:2F:26:DD:18:21:09:AD:FC:C8:9A:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/0a4ea47c-1151-36e1-9f1f-51fff629ea50.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 16509
IP address blocks: 199.59.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:68:c3:05:68:6b:72:ac:fd:a0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c7af685-9e64-44e4-ac36-719ad5b8bf68
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=62acfd16-b84c-4883-9456-903ad0b224b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:fe:67:83:33:e1:a5:b6:1c:d4:1d:fa:1c:
bc:36:7d:f3:86:1d:58:40:2e:10:79:1f:d8:7b:33:
1f:62:d1:44:74:7b:b2:4c:86:5a:60:78:b1:00:60:
3b:93:a2:5d:31:0e:cf:03:31:98:9a:cc:69:2b:ff:
c0:82:fb:18:f8:98:f3:de:ed:a8:a3:2d:63:83:64:
c7:14:63:2e:4b:a0:85:ad:a6:cb:c5:be:77:05:34:
60:42:d7:4e:04:e6:7f:7e:7a:68:aa:6a:38:3a:32:
d9:cf:c0:67:5d:27:7b:95:40:f0:12:9c:e2:3f:0b:
57:67:79:d6:d4:50:6d:d0:0f:e7:4b:f7:83:b5:16:
d5:9f:e6:01:6f:f9:52:d9:97:9f:1f:c3:64:62:92:
26:42:69:30:b4:be:9b:67:1e:5b:ca:27:88:b6:63:
b7:46:42:b9:a6:86:a5:96:4a:4b:b4:f7:44:f8:79:
83:b8:58:31:38:7f:e7:f3:60:b3:07:21:a2:f6:b2:
2b:34:07:e3:32:58:31:ae:ce:75:c8:9e:53:85:03:
f7:74:48:5b:2b:26:18:ea:d3:22:da:9d:6a:70:9a:
60:ed:39:88:3f:e5:b6:b0:c4:dc:c1:ff:4f:a6:43:
31:f3:46:56:cb:35:0a:dd:34:5b:35:eb:ba:00:c3:
ff:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FE:87:F9:E6:62:98:C6:26:AC:D2:4F:21:89:A2:1E:E5:9B:57:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/0a4ea47c-1151-36e1-9f1f-51fff629ea50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/4c7af685-9e64-44e4-ac36-719ad5b8bf68.crl
X509v3 Authority Key Identifier:
keyid:83:1F:FA:45:E1:13:40:75:27:2F:26:DD:18:21:09:AD:FC:C8:9A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68.cer
sbgp-ipAddrBlock: critical
IPv4:
199.59.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:5e:4a:b5:cd:1e:3d:d8:e9:0b:48:80:5a:8c:99:e8:d9:20:
ca:95:cc:a1:26:d8:6e:bb:de:24:b3:8c:8e:28:4f:3a:09:bd:
18:22:93:e8:a8:39:f8:3c:a0:08:6e:5f:d8:d0:b6:f2:3f:a4:
44:1f:3b:5c:99:2a:9b:32:63:76:a0:af:69:55:fc:ad:e7:82:
c9:db:6a:36:47:75:cb:c8:54:f0:23:f5:c4:37:aa:07:5f:cb:
c3:75:1e:75:c2:be:2d:e0:f0:ae:c2:26:d7:c3:b4:0b:49:ac:
bd:47:8f:62:41:e9:c5:9b:c8:27:dc:2a:0f:f7:af:71:60:84:
08:c2:c1:d8:ec:7e:57:09:63:4c:2f:23:99:58:12:c6:c9:dc:
ec:4b:4d:49:7a:63:9a:36:1e:c1:41:ec:7c:13:e0:44:35:9f:
e3:8c:b8:6c:55:45:84:00:68:e8:82:39:51:cf:45:b4:4d:d1:
30:a8:72:11:69:46:b6:8b:bb:21:32:71:60:27:92:81:0f:56:
59:4b:4a:ed:6e:05:c0:3d:bd:72:e2:ee:c4:50:94:d0:a0:52:
f7:14:ee:b0:69:71:96:a9:45:58:cf:d5:70:27:45:8d:d2:bd:
0e:13:a1:40:1f:5f:c5:8b:22:4c:d2:7d:14:3f:3d:48:f4:b4:
83:f9:fa:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea2jDBWhrcqz9oEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGM3YWY2ODUtOWU2NC00NGU0LWFjMzYtNzE5YWQ1Yjhi
ZjY4MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
NjJhY2ZkMTYtYjg0Yy00ODgzLTk0NTYtOTAzYWQwYjIyNGI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5n+Z4Mz4aW2HNQd+hy8Nn3zhh1YQC4QeR/Y
ezMfYtFEdHuyTIZaYHixAGA7k6JdMQ7PAzGYmsxpK//AgvsY+Jjz3u2ooy1jg2TH
FGMuS6CFrabLxb53BTRgQtdOBOZ/fnpoqmo4OjLZz8BnXSd7lUDwEpziPwtXZ3nW
1FBt0A/nS/eDtRbVn+YBb/lS2ZefH8NkYpImQmkwtL6bZx5byieItmO3RkK5poal
lkpLtPdE+HmDuFgxOH/n82CzByGi9rIrNAfjMlgxrs51yJ5ThQP3dEhbKyYY6tMi
2p1qcJpg7TmIP+W2sMTcwf9PpkMx80ZWyzUK3TRbNeu6AMP/qwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIz+h/nmYpjGJqzSTyGJoh7lm1dJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80Yzdh
ZjY4NS05ZTY0LTQ0ZTQtYWMzNi03MTlhZDViOGJmNjgvMGE0ZWE0N2MtMTE1MS0z
NmUxLTlmMWYtNTFmZmY2MjllYTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGM3YWY2ODUtOWU2NC00NGU0LWFj
MzYtNzE5YWQ1YjhiZjY4LzRjN2FmNjg1LTllNjQtNDRlNC1hYzM2LTcxOWFkNWI4
YmY2OC5jcmwwHwYDVR0jBBgwFoAUgx/6ReETQHUnLybdGCEJrfzIml8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80YzdhZjY4NS05ZTY0LTQ0ZTQtYWMzNi03MTlh
ZDViOGJmNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzvwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJVeSrXNHj3Y6QtIgFqMmejZIMqVzKEm2G673iSzjI4oTzoJvRgik+io
Ofg8oAhuX9jQtvI/pEQfO1yZKpsyY3agr2lV/K3ngsnbajZHdcvIVPAj9cQ3qgdf
y8N1HnXCvi3g8K7CJtfDtAtJrL1Hj2JB6cWbyCfcKg/3r3FghAjCwdjsflcJY0wv
I5lYEsbJ3OxLTUl6Y5o2HsFB7HwT4EQ1n+OMuGxVRYQAaOiCOVHPRbRN0TCochFp
RraLuyEycWAnkoEPVllLSu1uBcA9vXLi7sRQlNCgUvcU7rBpcZapRVjP1XAnRY3S
vQ4ToUAfX8WLIkzSfRQ/PUj0tIP5+rU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:11 2025 by rpki-client