Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/6fec61b3-77b1-36aa-9821-a1f136b7d128.roa
File: 6fec61b3-77b1-36aa-9821-a1f136b7d128.roa (raw, json)
Hash identifier: fiGNmXeBHIiEHg711FheI7Wyjro8eOBUbafhOwD10iI=
Subject key identifier: FC:D8:68:D6:75:EE:BD:9D:DE:65:81:78:84:B4:33:56:6F:C7:DA:AD
Certificate issuer: /CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Certificate serial: 010D0C9F43285840678AF374AE63FBC8539D0840
Authority key identifier: 1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/6fec61b3-77b1-36aa-9821-a1f136b7d128.roa
Signing time: Thu 29 Dec 2022 12:00:00 +0000
ROA not before: Thu 29 Dec 2022 12:00:00 +0000
ROA not after: Fri 03 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 199.255.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:67:8a:f3:74:ae:63:fb:c8:53:9d:08:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed873ff5-c6de-428f-99ea-14eed8c5fedc
Validity
Not Before: Dec 29 12:00:00 2022 GMT
Not After : Feb 3 05:00:00 2023 GMT
Subject: CN=cee96144-5288-431c-a564-5155a103f23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6f:94:67:ad:16:26:0e:98:0b:0b:a9:91:8d:
d3:e8:60:a0:89:20:dd:68:1f:66:96:04:c7:e5:71:
0e:94:83:c9:2f:cd:f0:92:4c:72:b8:e5:34:c0:91:
c5:50:d3:39:99:3e:96:1f:8b:3e:3f:18:14:50:a1:
f1:3b:de:20:27:51:e3:cc:1d:e0:8d:4e:de:5e:72:
4d:60:39:6d:93:1a:e9:e9:bb:26:fa:12:67:29:10:
5e:84:f2:dc:19:2a:08:fc:9d:a1:f6:94:d3:6f:81:
0b:4d:8b:fb:79:ff:22:c4:a8:05:c8:57:4e:c5:82:
99:ac:79:4a:99:be:a3:d8:2f:2e:99:0c:63:ae:e0:
9e:0e:85:e9:7f:84:08:3d:5a:e4:39:04:0e:31:c0:
d9:ed:81:7f:21:7b:95:d6:ac:35:b2:8d:05:2b:c4:
bd:8b:47:51:68:6f:f3:86:79:b8:a2:b2:c1:d3:f7:
ab:6d:d0:69:77:cc:01:a8:d9:1d:1f:cc:ed:c6:30:
f4:4d:6d:a4:b5:f1:b3:d6:60:cb:6a:9d:5e:28:39:
d4:05:40:0d:85:ba:29:5e:03:53:c9:11:94:7a:29:
70:05:fe:d2:93:91:0f:82:95:6e:df:0b:d6:32:cf:
70:72:40:5f:77:f7:0c:4b:df:59:be:1f:9f:61:89:
a3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D8:68:D6:75:EE:BD:9D:DE:65:81:78:84:B4:33:56:6F:C7:DA:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/6fec61b3-77b1-36aa-9821-a1f136b7d128.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc/ed873ff5-c6de-428f-99ea-14eed8c5fedc.crl
X509v3 Authority Key Identifier:
keyid:1C:B4:CC:23:3C:C3:98:7D:79:AB:29:77:B8:C5:3B:67:6A:A6:C6:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ed873ff5-c6de-428f-99ea-14eed8c5fedc.cer
sbgp-ipAddrBlock: critical
IPv4:
199.255.192.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:30:f1:c0:07:4a:fa:d3:5a:07:45:99:13:6e:41:35:3c:72:
cf:69:12:2f:f2:fc:f2:34:be:af:81:3e:1b:f6:18:71:ae:63:
97:17:eb:71:39:51:37:e9:91:e6:18:14:8b:ff:bc:85:40:0a:
15:75:c4:12:4f:25:0b:02:af:f7:05:3b:a8:7f:be:c0:3f:75:
09:4d:d6:80:02:87:a5:73:37:a7:16:bd:76:d0:06:cf:81:cb:
8b:32:7f:19:ed:78:f7:8e:02:a3:0d:18:6b:71:b4:e7:c3:9c:
64:14:0e:ba:be:9b:be:a7:1f:2c:f4:a1:60:04:49:a7:28:8a:
f5:7b:ee:f8:85:c6:d7:82:f0:48:74:3c:06:fa:54:79:e0:fb:
d2:32:ea:31:eb:a8:f2:37:9b:c2:df:37:78:73:ab:ad:f0:d5:
a5:c3:66:d1:17:ec:6c:0a:14:de:e9:4c:9c:d1:c4:0d:49:d6:
28:fe:96:08:84:47:a3:98:fd:57:c3:c4:9a:f4:ff:b8:92:22:
d2:77:b6:d6:15:bc:1c:e6:ad:b9:40:6b:2e:60:d4:67:e9:31:
bc:22:2b:ad:86:b4:13:85:38:79:7d:40:be:3a:10:92:30:5d:
c2:8e:bb:b6:8b:cd:bb:0c:40:6f:bb:bc:03:2c:ef:06:20:30:
77:ba:c5:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBnivN0rmP7yFOdCEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWQ4NzNmZjUtYzZkZS00MjhmLTk5ZWEtMTRlZWQ4YzVm
ZWRjMB4XDTIyMTIyOTEyMDAwMFoXDTIzMDIwMzA1MDAwMFowLzEtMCsGA1UEAxMk
Y2VlOTYxNDQtNTI4OC00MzFjLWE1NjQtNTE1NWExMDNmMjNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjW+UZ60WJg6YCwupkY3T6GCgiSDdaB9mlgTH
5XEOlIPJL83wkkxyuOU0wJHFUNM5mT6WH4s+PxgUUKHxO94gJ1HjzB3gjU7eXnJN
YDltkxrp6bsm+hJnKRBehPLcGSoI/J2h9pTTb4ELTYv7ef8ixKgFyFdOxYKZrHlK
mb6j2C8umQxjruCeDoXpf4QIPVrkOQQOMcDZ7YF/IXuV1qw1so0FK8S9i0dRaG/z
hnm4orLB0/erbdBpd8wBqNkdH8ztxjD0TW2ktfGz1mDLap1eKDnUBUANhbopXgNT
yRGUeilwBf7Sk5EPgpVu3wvWMs9wckBfd/cMS99Zvh+fYYmjfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPzYaNZ17r2d3mWBeIS0M1Zvx9qtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3
M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVlZDhjNWZlZGMvNmZlYzYxYjMtNzdiMS0z
NmFhLTk4MjEtYTFmMTM2YjdkMTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWQ4NzNmZjUtYzZkZS00MjhmLTk5
ZWEtMTRlZWQ4YzVmZWRjL2VkODczZmY1LWM2ZGUtNDI4Zi05OWVhLTE0ZWVkOGM1
ZmVkYy5jcmwwHwYDVR0jBBgwFoAUHLTMIzzDmH15qyl3uMU7Z2qmxrEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZDg3M2ZmNS1jNmRlLTQyOGYtOTllYS0xNGVl
ZDhjNWZlZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx//AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEow8cAHSvrTWgdFmRNuQTU8cs9pEi/y/PI0vq+BPhv2GHGuY5cX63E5
UTfpkeYYFIv/vIVAChV1xBJPJQsCr/cFO6h/vsA/dQlN1oACh6VzN6cWvXbQBs+B
y4syfxntePeOAqMNGGtxtOfDnGQUDrq+m76nHyz0oWAESacoivV77viFxteC8Eh0
PAb6VHng+9Iy6jHrqPI3m8LfN3hzq63w1aXDZtEX7GwKFN7pTJzRxA1J1ij+lgiE
R6OY/VfDxJr0/7iSItJ3ttYVvBzmrblAay5g1GfpMbwiK62GtBOFOHl9QL46EJIw
XcKOu7aLzbsMQG+7vAMs7wYgMHe6xYs=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:33 2025 by rpki-client