Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/81ff9af1-83d0-3371-a7aa-bf5418695ebc.roa
File: 81ff9af1-83d0-3371-a7aa-bf5418695ebc.roa (raw, json)
Hash identifier: j0mjPi+UJ+DM4dEzkEyGx9Ly69jvdcL5Tydva4zGKIs=
Subject key identifier: 9C:75:A7:4A:82:B5:D0:EA:7A:D5:30:89:E6:80:A0:CF:22:9C:F2:04
Certificate issuer: /CN=aae4f0de-2296-435c-b411-b16981804498
Certificate serial: 010D0C9F43285849419E8B8BB7369E8FF8BCD500
Authority key identifier: 1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/81ff9af1-83d0-3371-a7aa-bf5418695ebc.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 398268
IP address blocks: 199.58.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:8b:8b:b7:36:9e:8f:f8:bc:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae4f0de-2296-435c-b411-b16981804498
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=d7513804-3307-481a-a925-bb3941a7632f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:03:0a:11:db:b8:40:e4:c0:c5:1d:6d:0e:5a:
24:18:f8:00:df:65:83:84:38:0f:0e:bb:05:67:b2:
39:6a:17:ca:4c:93:48:be:72:7e:3d:46:e7:b0:4e:
2c:ee:f8:96:0d:65:47:87:d7:54:c3:ff:58:f3:61:
c2:93:39:ef:37:ca:51:b3:b6:22:59:de:9a:d2:cd:
b3:86:8a:9a:9c:6e:31:f6:39:0c:90:0b:b7:a6:49:
66:07:af:e9:34:cb:f7:f7:ac:76:aa:78:21:6e:05:
d0:f1:ac:41:82:ad:e7:e7:a5:54:82:b6:66:86:85:
89:af:d0:5b:a8:12:a1:4f:30:44:04:2a:85:16:af:
e6:41:19:7a:9f:b2:ad:c8:bf:3b:13:41:79:b1:79:
79:48:c6:5d:9a:9f:f2:55:4d:49:28:ff:66:c7:ee:
e7:d7:5f:dd:d7:2c:ce:28:92:ce:40:ab:87:28:89:
f7:1d:4a:b2:7f:95:c7:b7:a6:20:9a:a8:16:b9:7b:
9b:8d:d1:8e:25:56:23:1c:bb:5a:f8:55:df:f4:88:
e8:67:59:5e:fe:27:c1:2f:9b:6b:e3:93:d0:cf:b9:
40:0d:b6:c7:70:68:77:93:66:b6:75:cf:4a:1a:4a:
e3:ef:ce:33:1b:a4:31:26:2a:2b:c9:6c:1a:9a:6d:
0b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:75:A7:4A:82:B5:D0:EA:7A:D5:30:89:E6:80:A0:CF:22:9C:F2:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/81ff9af1-83d0-3371-a7aa-bf5418695ebc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl
X509v3 Authority Key Identifier:
keyid:1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer
sbgp-ipAddrBlock: critical
IPv4:
199.58.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:69:cf:9f:a8:ab:4d:04:01:e0:36:8b:05:6e:83:01:fc:05:
84:de:58:d6:69:64:e3:5e:8e:c6:b5:f9:f4:7c:ad:47:18:91:
0b:36:17:ce:a3:b1:04:8f:a9:ad:f4:01:21:c6:7a:bd:90:12:
56:4a:2d:7f:17:c9:af:2d:df:7f:6b:72:d8:9a:43:02:e2:d1:
52:9f:1f:c5:a1:44:38:80:a5:db:b0:85:c1:1c:7b:cd:53:11:
43:ae:d2:02:d2:0a:44:a2:1b:f0:f3:c2:8e:e5:cd:04:80:1a:
13:1a:f7:0a:26:c0:89:ce:cb:72:2a:6c:a4:72:75:be:59:09:
13:eb:30:a3:78:2c:1f:f2:2f:f1:8d:21:2f:42:c8:ad:c6:a0:
8c:4e:41:dd:7a:7b:5e:a2:ce:f0:ad:0e:1e:7f:a0:ff:a3:18:
0c:df:72:91:9a:4c:b4:5c:b5:3e:25:92:e8:b2:ff:c0:3f:36:
64:88:9f:6c:28:b7:c2:41:15:3d:29:5d:fb:27:e0:a7:6a:85:
8f:56:2d:64:21:f7:21:c3:22:79:ad:f9:0f:5e:36:87:84:bc:
9a:13:3a:9f:d3:f2:7e:b4:1d:76:ed:14:f3:0d:a5:9a:c4:15:
76:2c:26:80:e7:b6:2a:f7:0d:1c:d7:c0:2e:10:0e:eb:f5:d8:
aa:70:08:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElBnouLtzaej/i81QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFlNGYwZGUtMjI5Ni00MzVjLWI0MTEtYjE2OTgxODA0
NDk4MB4XDTI1MDMyMTAxMDAzOVoXDTI1MDYxOTAxMDAzOVowLzEtMCsGA1UEAxMk
ZDc1MTM4MDQtMzMwNy00ODFhLWE5MjUtYmIzOTQxYTc2MzJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwMKEdu4QOTAxR1tDlokGPgA32WDhDgPDrsF
Z7I5ahfKTJNIvnJ+PUbnsE4s7viWDWVHh9dUw/9Y82HCkznvN8pRs7YiWd6a0s2z
hoqanG4x9jkMkAu3pklmB6/pNMv396x2qnghbgXQ8axBgq3n56VUgrZmhoWJr9Bb
qBKhTzBEBCqFFq/mQRl6n7KtyL87E0F5sXl5SMZdmp/yVU1JKP9mx+7n11/d1yzO
KJLOQKuHKIn3HUqyf5XHt6YgmqgWuXubjdGOJVYjHLta+FXf9IjoZ1le/ifBL5tr
45PQz7lADbbHcGh3k2a2dc9KGkrj784zG6QxJioryWwamm0LXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJx1p0qCtdDqetUwieaAoM8inPIEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYWU0
ZjBkZS0yMjk2LTQzNWMtYjQxMS1iMTY5ODE4MDQ0OTgvODFmZjlhZjEtODNkMC0z
MzcxLWE3YWEtYmY1NDE4Njk1ZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWFlNGYwZGUtMjI5Ni00MzVjLWI0
MTEtYjE2OTgxODA0NDk4L2FhZTRmMGRlLTIyOTYtNDM1Yy1iNDExLWIxNjk4MTgw
NDQ5OC5jcmwwHwYDVR0jBBgwFoAUH9MnZE1Yua/Ff0SCTfuPtx4Yz20wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYWU0ZjBkZS0yMjk2LTQzNWMtYjQxMS1iMTY5
ODE4MDQ0OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzpZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABppz5+oq00EAeA2iwVugwH8BYTeWNZpZONejsa1+fR8rUcYkQs2F86j
sQSPqa30ASHGer2QElZKLX8Xya8t339rctiaQwLi0VKfH8WhRDiApduwhcEce81T
EUOu0gLSCkSiG/Dzwo7lzQSAGhMa9womwInOy3IqbKRydb5ZCRPrMKN4LB/yL/GN
IS9CyK3GoIxOQd16e16izvCtDh5/oP+jGAzfcpGaTLRctT4lkuiy/8A/NmSIn2wo
t8JBFT0pXfsn4KdqhY9WLWQh9yHDInmt+Q9eNoeEvJoTOp/T8n60HXbtFPMNpZrE
FXYsJoDntir3DRzXwC4QDuv12KpwCKI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:50:42 2025 by rpki-client