Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/954fe63a-c657-317e-80cd-908ee147dd36.roa
File: 954fe63a-c657-317e-80cd-908ee147dd36.roa (raw, json)
Hash identifier: acWzqVl/6Enu7HtCiDvQ+4gLbY5qt+R3ATt8B1fArw8=
Subject key identifier: 37:07:3F:67:8A:A6:03:BB:39:91:99:A7:F7:0C:B5:91:9F:B6:88:5B
Certificate issuer: /CN=a4530197-8968-425f-b6ab-d075941dc95c
Certificate serial: 010D0C9F4328584898D5F9922920E8622490AB80
Authority key identifier: AC:75:9D:E1:98:8D:FE:FD:4A:14:1E:D2:AC:30:33:C3:B1:75:E2:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/954fe63a-c657-317e-80cd-908ee147dd36.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 401085
IP address blocks: 192.112.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d5:f9:92:29:20:e8:62:24:90:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4530197-8968-425f-b6ab-d075941dc95c
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=b9f36d77-348a-40f7-b244-e67bfba428cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d9:84:a2:f6:b0:4f:bd:64:b9:77:95:ac:3f:
93:c0:f3:a2:5a:7f:de:09:7a:df:a7:83:d6:0b:b1:
79:bb:7f:cc:40:68:48:75:b7:aa:10:82:ba:ab:61:
16:dd:71:8e:70:0c:3c:1d:50:2e:6a:8a:b1:26:3d:
0a:b4:1b:ff:df:69:8b:e1:5c:2e:47:03:99:a6:a9:
fb:a7:a4:63:90:11:f3:88:16:d7:a3:16:82:4b:61:
e2:c4:21:de:bd:c3:f7:46:b8:3f:ad:58:5f:16:a6:
9a:2b:94:93:6a:ff:16:b3:c0:52:17:1d:f1:43:cf:
4b:fd:26:48:7e:17:56:5d:44:25:87:0e:b0:d6:2f:
88:f2:e9:e4:91:c7:62:c2:6f:bb:87:1a:de:79:d2:
dd:17:6a:c1:37:14:7f:29:31:01:72:4a:07:e7:4f:
fd:b8:ff:0f:ce:f8:49:c0:13:32:2e:b3:50:b6:09:
10:73:a7:9a:28:18:b9:58:00:03:de:55:98:83:6d:
d6:ad:99:0c:8e:3b:20:94:84:de:48:80:4d:9c:a5:
e0:ca:b2:f0:4b:f8:6b:db:5e:9d:19:ca:47:96:b2:
d6:45:c4:fb:f1:23:ce:62:d0:a2:48:4a:cd:c0:67:
9b:27:5d:9b:33:92:c3:4e:75:e1:2c:db:39:c6:b2:
90:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:07:3F:67:8A:A6:03:BB:39:91:99:A7:F7:0C:B5:91:9F:B6:88:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/954fe63a-c657-317e-80cd-908ee147dd36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/a4530197-8968-425f-b6ab-d075941dc95c.crl
X509v3 Authority Key Identifier:
keyid:AC:75:9D:E1:98:8D:FE:FD:4A:14:1E:D2:AC:30:33:C3:B1:75:E2:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c.cer
sbgp-ipAddrBlock: critical
IPv4:
192.112.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:2b:71:73:f1:01:48:2d:76:b6:8d:45:ba:ba:98:60:ca:95:
68:15:3b:1f:31:67:62:b8:4b:2d:62:86:9a:09:52:a6:df:7f:
