Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f/c1cbc946-fa38-376c-910a-70a850448b50.roa
File: c1cbc946-fa38-376c-910a-70a850448b50.roa (raw, json)
Hash identifier: Q2xjg/Ny/ZSlX+E7wY1sBC3lJr2L22IGzKbCskiPgIA=
Subject key identifier: 10:F5:4D:C6:21:C4:AA:39:8B:D9:0C:16:7E:B9:DB:33:24:36:6F:2F
Certificate issuer: /CN=91f245d2-ace9-4f2b-ab8e-927934d9805f
Certificate serial: 010D0C9F4328584902EC2530FC8385946A0D8580
Authority key identifier: 7B:81:F3:E6:29:C6:08:6B:E8:1A:B4:36:4F:D1:89:2E:37:B5:0C:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f/c1cbc946-fa38-376c-910a-70a850448b50.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 16509
IP address blocks: 172.99.14.0/24 maxlen: 24
172.99.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:25:30:fc:83:85:94:6a:0d:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f245d2-ace9-4f2b-ab8e-927934d9805f
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=95e607dc-4ab6-4b8a-be87-a198ba26e761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:71:09:46:19:e5:b2:48:e5:2b:64:82:33:cf:
fe:a3:8b:6c:77:59:57:7a:e6:70:d7:44:c7:59:64:
d9:38:71:ab:90:e2:e9:c0:fd:ab:d9:6f:7d:d9:a2:
1e:18:0b:bf:db:a6:50:73:d6:58:f8:07:12:03:cf:
d2:f9:05:d0:95:c6:c3:ed:e4:42:b7:b0:c5:9a:de:
25:ff:ae:31:86:43:05:54:33:2e:0f:43:ed:d0:6c:
1e:b7:a3:a4:c8:17:0a:d6:99:14:c6:77:b6:f3:43:
b0:87:f6:4f:e9:36:a3:37:b2:9b:b9:34:10:75:5c:
c5:c7:9e:8a:ef:4f:dd:ef:ca:8c:ac:9e:3f:b3:0c:
34:9f:59:91:b4:2b:ff:17:c5:27:1e:29:3f:82:d3:
a6:e0:b8:e3:16:9a:1a:dc:fa:90:19:00:34:29:06:
79:5d:e3:f8:b1:d6:4c:02:ee:de:e9:f9:c8:ce:ae:
39:0a:14:ea:a8:a8:bd:df:fe:73:7b:5e:47:af:78:
a5:5c:ca:25:6e:55:7e:e8:9d:b1:03:39:a2:07:7d:
f0:41:a3:73:ad:c2:f2:8d:24:4a:42:fd:36:76:24:
d0:16:a3:9c:fc:7b:98:af:ee:0f:58:3c:88:33:f9:
60:32:dc:66:fa:88:b7:f1:26:df:fa:7d:62:db:41:
58:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F5:4D:C6:21:C4:AA:39:8B:D9:0C:16:7E:B9:DB:33:24:36:6F:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f/c1cbc946-fa38-376c-910a-70a850448b50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f/91f245d2-ace9-4f2b-ab8e-927934d9805f.crl
X509v3 Authority Key Identifier:
keyid:7B:81:F3:E6:29:C6:08:6B:E8:1A:B4:36:4F:D1:89:2E:37:B5:0C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f.cer
sbgp-ipAddrBlock: critical
IPv4:
172.99.14.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:31:33:a4:eb:a2:14:4e:b4:32:aa:01:9a:e9:ba:c8:69:34:
ac:91:3d:64:35:b0:01:aa:10:cf:59:0c:65:1b:10:67:90:94:
