Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/d9aff715-467a-358e-a765-6f5f138dd650.roa
File: d9aff715-467a-358e-a765-6f5f138dd650.roa (raw, json)
Hash identifier: dEN7tNXdCSKGxKZ7m7bZ6WL7maO2p6EvjISQ4CH9zz4=
Subject key identifier: 18:64:5C:41:A3:2D:DF:F8:E8:6F:2C:35:F2:71:07:90:EE:13:96:02
Certificate issuer: /CN=09c51633-340e-4eac-820c-a36b33746085
Certificate serial: 010D0C9F43285848DD3BABA43DDED964E31BE000
Authority key identifier: 58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/d9aff715-467a-358e-a765-6f5f138dd650.roa
Signing time: Thu 13 Feb 2025 02:00:40 +0000
ROA not before: Thu 13 Feb 2025 02:00:40 +0000
ROA not after: Wed 14 May 2025 01:00:40 +0000
asID: 8075
IP address blocks: 199.21.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:dd:3b:ab:a4:3d:de:d9:64:e3:1b:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c51633-340e-4eac-820c-a36b33746085
Validity
Not Before: Feb 13 02:00:40 2025 GMT
Not After : May 14 01:00:40 2025 GMT
Subject: CN=85983b4d-0b37-4243-97ea-f356980fc1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:46:40:9f:b2:c3:ee:e5:ee:68:e1:a6:1a:58:
a3:10:11:ea:82:20:11:e7:c6:de:4f:ea:5c:19:1b:
ac:c0:d3:65:9d:ee:48:fd:d6:ad:fe:4f:04:d5:c9:
80:81:d6:91:84:9a:89:4e:46:77:cf:7b:26:ea:09:
ea:5e:1b:03:a0:04:79:ff:06:72:0c:9e:ea:9c:1e:
54:85:a2:fd:2c:a4:52:ff:2d:02:45:0b:bb:dc:92:
e9:29:5d:01:c6:bc:e7:fa:71:ce:60:bd:2f:e8:7e:
72:26:b0:91:5f:2e:a8:48:d5:6b:f3:ec:d4:45:e3:
21:56:6b:fa:a7:d4:d5:b1:ac:26:58:b3:7f:ec:c6:
7d:12:06:43:94:9e:dd:44:cc:7a:e0:3f:0d:aa:58:
c7:70:4b:fb:fe:c5:cf:35:1a:6e:e4:bd:db:e1:32:
ba:19:72:84:b6:1b:cf:36:2e:ee:45:01:89:ca:1a:
1d:26:b4:c2:e6:f2:c5:75:ab:bc:0e:37:20:db:d0:
f4:0b:04:db:0b:91:76:2c:ed:84:c8:26:6d:bf:b4:
37:b8:ce:7d:8d:12:0d:95:14:59:d1:d0:2f:29:6d:
0e:bf:e7:b4:21:ae:b0:af:63:33:8f:c1:c5:d5:cb:
40:76:0f:e4:be:2b:7a:76:53:6d:91:41:d6:2b:b4:
12:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:64:5C:41:A3:2D:DF:F8:E8:6F:2C:35:F2:71:07:90:EE:13:96:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/d9aff715-467a-358e-a765-6f5f138dd650.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl
X509v3 Authority Key Identifier:
keyid:58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer
sbgp-ipAddrBlock: critical
IPv4:
199.21.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:0b:05:84:ad:b9:ff:ac:38:5a:d8:7b:d7:ce:31:0f:75:a8:
3c:c3:4e:b8:09:51:77:c9:2c:29:26:13:c5:71:5b:71:91:43:
de:36:67:e3:dc:42:3f:1b:fa:1e:f4:12:d3:46:79:cc:13:03:
b6:45:62:fc:59:8b:f6:f6:8a:60:fe:60:2a:40:86:0c:57:79:
b0:ca:20:6a:4c:09:96:34:39:bc:b9:b3:a5:09:11:a3:82:d0:
cc:a4:b1:43:2d:cb:28:f3:eb:89:98:45:3c:14:24:11:73:54:
b1:14:a6:e0:fa:52:05:1e:37:2a:aa:12:35:a6:6e:55:66:73:
ea:ab:59:f4:9d:f6:ad:89:a6:6e:69:75:af:a4:86:80:86:59:
ac:e9:3f:b8:5e:13:94:21:63:0f:72:a1:65:fb:1f:e9:96:73:
8d:e0:0e:35:2a:f1:6b:cd:89:d0:a2:30:5c:e2:4a:1f:64:33:
15:dd:57:31:ba:5e:8b:21:7b:40:b0:07:cd:7c:a9:1a:fe:1a:
9e:a0:82:58:7b:22:c9:ec:8c:5a:89:f9:f7:21:02:39:6a:b6:
11:c8:45:1e:a4:b0:19:1d:d4:40:98:69:6b:b6:dc:dd:99:0b:
0e:46:97:a5:74:00:b1:40:01:7d:ea:bf:24:4c:0c:04:b0:2c:
ee:60:07:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjdO6ukPd7ZZOMb4AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDljNTE2MzMtMzQwZS00ZWFjLTgyMGMtYTM2YjMzNzQ2
MDg1MB4XDTI1MDIxMzAyMDA0MFoXDTI1MDUxNDAxMDA0MFowLzEtMCsGA1UEAxMk
ODU5ODNiNGQtMGIzNy00MjQzLTk3ZWEtZjM1Njk4MGZjMWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUZAn7LD7uXuaOGmGlijEBHqgiAR58beT+pc
GRuswNNlne5I/dat/k8E1cmAgdaRhJqJTkZ3z3sm6gnqXhsDoAR5/wZyDJ7qnB5U
haL9LKRS/y0CRQu73JLpKV0Bxrzn+nHOYL0v6H5yJrCRXy6oSNVr8+zUReMhVmv6
p9TVsawmWLN/7MZ9EgZDlJ7dRMx64D8NqljHcEv7/sXPNRpu5L3b4TK6GXKEthvP
Ni7uRQGJyhodJrTC5vLFdau8Djcg29D0CwTbC5F2LO2EyCZtv7Q3uM59jRINlRRZ
0dAvKW0Ov+e0Ia6wr2Mzj8HF1ctAdg/kvit6dlNtkUHWK7QSAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBhkXEGjLd/46G8sNfJxB5DuE5YCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wOWM1
MTYzMy0zNDBlLTRlYWMtODIwYy1hMzZiMzM3NDYwODUvZDlhZmY3MTUtNDY3YS0z
NThlLWE3NjUtNmY1ZjEzOGRkNjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDljNTE2MzMtMzQwZS00ZWFjLTgy
MGMtYTM2YjMzNzQ2MDg1LzA5YzUxNjMzLTM0MGUtNGVhYy04MjBjLWEzNmIzMzc0
NjA4NS5jcmwwHwYDVR0jBBgwFoAUWNtEW2RUCGl6OWNosWnxoviKwTQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8wOWM1MTYzMy0zNDBlLTRlYWMtODIwYy1hMzZi
MzM3NDYwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxWAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJMLBYStuf+sOFrYe9fOMQ91qDzDTrgJUXfJLCkmE8VxW3GRQ942Z+Pc
Qj8b+h70EtNGecwTA7ZFYvxZi/b2imD+YCpAhgxXebDKIGpMCZY0Oby5s6UJEaOC
0MyksUMtyyjz64mYRTwUJBFzVLEUpuD6UgUeNyqqEjWmblVmc+qrWfSd9q2Jpm5p
da+khoCGWazpP7heE5QhYw9yoWX7H+mWc43gDjUq8WvNidCiMFziSh9kMxXdVzG6
Xoshe0CwB818qRr+Gp6gglh7IsnsjFqJ+fchAjlqthHIRR6ksBkd1ECYaWu23N2Z
Cw5Gl6V0ALFAAX3qvyRMDASwLO5gB34=
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:55:38 2025 by rpki-client