Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/ab540f08-40ca-362e-a723-f3bf0d53cae8.roa
File: ab540f08-40ca-362e-a723-f3bf0d53cae8.roa (raw, json)
Hash identifier: IjGP8qKDPAmPbg8gTMvKY1fMu7m8UJeXOh1dT2zjcGA=
Subject key identifier: 3F:1A:42:31:6F:C8:E3:B2:B6:09:4F:9A:8C:4E:EB:A0:82:A3:B5:D8
Certificate issuer: /CN=67612b49-91a4-42d2-8352-16977b5d8e8a
Certificate serial: 010D0C9F432858489075EBE40A9DAE3AAC8BB1C0
Authority key identifier: 26:B9:EA:BA:65:7A:DB:E3:64:D8:3F:BF:D2:FA:77:F6:5B:10:0C:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/ab540f08-40ca-362e-a723-f3bf0d53cae8.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 14041
IP address blocks: 198.59.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:75:eb:e4:0a:9d:ae:3a:ac:8b:b1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67612b49-91a4-42d2-8352-16977b5d8e8a
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=7f51742c-9462-435d-b2bc-764d01b24b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:02:64:d6:50:cc:77:47:c9:81:13:e3:d8:54:
b1:ea:9e:f8:15:ae:70:be:aa:2c:b5:72:7c:76:b4:
33:5e:f9:e4:6f:9c:58:39:7d:0d:f0:2d:ac:4f:16:
15:ae:21:d7:48:c5:71:06:46:b8:fa:31:d8:14:34:
6c:04:58:4e:60:89:72:9e:81:36:b8:94:89:c5:12:
97:db:93:6f:2c:5a:a3:a7:a3:cd:86:cb:53:f5:5d:
05:d7:a6:65:3c:41:de:e1:c6:98:39:7b:95:e0:f7:
16:be:28:70:20:7b:05:7e:0c:2f:76:a1:ac:f4:fe:
a5:ee:72:dd:91:5b:52:c6:30:18:6c:5e:8f:4a:3b:
7f:b5:4e:77:81:1e:1e:53:31:71:eb:d2:5a:ec:65:
32:cf:f6:57:d3:2a:a9:50:2c:08:eb:8a:8a:e1:b6:
ae:3b:e0:70:b6:24:28:55:64:8b:8f:e1:6d:f9:02:
4e:ff:44:9d:2b:8d:04:a4:99:29:c9:93:27:6f:6f:
78:31:00:74:98:24:a9:24:f5:7c:9b:02:c5:a6:0f:
8d:9e:7d:3c:be:b4:aa:21:55:31:e8:d4:91:64:06:
54:1a:93:6a:18:2a:a4:dc:42:b5:ec:ad:05:4d:c1:
fe:c0:56:a6:5b:c9:c7:41:c7:4a:5a:a8:8d:b9:df:
71:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1A:42:31:6F:C8:E3:B2:B6:09:4F:9A:8C:4E:EB:A0:82:A3:B5:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/ab540f08-40ca-362e-a723-f3bf0d53cae8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/67612b49-91a4-42d2-8352-16977b5d8e8a.crl
X509v3 Authority Key Identifier:
keyid:26:B9:EA:BA:65:7A:DB:E3:64:D8:3F:BF:D2:FA:77:F6:5B:10:0C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.59.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:b7:1f:37:c4:ed:b3:6c:3b:d2:6a:82:d1:7e:8b:10:30:22:
a0:17:78:af:f7:e7:06:f7:9e:7d:d6:51:56:8c:19:28:f9:5f:
