Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/99eeaada-6222-3a6a-b4e1-aada8f09e5f5.roa
File: 99eeaada-6222-3a6a-b4e1-aada8f09e5f5.roa (raw, json)
Hash identifier: TmHVHN/O1VNcbxAtYP7MU7oQpXWOaOWpthcRrUN4/Uo=
Subject key identifier: DB:3D:52:BF:65:8F:79:FB:5C:1E:C0:82:8E:42:6A:69:75:F0:C1:88
Certificate issuer: /CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
Certificate serial: 010D0C9F4328584937D93AAE357D987B336750C0
Authority key identifier: 83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/99eeaada-6222-3a6a-b4e1-aada8f09e5f5.roa
Signing time: Mon 17 Mar 2025 13:00:52 +0000
ROA not before: Mon 17 Mar 2025 13:00:52 +0000
ROA not after: Sun 15 Jun 2025 13:00:52 +0000
asID: 30045
IP address blocks: 192.219.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:37:d9:3a:ae:35:7d:98:7b:33:67:50:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
Validity
Not Before: Mar 17 13:00:52 2025 GMT
Not After : Jun 15 13:00:52 2025 GMT
Subject: CN=179f2fc9-8e2c-46cd-96be-079e9f7321d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:33:b5:3a:12:88:8a:5e:05:d7:93:7d:d5:9b:
33:17:9f:5d:30:50:2f:24:90:77:d9:5b:d5:0e:d2:
b3:3c:c0:31:f1:68:8e:2f:28:58:6c:7b:dc:33:fd:
98:7e:f4:08:28:19:d5:1e:87:c6:bd:c0:e8:87:2d:
41:aa:30:68:c1:d3:81:55:a4:9b:78:56:05:59:0c:
65:23:dc:69:a7:5e:74:2f:c3:e7:25:80:d5:55:e7:
9d:4e:4b:92:92:04:36:c7:c9:8c:08:23:c0:35:53:
47:9d:20:5d:b7:1e:af:b5:b3:58:95:36:e6:c8:f4:
a6:4c:04:f5:f5:11:95:a4:3a:70:76:07:57:1e:71:
4d:2c:0a:ad:62:c4:fe:dd:7d:57:10:b0:24:b8:fd:
60:d6:af:08:6d:e1:c5:01:17:be:da:c5:77:58:af:
0e:a0:7e:1b:0a:7a:07:cc:d2:79:e3:57:9b:28:45:
99:4f:0c:3f:e8:fd:ef:7a:ec:13:92:4a:d0:e1:e8:
7e:15:d8:34:5b:83:2b:2e:51:1c:6d:5f:43:06:f8:
73:72:0c:60:9c:c7:2f:f1:d2:02:7d:f6:ae:a1:30:
fa:75:16:34:66:ed:2c:ad:41:ca:42:9b:a4:b6:90:
9a:ec:23:a4:ed:14:10:f0:e7:6c:1c:42:a2:17:95:
c6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3D:52:BF:65:8F:79:FB:5C:1E:C0:82:8E:42:6A:69:75:F0:C1:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/99eeaada-6222-3a6a-b4e1-aada8f09e5f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl
X509v3 Authority Key Identifier:
keyid:83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
sbgp-ipAddrBlock: critical
IPv4:
192.219.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:c9:c2:d5:57:68:54:cc:fb:74:24:97:e4:57:6c:fa:fd:4d:
c8:9f:ea:7b:99:91:85:f2:01:46:da:18:b5:4d:c2:4f:fd:fe:
6e:f7:33:56:b3:6f:06:0d:e7:02:64:df:fe:97:78:4f:46:51:
fa:a9:b3:f4:2c:0a:f3:9c:63:a3:9e:70:71:af:ff:1b:d8:fe:
d6:80:04:44:05:f1:71:8d:1a:f8:09:d5:3b:65:0c:de:3f:02:
06:88:5b:ba:28:0b:06:1d:55:3c:4c:5b:00:f8:13:bf:80:a2:
fc:bc:98:c4:80:44:d2:c2:53:f2:7d:ed:2c:0e:4e:10:82:f8:
57:19:d1:c7:da:3f:71:e6:22:e6:b7:06:3c:c5:0e:c5:5d:b6:
c9:43:de:02:9b:e8:4f:ee:e9:07:27:64:a2:d0:62:35:17:dc:
59:f1:78:15:65:24:13:1d:91:01:02:ca:6d:4d:81:61:4b:41:
d8:14:a8:e8:bd:3f:33:31:10:f1:20:48:58:46:51:c6:1c:97:
15:f6:1c:79:23:e5:0a:cc:e2:24:89:0d:d3:8a:cb:3d:99:b7:
4e:80:8a:58:cf:96:2c:c4:4f:b9:23:30:5c:12:bc:23:ef:f9:
87:55:f8:20:56:ec:3d:c5:c2:fe:a6:c9:6e:32:99:3d:22:54:
89:78:18:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk32TquNX2YezNnUMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGFjMWE1NmItZWEzMy00YmQ2LTlkM2UtMDA4OTZhOTFk
YjZiMB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk
MTc5ZjJmYzktOGUyYy00NmNkLTk2YmUtMDc5ZTlmNzMyMWQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDO1OhKIil4F15N91ZszF59dMFAvJJB32VvV
DtKzPMAx8WiOLyhYbHvcM/2YfvQIKBnVHofGvcDohy1BqjBowdOBVaSbeFYFWQxl
I9xpp150L8PnJYDVVeedTkuSkgQ2x8mMCCPANVNHnSBdtx6vtbNYlTbmyPSmTAT1
9RGVpDpwdgdXHnFNLAqtYsT+3X1XELAkuP1g1q8IbeHFARe+2sV3WK8OoH4bCnoH
zNJ541ebKEWZTww/6P3veuwTkkrQ4eh+Fdg0W4MrLlEcbV9DBvhzcgxgnMcv8dIC
ffauoTD6dRY0Zu0srUHKQpuktpCa7COk7RQQ8OdsHEKiF5XGiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNs9Ur9lj3n7XB7Ago5Caml18MGIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YWMx
YTU2Yi1lYTMzLTRiZDYtOWQzZS0wMDg5NmE5MWRiNmIvOTllZWFhZGEtNjIyMi0z
YTZhLWI0ZTEtYWFkYThmMDllNWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGFjMWE1NmItZWEzMy00YmQ2LTlk
M2UtMDA4OTZhOTFkYjZiLzhhYzFhNTZiLWVhMzMtNGJkNi05ZDNlLTAwODk2YTkx
ZGI2Yi5jcmwwHwYDVR0jBBgwFoAUg3U6Yyir4o99wKc7TDozymMHEyUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YWMxYTU2Yi1lYTMzLTRiZDYtOWQzZS0wMDg5
NmE5MWRiNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwNsIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAnJwtVXaFTM+3Qkl+RXbPr9Tcif6nuZkYXyAUbaGLVNwk/9/m73M1az
bwYN5wJk3/6XeE9GUfqps/QsCvOcY6OecHGv/xvY/taABEQF8XGNGvgJ1TtlDN4/
AgaIW7ooCwYdVTxMWwD4E7+Aovy8mMSARNLCU/J97SwOThCC+FcZ0cfaP3HmIua3
BjzFDsVdtslD3gKb6E/u6QcnZKLQYjUX3FnxeBVlJBMdkQECym1NgWFLQdgUqOi9
PzMxEPEgSFhGUcYclxX2HHkj5QrM4iSJDdOKyz2Zt06AiljPlizET7kjMFwSvCPv
+YdV+CBW7D3Fwv6myW4ymT0iVIl4GEg=
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:49:20 2025 by rpki-client