Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/1d1bdec8-4fd6-3f71-a5b7-9b80adda0609.roa
File: 1d1bdec8-4fd6-3f71-a5b7-9b80adda0609.roa (raw, json)
Hash identifier: 2OQtkT0rRy4hWSE+um4afKXR/M59TpBBn5bDCIoSz5M=
Subject key identifier: 58:54:AF:B4:19:C1:01:D5:9A:F4:4A:00:71:0D:64:D0:94:27:A8:6D
Certificate issuer: /CN=e8c73746-18f6-4692-80c6-1d7b3e93659a
Certificate serial: 010D0C9F43285849203C1003F09457E9C86D4C80
Authority key identifier: 37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/1d1bdec8-4fd6-3f71-a5b7-9b80adda0609.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 19318
IP address blocks: 198.96.88.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:10:03:f0:94:57:e9:c8:6d:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c73746-18f6-4692-80c6-1d7b3e93659a
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=dd53f928-e2a9-4f44-af58-6f5db090d78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:07:65:42:ff:09:08:64:e9:32:59:9f:18:97:
c7:bb:33:b5:5d:dd:a6:05:c8:5c:ef:60:49:48:ad:
e8:1f:69:de:42:97:e3:2a:a5:09:ab:53:b0:12:1d:
b1:dd:9c:bf:63:c6:2a:4a:81:b3:8f:3c:fc:92:27:
c3:05:28:eb:81:02:2c:e0:23:0c:de:98:c6:84:fa:
dd:20:ac:eb:d1:e8:f6:ee:55:9f:8d:4d:06:82:9c:
ab:f6:4f:7a:b7:aa:2a:dd:b6:23:e7:f9:27:5b:45:
be:fb:25:85:f8:35:98:20:ec:82:53:1e:0f:70:39:
bf:bf:f8:f5:bb:3c:53:b4:3d:96:57:9f:e4:11:91:
5e:a9:15:f1:f1:aa:1f:6f:c2:49:dd:d9:19:98:9e:
33:36:7e:17:67:af:f7:e0:a9:62:03:30:71:99:13:
96:f3:91:43:a8:82:fd:63:31:75:f2:bf:f6:12:4e:
b0:fc:ae:1e:40:a7:9a:0d:0d:76:fb:3a:8b:b0:ed:
c7:72:1f:41:f1:5c:60:f5:bc:0f:4c:dd:b3:bf:0c:
c0:47:82:17:87:d4:fb:d8:dd:5e:e1:e6:bf:43:32:
96:11:38:7c:a6:8c:89:1d:46:81:cd:dd:13:b0:cc:
86:f1:17:2a:e5:26:8a:ef:8a:39:90:22:f0:4e:de:
dc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:54:AF:B4:19:C1:01:D5:9A:F4:4A:00:71:0D:64:D0:94:27:A8:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/1d1bdec8-4fd6-3f71-a5b7-9b80adda0609.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl
X509v3 Authority Key Identifier:
keyid:37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.96.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:9c:00:7e:39:a5:33:ee:39:6f:fa:30:d2:10:40:66:63:4c:
2d:86:aa:cc:09:c9:29:48:7a:05:35:42:c6:26:d9:64:cb:9f:
fc:34:6c:b9:5d:90:23:ab:2f:92:30:4f:f5:ff:3d:20:1a:27:
a4:45:b3:b2:c6:d9:6b:ae:21:bf:2b:ce:8e:d1:78:d8:16:35:
94:1b:1b:4f:e0:c9:75:f7:88:8c:96:4b:68:bf:39:bb:cf:01:
4f:96:ee:e5:f5:9b:63:b0:91:c6:ac:de:46:bb:e0:7a:cd:0b:
e1:27:be:2a:88:8a:a9:6f:4d:7d:93:e9:85:4a:db:ce:81:f4:
61:8d:70:a1:7a:a1:61:49:8f:69:b3:8b:0d:50:be:53:bb:a7:
8c:02:07:49:01:53:c3:ca:47:83:f6:8b:1c:50:ce:41:ad:78:
15:90:da:73:15:7e:50:6b:da:f2:62:27:1b:d4:f1:bd:ef:82:
26:02:2c:e7:9e:c7:74:b5:4c:c3:7d:37:28:1c:57:68:41:e8:
45:7a:ac:b2:6f:6f:00:1f:8b:f1:1f:d8:d3:25:cc:9c:c1:02:
10:ea:58:03:5c:3e:a5:3b:aa:2b:46:b9:f7:25:93:1d:ec:88:
2d:9b:d5:41:ad:1f:24:e0:32:ae:99:67:69:b2:70:7c:69:58:
ea:de:71:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPBAD8JRX6chtTIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThjNzM3NDYtMThmNi00NjkyLTgwYzYtMWQ3YjNlOTM2
NTlhMB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk
ZGQ1M2Y5MjgtZTJhOS00ZjQ0LWFmNTgtNmY1ZGIwOTBkNzhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQdlQv8JCGTpMlmfGJfHuzO1Xd2mBchc72BJ
SK3oH2neQpfjKqUJq1OwEh2x3Zy/Y8YqSoGzjzz8kifDBSjrgQIs4CMM3pjGhPrd
IKzr0ej27lWfjU0Ggpyr9k96t6oq3bYj5/knW0W++yWF+DWYIOyCUx4PcDm/v/j1
uzxTtD2WV5/kEZFeqRXx8aofb8JJ3dkZmJ4zNn4XZ6/34KliAzBxmROW85FDqIL9
YzF18r/2Ek6w/K4eQKeaDQ12+zqLsO3Hch9B8Vxg9bwPTN2zvwzAR4IXh9T72N1e
4ea/QzKWETh8poyJHUaBzd0TsMyG8Rcq5SaK74o5kCLwTt7chQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFhUr7QZwQHVmvRKAHENZNCUJ6htMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lOGM3
Mzc0Ni0xOGY2LTQ2OTItODBjNi0xZDdiM2U5MzY1OWEvMWQxYmRlYzgtNGZkNi0z
ZjcxLWE1YjctOWI4MGFkZGEwNjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZThjNzM3NDYtMThmNi00NjkyLTgw
YzYtMWQ3YjNlOTM2NTlhL2U4YzczNzQ2LTE4ZjYtNDY5Mi04MGM2LTFkN2IzZTkz
NjU5YS5jcmwwHwYDVR0jBBgwFoAUNwqXWXTVXmOGt2p3uKhHHC7BMdkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lOGM3Mzc0Ni0xOGY2LTQ2OTItODBjNi0xZDdi
M2U5MzY1OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxmBYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAOcAH45pTPuOW/6MNIQQGZjTC2GqswJySlIegU1QsYm2WTLn/w0bLld
kCOrL5IwT/X/PSAaJ6RFs7LG2WuuIb8rzo7ReNgWNZQbG0/gyXX3iIyWS2i/ObvP
AU+W7uX1m2Owkcas3ka74HrNC+EnviqIiqlvTX2T6YVK286B9GGNcKF6oWFJj2mz
iw1QvlO7p4wCB0kBU8PKR4P2ixxQzkGteBWQ2nMVflBr2vJiJxvU8b3vgiYCLOee
x3S1TMN9NygcV2hB6EV6rLJvbwAfi/Ef2NMlzJzBAhDqWANcPqU7qitGufclkx3s
iC2b1UGtHyTgMq6ZZ2mycHxpWOrecVg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:26:53 2025 by rpki-client