Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/541ed1ae-2bff-3005-bbed-7f7339841cf5.roa
File: 541ed1ae-2bff-3005-bbed-7f7339841cf5.roa (raw, json)
Hash identifier: ocsZLEf1lOfamGFPz5ApXpFOtnalp6tkSfe+07bqESY=
Subject key identifier: 74:A2:E4:DE:1C:FD:26:AC:38:78:B0:70:73:B6:2F:9D:1C:2D:50:6D
Certificate issuer: /CN=a32aa006-ef22-4905-8c82-2651c19859b9
Certificate serial: 010D0C9F43285848811B0E0AE243CB4223162280
Authority key identifier: 1A:B1:46:D6:89:C8:93:13:18:72:E5:8C:D6:A1:A8:99:AC:BA:9E:4F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/541ed1ae-2bff-3005-bbed-7f7339841cf5.roa
Signing time: Sat 11 Jan 2025 02:00:39 +0000
ROA not before: Sat 11 Jan 2025 02:00:39 +0000
ROA not after: Fri 11 Apr 2025 01:00:39 +0000
asID: 19350
IP address blocks: 199.212.60.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:81:1b:0e:0a:e2:43:cb:42:23:16:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32aa006-ef22-4905-8c82-2651c19859b9
Validity
Not Before: Jan 11 02:00:39 2025 GMT
Not After : Apr 11 01:00:39 2025 GMT
Subject: CN=779e4d9d-fad9-4a0d-92d1-49bc2f8c5c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5f:c8:a6:a2:c7:17:e6:95:57:88:d9:96:54:
40:b7:0d:7d:3f:37:02:ad:4b:76:44:b9:30:7d:f3:
d7:7f:c6:b2:e1:43:a4:b1:9d:3c:f4:c5:b2:0d:0d:
41:da:4c:ba:d0:40:b0:78:4b:e1:04:df:ee:59:6a:
78:8f:05:df:75:a9:3c:18:1e:61:45:43:ce:15:57:
c6:4b:35:67:97:aa:4d:fb:c2:47:74:4e:bf:79:ec:
59:ca:78:b2:83:12:3d:12:61:13:46:c5:19:f1:03:
74:29:da:37:6c:a6:d4:fc:b4:61:c2:03:11:2b:e6:
3f:95:1d:32:fb:83:96:15:8c:92:10:8a:e0:11:e3:
86:10:8e:de:8d:90:3f:f8:5c:8d:da:bd:2e:29:a6:
f0:2e:5a:7a:be:92:c2:b9:45:2f:32:52:fb:28:9d:
31:31:a6:92:92:af:b2:b2:13:fe:ba:4b:e6:63:56:
dc:bf:bc:67:53:2c:0c:43:e5:b8:6b:82:63:61:42:
df:d0:0e:36:7e:0c:2c:a2:01:30:69:01:f3:bb:d9:
9f:21:e0:27:ef:35:10:24:47:79:e8:05:ab:01:1c:
4f:05:87:e9:47:9c:87:6b:43:fc:02:e8:54:66:5e:
04:89:76:5d:35:09:3d:09:51:62:f0:e2:48:bb:95:
6d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A2:E4:DE:1C:FD:26:AC:38:78:B0:70:73:B6:2F:9D:1C:2D:50:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/541ed1ae-2bff-3005-bbed-7f7339841cf5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/a32aa006-ef22-4905-8c82-2651c19859b9.crl
X509v3 Authority Key Identifier:
keyid:1A:B1:46:D6:89:C8:93:13:18:72:E5:8C:D6:A1:A8:99:AC:BA:9E:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9.cer
sbgp-ipAddrBlock: critical
IPv4:
199.212.60.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:e7:13:f6:b1:52:9b:ce:43:ec:93:48:3d:22:37:82:19:84:
98:0d:34:69:80:b5:fa:6f:4b:f4:6a:b4:1e:bd:ce:8b:aa:90:
48:4c:68:5f:e1:25:d1:be:f4:7b:13:4a:b7:59:b3:e9:8c:89:
64:fb:ff:50:2e:89:b9:cd:5f:ca:94:fb:69:7c:99:9b:11:57:
3f:b5:9e:a5:2b:8b:cf:d8:19:8a:52:e1:53:39:a0:66:52:d6:
14:25:27:49:82:de:3b:6b:91:bb:b6:ad:4d:09:d1:31:40:9d:
e5:75:13:01:88:68:43:d8:4e:65:3b:35:c8:e8:11:2d:09:3f:
47:61:6f:93:93:50:f6:76:b7:57:72:49:5c:01:fa:07:87:8f:
71:99:f5:ad:09:22:53:b6:11:a4:16:be:db:44:30:7b:5e:a8:
85:cd:76:59:1a:5f:90:5a:7d:c1:c5:f3:aa:00:50:00:2a:e2:
ab:35:31:49:15:f7:c8:66:07:da:88:b6:61:94:01:7d:3c:32:
93:96:38:b4:10:11:67:93:08:86:1b:db:d2:56:af:be:22:35:
cf:ae:50:5e:fe:9d:d2:06:12:5d:83:ff:cf:b2:38:f7:2e:7b:
7b:bf:41:4e:19:16:cd:dd:6e:6c:01:5d:86:18:fa:3a:be:f9:
61:db:b7:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiBGw4K4kPLQiMWIoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMyYWEwMDYtZWYyMi00OTA1LThjODItMjY1MWMxOTg1
OWI5MB4XDTI1MDExMTAyMDAzOVoXDTI1MDQxMTAxMDAzOVowLzEtMCsGA1UEAxMk
Nzc5ZTRkOWQtZmFkOS00YTBkLTkyZDEtNDliYzJmOGM1YzU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyF/IpqLHF+aVV4jZllRAtw19PzcCrUt2RLkw
ffPXf8ay4UOksZ089MWyDQ1B2ky60ECweEvhBN/uWWp4jwXfdak8GB5hRUPOFVfG
SzVnl6pN+8JHdE6/eexZyniygxI9EmETRsUZ8QN0Kdo3bKbU/LRhwgMRK+Y/lR0y
+4OWFYySEIrgEeOGEI7ejZA/+FyN2r0uKabwLlp6vpLCuUUvMlL7KJ0xMaaSkq+y
shP+ukvmY1bcv7xnUywMQ+W4a4JjYULf0A42fgwsogEwaQHzu9mfIeAn7zUQJEd5
6AWrARxPBYfpR5yHa0P8AuhUZl4EiXZdNQk9CVFi8OJIu5VttQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHSi5N4c/SasOHiwcHO2L50cLVBtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hMzJh
YTAwNi1lZjIyLTQ5MDUtOGM4Mi0yNjUxYzE5ODU5YjkvNTQxZWQxYWUtMmJmZi0z
MDA1LWJiZWQtN2Y3MzM5ODQxY2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTMyYWEwMDYtZWYyMi00OTA1LThj
ODItMjY1MWMxOTg1OWI5L2EzMmFhMDA2LWVmMjItNDkwNS04YzgyLTI2NTFjMTk4
NTliOS5jcmwwHwYDVR0jBBgwFoAUGrFG1onIkxMYcuWM1qGomay6nk8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hMzJhYTAwNi1lZjIyLTQ5MDUtOGM4Mi0yNjUx
YzE5ODU5YjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx9Q8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHbnE/axUpvOQ+yTSD0iN4IZhJgNNGmAtfpvS/RqtB69zouqkEhMaF/h
JdG+9HsTSrdZs+mMiWT7/1AuibnNX8qU+2l8mZsRVz+1nqUri8/YGYpS4VM5oGZS
1hQlJ0mC3jtrkbu2rU0J0TFAneV1EwGIaEPYTmU7NcjoES0JP0dhb5OTUPZ2t1dy
SVwB+geHj3GZ9a0JIlO2EaQWvttEMHteqIXNdlkaX5BafcHF86oAUAAq4qs1MUkV
98hmB9qItmGUAX08MpOWOLQQEWeTCIYb29JWr74iNc+uUF7+ndIGEl2D/8+yOPcu
e3u/QU4ZFs3dbmwBXYYY+jq++WHbt9o=
-----END CERTIFICATE-----
Generated at Fri Apr 11 09:07:28 2025 by rpki-client