Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/911ac148-d37b-3af8-bff5-fa87c92f0374.roa
File: 911ac148-d37b-3af8-bff5-fa87c92f0374.roa (raw, json)
Hash identifier: R3w8aUO5ygudw5ShXNhueJFjwmooYXys7ONiRdvS/h4=
Subject key identifier: 39:03:AF:27:CF:C5:BC:86:0C:FB:27:67:F3:30:47:8E:B7:99:91:6A
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B6071DC17F20CA9935A7E0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/911ac148-d37b-3af8-bff5-fa87c92f0374.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 40895
IP address blocks: 199.243.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b6:07:1d:c1:7f:20:ca:99:35:a7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=f46da3f9-8f87-42e5-89ae-6b4bb9e34c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4e:55:c9:fa:d0:9f:06:6c:a8:bc:b0:05:da:
0a:d3:4e:31:76:fc:9c:e8:bf:48:22:db:03:b6:3a:
49:8d:69:dc:11:ac:28:b6:80:ae:2c:85:43:81:84:
09:65:42:d1:13:04:ee:2c:bb:69:5b:fd:6e:1e:72:
20:a0:01:e2:14:3b:80:f6:45:27:40:e2:87:46:62:
c6:b0:48:0d:52:02:26:ee:39:52:3b:5d:8c:e0:43:
81:a3:f7:8d:f5:d3:aa:c6:c9:11:1d:9b:5c:e0:e9:
c3:ff:e9:7f:79:db:d9:e6:2e:3c:f2:8c:bd:f2:ff:
56:c0:71:b3:e2:63:4b:36:be:62:51:63:b8:02:84:
0c:1a:ba:5f:48:f0:b0:77:37:85:73:2a:c1:13:c8:
0e:52:d1:5b:b1:47:a0:c5:2f:25:22:d8:e0:f0:4a:
a1:68:88:54:36:b0:a3:93:bd:af:a6:9a:b1:b8:e0:
fa:2f:ed:1c:47:b3:e8:b5:1b:c3:9f:86:08:b9:a3:
13:b2:be:b8:99:66:e8:b9:e3:d2:f5:6f:bd:42:0c:
ad:30:5c:35:49:eb:8c:c9:0e:56:de:8e:5c:60:b1:
5c:ef:b8:ee:6f:6e:42:f0:76:3f:2b:8e:92:d2:79:
cc:0c:06:17:32:76:98:d8:5a:52:27:85:31:da:cd:
a2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:03:AF:27:CF:C5:BC:86:0C:FB:27:67:F3:30:47:8E:B7:99:91:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/911ac148-d37b-3af8-bff5-fa87c92f0374.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
199.243.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:20:dc:10:68:24:87:74:fb:aa:16:0b:a8:3e:8f:ff:a8:cc:
a6:b4:2f:9e:d2:35:1f:af:a7:0b:b9:b4:c6:eb:09:4d:19:e2:
c9:19:b0:36:71:6e:20:cd:12:b2:f7:86:89:ac:e4:07:dc:1f:
0c:60:0d:5b:2b:66:d4:7f:dd:a2:34:56:d2:92:ba:a1:99:70:
13:4c:7e:99:80:a3:2d:a5:02:4b:47:02:92:83:37:a1:80:ac:
8a:18:cd:55:b0:3e:93:d5:1f:65:0e:a6:93:fd:61:c9:6a:9d:
bd:01:55:e5:fc:03:8d:70:8b:8c:44:32:eb:a5:9e:3d:f0:f4:
6f:13:49:d1:61:5c:e0:b8:f3:14:c6:3d:74:59:bf:23:64:23:
ed:32:8c:92:a9:8f:21:60:af:c8:9f:fd:17:fb:e9:6b:4a:43:
8d:7b:8d:0f:eb:f5:31:ff:a3:dd:17:10:c0:fc:43:ae:8c:62:
da:aa:98:e9:f4:da:cb:95:53:05:3b:1a:6e:42:ab:f1:68:0e:
c4:84:3f:71:c3:ea:e0:4d:5f:02:d3:bd:de:18:61:6b:a8:41:
0b:f8:37:01:fe:29:af:b5:9e:46:93:9d:26:84:e4:7d:25:20:
18:15:5a:9a:20:17:6d:8f:b7:b4:cb:a7:37:7f:c5:f3:2a:77:
e5:9a:62:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgmtgcdwX8gypk1p+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MTIwODEyMDAwMFoXDTI1MDMxMDA0MDAwMFowLzEtMCsGA1UEAxMk
ZjQ2ZGEzZjktOGY4Ny00MmU1LTg5YWUtNmI0YmI5ZTM0YzBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAik5VyfrQnwZsqLywBdoK004xdvyc6L9IItsD
tjpJjWncEawotoCuLIVDgYQJZULREwTuLLtpW/1uHnIgoAHiFDuA9kUnQOKHRmLG
sEgNUgIm7jlSO12M4EOBo/eN9dOqxskRHZtc4OnD/+l/edvZ5i488oy98v9WwHGz
4mNLNr5iUWO4AoQMGrpfSPCwdzeFcyrBE8gOUtFbsUegxS8lItjg8EqhaIhUNrCj
k72vppqxuOD6L+0cR7PotRvDn4YIuaMTsr64mWbouePS9W+9QgytMFw1SeuMyQ5W
3o5cYLFc77jub25C8HY/K46S0nnMDAYXMnaY2FpSJ4Ux2s2inQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDkDryfPxbyGDPsnZ/MwR463mZFqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvOTExYWMxNDgtZDM3Yi0z
YWY4LWJmZjUtZmE4N2M5MmYwMzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/OZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFkg3BBoJId0+6oWC6g+j/+ozKa0L57SNR+vpwu5tMbrCU0Z4skZsDZx
biDNErL3homs5AfcHwxgDVsrZtR/3aI0VtKSuqGZcBNMfpmAoy2lAktHApKDN6GA
rIoYzVWwPpPVH2UOppP9Yclqnb0BVeX8A41wi4xEMuulnj3w9G8TSdFhXOC48xTG
PXRZvyNkI+0yjJKpjyFgr8if/Rf76WtKQ417jQ/r9TH/o90XEMD8Q66MYtqqmOn0
2suVUwU7Gm5Cq/FoDsSEP3HD6uBNXwLTvd4YYWuoQQv4NwH+Ka+1nkaTnSaE5H0l
IBgVWpogF22Pt7TLpzd/xfMqd+WaYvk=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:26:10 2025 by rpki-client