Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/b4a8cff8-925b-39cf-b21b-358ad86de7b2.roa
File: b4a8cff8-925b-39cf-b21b-358ad86de7b2.roa (raw, json)
Hash identifier: E2bN/YP2BNxqH8sQ5hVxVC05rxE/m39G2XmwwP8RR3I=
Subject key identifier: ED:C0:44:EE:BC:F3:57:1C:13:47:49:BE:EF:81:CC:1B:93:8A:A0:A5
Certificate issuer: /CN=603ec9c3-6a7f-4455-baee-5999e253e735
Certificate serial: 010D0C9F43285848E16BDC485D1B202004271240
Authority key identifier: 8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/b4a8cff8-925b-39cf-b21b-358ad86de7b2.roa
Signing time: Fri 14 Feb 2025 14:00:52 +0000
ROA not before: Fri 14 Feb 2025 14:00:52 +0000
ROA not after: Thu 15 May 2025 13:00:52 +0000
asID: 3676
IP address blocks: 198.49.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:6b:dc:48:5d:1b:20:20:04:27:12:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=603ec9c3-6a7f-4455-baee-5999e253e735
Validity
Not Before: Feb 14 14:00:52 2025 GMT
Not After : May 15 13:00:52 2025 GMT
Subject: CN=9dde8414-e46d-4d16-aa0c-16282d4f4555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ea:9c:5e:2d:e6:0c:2f:b7:91:6a:7f:18:25:
cc:fd:93:87:07:80:6c:16:ee:12:90:d0:d0:9f:e3:
06:dc:73:f1:11:eb:c9:68:7b:6c:9f:b6:b0:ec:0d:
a3:b2:c6:1f:0f:a5:58:26:9f:ca:19:8e:5d:5c:b4:
d2:ef:7c:33:f0:76:cf:fc:2f:87:ff:42:3b:e8:db:
c1:cc:5c:89:83:67:7f:31:31:33:94:fb:1e:b3:97:
ef:0d:a5:45:fd:69:3a:d1:c8:2e:a6:80:a0:b6:3d:
ec:f8:9f:50:aa:92:2b:fc:67:c4:ec:3c:f4:c1:9f:
64:e8:fe:15:40:02:81:47:16:34:6e:cb:b6:98:c1:
ca:a5:32:53:3b:e3:a3:91:80:ec:9f:1f:93:03:27:
76:1e:82:93:26:37:16:d7:de:35:70:e5:11:66:47:
3b:01:b7:81:da:46:39:32:4f:58:2e:a6:76:48:4a:
dc:1c:31:98:2f:c6:d6:82:82:35:22:06:f0:e8:34:
5e:3b:81:87:e7:ca:2b:2b:bc:f0:20:af:86:ee:4c:
f3:f6:d8:07:14:2e:3b:ab:a2:d4:76:3d:74:de:39:
86:58:d1:c6:c2:bc:c3:b0:6d:7d:e4:a8:85:44:89:
7e:25:24:bf:93:6a:25:d6:13:16:e3:83:26:45:b0:
c9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C0:44:EE:BC:F3:57:1C:13:47:49:BE:EF:81:CC:1B:93:8A:A0:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/b4a8cff8-925b-39cf-b21b-358ad86de7b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl
X509v3 Authority Key Identifier:
keyid:8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer
sbgp-ipAddrBlock: critical
IPv4:
198.49.182.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:c5:e8:65:e9:e1:9a:14:d5:c8:26:b1:01:05:99:3d:3c:f2:
6d:75:5f:38:04:76:75:c0:e5:36:cb:b3:d7:ca:57:ad:8c:63:
aa:df:3c:ce:4a:fa:2b:35:3a:cd:8e:1e:d3:35:f4:fb:11:3b:
4e:de:c0:ca:92:a1:f9:b5:00:40:ed:4a:2e:d0:68:fa:7a:c1:
8a:20:a0:bb:87:20:c2:49:0a:64:69:12:13:4c:99:52:7a:e4:
9b:0d:93:f2:5f:c1:83:3a:cf:95:b8:94:2e:0b:2a:ca:80:2b:
10:b6:3e:6c:a9:34:8c:7b:01:b2:47:2e:19:17:82:27:d2:ba:
33:ca:cb:f3:98:01:6e:6b:ba:42:27:86:c3:46:3e:30:2a:b2:
31:41:09:83:0b:fe:b7:48:46:df:01:e5:5a:2a:8a:41:31:86:
0d:fb:c3:be:5a:aa:ec:70:b6:04:cf:92:cc:3f:40:35:82:7c:
6c:9a:4d:b6:df:43:3b:01:b4:b0:da:ad:69:90:a9:85:f6:6b:
3b:d6:78:23:7b:f6:99:42:7f:f8:d0:fb:a2:4a:03:75:e2:07:
6a:44:ba:a0:8a:e2:76:c2:53:2d:b7:9d:51:f0:af:d1:b3:3c:
79:cd:47:7d:1b:55:a8:db:6b:c3:23:34:ea:f8:4d:27:b2:68:
c5:b5:00:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha9xIXRsgIAQnEkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjAzZWM5YzMtNmE3Zi00NDU1LWJhZWUtNTk5OWUyNTNl
NzM1MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk
OWRkZTg0MTQtZTQ2ZC00ZDE2LWFhMGMtMTYyODJkNGY0NTU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeqcXi3mDC+3kWp/GCXM/ZOHB4BsFu4SkNDQ
n+MG3HPxEevJaHtsn7aw7A2jssYfD6VYJp/KGY5dXLTS73wz8HbP/C+H/0I76NvB
zFyJg2d/MTEzlPses5fvDaVF/Wk60cgupoCgtj3s+J9QqpIr/GfE7Dz0wZ9k6P4V
QAKBRxY0bsu2mMHKpTJTO+OjkYDsnx+TAyd2HoKTJjcW1941cOURZkc7AbeB2kY5
Mk9YLqZ2SErcHDGYL8bWgoI1Igbw6DReO4GH58orK7zwIK+G7kzz9tgHFC47q6LU
dj103jmGWNHGwrzDsG195KiFRIl+JSS/k2ol1hMW44MmRbDJ+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO3ARO6881ccE0dJvu+BzBuTiqClMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MDNl
YzljMy02YTdmLTQ0NTUtYmFlZS01OTk5ZTI1M2U3MzUvYjRhOGNmZjgtOTI1Yi0z
OWNmLWIyMWItMzU4YWQ4NmRlN2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjAzZWM5YzMtNmE3Zi00NDU1LWJh
ZWUtNTk5OWUyNTNlNzM1LzYwM2VjOWMzLTZhN2YtNDQ1NS1iYWVlLTU5OTllMjUz
ZTczNS5jcmwwHwYDVR0jBBgwFoAUjizA4AM53/kyE6phIfirLWf4uvEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82MDNlYzljMy02YTdmLTQ0NTUtYmFlZS01OTk5
ZTI1M2U3MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjG2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALPF6GXp4ZoU1cgmsQEFmT088m11XzgEdnXA5TbLs9fKV62MY6rfPM5K
+is1Os2OHtM19PsRO07ewMqSofm1AEDtSi7QaPp6wYogoLuHIMJJCmRpEhNMmVJ6
5JsNk/JfwYM6z5W4lC4LKsqAKxC2PmypNIx7AbJHLhkXgifSujPKy/OYAW5rukIn
hsNGPjAqsjFBCYML/rdIRt8B5VoqikExhg37w75aquxwtgTPksw/QDWCfGyaTbbf
QzsBtLDarWmQqYX2azvWeCN79plCf/jQ+6JKA3XiB2pEuqCK4nbCUy23nVHwr9Gz
PHnNR30bVajba8MjNOr4TSeyaMW1ADs=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:10 2025 by rpki-client