Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c48344cd-71dd-4852-8081-dbc4e9c4e5d4/8b39bfce-cad0-3e37-bfa6-bb0fb9f237c7.roa
File: 8b39bfce-cad0-3e37-bfa6-bb0fb9f237c7.roa (raw, json)
Hash identifier: ZorRk62ZAjYbI5FdabF0ENJJaL8j55fNiEl/BbtI53s=
Subject key identifier: 46:22:DF:4E:B5:E4:75:65:FE:16:A2:96:D0:2C:84:BF:1E:FA:FB:21
Certificate issuer: /CN=c48344cd-71dd-4852-8081-dbc4e9c4e5d4
Certificate serial: 010D0C9F432858486695BA221AD687714B352A80
Authority key identifier: 11:91:33:93:D4:45:82:EB:73:60:76:CC:4B:EB:02:E0:43:2B:1F:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c48344cd-71dd-4852-8081-dbc4e9c4e5d4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c48344cd-71dd-4852-8081-dbc4e9c4e5d4/8b39bfce-cad0-3e37-bfa6-bb0fb9f237c7.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 16584
IP address blocks: 198.73.190.0/24 maxlen: 24
2606:ddc0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:ba:22:1a:d6:87:71:4b:35:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c48344cd-71dd-4852-8081-dbc4e9c4e5d4
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=ead796f9-812a-44db-8ef1-a5f054123bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:65:60:61:6c:5a:06:6c:94:52:45:3e:eb:75:
a7:ce:49:dd:77:58:0b:85:c1:d6:92:be:2a:c7:d3:
88:71:56:d7:da:21:9b:41:e4:d0:ea:02:11:67:53:
7d:f3:a9:47:1e:ba:fb:7e:36:b1:ea:51:a1:c0:eb:
75:2a:22:81:33:03:08:ed:f2:9d:81:4b:15:b9:0f:
ed:ce:71:9f:e7:bf:0d:85:8f:f1:b2:cc:2d:64:bf:
5b:54:a4:42:86:fa:03:b4:e5:40:1b:13:ff:4b:59:
ea:5d:30:19:18:0f:b9:8c:0e:8e:4a:db:2b:63:69:
b5:d4:f2:07:33:eb:e4:9c:37:e3:ee:94:fd:f4:66:
77:f0:5c:de:f5:e8:0d:c9:f2:15:ca:67:6c:8d:42:
25:ed:30:67:2f:6f:0f:37:5c:12:fa:28:73:1e:7f:
cc:0b:f6:fb:16:32:74:08:38:ac:1b:b3:86:8b:9e:
a0:1a:14:cb:b0:ec:c4:0f:41:d3:f1:02:41:25:4a:
3d:7f:d0:33:97:9c:dc:52:ad:50:e7:f1:64:9d:7c:
f6:85:75:b5:69:3f:1a:51:05:83:47:ac:d0:89:a9:
ce:23:dd:52:0f:8d:7c:c3:30:49:4c:27:11:a6:37:
37:00:ba:60:ad:39:3a:2b:12:04:ba:a9:1e:dd:1d:
48:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:22:DF:4E:B5:E4:75:65:FE:16:A2:96:D0:2C:84:BF:1E:FA:FB:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c48344cd-71dd-4852-8081-dbc4e9c4e5d4/8b39bfce-cad0-3e37-bfa6-bb0fb9f237c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c48344cd-71dd-4852-8081-dbc4e9c4e5d4/c48344cd-71dd-4852-8081-dbc4e9c4e5d4.crl
X509v3 Authority Key Identifier:
keyid:11:91:33:93:D4:45:82:EB:73:60:76:CC:4B:EB:02:E0:43:2B:1F:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c48344cd-71dd-4852-8081-dbc4e9c4e5d4.cer
sbgp-ipAddrBlock: critical
IPv4:
198.73.190.0/24
IPv6:
2606:ddc0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:b8:d6:70:11:d7:ab:32:bf:b2:2e:09:a1:a9:3c:73:fd:74:
bd:9c:09:88:51:32:8c:62:99:cf:75:5b:c7:ce:63:4d:d9:b8:
b1:e3:15:cf:7f:7a:a6:08:83:b3:07:5d:b4:cb:c9:55:2b:7b:
d9:73:81:1f:fa:0f:9b:29:9e:62:de:11:a6:a9:75:dd:d6:6a:
6b:10:94:9d:3b:b1:18:5b:7e:7e:df:e6:ef:0b:ff:f9:1f:69:
e0:d3:a1:6c:8f:6a:da:95:2b:2f:bd:5d:32:7b:a9:75:3a:0e:
e2:08:f8:77:ca:8d:62:73:17:58:e6:d4:cb:ac:8d:d1:53:f6:
99:7b:02:c8:77:63:a9:7e:69:d6:41:a8:27:61:ae:a3:b6:dd:
0a:da:30:65:77:b8:0d:23:30:c4:d3:c6:23:5e:1b:6e:5a:20:
c0:03:7b:d4:1c:aa:f3:a9:08:2c:e7:3a:c1:d2:72:10:6e:02:
53:88:2e:32:3b:05:40:43:47:ca:fc:89:fc:40:f5:1c:97:21:
39:f0:88:fb:17:9e:1d:13:1e:25:73:06:d3:b6:74:93:05:58:
ef:27:5e:51:13:7a:99:10:df:af:62:6c:cf:a5:27:55:4a:98:
7b:6f:d0:73:c1:62:36:f3:9a:c3:6b:96:00:3d:e9:e7:2b:69:
dd:eb:64:35
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEhmlboiGtaHcUs1KoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQ4MzQ0Y2QtNzFkZC00ODUyLTgwODEtZGJjNGU5YzRl
NWQ0MB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk
ZWFkNzk2ZjktODEyYS00NGRiLThlZjEtYTVmMDU0MTIzYmZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWVgYWxaBmyUUkU+63Wnzkndd1gLhcHWkr4q
x9OIcVbX2iGbQeTQ6gIRZ1N986lHHrr7fjax6lGhwOt1KiKBMwMI7fKdgUsVuQ/t
znGf578NhY/xsswtZL9bVKRChvoDtOVAGxP/S1nqXTAZGA+5jA6OStsrY2m11PIH
M+vknDfj7pT99GZ38Fze9egNyfIVymdsjUIl7TBnL28PN1wS+ihzHn/MC/b7FjJ0
CDisG7OGi56gGhTLsOzED0HT8QJBJUo9f9Azl5zcUq1Q5/FknXz2hXW1aT8aUQWD
R6zQianOI91SD418wzBJTCcRpjc3ALpgrTk6KxIEuqke3R1ItQIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFEYi30615HVl/hailtAshL8e+vshMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jNDgz
NDRjZC03MWRkLTQ4NTItODA4MS1kYmM0ZTljNGU1ZDQvOGIzOWJmY2UtY2FkMC0z
ZTM3LWJmYTYtYmIwZmI5ZjIzN2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzQ4MzQ0Y2QtNzFkZC00ODUyLTgw
ODEtZGJjNGU5YzRlNWQ0L2M0ODM0NGNkLTcxZGQtNDg1Mi04MDgxLWRiYzRlOWM0
ZTVkNC5jcmwwHwYDVR0jBBgwFoAUEZEzk9RFgutzYHbMS+sC4EMrH58wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jNDgzNDRjZC03MWRkLTQ4NTItODA4MS1kYmM0
ZTljNGU1ZDQuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAxkm+MA0E
AgACMAcDBQAmBt3AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAEy41nAR16syv7IuCaGpPHP9dL2cCYhRMoxi
mc91W8fOY03ZuLHjFc9/eqYIg7MHXbTLyVUre9lzgR/6D5spnmLeEaapdd3WamsQ
lJ07sRhbfn7f5u8L//kfaeDToWyPatqVKy+9XTJ7qXU6DuII+HfKjWJzF1jm1Mus
jdFT9pl7Ash3Y6l+adZBqCdhrqO23QraMGV3uA0jMMTTxiNeG25aIMADe9QcqvOp
CCznOsHSchBuAlOILjI7BUBDR8r8ifxA9RyXITnwiPsXnh0THiVzBtO2dJMFWO8n
XlETepkQ369ibM+lJ1VKmHtv0HPBYjbzmsNrlgA96ecrad3rZDU=
-----END CERTIFICATE-----
Generated at Sat Apr 12 11:03:30 2025 by rpki-client