Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a71bcbf8-fc85-4827-8b11-4692b789a8a1/a23a4be6-1045-3d05-b085-09bc3e649a1e.roa
File: a23a4be6-1045-3d05-b085-09bc3e649a1e.roa (raw, json)
Hash identifier: HJtZIyE1tjllGz5uySYtz+u2GlEZ6p0OrGEKo3ugM2g=
Subject key identifier: 51:43:16:EA:67:38:99:85:14:C9:33:A1:38:07:28:D9:BB:B0:1A:59
Certificate issuer: /CN=a71bcbf8-fc85-4827-8b11-4692b789a8a1
Certificate serial: 010D0C9F4328583E1B7791A18CAE5FDD7151FD00
Authority key identifier: 88:8D:64:50:E1:0F:ED:65:C3:FA:A5:EF:E6:7A:67:11:FE:5C:EE:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a71bcbf8-fc85-4827-8b11-4692b789a8a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a71bcbf8-fc85-4827-8b11-4692b789a8a1/a23a4be6-1045-3d05-b085-09bc3e649a1e.roa
Signing time: Thu 02 Jun 2022 13:07:51 +0000
ROA not before: Thu 02 Jun 2022 13:07:51 +0000
ROA not after: Wed 04 Sep 2024 04:00:00 +0000
asID: 21817
IP address blocks: 198.161.144.0/22 maxlen: 24
198.180.225.0/24 maxlen: 24
199.7.192.0/21 maxlen: 24
199.48.56.0/22 maxlen: 24
199.200.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1b:77:91:a1:8c:ae:5f:dd:71:51:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71bcbf8-fc85-4827-8b11-4692b789a8a1
Validity
Not Before: Jun 2 13:07:51 2022 GMT
Not After : Sep 4 04:00:00 2024 GMT
Subject: CN=eb05a29d-6adf-4b26-a58a-24f0d7e7c3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4b:ec:e3:a5:da:62:be:3b:ab:d1:a9:b6:a2:
f8:88:ee:d0:a6:0d:31:d5:d2:15:9e:48:e2:4d:12:
f8:d9:03:3b:c2:8c:18:84:63:d4:aa:c3:c5:1a:1f:
63:87:66:12:ff:99:0a:43:03:fc:2e:30:69:1f:8a:
b2:17:94:6f:d3:51:55:d9:17:80:4f:af:27:51:3f:
70:3a:a0:4e:03:ac:df:b3:9d:59:3c:5e:f8:85:e1:
8f:2c:89:90:33:8f:aa:5a:4c:4c:19:66:94:cd:8d:
3c:01:09:7d:87:3d:b8:5f:5d:d5:f8:ef:49:92:86:
96:1f:09:0f:1a:1d:be:be:d7:95:c3:12:c9:05:85:
dd:9f:4a:4f:d5:3b:ba:88:d4:63:7c:8b:71:60:80:
67:4a:a8:62:d4:a9:0c:b3:6f:9b:04:ee:c3:e1:6d:
6c:34:a8:1e:24:06:30:5d:23:5c:2b:e8:5a:9d:61:
4c:95:fd:4b:d2:2c:b8:ba:d0:13:60:64:1c:d7:c6:
47:7c:5a:f3:26:6c:f1:35:71:26:ca:47:8a:b8:e9:
73:0e:47:c3:1c:fd:36:ba:b1:9d:51:2c:21:53:90:
43:57:5e:67:3c:30:0c:15:fb:23:f4:23:80:6b:74:
2e:c3:c9:bd:d1:cf:6c:3c:b9:bd:59:ac:37:da:ff:
c7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:43:16:EA:67:38:99:85:14:C9:33:A1:38:07:28:D9:BB:B0:1A:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a71bcbf8-fc85-4827-8b11-4692b789a8a1/a23a4be6-1045-3d05-b085-09bc3e649a1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a71bcbf8-fc85-4827-8b11-4692b789a8a1/a71bcbf8-fc85-4827-8b11-4692b789a8a1.crl
X509v3 Authority Key Identifier:
keyid:88:8D:64:50:E1:0F:ED:65:C3:FA:A5:EF:E6:7A:67:11:FE:5C:EE:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a71bcbf8-fc85-4827-8b11-4692b789a8a1.cer