52:e9:5d:0d:2f:35:ee:8e:c7:e3:90:28:44:7b:a1:87:df:a3:
8d:73:6e:6c:df:c0:e2:a4:0a:72:f9:86:6e:bb:e0:ac:dc:e2:
b4:05:23:c0:82:04:18:26:0d:bc:4f:6f:61:a5:5a:3a:93:c3:
06:a3:04:5e:a4:26:c2:1d:12:de:25:b6:16:8d:54:e3:87:ba:
53:8a:2b:88:db:f1:3f:98:8e:2c:b5:31:71:7b:d7:56:85:88:
4f:e1:de:92:10:cb:0d:db:e9:6b:4d:6a:cc:ca:38:a3:60:63:
f0:54:a0:42:20:3a:2d:11:c8:1f:1d:03:c9:b2:af:67:fc:42:
0d:e5:8d:2f:80:97:31:21:f8:80:d4:ed:e1:40:97:bb:35:bc:
5d:1c:44:b2:51:e7:80:cf:ef:f3:12:95:a9:09:ce:6e:b0:fb:
2a:93:f4:17:fe:02:e0:df:68:28:dc:fb:74:54:85:f6:4f:59:
1a:90:11:17:f7:e6:31:64:fe:68:9c:19:de:38:52:b0:62:75:
d4:6e:77:3c:20:ac:38:3f:41:4d:79:96:0f:22:62:06:7c:1f:
e8:27:eb:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7CUw/IOFlGoNhYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTFmMjQ1ZDItYWNlOS00ZjJiLWFiOGUtOTI3OTM0ZDk4
MDVmMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
OTVlNjA3ZGMtNGFiNi00YjhhLWJlODctYTE5OGJhMjZlNzYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXEJRhnlskjlK2SCM8/+o4tsd1lXeuZw10TH
WWTZOHGrkOLpwP2r2W992aIeGAu/26ZQc9ZY+AcSA8/S+QXQlcbD7eRCt7DFmt4l
/64xhkMFVDMuD0Pt0Gwet6OkyBcK1pkUxne280Owh/ZP6TajN7KbuTQQdVzFx56K
70/d78qMrJ4/sww0n1mRtCv/F8UnHik/gtOm4LjjFpoa3PqQGQA0KQZ5XeP4sdZM
Au7e6fnIzq45ChTqqKi93/5ze15Hr3ilXMolblV+6J2xAzmiB33wQaNzrcLyjSRK
Qv02diTQFqOc/HuYr+4PWDyIM/lgMtxm+oi38Sbf+n1i20FYywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBD1TcYhxKo5i9kMFn652zMkNm8vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85MWYy
NDVkMi1hY2U5LTRmMmItYWI4ZS05Mjc5MzRkOTgwNWYvYzFjYmM5NDYtZmEzOC0z
NzZjLTkxMGEtNzBhODUwNDQ4YjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTFmMjQ1ZDItYWNlOS00ZjJiLWFi
OGUtOTI3OTM0ZDk4MDVmLzkxZjI0NWQyLWFjZTktNGYyYi1hYjhlLTkyNzkzNGQ5
ODA1Zi5jcmwwHwYDVR0jBBgwFoAUe4Hz5inGCGvoGrQ2T9GJLje1DJQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85MWYyNDVkMi1hY2U5LTRmMmItYWI4ZS05Mjc5
MzRkOTgwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGMOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIUxM6TrohROtDKqAZrpushpNKyRPWQ1sAGqEM9ZDGUbEGeQlFLpXQ0v
Ne6Ox+OQKER7oYffo41zbmzfwOKkCnL5hm674Kzc4rQFI8CCBBgmDbxPb2GlWjqT
wwajBF6kJsIdEt4lthaNVOOHulOKK4jb8T+Yjiy1MXF711aFiE/h3pIQyw3b6WtN
aszKOKNgY/BUoEIgOi0RyB8dA8myr2f8Qg3ljS+AlzEh+IDU7eFAl7s1vF0cRLJR
54DP7/MSlakJzm6w+yqT9Bf+AuDfaCjc+3RUhfZPWRqQERf35jFk/micGd44UrBi
ddRudzwgrDg/QU15lg8iYgZ8H+gn61g=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:05:29 2025 by rpki-client