Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1aea4482-4596-3858-b921-9cdd4d27ea47.roa
File: 1aea4482-4596-3858-b921-9cdd4d27ea47.roa (raw, json)
Hash identifier: 3ijaHX0dFM0fqAF4Wui6v8NvLdsCgc/93c2mFQIFIHI=
Subject key identifier: 2C:AD:56:E2:6B:13:46:C6:A7:AE:08:12:B2:11:8D:8E:20:65:2F:74
Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial: 010D0C9F43285848AFBF1F5100C36C1D91B0E000
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1aea4482-4596-3858-b921-9cdd4d27ea47.roa
Signing time: Mon 27 Jan 2025 18:58:26 +0000
ROA not before: Mon 27 Jan 2025 18:58:26 +0000
ROA not after: Sun 27 Apr 2025 17:58:26 +0000
asID: 15164
IP address blocks: 199.200.86.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:bf:1f:51:00:c3:6c:1d:91:b0:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Validity
Not Before: Jan 27 18:58:26 2025 GMT
Not After : Apr 27 17:58:26 2025 GMT
Subject: CN=95e57779-8444-4fdc-be34-500026fe9deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:28:c6:6d:eb:f8:7f:1a:66:7e:03:0b:38:88:
d2:85:d5:91:24:cd:8e:ae:28:93:ca:80:b3:4c:9f:
04:2e:1e:dc:be:8e:c3:2c:65:2f:ad:45:96:7c:85:
b5:b2:05:d1:71:54:fc:62:8c:70:3b:b0:dc:3b:a5:
c4:d4:6a:40:d0:c8:7c:1f:26:d3:d7:60:cc:2b:1f:
df:a4:ca:f3:53:28:6c:8b:67:9b:2e:22:0d:6b:e7:
b6:7d:45:ed:51:4e:5c:55:fe:b9:fc:f8:b9:1e:1a:
92:76:1b:fe:80:2d:37:40:92:6d:6d:1a:7e:1e:e8:
cc:d3:5c:0b:32:61:59:43:74:79:80:8b:71:8c:12:
fe:1d:94:53:d2:33:20:76:fc:14:c3:61:5f:c5:c2:
e7:70:52:93:56:17:5d:c1:b9:77:47:62:9a:49:65:
f9:ac:92:fa:ac:ee:b4:af:7f:35:91:58:c4:f2:1a:
e9:4e:94:ba:46:90:a6:a1:3e:19:71:e1:92:9f:2b:
a8:76:19:43:53:67:82:fb:e6:6c:a1:2f:64:bb:52:
16:4d:a4:62:9c:41:e3:84:d3:11:29:b1:b8:c7:23:
5d:10:4c:a8:fd:68:93:19:34:8c:56:7f:ee:8d:0e:
dd:39:59:34:29:15:1c:b3:e7:e0:2b:59:df:1f:f1:
1c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AD:56:E2:6B:13:46:C6:A7:AE:08:12:B2:11:8D:8E:20:65:2F:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/1aea4482-4596-3858-b921-9cdd4d27ea47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
X509v3 Authority Key Identifier:
keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
sbgp-ipAddrBlock: critical
IPv4:
199.200.86.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:32:c1:13:92:90:80:f9:b6:af:c6:1e:ba:d2:7c:d9:67:bc:
92:bb:2d:d7:cf:4c:a9:0b:f8:84:7f:35:f7:c6:be:aa:86:03:
f0:1d:5d:6c:ad:8e:00:c2:82:bc:b6:f0:a1:88:6d:bd:f7:ba:
28:ad:4f:cf:a1:28:e0:ce:10:49:e2:d6:d8:b0:01:be:1f:9f:
2d:c0:de:52:1a:ac:df:30:d8:3d:86:82:90:27:37:03:bc:73:
24:e1:a7:ac:98:5b:9d:9a:0a:65:d1:d6:c3:c8:72:c8:da:66:
45:bc:65:42:c3:d6:f3:03:a3:2e:9e:33:18:76:b5:f0:8c:23:
f1:2a:b8:ea:26:63:7d:95:0f:8e:f4:b6:4b:c4:5c:61:d2:4f:
dd:d1:c9:0d:5c:bb:95:ca:a8:01:44:b9:83:e4:03:e5:ea:73:
de:29:0d:75:8c:28:62:e2:db:23:8d:99:00:43:39:ca:c3:60:
1c:de:96:d9:da:97:58:84:00:0b:32:5e:8a:e0:b8:d5:69:cd:
ba:45:f5:93:cf:37:ff:b3:68:21:c6:ec:3d:f0:98:ce:71:c4:
eb:98:c1:d1:c8:fc:09:3e:36:d7:60:cf:dd:a5:a1:28:8d:9c:
4f:aa:c7:1c:3d:86:9d:61:6f:b4:e4:5f:64:9a:56:2d:7a:02:
5c:0e:66:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivvx9RAMNsHZGw4AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1
OTg4MB4XDTI1MDEyNzE4NTgyNloXDTI1MDQyNzE3NTgyNlowLzEtMCsGA1UEAxMk
OTVlNTc3NzktODQ0NC00ZmRjLWJlMzQtNTAwMDI2ZmU5ZGViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyjGbev4fxpmfgMLOIjShdWRJM2OriiTyoCz
TJ8ELh7cvo7DLGUvrUWWfIW1sgXRcVT8YoxwO7DcO6XE1GpA0Mh8HybT12DMKx/f
pMrzUyhsi2ebLiINa+e2fUXtUU5cVf65/Pi5HhqSdhv+gC03QJJtbRp+HujM01wL
MmFZQ3R5gItxjBL+HZRT0jMgdvwUw2FfxcLncFKTVhddwbl3R2KaSWX5rJL6rO60
r381kVjE8hrpTpS6RpCmoT4ZceGSnyuodhlDU2eC++ZsoS9ku1IWTaRinEHjhNMR
KbG4xyNdEEyo/WiTGTSMVn/ujQ7dOVk0KRUcs+fgK1nfH/EctwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCytVuJrE0bGp64IErIRjY4gZS90MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0
NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMWFlYTQ0ODItNDU5Ni0z
ODU4LWI5MjEtOWNkZDRkMjdlYTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi
MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl
NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3
ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8hWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKEywROSkID5tq/GHrrSfNlnvJK7LdfPTKkL+IR/NffGvqqGA/AdXWyt
jgDCgry28KGIbb33uiitT8+hKODOEEni1tiwAb4fny3A3lIarN8w2D2GgpAnNwO8
cyThp6yYW52aCmXR1sPIcsjaZkW8ZULD1vMDoy6eMxh2tfCMI/EquOomY32VD470
tkvEXGHST93RyQ1cu5XKqAFEuYPkA+Xqc94pDXWMKGLi2yONmQBDOcrDYBzeltna
l1iEAAsyXorguNVpzbpF9ZPPN/+zaCHG7D3wmM5xxOuYwdHI/Ak+Ntdgz92loSiN
nE+qxxw9hp1hb7TkX2SaVi16AlwOZkI=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:56 2025 by rpki-client