Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3dd5724b-8a94-3069-a8b7-f6f201590387.roa
File: 3dd5724b-8a94-3069-a8b7-f6f201590387.roa (raw, json)
Hash identifier: Yw0ild0jhoB7BpZiI2RIRc323KyIENqX16uQhVoduW4=
Subject key identifier: 21:13:91:F1:88:74:DD:1D:5A:04:4C:61:05:79:58:43:A9:F6:41:AD
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848FFDB1E59E7BBB002902EBB80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3dd5724b-8a94-3069-a8b7-f6f201590387.roa
Signing time: Tue 25 Feb 2025 11:39:31 +0000
ROA not before: Tue 25 Feb 2025 11:39:31 +0000
ROA not after: Mon 26 May 2025 10:39:31 +0000
asID: 30036
IP address blocks: 192.119.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ff:db:1e:59:e7:bb:b0:02:90:2e:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 25 11:39:31 2025 GMT
Not After : May 26 10:39:31 2025 GMT
Subject: CN=58ea03b5-bc54-4fbe-948a-ea9faef30585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a6:5f:0f:d7:a5:7d:54:da:06:cf:f1:74:7f:
2e:ea:4f:6b:c4:d0:b7:fc:86:6f:7e:3b:e2:0e:9c:
9c:4d:da:f1:76:9a:66:a6:0a:dd:01:63:d0:37:8c:
49:3f:d9:51:29:83:0c:4a:92:24:7f:c6:fb:cd:6f:
73:bd:36:9f:a5:93:03:94:8f:0b:8b:44:38:32:76:
39:d0:4c:0b:56:34:b7:69:d9:64:4c:d0:0f:49:b9:
aa:64:8b:90:f2:06:9c:7e:cf:bb:7c:b1:f8:8a:fe:
f0:cd:79:1a:d1:c8:92:f6:73:cd:fc:60:d9:7f:85:
da:91:d0:0b:de:d0:e0:78:68:de:1d:08:5a:72:e7:
4e:39:b4:5a:73:0f:4c:ec:a9:0b:ac:c0:34:8c:90:
17:b3:e1:99:8a:0d:4d:b1:59:aa:9d:78:3f:aa:9e:
53:2f:97:f4:08:fe:e8:50:2e:cc:03:e7:31:dc:1b:
0a:64:78:65:c8:80:2f:9e:c8:72:6f:e4:47:af:31:
6c:c9:0a:a8:7e:48:4a:61:58:bb:25:56:3f:4e:93:
90:24:85:63:32:e4:03:37:03:9d:d4:cd:98:02:79:
05:8c:c2:99:a3:6b:7f:a2:a1:5b:75:27:68:20:22:
e2:1c:b5:b0:96:01:88:5e:14:98:48:ea:71:9a:fa:
81:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:13:91:F1:88:74:DD:1D:5A:04:4C:61:05:79:58:43:A9:F6:41:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3dd5724b-8a94-3069-a8b7-f6f201590387.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
192.119.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:c1:82:74:85:82:44:a1:fa:6f:9c:51:1b:76:a5:17:32:10:
19:0d:a4:a9:fe:01:31:ed:71:d7:20:08:d7:f0:14:bd:69:74:
98:25:0f:7c:75:8f:91:fd:fa:c6:74:4d:7e:b7:c0:ba:18:ff:
3e:57:38:db:55:ce:16:e6:4b:20:d3:5a:b3:c3:70:6c:c2:3f:
66:2c:4c:5c:1f:1a:bd:0a:b4:52:fb:39:c8:b9:d7:f3:20:06:
8d:7d:bb:c6:47:9a:1c:9d:5d:f7:72:57:0a:86:cf:c0:6f:ee:
44:02:87:be:c3:44:54:59:53:ca:9d:48:32:94:0f:f2:44:c5:
7a:61:e0:0c:d0:48:33:ac:52:0b:1f:2e:ee:78:ed:fe:1a:9c:
6d:41:80:03:7b:fc:4e:33:4d:fd:2c:a6:f1:26:d5:dd:7e:e9:
29:d1:16:21:6a:e7:fd:69:d5:b6:a3:e4:9e:2a:32:95:c9:d3:
0b:c7:79:cd:9c:c3:fd:84:62:ac:d4:66:60:91:28:26:56:44:
8c:96:5e:74:a2:78:0d:ca:cc:c6:03:76:3d:6a:c3:5f:ed:67:
76:6b:30:d6:92:e5:73:10:d4:73:fb:30:39:02:59:bb:4a:b0:
94:8d:3d:02:49:64:65:e6:7b:b1:62:bd:2f:96:a4:47:aa:ae:
18:bd:70:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj/2x5Z57uwApAuu4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDIyNTExMzkzMVoXDTI1MDUyNjEwMzkzMVowLzEtMCsGA1UEAxMk
NThlYTAzYjUtYmM1NC00ZmJlLTk0OGEtZWE5ZmFlZjMwNTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6ZfD9elfVTaBs/xdH8u6k9rxNC3/IZvfjvi
DpycTdrxdppmpgrdAWPQN4xJP9lRKYMMSpIkf8b7zW9zvTafpZMDlI8Li0Q4MnY5
0EwLVjS3adlkTNAPSbmqZIuQ8gacfs+7fLH4iv7wzXka0ciS9nPN/GDZf4XakdAL
3tDgeGjeHQhacudOObRacw9M7KkLrMA0jJAXs+GZig1NsVmqnXg/qp5TL5f0CP7o
UC7MA+cx3BsKZHhlyIAvnshyb+RHrzFsyQqofkhKYVi7JVY/TpOQJIVjMuQDNwOd
1M2YAnkFjMKZo2t/oqFbdSdoICLiHLWwlgGIXhSYSOpxmvqBxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCETkfGIdN0dWgRMYQV5WEOp9kGtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2RkNTcyNGItOGE5NC0z
MDY5LWE4YjctZjZmMjAxNTkwMzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH7BgnSFgkSh+m+cURt2pRcyEBkNpKn+ATHtcdcgCNfwFL1pdJglD3x1
j5H9+sZ0TX63wLoY/z5XONtVzhbmSyDTWrPDcGzCP2YsTFwfGr0KtFL7Oci51/Mg
Bo19u8ZHmhydXfdyVwqGz8Bv7kQCh77DRFRZU8qdSDKUD/JExXph4AzQSDOsUgsf
Lu547f4anG1BgAN7/E4zTf0spvEm1d1+6SnRFiFq5/1p1baj5J4qMpXJ0wvHec2c
w/2EYqzUZmCRKCZWRIyWXnSieA3KzMYDdj1qw1/tZ3ZrMNaS5XMQ1HP7MDkCWbtK
sJSNPQJJZGXme7FivS+WpEeqrhi9cNk=
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:08:59 2025 by rpki-client