Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/e58874e1-a6eb-3e13-a294-bc5dc855968e.roa
File: e58874e1-a6eb-3e13-a294-bc5dc855968e.roa (raw, json)
Hash identifier: DXHMUdz+kt6/yIrJMEDglVrG08CVW3TT5fzCcjNKVgc=
Subject key identifier: 31:41:81:33:7E:C6:CC:61:EC:92:EF:6B:53:45:5D:3A:24:50:AE:C4
Certificate issuer: /CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Certificate serial: 010D0C9F43285848A400B686CBB064EF6380C5C0
Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/e58874e1-a6eb-3e13-a294-bc5dc855968e.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 13627
IP address blocks: 198.186.130.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:b6:86:cb:b0:64:ef:63:80:c5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=9385760d-bbae-4e63-9b25-4096ae12fd8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:10:76:84:12:10:ed:c8:6a:5e:ef:d5:ae:d2:
40:b8:dd:57:87:ca:2a:82:91:5c:8e:ba:19:69:c7:
8c:f8:2b:28:a1:f6:6b:4a:af:a4:8c:ab:df:d7:fd:
7b:b3:00:4b:38:12:24:8b:0a:55:a6:71:21:0a:c8:
f9:58:73:a5:18:56:e5:73:f1:ff:4a:e1:c1:10:37:
6d:5d:6d:56:de:ff:8c:7e:fc:48:51:53:f4:53:f4:
34:6d:52:c1:4d:00:1e:95:34:c4:44:71:01:53:2f:
c0:5d:29:5b:ad:50:c8:e3:90:6c:93:b2:9d:7d:07:
d5:cb:d6:3e:85:3f:19:1a:62:43:f2:fe:41:58:ea:
9a:fa:69:d7:3a:ef:56:f9:0e:91:c6:ad:bd:9b:dd:
88:79:5c:34:f7:16:e8:a5:87:45:74:36:93:8f:1d:
83:83:a4:d9:c2:81:ff:16:82:1b:f2:7b:0b:b4:1e:
f7:83:ec:bd:6f:d9:e1:bb:44:be:01:7f:b4:98:7a:
d7:29:6b:9f:6e:40:f6:68:34:b3:66:37:3e:3a:0d:
c3:1a:c3:53:cd:2c:32:ac:78:ef:02:3e:89:f2:88:
fa:78:df:d5:c3:2a:59:d6:44:52:93:a5:aa:82:c9:
ae:c4:5b:7b:ba:dd:97:ce:5b:16:b7:10:f2:3b:0b:
5c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:41:81:33:7E:C6:CC:61:EC:92:EF:6B:53:45:5D:3A:24:50:AE:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/e58874e1-a6eb-3e13-a294-bc5dc855968e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl
X509v3 Authority Key Identifier:
keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
sbgp-ipAddrBlock: critical
IPv4:
198.186.130.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:2d:f3:9e:d6:f4:f4:ab:dd:ab:d3:c5:ad:5e:31:72:2b:99:
67:f5:1d:97:5c:92:63:5d:58:8c:df:31:21:c0:50:1c:13:fa:
e1:48:17:36:54:6c:c0:6a:ae:85:ff:e0:0f:ca:50:6f:ec:6d:
60:f7:2b:9d:46:3f:f8:d9:0a:c5:28:59:7a:d6:22:c6:c1:a3:
25:cb:85:45:80:e5:7d:9e:55:bf:4d:9e:12:40:73:ad:2a:a9:
22:4b:6d:8b:8f:ed:b2:62:dd:63:50:64:d7:79:6e:4d:67:0f:
e8:9c:b0:d8:e4:ac:75:0d:58:90:fc:8a:9e:7f:a0:75:44:21:
2d:90:ae:1c:ac:b2:d6:d1:c3:f3:c2:ae:d6:f0:8b:99:ce:bd:
fb:7d:e5:12:20:7d:ee:60:6e:75:f9:73:49:c3:3b:6b:b6:e7:
28:8e:e8:54:57:50:0d:2c:cb:d0:81:b4:f7:61:21:1a:b8:1e:
e1:3d:9b:14:1e:1d:4a:d9:f4:64:21:1d:3d:26:0a:ad:f3:aa:
53:e6:3b:2d:69:71:60:36:d3:7d:b5:46:fe:2c:8f:49:1e:b3:
b5:62:df:00:db:1f:87:4a:dd:a8:ce:75:c7:49:60:7e:49:a2:
4a:43:56:9c:72:1e:cc:f6:8d:0d:a2:ff:1b:df:04:b9:7c:b2:
69:50:5a:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikALaGy7Bk72OAxcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWFlOTc5NmEtNWYzZC00ZjQ3LWIxMTctNDIzNjBhMjEz
ZTM3MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk
OTM4NTc2MGQtYmJhZS00ZTYzLTliMjUtNDA5NmFlMTJmZDhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9RB2hBIQ7chqXu/VrtJAuN1Xh8oqgpFcjroZ
aceM+CsoofZrSq+kjKvf1/17swBLOBIkiwpVpnEhCsj5WHOlGFblc/H/SuHBEDdt
XW1W3v+MfvxIUVP0U/Q0bVLBTQAelTTERHEBUy/AXSlbrVDI45Bsk7KdfQfVy9Y+
hT8ZGmJD8v5BWOqa+mnXOu9W+Q6Rxq29m92IeVw09xbopYdFdDaTjx2Dg6TZwoH/
FoIb8nsLtB73g+y9b9nhu0S+AX+0mHrXKWufbkD2aDSzZjc+Og3DGsNTzSwyrHjv
Aj6J8oj6eN/VwypZ1kRSk6WqgsmuxFt7ut2XzlsWtxDyOwtcbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDFBgTN+xsxh7JLva1NFXTokUK7EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5
Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2MGEyMTNlMzcvZTU4ODc0ZTEtYTZlYi0z
ZTEzLWEyOTQtYmM1ZGM4NTU5NjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWFlOTc5NmEtNWYzZC00ZjQ3LWIx
MTctNDIzNjBhMjEzZTM3LzFhZTk3OTZhLTVmM2QtNGY0Ny1iMTE3LTQyMzYwYTIx
M2UzNy5jcmwwHwYDVR0jBBgwFoAUTss6/l8FHqwG3VnOR6besyl/QdwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2
MGEyMTNlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxrqCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHUt857W9PSr3avTxa1eMXIrmWf1HZdckmNdWIzfMSHAUBwT+uFIFzZU
bMBqroX/4A/KUG/sbWD3K51GP/jZCsUoWXrWIsbBoyXLhUWA5X2eVb9NnhJAc60q
qSJLbYuP7bJi3WNQZNd5bk1nD+icsNjkrHUNWJD8ip5/oHVEIS2QrhysstbRw/PC
rtbwi5nOvft95RIgfe5gbnX5c0nDO2u25yiO6FRXUA0sy9CBtPdhIRq4HuE9mxQe
HUrZ9GQhHT0mCq3zqlPmOy1pcWA20321Rv4sj0kes7Vi3wDbH4dK3ajOdcdJYH5J
okpDVpxyHsz2jQ2i/xvfBLl8smlQWgE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:26:36 2025 by rpki-client