Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/d50fa22c-28fc-3c4e-b12d-4de891836c64.roa
File: d50fa22c-28fc-3c4e-b12d-4de891836c64.roa (raw, json)
Hash identifier: 6VanSk2zoCVzXjYiBrAjPzhxg7j25ck0SKXb98NOGhI=
Subject key identifier: 56:CE:2F:89:67:2C:8E:71:E9:0F:6F:8F:C4:1A:01:C4:64:DC:09:54
Certificate issuer: /CN=f58d7f53-424c-46bf-bd09-c1a26b82131e
Certificate serial: 010D0C9F43285848AF2B78FF16DAB2158E7E5100
Authority key identifier: 4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/d50fa22c-28fc-3c4e-b12d-4de891836c64.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 400446
IP address blocks: 198.168.122.0/23 maxlen: 23
198.168.122.0/24 maxlen: 24
198.168.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:78:ff:16:da:b2:15:8e:7e:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58d7f53-424c-46bf-bd09-c1a26b82131e
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=8c4f3bba-2f1a-4853-b718-a5a684458ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:14:a3:cf:44:d7:fd:c8:bb:02:56:f4:1e:b2:
3c:17:32:42:34:9e:d9:eb:8f:d8:42:e5:b7:83:5b:
44:b2:dd:43:23:ef:01:9c:0a:f7:44:74:d4:04:40:
98:56:23:b9:55:d7:42:5f:36:3e:25:f8:63:3a:d0:
34:7e:14:4a:ab:c9:1d:be:da:85:c4:9e:4b:f5:85:
1e:d4:2f:8b:ad:64:2d:9f:fb:7d:f2:67:3a:ad:1b:
fe:90:51:c1:05:9c:99:eb:21:ad:57:d5:1a:cb:11:
82:8d:6a:84:42:a6:3e:27:8d:38:92:b9:69:e1:c8:
1f:d0:60:89:75:56:43:dc:5c:11:f8:14:28:a8:94:
97:56:18:e5:02:37:57:d9:1b:2f:6c:f9:6c:ab:52:
18:21:39:02:7c:76:bf:f1:43:46:f8:4d:bb:fd:fc:
fe:84:90:93:d2:b9:fc:b1:7d:b7:5b:f7:c1:62:e0:
c3:ea:4c:80:cd:9c:ed:6a:1f:ba:70:d7:25:83:a4:
64:f8:43:90:d3:88:40:54:13:ee:7e:72:d4:16:2b:
7c:45:b6:e1:b1:11:a0:c2:b1:16:07:e0:74:80:83:
88:59:84:55:9f:09:cc:ee:f2:4a:d6:41:9c:dd:02:
aa:c4:13:9e:5e:1b:95:bd:d2:5c:9f:9a:54:24:79:
fa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CE:2F:89:67:2C:8E:71:E9:0F:6F:8F:C4:1A:01:C4:64:DC:09:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/d50fa22c-28fc-3c4e-b12d-4de891836c64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl
X509v3 Authority Key Identifier:
keyid:4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer
sbgp-ipAddrBlock: critical
IPv4:
198.168.122.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:2b:90:0b:40:60:15:84:a4:36:29:0e:34:58:2d:35:fd:1e:
aa:5b:e9:cc:8a:d7:89:01:87:07:01:ff:a9:a4:59:30:cb:43:
f8:e8:b0:6d:f3:25:78:4e:a4:a5:f6:ed:23:63:33:05:d9:aa:
a4:81:fa:28:5a:8b:79:a1:f2:82:14:c5:e6:54:66:ea:24:ad:
1d:65:e5:71:e5:ae:46:4e:ef:21:d9:bb:d6:7d:b5:eb:b0:05:
7c:05:b7:5a:e1:6c:45:51:9c:5f:9d:03:c2:58:8f:56:61:39:
01:5e:ea:58:1d:d1:b3:8f:36:da:c2:0a:e2:73:22:9c:ec:7e:
d9:e4:0b:71:ef:0e:90:c6:1c:8b:d8:37:8d:9e:0f:17:b8:09:
13:17:fb:53:67:f3:41:7d:ab:b8:05:9d:24:34:57:1c:49:6a:
65:63:f4:5a:fb:7c:05:23:7d:ae:13:f2:22:9b:fb:bd:b7:50:
c9:0c:36:30:d2:83:2e:11:86:31:7a:52:72:78:11:c7:3d:b6:
60:84:86:e6:43:59:22:5d:70:10:c3:92:32:e6:0d:99:4d:6f:
1f:98:e2:68:23:f0:70:ff:dc:25:dc:57:57:96:a7:07:2a:4f:
a7:71:85:3e:44:d4:46:89:67:6d:87:e0:0a:dd:ce:46:48:a0:
ed:61:70:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK3j/FtqyFY5+UQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjU4ZDdmNTMtNDI0Yy00NmJmLWJkMDktYzFhMjZiODIx
MzFlMB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk
OGM0ZjNiYmEtMmYxYS00ODUzLWI3MTgtYTVhNjg0NDU4YWUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRSjz0TX/ci7Alb0HrI8FzJCNJ7Z64/YQuW3
g1tEst1DI+8BnAr3RHTUBECYViO5VddCXzY+JfhjOtA0fhRKq8kdvtqFxJ5L9YUe
1C+LrWQtn/t98mc6rRv+kFHBBZyZ6yGtV9UayxGCjWqEQqY+J404krlp4cgf0GCJ
dVZD3FwR+BQoqJSXVhjlAjdX2RsvbPlsq1IYITkCfHa/8UNG+E27/fz+hJCT0rn8
sX23W/fBYuDD6kyAzZztah+6cNclg6Rk+EOQ04hAVBPufnLUFit8RbbhsRGgwrEW
B+B0gIOIWYRVnwnM7vJK1kGc3QKqxBOeXhuVvdJcn5pUJHn6gQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFbOL4lnLI5x6Q9vj8QaAcRk3AlUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNThk
N2Y1My00MjRjLTQ2YmYtYmQwOS1jMWEyNmI4MjEzMWUvZDUwZmEyMmMtMjhmYy0z
YzRlLWIxMmQtNGRlODkxODM2YzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjU4ZDdmNTMtNDI0Yy00NmJmLWJk
MDktYzFhMjZiODIxMzFlL2Y1OGQ3ZjUzLTQyNGMtNDZiZi1iZDA5LWMxYTI2Yjgy
MTMxZS5jcmwwHwYDVR0jBBgwFoAUT/hqnhe4WIo6xuA7yScSBTeyIhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNThkN2Y1My00MjRjLTQ2YmYtYmQwOS1jMWEy
NmI4MjEzMWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxqh6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIkrkAtAYBWEpDYpDjRYLTX9Hqpb6cyK14kBhwcB/6mkWTDLQ/josG3z
JXhOpKX27SNjMwXZqqSB+ihai3mh8oIUxeZUZuokrR1l5XHlrkZO7yHZu9Z9teuw
BXwFt1rhbEVRnF+dA8JYj1ZhOQFe6lgd0bOPNtrCCuJzIpzsftnkC3HvDpDGHIvY
N42eDxe4CRMX+1Nn80F9q7gFnSQ0VxxJamVj9Fr7fAUjfa4T8iKb+723UMkMNjDS
gy4RhjF6UnJ4Ecc9tmCEhuZDWSJdcBDDkjLmDZlNbx+Y4mgj8HD/3CXcV1eWpwcq
T6dxhT5E1EaJZ22H4ArdzkZIoO1hcGw=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:22 2025 by rpki-client