92:b7:cf:21:8d:55:94:b9:e7:ed:7c:ae:15:54:8f:68:8f:ee:
43:be:14:cc:a5:69:93:34:85:da:df:3c:bf:6d:57:15:b2:f5:
16:6a:09:ff:5b:2e:6c:a3:e7:ca:38:ce:4a:30:f7:7d:47:f0:
c0:9b:a1:2b:ff:36:ee:74:20:df:b5:64:25:a1:67:a2:b3:0a:
60:07:3b:d7:2b:83:80:e0:9d:b5:56:99:3a:70:ba:79:4c:59:
d6:d5:82:c5:b4:d8:dc:fc:c1:df:3f:0c:bc:5a:cb:81:e7:54:
00:2d:0e:a7:fe:76:d9:de:32:e3:c6:e5:19:e6:08:36:c8:44:
84:f4:f8:2d:60:d7:39:8a:d3:09:40:4e:cd:a3:fc:78:4b:5e:
f1:1a:6b:d0:5c:c7:03:d2:35:0f:a6:b1:1c:d2:ef:ae:05:3f:
2f:47:69:90:c9:3c:62:d7:cb:02:11:c4:d5:56:53:f5:f9:17:
25:26:d4:af:ea:06:24:00:87:d1:53:3e:f5:a5:25:29:73:16:
96:ad:4b:33:db:21:3b:c4:ab:be:bc:40:10:d3:94:3c:89:f7:
ec:a0:8e:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdevkCp2uOqyLscAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc2MTJiNDktOTFhNC00MmQyLTgzNTItMTY5NzdiNWQ4
ZThhMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk
N2Y1MTc0MmMtOTQ2Mi00MzVkLWIyYmMtNzY0ZDAxYjI0YjkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQJk1lDMd0fJgRPj2FSx6p74Fa5wvqostXJ8
drQzXvnkb5xYOX0N8C2sTxYVriHXSMVxBka4+jHYFDRsBFhOYIlynoE2uJSJxRKX
25NvLFqjp6PNhstT9V0F16ZlPEHe4caYOXuV4PcWvihwIHsFfgwvdqGs9P6l7nLd
kVtSxjAYbF6PSjt/tU53gR4eUzFx69Ja7GUyz/ZX0yqpUCwI64qK4bauO+BwtiQo
VWSLj+Ft+QJO/0SdK40EpJkpyZMnb294MQB0mCSpJPV8mwLFpg+Nnn08vrSqIVUx
6NSRZAZUGpNqGCqk3EK17K0FTcH+wFamW8nHQcdKWqiNud9xywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD8aQjFvyOOytglPmoxO66CCo7XYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzYx
MmI0OS05MWE0LTQyZDItODM1Mi0xNjk3N2I1ZDhlOGEvYWI1NDBmMDgtNDBjYS0z
NjJlLWE3MjMtZjNiZjBkNTNjYWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc2MTJiNDktOTFhNC00MmQyLTgz
NTItMTY5NzdiNWQ4ZThhLzY3NjEyYjQ5LTkxYTQtNDJkMi04MzUyLTE2OTc3YjVk
OGU4YS5jcmwwHwYDVR0jBBgwFoAUJrnqumV62+Nk2D+/0vp39lsQDGkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzYxMmI0OS05MWE0LTQyZDItODM1Mi0xNjk3
N2I1ZDhlOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjsCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABe3HzfE7bNsO9JqgtF+ixAwIqAXeK/35wb3nn3WUVaMGSj5X5K3zyGN
VZS55+18rhVUj2iP7kO+FMylaZM0hdrfPL9tVxWy9RZqCf9bLmyj58o4zkow931H
8MCboSv/Nu50IN+1ZCWhZ6KzCmAHO9crg4DgnbVWmTpwunlMWdbVgsW02Nz8wd8/
DLxay4HnVAAtDqf+dtneMuPG5RnmCDbIRIT0+C1g1zmK0wlATs2j/HhLXvEaa9Bc
xwPSNQ+msRzS764FPy9HaZDJPGLXywIRxNVWU/X5FyUm1K/qBiQAh9FTPvWlJSlz
FpatSzPbITvEq768QBDTlDyJ9+ygjgg=
-----END CERTIFICATE-----
Generated at Mon Apr 7 04:04:11 2025 by rpki-client