a1:d9:09:91:de:e3:44:de:89:04:3f:3b:4b:ce:f4:66:da:d6:
81:51:e5:59:83:17:1c:a4:32:d3:49:77:3d:0c:e0:4e:75:52:
9a:a0:1a:31:91:cc:7f:c5:2f:66:ca:0e:c9:69:e6:9d:31:f0:
4d:38:91:42:a1:f2:fa:7f:9b:5f:26:43:91:76:84:71:85:c2:
fc:70:a4:94:30:36:e8:71:65:f2:a3:a2:43:0e:bd:7f:f6:55:
23:4c:6e:3d:0d:4a:a7:68:9c:b9:54:5e:94:c1:5c:3f:43:24:
42:2f:62:71:35:13:18:27:07:d9:56:9b:d1:6a:89:82:d6:14:
ac:a5:55:b9:20:3d:65:d1:6b:2a:9d:09:f7:ff:af:fc:6c:8c:
8b:3c:26:fe:18:00:9d:d3:e6:6d:df:45:d6:cc:dc:19:b2:f1:
be:9b:bb:ee:c9:8f:90:9e:02:31:0b:ac:f3:c8:ff:5f:ad:07:
3f:dd:48:e4:05:4d:84:25:05:b4:35:07:ca:2d:fa:3f:56:db:
8e:b9:20:be:29:95:99:95:fc:f1:e4:f0:48:c1:d7:4f:d0:7f:
4c:ae:47:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1fmSKSDoYiSQq4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTQ1MzAxOTctODk2OC00MjVmLWI2YWItZDA3NTk0MWRj
OTVjMB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk
YjlmMzZkNzctMzQ4YS00MGY3LWIyNDQtZTY3YmZiYTQyOGNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdmEovawT71kuXeVrD+TwPOiWn/eCXrfp4PW
C7F5u3/MQGhIdbeqEIK6q2EW3XGOcAw8HVAuaoqxJj0KtBv/32mL4VwuRwOZpqn7
p6RjkBHziBbXoxaCS2HixCHevcP3Rrg/rVhfFqaaK5STav8Ws8BSFx3xQ89L/SZI
fhdWXUQlhw6w1i+I8unkkcdiwm+7hxreedLdF2rBNxR/KTEBckoH50/9uP8PzvhJ
wBMyLrNQtgkQc6eaKBi5WAAD3lWYg23WrZkMjjsglITeSIBNnKXgyrLwS/hr216d
GcpHlrLWRcT78SPOYtCiSErNwGebJ12bM5LDTnXhLNs5xrKQFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDcHP2eKpgO7OZGZp/cMtZGftohbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hNDUz
MDE5Ny04OTY4LTQyNWYtYjZhYi1kMDc1OTQxZGM5NWMvOTU0ZmU2M2EtYzY1Ny0z
MTdlLTgwY2QtOTA4ZWUxNDdkZDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTQ1MzAxOTctODk2OC00MjVmLWI2
YWItZDA3NTk0MWRjOTVjL2E0NTMwMTk3LTg5NjgtNDI1Zi1iNmFiLWQwNzU5NDFk
Yzk1Yy5jcmwwHwYDVR0jBBgwFoAUrHWd4ZiN/v1KFB7SrDAzw7F14vkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hNDUzMDE5Ny04OTY4LTQyNWYtYjZhYi1kMDc1
OTQxZGM5NWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHCxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADkrcXPxAUgtdraNRbq6mGDKlWgVOx8xZ2K4Sy1ihpoJUqbff6HZCZHe
40TeiQQ/O0vO9Gba1oFR5VmDFxykMtNJdz0M4E51UpqgGjGRzH/FL2bKDslp5p0x
8E04kUKh8vp/m18mQ5F2hHGFwvxwpJQwNuhxZfKjokMOvX/2VSNMbj0NSqdonLlU
XpTBXD9DJEIvYnE1ExgnB9lWm9FqiYLWFKylVbkgPWXRayqdCff/r/xsjIs8Jv4Y
AJ3T5m3fRdbM3Bmy8b6bu+7Jj5CeAjELrPPI/1+tBz/dSOQFTYQlBbQ1B8ot+j9W
2465IL4plZmV/PHk8EjB10/Qf0yuRw8=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:47 2025 by rpki-client