Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4bcc62ff-5d5f-3625-bdfa-83e9f11f38ee.roa
File: 4bcc62ff-5d5f-3625-bdfa-83e9f11f38ee.roa (raw, json)
Hash identifier: 0npoCcOyeIdMzuaegTfGEK5Ab0QJ4TilhOb4/kraAUs=
Subject key identifier: 86:CD:AD:26:A3:7B:30:2D:87:DF:61:1B:07:D3:57:D9:50:19:49:48
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584921343C792664B7267A66F8E0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4bcc62ff-5d5f-3625-bdfa-83e9f11f38ee.roa
Signing time: Sun 09 Mar 2025 10:20:45 +0000
ROA not before: Sun 09 Mar 2025 10:20:45 +0000
ROA not after: Sat 07 Jun 2025 10:20:45 +0000
asID: 395273
IP address blocks: 199.243.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:3c:79:26:64:b7:26:7a:66:f8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:45 2025 GMT
Not After : Jun 7 10:20:45 2025 GMT
Subject: CN=ccfe4fdd-a76a-41f1-a6d5-a197e9c01363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:02:25:00:ca:d7:4b:b2:e5:c5:7a:0d:4e:a2:
85:f5:c0:f9:6d:1e:50:2c:dc:f7:3d:fe:f1:c9:d9:
38:3a:99:af:50:34:2f:b0:c9:d5:ad:c4:af:03:22:
cf:a2:a2:b7:59:df:8c:01:b5:1f:0a:89:b9:1d:92:
58:25:3b:d3:79:97:0c:52:e2:78:dc:b1:19:3b:65:
7f:b7:cc:38:e1:fd:c9:6f:7d:75:6e:02:ab:62:fa:
97:48:24:aa:d3:08:ef:58:21:0d:d0:50:1e:71:a7:
c3:ae:91:4b:92:e6:dc:78:46:4d:db:af:7b:32:c1:
23:20:f8:1e:03:84:ff:ab:ff:7b:13:bf:d3:68:06:
fb:9e:06:a2:cd:73:8c:5b:63:d3:9d:65:e6:7a:0e:
57:40:49:02:43:29:55:c1:43:2c:3c:93:e4:84:0e:
c8:b6:c0:12:37:c1:fd:7e:a3:98:34:13:cf:38:3c:
c6:fe:c1:27:3d:ab:31:9d:e2:78:d1:00:e1:20:39:
c7:1b:e5:ea:cd:27:87:d3:15:b2:2e:cf:1a:9b:95:
f1:90:a8:06:b9:a2:07:c3:88:58:9b:39:9c:a5:c9:
80:4c:2a:c6:bb:03:4a:93:34:66:32:20:98:a1:6e:
11:67:cf:30:de:41:c7:1e:5c:c4:f8:80:7a:08:58:
3c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CD:AD:26:A3:7B:30:2D:87:DF:61:1B:07:D3:57:D9:50:19:49:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4bcc62ff-5d5f-3625-bdfa-83e9f11f38ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
199.243.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:f3:03:48:b7:6b:e3:d2:d9:c9:b5:a4:cd:4e:15:b8:3d:ba:
eb:59:ab:27:c0:f1:d1:52:49:e6:79:12:8b:95:f9:77:c0:d8:
3c:82:3a:b9:36:c0:47:84:bc:69:73:fa:87:ae:df:32:d7:a4:
70:7f:fb:16:4a:70:ee:14:41:06:e9:c5:22:56:b7:91:da:10:
68:b3:31:ab:10:d8:18:18:35:3d:5c:4f:bc:06:2d:b1:b2:1a:
76:ce:d9:ca:2e:b3:20:2d:4f:61:67:0e:e0:3b:0c:99:a0:db:
a1:98:c9:79:b8:22:33:d7:92:b9:27:29:3c:3e:16:7b:7f:bb:
97:03:3d:dd:f3:0f:c5:77:b5:73:6d:7f:8d:25:6c:c7:1e:82:
2c:da:42:6a:ab:73:c6:79:12:a7:c8:36:90:1d:ff:73:47:69:
73:85:a3:4e:7f:15:69:f1:d5:2d:7a:a1:fd:5a:90:48:e7:e8:
92:ec:99:e8:87:a1:ae:fa:8f:17:2c:99:79:c8:02:89:4c:73:
aa:f4:87:70:ce:2b:e1:57:d6:de:af:76:5b:4f:37:57:fe:88:
fc:6a:c5:98:03:74:2f:59:2d:89:d2:fd:7c:59:d1:b2:f5:0d:
5d:5b:4d:05:ea:93:97:36:79:9f:fe:9b:fa:c2:37:4e:44:de:
73:e9:07:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhNDx5JmS3Jnpm+OAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDMwOTEwMjA0NVoXDTI1MDYwNzEwMjA0NVowLzEtMCsGA1UEAxMk
Y2NmZTRmZGQtYTc2YS00MWYxLWE2ZDUtYTE5N2U5YzAxMzYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8QIlAMrXS7LlxXoNTqKF9cD5bR5QLNz3Pf7x
ydk4OpmvUDQvsMnVrcSvAyLPoqK3Wd+MAbUfCom5HZJYJTvTeZcMUuJ43LEZO2V/
t8w44f3Jb311bgKrYvqXSCSq0wjvWCEN0FAecafDrpFLkubceEZN2697MsEjIPge
A4T/q/97E7/TaAb7ngaizXOMW2PTnWXmeg5XQEkCQylVwUMsPJPkhA7ItsASN8H9
fqOYNBPPODzG/sEnPasxneJ40QDhIDnHG+XqzSeH0xWyLs8am5XxkKgGuaIHw4hY
mzmcpcmATCrGuwNKkzRmMiCYoW4RZ88w3kHHHlzE+IB6CFg8IwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIbNrSajezAth99hGwfTV9lQGUlIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNGJjYzYyZmYtNWQ1Zi0z
NjI1LWJkZmEtODNlOWYxMWYzOGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/PvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIbzA0i3a+PS2cm1pM1OFbg9uutZqyfA8dFSSeZ5EouV+XfA2DyCOrk2
wEeEvGlz+oeu3zLXpHB/+xZKcO4UQQbpxSJWt5HaEGizMasQ2BgYNT1cT7wGLbGy
GnbO2cousyAtT2FnDuA7DJmg26GYyXm4IjPXkrknKTw+Fnt/u5cDPd3zD8V3tXNt
f40lbMcegizaQmqrc8Z5EqfINpAd/3NHaXOFo05/FWnx1S16of1akEjn6JLsmeiH
oa76jxcsmXnIAolMc6r0h3DOK+FX1t6vdltPN1f+iPxqxZgDdC9ZLYnS/XxZ0bL1
DV1bTQXqk5c2eZ/+m/rCN05E3nPpB6w=
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:34 2025 by rpki-client