Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/6a3dff99-2f62-304e-ae1f-aa03eabe7f8d.roa
File: 6a3dff99-2f62-304e-ae1f-aa03eabe7f8d.roa (raw, json)
Hash identifier: Wicb8f6Ds2ikK23DX+x2uNbfHgGgLPl6Cm7qRDYVfNo=
Subject key identifier: 93:0A:2B:82:7C:D4:20:5D:0D:5A:E5:6E:7A:F5:35:92:05:D3:A5:A7
Certificate issuer: /CN=e7bb9775-9631-4be4-a9c6-11b8ddfe6247
Certificate serial: 010D0C9F43285848F22C66B4B5BE0E4AB39084A0
Authority key identifier: 42:CE:C2:66:75:1E:F3:81:F0:25:35:81:40:83:B0:04:D7:68:EB:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/6a3dff99-2f62-304e-ae1f-aa03eabe7f8d.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 17216
IP address blocks: 192.151.136.0/21 maxlen: 24
198.24.12.0/22 maxlen: 24
199.47.224.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:66:b4:b5:be:0e:4a:b3:90:84:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7bb9775-9631-4be4-a9c6-11b8ddfe6247
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=c67ca97f-8549-417b-9f27-c73c0dc9481e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7f:f7:eb:da:fe:3c:d2:df:c9:64:07:25:c5:
21:8c:c6:73:46:1f:30:0d:a3:49:35:f6:1a:65:f0:
36:ac:2c:35:f5:09:12:77:7d:48:36:c7:14:39:b7:
c3:7f:be:ca:6a:15:76:fd:99:12:f9:f7:a6:6e:e3:
94:01:80:ab:f1:e5:36:0b:d4:76:97:db:91:ed:7f:
88:e8:a7:1e:fa:3a:eb:6a:df:31:07:99:7e:e4:ad:
76:bf:68:f9:31:a8:c6:f0:4d:19:9e:2c:18:d4:94:
a3:05:9f:a7:f6:90:7c:fe:89:c0:9b:eb:1b:fb:a2:
8b:fd:2a:2c:c2:b6:ab:79:7d:45:74:ca:d5:33:54:
5d:34:16:dd:51:b2:59:d0:29:ad:91:ba:46:c4:96:
80:d7:99:28:0f:90:86:93:bc:cc:2d:ba:67:05:09:
6b:fb:f1:21:d4:e1:65:65:d9:ba:f9:5f:e9:f2:1a:
0f:7b:15:47:f2:e3:0f:fc:ea:c5:00:47:a5:0a:83:
b6:ef:ce:9d:25:c7:6b:b8:2d:fa:79:b6:b9:cb:01:
aa:3f:86:17:a3:32:52:3d:1f:ca:ec:cd:21:e6:a4:
75:ba:5d:62:d9:ca:16:f2:c1:64:67:6b:94:22:b5:
a0:56:29:e3:9e:56:f8:51:07:4d:d1:5e:19:72:e7:
18:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0A:2B:82:7C:D4:20:5D:0D:5A:E5:6E:7A:F5:35:92:05:D3:A5:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/6a3dff99-2f62-304e-ae1f-aa03eabe7f8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.crl
X509v3 Authority Key Identifier:
keyid:42:CE:C2:66:75:1E:F3:81:F0:25:35:81:40:83:B0:04:D7:68:EB:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer
sbgp-ipAddrBlock: critical
IPv4:
192.151.136.0/21
198.24.12.0/22
199.47.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:68:ba:8f:31:41:fa:50:fc:d1:ac:d0:39:62:40:f0:04:01:
17:ca:df:8c:47:7b:fb:29:51:fe:94:f2:56:46:fd:36:47:1d:
f2:9b:01:13:8f:6a:58:9f:95:5a:34:b4:bb:03:c8:21:8f:13:
b8:21:1b:4b:e0:44:66:ef:8c:24:45:27:af:b0:88:9a:f4:a8:
ce:b4:dd:12:51:61:80:07:53:1f:97:09:2d:66:bb:43:61:87:
85:2b:05:98:ff:8c:f6:78:0c:bd:a4:f4:cd:21:fd:2f:82:51:
00:3f:03:ed:cb:76:a5:ef:92:66:7a:88:5c:45:e5:52:c6:d7:
30:ac:23:bd:23:21:21:1f:99:37:c8:51:eb:3a:3d:f9:73:b9:
4d:58:fd:ea:c6:26:da:81:94:54:76:f7:45:e3:c2:55:ae:c4:
41:d7:a3:f8:5b:cf:c3:ec:b3:2e:8e:31:e6:a4:99:df:f5:d0:
c6:5f:b2:78:c3:50:24:e7:75:f0:eb:2b:a8:d9:ec:0c:50:30:
df:9a:5a:44:d0:d0:c3:32:b1:d8:ce:b3:fa:55:72:5c:42:a8:
2e:d1:19:9a:81:cc:dd:05:7a:be:01:4f:94:fb:a5:3f:f0:8e:
bb:77:47:4f:4f:db:70:be:91:da:55:f8:fe:a2:d0:64:73:d3:
0f:b4:e6:8c
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEjyLGa0tb4OSrOQhKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiYjk3NzUtOTYzMS00YmU0LWE5YzYtMTFiOGRkZmU2
MjQ3MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk
YzY3Y2E5N2YtODU0OS00MTdiLTlmMjctYzczYzBkYzk0ODFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3n/369r+PNLfyWQHJcUhjMZzRh8wDaNJNfYa
ZfA2rCw19QkSd31INscUObfDf77KahV2/ZkS+fembuOUAYCr8eU2C9R2l9uR7X+I
6Kce+jrrat8xB5l+5K12v2j5MajG8E0ZniwY1JSjBZ+n9pB8/onAm+sb+6KL/Sos
wrareX1FdMrVM1RdNBbdUbJZ0CmtkbpGxJaA15koD5CGk7zMLbpnBQlr+/Eh1OFl
Zdm6+V/p8hoPexVH8uMP/OrFAEelCoO2786dJcdruC36eba5ywGqP4YXozJSPR/K
7M0h5qR1ul1i2coW8sFkZ2uUIrWgVinjnlb4UQdN0V4ZcucYowIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFJMKK4J81CBdDVrlbnr1NZIF06WnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lN2Ji
OTc3NS05NjMxLTRiZTQtYTljNi0xMWI4ZGRmZTYyNDcvNmEzZGZmOTktMmY2Mi0z
MDRlLWFlMWYtYWEwM2VhYmU3ZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTdiYjk3NzUtOTYzMS00YmU0LWE5
YzYtMTFiOGRkZmU2MjQ3L2U3YmI5Nzc1LTk2MzEtNGJlNC1hOWM2LTExYjhkZGZl
NjI0Ny5jcmwwHwYDVR0jBBgwFoAUQs7CZnUe84HwJTWBQIOwBNdo65kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lN2JiOTc3NS05NjMxLTRiZTQtYTljNi0xMWI4
ZGRmZTYyNDcuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDwJeIAwQC
xhgMAwQDxy/gMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAJxouo8xQfpQ/NGs0DliQPAEARfK34xHe/spUf6U
8lZG/TZHHfKbAROPaliflVo0tLsDyCGPE7ghG0vgRGbvjCRFJ6+wiJr0qM603RJR
YYAHUx+XCS1mu0Nhh4UrBZj/jPZ4DL2k9M0h/S+CUQA/A+3LdqXvkmZ6iFxF5VLG
1zCsI70jISEfmTfIUes6PflzuU1Y/erGJtqBlFR290XjwlWuxEHXo/hbz8Pssy6O
Meakmd/10MZfsnjDUCTndfDrK6jZ7AxQMN+aWkTQ0MMysdjOs/pVclxCqC7RGZqB
zN0Fer4BT5T7pT/wjrt3R09P23C+kdpV+P6i0GRz0w+05ow=
-----END CERTIFICATE-----
Generated at Thu Apr 10 05:07:15 2025 by rpki-client