Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/e1767964-d236-3000-b921-aed84f6b7086.roa
File: e1767964-d236-3000-b921-aed84f6b7086.roa (raw, json)
Hash identifier: waAA4YlpKicn4eno7e/VsmcGiMeYmxcXt8a8k7+lt9M=
Subject key identifier: 60:48:FA:EA:4F:55:E5:57:46:03:F1:2E:6E:53:AE:80:8A:C0:D8:EB
Certificate issuer: /CN=5bab7542-1747-4199-9e18-f75a006e302e
Certificate serial: 010D0C9F4328584891DB2FBD2027D63457087B00
Authority key identifier: 51:79:4D:4F:C2:A9:14:50:50:03:18:22:69:6E:5B:19:AE:36:CB:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/e1767964-d236-3000-b921-aed84f6b7086.roa
Signing time: Fri 17 Jan 2025 02:00:40 +0000
ROA not before: Fri 17 Jan 2025 02:00:40 +0000
ROA not after: Thu 17 Apr 2025 01:00:40 +0000
asID: 7018
IP address blocks: 199.255.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:91:db:2f:bd:20:27:d6:34:57:08:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bab7542-1747-4199-9e18-f75a006e302e
Validity
Not Before: Jan 17 02:00:40 2025 GMT
Not After : Apr 17 01:00:40 2025 GMT
Subject: CN=775f4a0c-15b6-4285-8ffe-98a4e47bc60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b5:a5:ae:50:88:b7:2a:f2:b7:db:a6:ba:59:
5f:a3:aa:a0:90:57:c6:1c:ad:48:ef:99:a7:fb:7c:
b2:86:25:9a:13:39:ed:14:3e:34:96:23:72:65:81:
20:5f:65:81:ed:22:33:e0:ce:21:87:53:ba:99:fb:
df:94:01:bc:b3:92:9e:90:2c:da:5b:6b:be:9d:b6:
1e:4e:d1:e5:89:6d:68:d2:cb:2a:ff:08:7c:83:2c:
7d:56:66:f6:6b:bf:dd:1b:47:c3:90:26:6f:96:48:
6f:e1:a6:2d:dd:1a:f5:7a:bf:3d:cf:f9:a1:30:ac:
6d:31:ca:48:c2:2e:97:f9:bf:b7:46:b5:d2:dc:8b:
f7:c1:23:53:b6:4f:3d:5c:88:1c:f8:e5:e3:ae:e2:
49:79:dc:ba:c1:fc:2a:61:bf:d7:54:20:de:a4:f2:
54:95:7e:44:30:aa:79:16:67:00:85:40:89:76:93:
b6:1e:e0:e7:05:ae:a3:e4:f5:c3:b4:8e:59:b8:8c:
f3:93:71:58:e9:65:e1:7d:2f:8c:10:23:c8:e7:6d:
1d:17:e1:00:a5:fb:94:59:2e:1b:c1:dc:17:d3:32:
b0:98:4d:04:c2:9f:7f:6f:ec:73:9e:5b:d5:b3:79:
0b:ec:7a:69:ca:86:15:fb:9f:ca:4c:95:6f:a2:5b:
8f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:48:FA:EA:4F:55:E5:57:46:03:F1:2E:6E:53:AE:80:8A:C0:D8:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/e1767964-d236-3000-b921-aed84f6b7086.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/5bab7542-1747-4199-9e18-f75a006e302e.crl
X509v3 Authority Key Identifier:
keyid:51:79:4D:4F:C2:A9:14:50:50:03:18:22:69:6E:5B:19:AE:36:CB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e.cer
sbgp-ipAddrBlock: critical
IPv4:
199.255.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:58:cb:1e:aa:8d:00:6d:80:65:5a:af:01:93:e6:fc:79:9f:
97:30:08:0e:86:38:55:4e:df:e3:a6:49:11:96:d8:53:7c:c9:
30:19:26:9a:1a:51:21:c3:0e:0e:a7:af:d4:9f:ba:d8:a7:5d:
7f:53:f4:f8:89:a8:bb:6f:fa:d0:a6:98:4b:e3:a7:79:b4:0d:
87:c0:88:fd:d4:b8:e2:fb:00:92:e8:13:9d:82:00:47:99:33:
27:ee:51:c1:7e:49:75:c5:17:b9:1f:fd:13:2b:a5:0e:ad:5d:
8d:8a:b3:25:02:65:aa:32:d4:98:ce:79:f1:d1:21:95:38:ae:
3c:64:54:59:9e:c6:da:b4:3b:cc:10:6a:f2:eb:c6:24:26:84:
11:52:c8:52:59:3e:8a:22:86:8f:ba:f6:0d:88:4f:51:32:ac:
4b:59:80:ce:e7:b8:32:c6:8d:b2:87:6b:9f:5e:8b:ad:8f:c7:
56:e2:0c:fd:5d:12:e0:09:b3:bc:ae:5e:51:b5:5e:4f:0a:c5:
c5:ed:2b:05:82:2c:3e:dc:dd:7d:c4:24:42:47:0e:8e:d6:bf:
e4:6a:10:19:ae:bd:13:3b:1f:b8:85:35:33:7d:ed:82:23:8d:
1c:b3:ae:12:27:0f:bf:e0:49:0e:8a:8d:53:af:02:db:b1:4d:
53:9d:c8:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiR2y+9ICfWNFcIewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWJhYjc1NDItMTc0Ny00MTk5LTllMTgtZjc1YTAwNmUz
MDJlMB4XDTI1MDExNzAyMDA0MFoXDTI1MDQxNzAxMDA0MFowLzEtMCsGA1UEAxMk
Nzc1ZjRhMGMtMTViNi00Mjg1LThmZmUtOThhNGU0N2JjNjBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbWlrlCItyryt9umullfo6qgkFfGHK1I75mn
+3yyhiWaEzntFD40liNyZYEgX2WB7SIz4M4hh1O6mfvflAG8s5KekCzaW2u+nbYe
TtHliW1o0ssq/wh8gyx9Vmb2a7/dG0fDkCZvlkhv4aYt3Rr1er89z/mhMKxtMcpI
wi6X+b+3RrXS3Iv3wSNTtk89XIgc+OXjruJJedy6wfwqYb/XVCDepPJUlX5EMKp5
FmcAhUCJdpO2HuDnBa6j5PXDtI5ZuIzzk3FY6WXhfS+MECPI520dF+EApfuUWS4b
wdwX0zKwmE0Ewp9/b+xznlvVs3kL7HppyoYV+5/KTJVvoluPFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGBI+upPVeVXRgPxLm5TroCKwNjrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YmFi
NzU0Mi0xNzQ3LTQxOTktOWUxOC1mNzVhMDA2ZTMwMmUvZTE3Njc5NjQtZDIzNi0z
MDAwLWI5MjEtYWVkODRmNmI3MDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWJhYjc1NDItMTc0Ny00MTk5LTll
MTgtZjc1YTAwNmUzMDJlLzViYWI3NTQyLTE3NDctNDE5OS05ZTE4LWY3NWEwMDZl
MzAyZS5jcmwwHwYDVR0jBBgwFoAUUXlNT8KpFFBQAxgiaW5bGa42yxwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YmFiNzU0Mi0xNzQ3LTQxOTktOWUxOC1mNzVh
MDA2ZTMwMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx//sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAElYyx6qjQBtgGVarwGT5vx5n5cwCA6GOFVO3+OmSRGW2FN8yTAZJpoa
USHDDg6nr9SfutinXX9T9PiJqLtv+tCmmEvjp3m0DYfAiP3UuOL7AJLoE52CAEeZ
MyfuUcF+SXXFF7kf/RMrpQ6tXY2KsyUCZaoy1JjOefHRIZU4rjxkVFmextq0O8wQ
avLrxiQmhBFSyFJZPooiho+69g2IT1EyrEtZgM7nuDLGjbKHa59ei62Px1biDP1d
EuAJs7yuXlG1Xk8KxcXtKwWCLD7c3X3EJEJHDo7Wv+RqEBmuvRM7H7iFNTN97YIj
jRyzrhInD7/gSQ6KjVOvAtuxTVOdyAY=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:53:29 2025 by rpki-client