Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/594dbf2b-3f20-3d3f-afb2-ae4dbb600345.roa
File: 594dbf2b-3f20-3d3f-afb2-ae4dbb600345.roa (raw, json)
Hash identifier: JNbZYaKiSYs4o1HWm2RMsgl9E2MOVP3fk3+w/dC7x8k=
Subject key identifier: F6:71:14:DF:1B:54:65:5F:75:08:1A:0A:3E:F7:43:D4:40:21:91:A2
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584910E17A35077FE4817756A4C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/594dbf2b-3f20-3d3f-afb2-ae4dbb600345.roa
Signing time: Mon 03 Mar 2025 14:00:53 +0000
ROA not before: Mon 03 Mar 2025 14:00:53 +0000
ROA not after: Sun 01 Jun 2025 13:00:53 +0000
asID: 13335
IP address blocks: 199.27.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:e1:7a:35:07:7f:e4:81:77:56:a4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 3 14:00:53 2025 GMT
Not After : Jun 1 13:00:53 2025 GMT
Subject: CN=c08b56bc-0088-434c-8538-4d32ce0ff3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:aa:be:26:f2:ad:02:61:b1:71:1e:58:55:f6:
f1:13:20:2e:00:14:99:ae:1c:5e:87:e3:56:26:05:
db:65:d2:e5:ee:80:42:5f:de:6f:41:bc:a6:33:a9:
e2:0a:3c:74:cd:de:f8:bc:e7:3e:53:a6:e6:f1:06:
60:0d:84:2c:d5:80:f7:03:45:7b:fe:72:eb:26:8d:
14:f6:5c:ef:22:81:88:76:ca:78:e7:87:73:f6:39:
ff:72:2e:71:36:b8:ce:86:1e:96:b2:1c:9e:3d:25:
2f:32:37:be:04:25:00:4b:f5:8c:a3:98:f9:4e:4a:
5e:8d:22:1a:2d:96:f6:1e:06:1e:bc:31:83:ff:53:
9f:65:19:ab:9e:70:f8:50:55:75:aa:1e:74:4b:45:
b0:b6:53:8e:9d:c7:21:26:4e:5f:82:0b:2d:ae:10:
d8:1d:86:32:34:08:ee:ea:a7:56:b2:bc:12:48:d4:
0a:44:3b:9e:84:5d:da:12:e7:49:45:2b:c2:88:b8:
31:17:0f:26:27:9d:49:d7:e0:a6:d7:fe:6c:2c:2e:
e9:26:ac:37:47:ae:ed:43:e2:40:de:36:90:2b:18:
60:67:b2:cd:65:4b:3f:13:93:78:e9:35:eb:d7:f6:
df:8e:e5:af:ad:1d:87:6d:20:99:ab:0f:9f:b7:31:
be:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:71:14:DF:1B:54:65:5F:75:08:1A:0A:3E:F7:43:D4:40:21:91:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/594dbf2b-3f20-3d3f-afb2-ae4dbb600345.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
199.27.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:21:36:92:03:cd:28:20:73:f9:cc:3e:60:b2:01:59:54:df:
45:a9:b1:41:a8:43:64:1b:1a:81:72:5b:67:c8:5b:d7:36:5e:
62:e8:fd:bb:70:36:de:9a:3a:e0:7a:66:7d:a4:8c:9c:df:5d:
bf:ef:9c:bf:fc:99:2e:6d:78:ef:24:1d:4c:32:13:c6:3e:03:
c0:12:d6:98:05:f7:e2:01:4a:2e:c9:13:45:4f:35:08:21:7c:
58:f3:32:6c:13:7c:2d:0d:85:6b:84:f9:c9:39:ca:3f:3b:fa:
54:32:27:e6:fd:45:20:73:c2:e4:a8:48:ca:a5:01:79:f8:a3:
81:8d:1c:d9:31:08:1e:ba:16:c9:49:0f:04:46:6b:be:53:a6:
0e:bb:20:10:3a:8c:c9:32:ec:7d:36:59:aa:ba:8c:9f:e8:e9:
2a:36:69:14:ff:19:0f:a8:a1:6f:5a:af:1f:fa:0b:6c:95:c2:
c4:65:fe:d8:c1:57:7c:73:f6:65:6f:5e:0e:e3:20:54:fb:15:
c2:72:67:3a:07:45:8f:58:6c:4d:c7:39:34:8e:c2:f9:1b:90:
65:c4:6f:b4:de:f0:2a:ca:7a:bb:80:7b:f3:15:8e:de:72:2b:
68:70:a8:c0:ab:87:c7:08:ca:4b:30:86:dc:08:88:56:97:1c:
c9:31:91:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkQ4Xo1B3/kgXdWpMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk
YzA4YjU2YmMtMDA4OC00MzRjLTg1MzgtNGQzMmNlMGZmM2M3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6q+JvKtAmGxcR5YVfbxEyAuABSZrhxeh+NW
JgXbZdLl7oBCX95vQbymM6niCjx0zd74vOc+U6bm8QZgDYQs1YD3A0V7/nLrJo0U
9lzvIoGIdsp454dz9jn/ci5xNrjOhh6WshyePSUvMje+BCUAS/WMo5j5TkpejSIa
LZb2HgYevDGD/1OfZRmrnnD4UFV1qh50S0WwtlOOncchJk5fggstrhDYHYYyNAju
6qdWsrwSSNQKRDuehF3aEudJRSvCiLgxFw8mJ51J1+Cm1/5sLC7pJqw3R67tQ+JA
3jaQKxhgZ7LNZUs/E5N46TXr1/bfjuWvrR2HbSCZqw+ftzG+PQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPZxFN8bVGVfdQgaCj73Q9RAIZGiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTk0ZGJmMmItM2YyMC0z
ZDNmLWFmYjItYWU0ZGJiNjAwMzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxxuAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACUhNpIDzSggc/nMPmCyAVlU30WpsUGoQ2QbGoFyW2fIW9c2XmLo/btw
Nt6aOuB6Zn2kjJzfXb/vnL/8mS5teO8kHUwyE8Y+A8AS1pgF9+IBSi7JE0VPNQgh
fFjzMmwTfC0NhWuE+ck5yj87+lQyJ+b9RSBzwuSoSMqlAXn4o4GNHNkxCB66FslJ
DwRGa75Tpg67IBA6jMky7H02Waq6jJ/o6So2aRT/GQ+ooW9arx/6C2yVwsRl/tjB
V3xz9mVvXg7jIFT7FcJyZzoHRY9YbE3HOTSOwvkbkGXEb7Te8CrKeruAe/MVjt5y
K2hwqMCrh8cIykswhtwIiFaXHMkxkSk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:10 2025 by rpki-client