Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/6efd3a08-acde-3bdd-85b5-4eba533e50f3.roa
File: 6efd3a08-acde-3bdd-85b5-4eba533e50f3.roa (raw, json)
Hash identifier: UZcHIZxlBU+fI0OY3h9N12sFHRYc1N7+AiLfHwGadSM=
Subject key identifier: 41:B5:55:51:7D:76:20:69:E4:E8:44:F1:5D:72:8E:04:4B:39:C0:A8
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F432858491ED6D8FD4D81CA70305F1780
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/6efd3a08-acde-3bdd-85b5-4eba533e50f3.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 13414
IP address blocks: 199.59.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:d8:fd:4d:81:ca:70:30:5f:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=3e5102c8-4d62-4e1a-9a7e-2f3831fb6890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ce:a4:b9:eb:4c:96:8e:df:fb:94:ca:8a:f2:
a2:63:48:f4:c0:ea:9d:e0:ba:03:3e:67:cd:93:5d:
5f:59:79:84:c6:80:22:be:44:44:76:ca:c9:38:64:
49:71:c7:31:00:2f:77:76:52:60:fd:b2:a5:09:72:
bb:86:46:22:b2:a0:41:76:40:29:bb:e6:fa:24:f0:
62:f9:83:c3:d5:13:55:a7:6b:8d:3f:5c:fc:07:27:
45:3a:64:7b:cf:24:1f:48:56:3c:24:a0:85:03:e5:
0e:cb:ba:ae:2c:e0:76:0c:59:bd:40:09:0a:12:4f:
00:61:7c:62:58:38:c0:ee:d6:96:f8:26:ef:72:57:
ba:be:37:4d:65:f3:14:18:f2:26:73:e0:83:9e:eb:
a9:cd:72:36:36:1a:0f:03:af:c8:ab:64:ae:ee:e9:
c3:64:a7:53:6e:d6:13:63:ad:1d:1a:c0:d9:19:86:
46:a7:fe:99:cb:76:5c:06:1a:ee:77:64:db:27:39:
9c:24:48:f5:05:65:36:62:3b:f3:86:ba:c3:75:f0:
8d:7a:dd:51:f3:16:2e:d3:7f:08:2c:34:10:82:2f:
ef:34:e6:39:71:4a:74:09:05:3a:ae:e2:fe:fc:67:
5b:77:77:2f:a3:90:38:30:7a:9f:b0:c1:e9:84:5c:
a7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B5:55:51:7D:76:20:69:E4:E8:44:F1:5D:72:8E:04:4B:39:C0:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/6efd3a08-acde-3bdd-85b5-4eba533e50f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
199.59.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:1a:2a:c3:f9:f6:a4:be:e0:35:17:ae:02:2f:00:d5:7a:c4:
21:63:37:37:b2:f7:c2:0e:8f:d7:2d:d3:1d:08:a2:8a:76:c8:
92:a5:95:98:39:7e:98:91:d1:aa:1f:dc:73:ee:b2:21:d1:eb:
26:29:28:0e:29:86:ed:63:82:d3:fe:51:6c:5a:79:79:09:6e:
27:0a:07:3b:b1:4c:61:be:79:e8:df:83:cc:6f:b8:a0:17:a0:
d9:4c:24:7f:97:81:df:fd:b2:0f:69:f3:53:4a:e3:3f:ae:30:
d1:6e:39:4c:61:d7:b2:b8:81:62:c9:60:4e:94:d4:3f:d1:06:
b0:19:b5:c4:3a:9a:19:a5:f3:1c:cb:b4:b5:48:48:b1:89:cf:
90:cc:26:54:21:40:ab:f2:37:ef:6e:9a:53:2c:cf:d3:d5:13:
c5:7c:4e:a9:89:a5:68:1a:94:8f:d5:76:65:d8:4b:28:0f:e5:
14:f4:e3:e5:44:d7:91:d3:fc:6f:1e:54:b8:ce:7f:98:92:2e:
f7:09:6e:c0:dc:41:88:dc:61:04:a2:96:81:2d:69:69:da:13:
2a:da:10:b7:1d:46:36:9c:1b:b7:8c:be:21:48:4b:98:21:6a:
5a:0b:a2:23:0b:48:1c:d7:8b:f6:b8:a6:f5:19:07:2e:09:29:
68:24:7e:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1tj9TYHKcDBfF4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy
NTc2MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk
M2U1MTAyYzgtNGQ2Mi00ZTFhLTlhN2UtMmYzODMxZmI2ODkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM6kuetMlo7f+5TKivKiY0j0wOqd4LoDPmfN
k11fWXmExoAivkREdsrJOGRJcccxAC93dlJg/bKlCXK7hkYisqBBdkApu+b6JPBi
+YPD1RNVp2uNP1z8BydFOmR7zyQfSFY8JKCFA+UOy7quLOB2DFm9QAkKEk8AYXxi
WDjA7taW+Cbvcle6vjdNZfMUGPImc+CDnuupzXI2NhoPA6/Iq2Su7unDZKdTbtYT
Y60dGsDZGYZGp/6Zy3ZcBhrud2TbJzmcJEj1BWU2YjvzhrrDdfCNet1R8xYu038I
LDQQgi/vNOY5cUp0CQU6ruL+/Gdbd3cvo5A4MHqfsMHphFynSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEG1VVF9diBp5OhE8V1yjgRLOcCoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3
YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvNmVmZDNhMDgtYWNkZS0z
YmRkLTg1YjUtNGViYTUzM2U1MGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3
YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi
MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh
NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxzuUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACIaKsP59qS+4DUXrgIvANV6xCFjNzey98IOj9ct0x0Ioop2yJKllZg5
fpiR0aof3HPusiHR6yYpKA4phu1jgtP+UWxaeXkJbicKBzuxTGG+eejfg8xvuKAX
oNlMJH+Xgd/9sg9p81NK4z+uMNFuOUxh17K4gWLJYE6U1D/RBrAZtcQ6mhml8xzL
tLVISLGJz5DMJlQhQKvyN+9umlMsz9PVE8V8TqmJpWgalI/VdmXYSygP5RT04+VE
15HT/G8eVLjOf5iSLvcJbsDcQYjcYQSiloEtaWnaEyraELcdRjacG7eMviFIS5gh
aloLoiMLSBzXi/a4pvUZBy4JKWgkfiA=
-----END CERTIFICATE-----
Generated at Wed Apr 9 19:42:34 2025 by rpki-client