Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84/d298a259-4751-3766-a2a4-79d473b52dc6.roa
File: d298a259-4751-3766-a2a4-79d473b52dc6.roa (raw, json)
Hash identifier: q2pq8WJDkTnzwM9Kwct8dJrxA8BP3HBxW3li2jnAH3k=
Subject key identifier: F4:12:78:8C:CE:27:0F:B7:34:3B:6A:54:3F:84:F6:08:6B:52:6E:4C
Certificate issuer: /CN=d48adb2e-2ac1-4d2c-9445-29c27f527e84
Certificate serial: 010D0C9F432858487CEB2501EBFD9C80E9D00980
Authority key identifier: 91:06:36:31:C7:11:93:34:4A:CB:C5:7D:C3:2A:DB:C7:53:7B:ED:18
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84/d298a259-4751-3766-a2a4-79d473b52dc6.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 54732
IP address blocks: 199.244.96.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:25:01:eb:fd:9c:80:e9:d0:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48adb2e-2ac1-4d2c-9445-29c27f527e84
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=f5c12752-a572-41cb-abbc-415f9037e999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6b:69:cf:88:6a:db:1c:91:ad:8e:2d:24:13:
03:be:94:83:bc:40:db:c5:51:95:10:70:ad:fb:34:
96:1f:47:3d:a1:aa:76:16:cd:44:83:17:19:ad:8e:
6c:2f:21:44:99:bb:f9:48:4c:88:43:db:de:75:fe:
d3:02:6b:df:a2:64:45:92:cb:c4:54:64:68:4a:6b:
60:6e:b5:9a:4d:e4:09:26:30:d4:4f:93:fd:2f:b9:
ac:64:0c:a2:24:f3:31:33:6b:87:5c:0b:03:57:24:
13:dd:d6:12:17:0b:7b:cc:8e:3e:e3:e4:da:3b:01:
af:7d:67:cd:f7:e6:d9:77:35:8c:b7:b6:97:4c:71:
7a:94:4a:79:fe:67:9b:b8:86:fc:5e:a9:9f:d3:13:
74:53:02:82:fa:0c:96:65:88:e6:d8:93:93:b2:7c:
08:3a:40:56:da:62:39:b3:9a:40:45:fe:cc:73:c2:
f4:96:18:df:7f:d3:e8:f8:3c:c2:b5:bc:fb:d0:e9:
34:7a:37:ab:9b:b1:18:44:80:23:ba:1f:c9:43:4a:
16:65:11:78:38:b4:e0:0f:cc:23:9d:10:a0:a5:41:
c7:f8:ef:57:66:3e:7c:8a:28:39:22:a7:15:5c:87:
0e:18:50:9a:f5:56:0c:34:72:9b:e9:4c:be:18:d9:
9e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:12:78:8C:CE:27:0F:B7:34:3B:6A:54:3F:84:F6:08:6B:52:6E:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84/d298a259-4751-3766-a2a4-79d473b52dc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84/d48adb2e-2ac1-4d2c-9445-29c27f527e84.crl
X509v3 Authority Key Identifier:
keyid:91:06:36:31:C7:11:93:34:4A:CB:C5:7D:C3:2A:DB:C7:53:7B:ED:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d48adb2e-2ac1-4d2c-9445-29c27f527e84.cer
sbgp-ipAddrBlock: critical
IPv4:
199.244.96.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:f9:ed:a8:4d:60:61:77:d6:bf:d7:ac:fc:4c:62:ee:55:11:
72:87:84:c3:f9:88:ba:b5:c4:e5:a3:7d:bc:d1:52:82:10:57:
8e:28:88:95:cf:8a:b5:af:fd:da:52:30:a9:9d:7c:9a:2b:32:
63:ac:c9:05:c1:5e:95:6a:c4:65:26:e5:80:be:a5:8a:af:91:
bd:21:27:df:f8:a5:d7:3b:04:a2:41:d0:0c:54:0c:82:6e:c4:
05:5f:6d:f5:ee:5e:3f:5d:85:cd:4a:81:f6:a8:1e:ef:c1:bc:
d0:c0:f4:f6:34:cb:73:c2:b3:28:79:54:a6:87:d9:19:98:eb:
be:9c:be:1c:4a:c3:fb:86:7b:79:ae:e9:0d:a9:45:a7:f3:18:
0e:58:28:9d:64:5c:35:39:96:ac:84:81:ee:5b:83:53:bf:ce:
ac:3c:13:91:c9:e1:6a:6e:90:2c:d2:3d:17:1a:45:ba:65:9e:
e8:cd:31:7c:45:82:25:ce:6e:67:57:ab:d5:d2:96:90:15:35:
d8:4c:87:40:ee:50:94:96:ee:af:a4:96:d7:14:4b:1a:46:7d:
22:0c:74:ff:0c:a0:6e:b9:fa:28:1d:06:be:ff:27:59:14:6b:
d0:2a:a6:74:79:5f:99:8e:de:00:c9:93:38:2f:7c:9b:cc:a8:
ff:cc:58:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh86yUB6/2cgOnQCYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ4YWRiMmUtMmFjMS00ZDJjLTk0NDUtMjljMjdmNTI3
ZTg0MB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk
ZjVjMTI3NTItYTU3Mi00MWNiLWFiYmMtNDE1ZjkwMzdlOTk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWtpz4hq2xyRrY4tJBMDvpSDvEDbxVGVEHCt
+zSWH0c9oap2Fs1EgxcZrY5sLyFEmbv5SEyIQ9vedf7TAmvfomRFksvEVGRoSmtg
brWaTeQJJjDUT5P9L7msZAyiJPMxM2uHXAsDVyQT3dYSFwt7zI4+4+TaOwGvfWfN
9+bZdzWMt7aXTHF6lEp5/mebuIb8Xqmf0xN0UwKC+gyWZYjm2JOTsnwIOkBW2mI5
s5pARf7Mc8L0lhjff9Po+DzCtbz70Ok0ejerm7EYRIAjuh/JQ0oWZRF4OLTgD8wj
nRCgpUHH+O9XZj58iig5IqcVXIcOGFCa9VYMNHKb6Uy+GNmeCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPQSeIzOJw+3NDtqVD+E9ghrUm5MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNDhh
ZGIyZS0yYWMxLTRkMmMtOTQ0NS0yOWMyN2Y1MjdlODQvZDI5OGEyNTktNDc1MS0z
NzY2LWEyYTQtNzlkNDczYjUyZGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDQ4YWRiMmUtMmFjMS00ZDJjLTk0
NDUtMjljMjdmNTI3ZTg0L2Q0OGFkYjJlLTJhYzEtNGQyYy05NDQ1LTI5YzI3ZjUy
N2U4NC5jcmwwHwYDVR0jBBgwFoAUkQY2MccRkzRKy8V9wyrbx1N77RgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNDhhZGIyZS0yYWMxLTRkMmMtOTQ0NS0yOWMy
N2Y1MjdlODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx/RgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGb57ahNYGF31r/XrPxMYu5VEXKHhMP5iLq1xOWjfbzRUoIQV44oiJXP
irWv/dpSMKmdfJorMmOsyQXBXpVqxGUm5YC+pYqvkb0hJ9/4pdc7BKJB0AxUDIJu
xAVfbfXuXj9dhc1KgfaoHu/BvNDA9PY0y3PCsyh5VKaH2RmY676cvhxKw/uGe3mu
6Q2pRafzGA5YKJ1kXDU5lqyEge5bg1O/zqw8E5HJ4WpukCzSPRcaRbplnujNMXxF
giXObmdXq9XSlpAVNdhMh0DuUJSW7q+kltcUSxpGfSIMdP8MoG65+igdBr7/J1kU
a9AqpnR5X5mO3gDJkzgvfJvMqP/MWIU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:00 2025 by rpki-client