Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8/c6e28c68-d3e6-3ccc-acfd-7bb86107b602.roa
File: c6e28c68-d3e6-3ccc-acfd-7bb86107b602.roa (raw, json)
Hash identifier: n5KkHYZygdklK0RKtfJMZjL1NwPL66VslbU8s39GH3Y=
Subject key identifier: AB:D0:7D:02:9D:0B:9B:CA:C0:6E:9E:51:B1:DB:7B:E2:27:3D:66:21
Certificate issuer: /CN=ec62ef22-a391-4252-8d71-15d41c1c5aa8
Certificate serial: 010D0C9F432858494B640C5AEAE700D2C3F4F800
Authority key identifier: 8A:80:1E:27:02:12:93:1C:E6:DC:FF:60:B2:DB:F9:5D:38:1F:C3:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8/c6e28c68-d3e6-3ccc-acfd-7bb86107b602.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 3379
IP address blocks: 198.140.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:0c:5a:ea:e7:00:d2:c3:f4:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec62ef22-a391-4252-8d71-15d41c1c5aa8
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=e527754a-28b6-49d6-be6d-3bb894e79d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e5:78:04:6b:10:4c:bf:69:9f:32:44:2f:06:
a2:b9:06:b1:89:09:d6:15:e9:d2:e6:b9:1a:1f:0a:
7f:9e:fe:a1:89:f0:52:17:ef:ba:64:b2:10:10:6d:
98:e6:6a:c8:e7:6d:21:74:02:9e:2f:8e:a4:97:86:
29:12:47:28:66:85:d6:4a:28:77:d8:50:29:d6:db:
d9:19:a5:15:bd:94:2a:14:d5:28:97:cd:a2:89:12:
0b:f4:54:bf:01:61:6f:50:fd:7f:b7:07:8e:10:ef:
f6:5e:18:c6:4a:b9:de:36:b5:a4:74:e7:ea:93:af:
4c:9b:33:7d:7e:20:99:d0:81:60:a9:a7:51:57:cf:
bd:6b:02:8b:0c:a1:87:92:21:36:94:ec:8b:b2:39:
17:b2:8a:c5:a0:92:b5:87:c4:de:7b:2b:71:17:31:
d2:ef:99:5a:73:92:08:54:a3:89:6f:14:28:36:dd:
b7:45:59:62:fb:59:89:37:54:3d:b4:c9:91:2c:75:
11:32:3f:97:0d:06:ee:90:3e:91:b3:6b:ef:a3:6e:
6c:b4:e5:80:b5:e2:14:36:53:72:d9:e6:4c:76:db:
a8:d4:f6:5e:15:e9:4b:11:bb:f8:09:b8:59:ea:df:
22:18:83:02:99:7b:1a:2d:03:4c:95:e7:88:58:7a:
e2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D0:7D:02:9D:0B:9B:CA:C0:6E:9E:51:B1:DB:7B:E2:27:3D:66:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8/c6e28c68-d3e6-3ccc-acfd-7bb86107b602.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8/ec62ef22-a391-4252-8d71-15d41c1c5aa8.crl
X509v3 Authority Key Identifier:
keyid:8A:80:1E:27:02:12:93:1C:E6:DC:FF:60:B2:DB:F9:5D:38:1F:C3:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec62ef22-a391-4252-8d71-15d41c1c5aa8.cer
sbgp-ipAddrBlock: critical
IPv4:
198.140.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c5:0a:5b:8c:65:ee:9b:4f:c2:2d:98:87:8b:e4:69:de:bf:27:
d2:03:55:6f:19:ad:4c:86:f5:8f:c5:66:33:b6:dd:b1:e5:4f:
4f:b3:3c:7a:b2:38:c0:e8:c6:5a:5e:ac:d1:78:8f:ea:68:d1:
63:e4:de:10:dd:9c:d4:e1:41:a1:4c:fa:c8:00:55:69:c2:07:
34:b4:6f:da:72:c3:74:6c:4d:92:46:83:fb:6a:b1:26:08:ba:
ed:0c:60:c4:c1:35:72:52:bf:3d:8c:68:1c:22:84:45:be:36:
de:52:98:cf:f1:8c:35:b1:fa:83:e6:69:98:78:50:b6:99:0c:
03:dc:4c:62:c6:6c:ac:80:88:e3:ac:2e:ab:c2:ee:51:3c:a7:
f3:14:cf:25:ff:3c:0e:74:59:b1:4d:52:fc:85:ef:44:1e:b5:
89:e6:1b:a6:60:b1:3e:4c:6b:f7:16:1c:e8:fb:59:ad:bd:0f:
b8:c3:04:d1:77:ac:88:4d:b6:ae:f8:3a:b5:13:fe:26:b1:bc:
20:ee:9a:39:06:6f:4e:15:7e:be:29:27:c2:a7:bc:9c:2f:98:
34:70:24:3a:dd:0f:0f:43:32:84:8e:88:06:60:de:d4:e5:ad:
ea:16:7c:5c:55:bf:84:13:2d:b9:3b:20:87:60:19:db:c0:86:
53:9c:19:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZAxa6ucA0sP0+AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWM2MmVmMjItYTM5MS00MjUyLThkNzEtMTVkNDFjMWM1
YWE4MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk
ZTUyNzc1NGEtMjhiNi00OWQ2LWJlNmQtM2JiODk0ZTc5ZDA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOV4BGsQTL9pnzJELwaiuQaxiQnWFenS5rka
Hwp/nv6hifBSF++6ZLIQEG2Y5mrI520hdAKeL46kl4YpEkcoZoXWSih32FAp1tvZ
GaUVvZQqFNUol82iiRIL9FS/AWFvUP1/tweOEO/2XhjGSrneNrWkdOfqk69MmzN9
fiCZ0IFgqadRV8+9awKLDKGHkiE2lOyLsjkXsorFoJK1h8TeeytxFzHS75lac5II
VKOJbxQoNt23RVli+1mJN1Q9tMmRLHURMj+XDQbukD6Rs2vvo25stOWAteIUNlNy
2eZMdtuo1PZeFelLEbv4CbhZ6t8iGIMCmXsaLQNMleeIWHri9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKvQfQKdC5vKwG6eUbHbe+InPWYhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lYzYy
ZWYyMi1hMzkxLTQyNTItOGQ3MS0xNWQ0MWMxYzVhYTgvYzZlMjhjNjgtZDNlNi0z
Y2NjLWFjZmQtN2JiODYxMDdiNjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWM2MmVmMjItYTM5MS00MjUyLThk
NzEtMTVkNDFjMWM1YWE4L2VjNjJlZjIyLWEzOTEtNDI1Mi04ZDcxLTE1ZDQxYzFj
NWFhOC5jcmwwHwYDVR0jBBgwFoAUioAeJwISkxzm3P9gstv5XTgfw5swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lYzYyZWYyMi1hMzkxLTQyNTItOGQ3MS0xNWQ0
MWMxYzVhYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxowIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMUKW4xl7ptPwi2Yh4vkad6/J9IDVW8ZrUyG9Y/FZjO23bHlT0+zPHqy
OMDoxlperNF4j+po0WPk3hDdnNThQaFM+sgAVWnCBzS0b9pyw3RsTZJGg/tqsSYI
uu0MYMTBNXJSvz2MaBwihEW+Nt5SmM/xjDWx+oPmaZh4ULaZDAPcTGLGbKyAiOOs
LqvC7lE8p/MUzyX/PA50WbFNUvyF70QetYnmG6ZgsT5Ma/cWHOj7Wa29D7jDBNF3
rIhNtq74OrUT/iaxvCDumjkGb04Vfr4pJ8KnvJwvmDRwJDrdDw9DMoSOiAZg3tTl
reoWfFxVv4QTLbk7IIdgGdvAhlOcGUA=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:40 2025 by rpki-client