Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a8355b3e-327c-45f5-af94-a965911c3103/a81bd514-e259-39d2-b605-b62b11e5b68d.roa
File: a81bd514-e259-39d2-b605-b62b11e5b68d.roa (raw, json)
Hash identifier: wuMJncGn6/9TBt+jsuMFetKChkoFxTbMEiqowLwbvMc=
Subject key identifier: 95:F8:9E:17:B9:AB:6C:18:50:05:40:4D:F7:93:9C:11:A5:9C:03:71
Certificate issuer: /CN=a8355b3e-327c-45f5-af94-a965911c3103
Certificate serial: 010D0C9F4328584882808D4DA7400753585252C0
Authority key identifier: DB:E9:94:34:6A:1B:51:8E:19:03:BE:F9:AE:F7:49:57:AD:82:8F:55
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a8355b3e-327c-45f5-af94-a965911c3103.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a8355b3e-327c-45f5-af94-a965911c3103/a81bd514-e259-39d2-b605-b62b11e5b68d.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 398551
IP address blocks: 199.181.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:8d:4d:a7:40:07:53:58:52:52:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8355b3e-327c-45f5-af94-a965911c3103
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=386517eb-dc20-4cd1-b579-c30a83d01694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cb:79:ee:17:b6:96:51:0a:a6:67:3e:45:b4:
74:91:8c:4a:9e:26:ac:6b:1e:aa:0c:9b:d8:df:67:
04:e3:b9:b6:a6:4d:df:aa:1f:75:a3:07:fd:bf:db:
b0:bc:51:7b:1c:93:bc:f9:9e:9a:f8:2c:28:7a:e7:
80:85:95:a0:e6:70:78:a7:2f:c5:7b:88:ef:63:99:
8e:95:de:5b:ce:ec:88:e2:37:47:08:80:77:fc:12:
a0:98:a4:9d:bf:1f:fe:2a:dc:24:f7:cd:9f:12:a2:
f4:2e:85:7e:aa:3f:33:46:88:11:58:fe:46:25:ed:
b3:61:7a:a7:3e:d2:c0:56:28:82:b5:0e:ed:17:e5:
af:f1:26:70:29:24:8f:f9:d4:0b:a7:4e:54:e6:48:
a1:d2:5c:f2:03:b5:2b:b4:8e:d1:73:b5:f9:3f:b4:
d6:cb:8a:85:b5:37:a9:22:f3:59:50:4c:94:27:60:
af:87:23:b6:ed:be:be:20:1f:ea:b3:8c:79:29:7a:
c5:71:4f:03:e0:8f:a0:05:57:9b:4d:2c:4d:00:27:
0f:47:24:c2:da:ac:e7:fd:db:ba:01:eb:d8:f3:82:
12:af:98:08:94:dd:5f:89:7e:cb:fd:eb:e3:2e:a5:
24:a3:23:f4:45:11:9a:a2:8b:11:2f:ed:c3:67:8a:
6a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F8:9E:17:B9:AB:6C:18:50:05:40:4D:F7:93:9C:11:A5:9C:03:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a8355b3e-327c-45f5-af94-a965911c3103/a81bd514-e259-39d2-b605-b62b11e5b68d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a8355b3e-327c-45f5-af94-a965911c3103/a8355b3e-327c-45f5-af94-a965911c3103.crl
X509v3 Authority Key Identifier:
keyid:DB:E9:94:34:6A:1B:51:8E:19:03:BE:F9:AE:F7:49:57:AD:82:8F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a8355b3e-327c-45f5-af94-a965911c3103.cer
sbgp-ipAddrBlock: critical
IPv4:
199.181.82.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:2e:b3:a1:e5:48:df:09:0b:37:39:cf:9b:e6:3d:8b:76:ef:
b0:6e:11:1e:ae:ab:66:4d:ac:d1:cf:5e:2b:0a:13:e6:b9:15:
eb:89:21:e0:02:09:ea:ba:d8:d3:61:58:5c:82:d7:e6:32:30:
b1:8e:fc:35:00:d3:24:97:fe:da:68:34:f7:ff:0d:ad:0a:28:
e0:58:be:ac:68:51:c4:ca:52:1f:8a:b0:ff:97:c9:18:a3:5f:
f2:82:d5:7f:c0:09:d1:7f:f7:bd:63:28:f2:6c:8d:28:0f:e5:
78:2a:3f:22:ce:e0:1e:1b:1f:40:94:12:7e:cc:ce:7f:b3:80:
77:c9:10:36:07:25:48:08:c3:84:15:6b:ea:a5:d7:fc:9d:ed:
a8:44:3b:c6:88:b0:a2:d4:83:42:1e:4d:1b:c2:ca:92:c8:36:
0c:91:ea:d5:e9:fb:4d:8c:3d:4e:8d:1e:5d:2b:22:39:d8:4d:
6f:b2:cb:f5:52:a5:ba:d2:83:42:f0:fb:80:a4:6c:b7:89:9c:
56:a1:2d:83:8e:86:be:a5:9f:b7:3e:32:a3:b1:7d:68:fe:a3:
6f:7b:36:a8:84:df:e7:d3:21:11:a0:24:36:2e:12:0c:23:05:
48:0e:00:fa:a8:48:50:38:59:37:be:52:70:0a:f5:55:de:a5:
7c:80:08:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiCgI1Np0AHU1hSUsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTgzNTViM2UtMzI3Yy00NWY1LWFmOTQtYTk2NTkxMWMz
MTAzMB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk
Mzg2NTE3ZWItZGMyMC00Y2QxLWI1NzktYzMwYTgzZDAxNjk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqct57he2llEKpmc+RbR0kYxKniasax6qDJvY
32cE47m2pk3fqh91owf9v9uwvFF7HJO8+Z6a+CwoeueAhZWg5nB4py/Fe4jvY5mO
ld5bzuyI4jdHCIB3/BKgmKSdvx/+Ktwk982fEqL0LoV+qj8zRogRWP5GJe2zYXqn
PtLAViiCtQ7tF+Wv8SZwKSSP+dQLp05U5kih0lzyA7UrtI7Rc7X5P7TWy4qFtTep
IvNZUEyUJ2CvhyO27b6+IB/qs4x5KXrFcU8D4I+gBVebTSxNACcPRyTC2qzn/du6
AevY84ISr5gIlN1fiX7L/evjLqUkoyP0RRGaoosRL+3DZ4pqawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJX4nhe5q2wYUAVATfeTnBGlnANxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hODM1
NWIzZS0zMjdjLTQ1ZjUtYWY5NC1hOTY1OTExYzMxMDMvYTgxYmQ1MTQtZTI1OS0z
OWQyLWI2MDUtYjYyYjExZTViNjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTgzNTViM2UtMzI3Yy00NWY1LWFm
OTQtYTk2NTkxMWMzMTAzL2E4MzU1YjNlLTMyN2MtNDVmNS1hZjk0LWE5NjU5MTFj
MzEwMy5jcmwwHwYDVR0jBBgwFoAU2+mUNGobUY4ZA775rvdJV62Cj1UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hODM1NWIzZS0zMjdjLTQ1ZjUtYWY5NC1hOTY1
OTExYzMxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7VSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABMus6HlSN8JCzc5z5vmPYt277BuER6uq2ZNrNHPXisKE+a5FeuJIeAC
Ceq62NNhWFyC1+YyMLGO/DUA0ySX/tpoNPf/Da0KKOBYvqxoUcTKUh+KsP+XyRij
X/KC1X/ACdF/971jKPJsjSgP5XgqPyLO4B4bH0CUEn7Mzn+zgHfJEDYHJUgIw4QV
a+ql1/yd7ahEO8aIsKLUg0IeTRvCypLINgyR6tXp+02MPU6NHl0rIjnYTW+yy/VS
pbrSg0Lw+4CkbLeJnFahLYOOhr6ln7c+MqOxfWj+o297NqiE3+fTIRGgJDYuEgwj
BUgOAPqoSFA4WTe+UnAK9VXepXyACA4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:34:32 2025 by rpki-client