sbgp-ipAddrBlock: critical
IPv4:
198.161.144.0/22
198.180.225.0/24
199.7.192.0/21
199.48.56.0/22
199.200.112.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:40:bf:a8:29:20:ac:f6:b6:97:88:14:4e:dd:11:b9:91:7a:
0a:11:4d:2d:b5:68:a2:a4:b4:5e:9e:62:19:4e:9e:64:6e:1e:
0c:ac:b3:c2:b1:e8:c3:e3:bb:f5:41:11:03:9f:8c:e3:cd:43:
2f:f0:10:b9:ef:30:8f:92:75:72:cd:4b:09:ec:2b:a5:52:7e:
3b:1e:9f:db:ba:bd:58:1c:1b:c2:71:3f:0d:12:02:55:01:68:
d0:78:e2:22:c3:52:66:b4:0d:5e:0a:da:85:e4:e8:db:43:1e:
5a:b6:60:76:44:9c:48:a0:21:6a:61:f3:6a:05:77:13:63:52:
29:de:0b:4e:5b:fc:72:c0:04:fe:dc:a2:85:36:67:6e:d1:fb:
07:16:bb:3f:91:d4:42:63:13:6e:7f:a9:08:e1:a7:7e:6e:4a:
20:db:2e:f0:02:e0:c5:de:ed:c3:4a:33:ae:8f:70:ff:86:b2:
5e:4f:9a:8d:bf:cb:ff:9f:cf:8a:b7:ba:2d:f7:30:f4:28:84:
ba:12:cc:f1:d0:b8:75:6f:f4:68:71:b7:93:bc:c1:25:11:6a:
63:64:58:7c:c1:4e:46:dd:2a:5d:b8:c1:d3:c1:aa:ba:7b:90:
29:e5:30:30:be:6f:7b:4e:d6:b4:86:c9:b4:5e:82:82:00:a4:
bc:07:19:5b
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWD4bd5GhjK5f3XFR/QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTcxYmNiZjgtZmM4NS00ODI3LThiMTEtNDY5MmI3ODlh
OGExMB4XDTIyMDYwMjEzMDc1MVoXDTI0MDkwNDA0MDAwMFowLzEtMCsGA1UEAxMk
ZWIwNWEyOWQtNmFkZi00YjI2LWE1OGEtMjRmMGQ3ZTdjM2NhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Uvs46XaYr47q9GptqL4iO7Qpg0x1dIVnkji
TRL42QM7wowYhGPUqsPFGh9jh2YS/5kKQwP8LjBpH4qyF5Rv01FV2ReAT68nUT9w
OqBOA6zfs51ZPF74heGPLImQM4+qWkxMGWaUzY08AQl9hz24X13V+O9JkoaWHwkP
Gh2+vteVwxLJBYXdn0pP1Tu6iNRjfItxYIBnSqhi1KkMs2+bBO7D4W1sNKgeJAYw
XSNcK+hanWFMlf1L0iy4utATYGQc18ZHfFrzJmzxNXEmykeKuOlzDkfDHP02urGd
USwhU5BDV15nPDAMFfsj9COAa3Quw8m90c9sPLm9Waw32v/HWQIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFFFDFupnOJmFFMkzoTgHKNm7sBpZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNzFi
Y2JmOC1mYzg1LTQ4MjctOGIxMS00NjkyYjc4OWE4YTEvYTIzYTRiZTYtMTA0NS0z
ZDA1LWIwODUtMDliYzNlNjQ5YTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTcxYmNiZjgtZmM4NS00ODI3LThi
MTEtNDY5MmI3ODlhOGExL2E3MWJjYmY4LWZjODUtNDgyNy04YjExLTQ2OTJiNzg5
YThhMS5jcmwwHwYDVR0jBBgwFoAUiI1kUOEP7WXD+qXv5npnEf5c7gAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNzFiY2JmOC1mYzg1LTQ4MjctOGIxMS00Njky
Yjc4OWE4YTEuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCxqGQAwQA
xrThAwQDxwfAAwQCxzA4AwQCx8hwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKlAv6gpIKz2tpeIFE7dEbmR
egoRTS21aKKktF6eYhlOnmRuHgyss8Kx6MPju/VBEQOfjOPNQy/wELnvMI+SdXLN
SwnsK6VSfjsen9u6vVgcG8JxPw0SAlUBaNB44iLDUma0DV4K2oXk6NtDHlq2YHZE
nEigIWph82oFdxNjUineC05b/HLABP7cooU2Z27R+wcWuz+R1EJjE25/qQjhp35u
SiDbLvAC4MXe7cNKM66PcP+Gsl5Pmo2/y/+fz4q3ui33MPQohLoSzPHQuHVv9Ghx
t5O8wSURamNkWHzBTkbdKl24wdPBqrp7kCnlMDC+b3tO1rSGybRegoIApLwHGVs=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:26 2023 by rpki-client on console-ams.rpki-client.org