Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086/3f3eb481-0305-31c7-9a7c-52b014c01721.roa
File: 3f3eb481-0305-31c7-9a7c-52b014c01721.roa (raw, json)
Hash identifier: 8TH2RNxseDvLYXh8/PlAh+UfTsq74NZ6IS6g5baY2RY=
Subject key identifier: 52:22:5D:89:9E:54:7D:C8:FC:59:07:58:FA:E0:32:A1:C3:02:96:8F
Certificate issuer: /CN=bcebc8fa-2923-43fa-ba14-964e68a49086
Certificate serial: 010D0C9F4328584950F9637CF105EC223A2D4A80
Authority key identifier: 4C:4A:30:C3:52:5B:42:48:A8:E2:9F:0E:3D:F8:23:9A:C6:A9:C5:5D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086/3f3eb481-0305-31c7-9a7c-52b014c01721.roa
Signing time: Wed 26 Mar 2025 13:00:53 +0000
ROA not before: Wed 26 Mar 2025 13:00:53 +0000
ROA not after: Tue 24 Jun 2025 13:00:53 +0000
asID: 15026
IP address blocks: 198.160.96.0/19 maxlen: 24
198.160.96.0/20 maxlen: 20
198.160.112.0/21 maxlen: 21
198.160.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:50:f9:63:7c:f1:05:ec:22:3a:2d:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcebc8fa-2923-43fa-ba14-964e68a49086
Validity
Not Before: Mar 26 13:00:53 2025 GMT
Not After : Jun 24 13:00:53 2025 GMT
Subject: CN=2db3e8a0-9f41-4ddb-ac3d-f539c5abe283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bd:41:f2:ef:1f:40:b5:ae:7f:9c:39:6e:23:
c1:ce:6d:9a:50:81:55:b7:3e:93:df:69:28:6a:76:
6b:07:09:93:f4:45:f6:87:68:22:55:d5:3b:fb:24:
85:bc:be:84:a3:76:ef:4d:47:c9:18:7a:c3:02:58:
4b:95:bc:ae:54:45:28:a3:16:69:51:54:31:bc:5b:
3f:99:20:dc:cf:3d:ac:2a:28:8c:0d:05:b3:da:a3:
04:d1:cb:6a:1f:b4:53:0d:87:d1:53:2e:dc:77:52:
ed:a7:6b:9c:1e:e9:6d:b8:56:cf:47:87:a1:1d:04:
83:d3:19:bc:e5:86:ad:b5:18:c0:8a:2d:b9:b0:3e:
66:c8:ed:ca:d8:bc:95:ce:f0:50:f9:18:fb:a0:f2:
e9:60:7d:4c:1c:c1:03:3b:b7:b1:d8:75:97:fd:ef:
33:b7:ad:f5:7b:82:a6:01:41:65:bf:93:07:d1:86:
bd:7d:36:b1:25:51:d1:41:c4:81:d8:21:63:f6:b0:
6d:ed:7f:1a:f4:0a:fb:fc:da:3e:65:28:8d:05:01:
2b:e3:ed:85:74:53:8a:05:cf:75:eb:51:e2:0d:ac:
52:6a:6b:73:9b:5d:7e:34:a5:53:c7:fb:ff:fe:a8:
38:54:d4:0b:6e:35:c3:c5:71:ed:4f:61:d6:dd:3e:
29:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:22:5D:89:9E:54:7D:C8:FC:59:07:58:FA:E0:32:A1:C3:02:96:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086/3f3eb481-0305-31c7-9a7c-52b014c01721.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086/bcebc8fa-2923-43fa-ba14-964e68a49086.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:30:C3:52:5B:42:48:A8:E2:9F:0E:3D:F8:23:9A:C6:A9:C5:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086.cer
sbgp-ipAddrBlock: critical
IPv4:
198.160.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:6e:86:e1:6c:71:51:46:09:30:22:96:d4:49:c2:48:8c:c3:
f1:26:d9:98:7d:df:42:db:ee:ab:b3:ab:ff:64:45:ef:c6:d3:
78:01:6c:90:b6:92:a3:28:f7:ed:44:dc:05:ec:c8:1e:cb:7d:
8e:27:ba:92:3e:34:5e:64:70:cf:5e:30:30:0d:94:c9:f9:c6:
91:ff:3e:e0:0d:e7:61:f2:a2:14:f7:3b:49:b0:91:14:b2:8e:
47:88:e7:d5:cf:56:3f:0c:04:90:d1:09:77:3a:2c:c2:d7:de:
f6:c8:c1:4d:17:e1:99:bd:6f:0e:fb:39:f2:4d:b1:d9:28:cc:
7c:e5:5e:49:e0:5d:2b:d4:05:3a:6b:5a:64:1e:6b:93:3b:f2:
7d:5b:65:86:43:0b:03:11:21:cb:7f:7a:a8:08:5f:04:d5:00:
f2:51:e2:d2:7d:52:2a:4d:a0:ab:45:14:a3:44:26:ca:78:23:
98:f8:dd:ed:76:e9:42:5a:13:cc:63:75:66:50:ff:57:c6:97:
20:71:4e:f1:22:1a:35:d9:cb:dd:11:63:7e:ed:9e:f1:62:33:
ee:2b:3a:72:03:20:d2:ee:9c:30:33:e7:57:bf:32:64:a9:06:
93:cd:50:7a:39:f5:36:62:89:ec:8d:0c:32:2f:2c:52:95:a0:
9e:4a:e4:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElQ+WN88QXsIjotSoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNlYmM4ZmEtMjkyMy00M2ZhLWJhMTQtOTY0ZTY4YTQ5
MDg2MB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk
MmRiM2U4YTAtOWY0MS00ZGRiLWFjM2QtZjUzOWM1YWJlMjgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh71B8u8fQLWuf5w5biPBzm2aUIFVtz6T32ko
anZrBwmT9EX2h2giVdU7+ySFvL6Eo3bvTUfJGHrDAlhLlbyuVEUooxZpUVQxvFs/
mSDczz2sKiiMDQWz2qME0ctqH7RTDYfRUy7cd1Ltp2ucHultuFbPR4ehHQSD0xm8
5YattRjAii25sD5myO3K2LyVzvBQ+Rj7oPLpYH1MHMEDO7ex2HWX/e8zt631e4Km
AUFlv5MH0Ya9fTaxJVHRQcSB2CFj9rBt7X8a9Ar7/No+ZSiNBQEr4+2FdFOKBc91
61HiDaxSamtzm11+NKVTx/v//qg4VNQLbjXDxXHtT2HW3T4pUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFIiXYmeVH3I/FkHWPrgMqHDApaPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iY2Vi
YzhmYS0yOTIzLTQzZmEtYmExNC05NjRlNjhhNDkwODYvM2YzZWI0ODEtMDMwNS0z
MWM3LTlhN2MtNTJiMDE0YzAxNzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmNlYmM4ZmEtMjkyMy00M2ZhLWJh
MTQtOTY0ZTY4YTQ5MDg2L2JjZWJjOGZhLTI5MjMtNDNmYS1iYTE0LTk2NGU2OGE0
OTA4Ni5jcmwwHwYDVR0jBBgwFoAUTEoww1JbQkio4p8OPfgjmsapxV0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iY2ViYzhmYS0yOTIzLTQzZmEtYmExNC05NjRl
NjhhNDkwODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxqBgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACBuhuFscVFGCTAiltRJwkiMw/Em2Zh930Lb7quzq/9kRe/G03gBbJC2
kqMo9+1E3AXsyB7LfY4nupI+NF5kcM9eMDANlMn5xpH/PuAN52HyohT3O0mwkRSy
jkeI59XPVj8MBJDRCXc6LMLX3vbIwU0X4Zm9bw77OfJNsdkozHzlXkngXSvUBTpr
WmQea5M78n1bZYZDCwMRIct/eqgIXwTVAPJR4tJ9UipNoKtFFKNEJsp4I5j43e12
6UJaE8xjdWZQ/1fGlyBxTvEiGjXZy90RY37tnvFiM+4rOnIDINLunDAz51e/MmSp
BpPNUHo59TZiieyNDDIvLFKVoJ5K5JY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:05:23 2025 by rpki-client