Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8c4bd0f8-233a-3d98-b582-90dcc750fc62.roa
File: 8c4bd0f8-233a-3d98-b582-90dcc750fc62.roa (raw, json)
Hash identifier: QSa+R6K+trcNSAIGXIesFHdRswsvyTrUwEYRDMDKPj8=
Subject key identifier: 33:65:5D:1E:28:86:6E:1C:36:8F:1B:A8:25:B2:C7:32:F1:C2:CE:75
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E7F62657D2944FAE017E0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8c4bd0f8-233a-3d98-b582-90dcc750fc62.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 192.154.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:7f:62:65:7d:29:44:fa:e0:17:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=b6a96fc8-4b97-47c8-839f-f2ced06145de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fc:7a:fd:22:4f:4f:ae:76:7e:80:66:d2:3b:
54:5b:27:f6:57:d1:0c:ce:b6:0d:29:b1:7e:80:63:
44:7c:9a:a6:ce:9d:98:3c:48:28:72:26:7a:43:78:
a8:04:95:31:de:25:fd:4a:aa:e6:65:50:19:ef:5c:
35:93:aa:3d:9f:95:c3:c2:d8:01:da:b6:5b:51:ed:
69:66:3d:d9:57:e3:c8:0f:54:65:84:19:f0:cc:07:
4a:26:2c:fb:b8:90:aa:86:1f:aa:4b:d2:1d:52:cf:
33:8f:08:b5:6d:c0:18:d7:06:ed:93:27:c0:78:43:
8f:9b:cc:96:43:69:25:24:6a:78:37:2f:d0:32:62:
e5:1f:cb:8c:4f:ac:4b:75:1a:59:0c:18:80:a6:65:
e4:bd:97:a7:ac:92:5f:4f:2b:52:46:4a:b0:7c:30:
03:14:95:97:38:5c:3c:21:75:29:e7:ca:cf:35:96:
c2:34:b8:d3:8a:a4:89:b7:37:3a:38:7b:e1:2b:f4:
ac:b3:a6:22:e7:fe:1d:33:f0:aa:15:8a:5a:0f:2a:
da:49:13:e2:ea:36:37:c7:e4:89:86:95:4b:2f:e4:
b2:92:7f:ef:6f:16:c2:bb:aa:c1:6a:62:fe:f4:ec:
57:2f:5a:f5:50:55:bb:8f:03:58:33:67:ee:f7:1e:
26:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:65:5D:1E:28:86:6E:1C:36:8F:1B:A8:25:B2:C7:32:F1:C2:CE:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8c4bd0f8-233a-3d98-b582-90dcc750fc62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
192.154.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:f5:6a:14:23:e0:ac:bb:b1:83:af:25:c7:32:8c:c1:46:32:
2f:6a:16:70:fd:8c:e6:82:5d:88:9b:5b:d1:c7:0b:45:4c:40:
5d:41:9e:49:c9:ad:0c:f1:a3:ad:4a:5c:24:1a:67:84:b0:ba:
ca:40:20:aa:46:b0:60:03:da:69:50:38:0b:b3:44:3f:3a:5f:
cd:cd:db:78:18:45:46:36:31:38:ec:ff:f4:8f:d3:ef:fb:df:
f8:7f:b9:39:7d:5f:39:9f:c0:59:c3:01:eb:9d:ef:39:82:86:
28:8a:7f:62:e6:86:09:81:c7:7f:ca:1c:95:48:f7:aa:ea:9f:
c1:79:9d:9c:f4:17:5d:c6:0c:e1:47:13:f0:45:4f:c1:82:a4:
1f:31:44:d9:93:ee:72:5d:af:aa:69:12:05:50:f5:ed:f5:d7:
28:d8:c4:db:93:28:32:30:9d:8a:c6:0f:66:f9:74:4f:54:6f:
53:f4:38:f7:1f:0c:27:4e:80:e8:73:3c:43:aa:98:48:c5:5c:
df:c0:a1:aa:3f:f0:4a:4d:f7:d4:cc:28:7d:a5:0c:22:cf:e6:
52:4d:fb:e7:8a:f3:2a:21:28:83:d9:48:4b:cf:ad:d2:05:bb:
ac:2c:e3:4f:d8:00:84:77:ba:f2:33:bd:df:ce:9a:97:98:d0:
cc:c8:21:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElBnn9iZX0pRPrgF+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDMyMTAxMDAzOVoXDTI1MDYxOTAxMDAzOVowLzEtMCsGA1UEAxMk
YjZhOTZmYzgtNGI5Ny00N2M4LTgzOWYtZjJjZWQwNjE0NWRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Px6/SJPT652foBm0jtUWyf2V9EMzrYNKbF+
gGNEfJqmzp2YPEgociZ6Q3ioBJUx3iX9SqrmZVAZ71w1k6o9n5XDwtgB2rZbUe1p
Zj3ZV+PID1RlhBnwzAdKJiz7uJCqhh+qS9IdUs8zjwi1bcAY1wbtkyfAeEOPm8yW
Q2klJGp4Ny/QMmLlH8uMT6xLdRpZDBiApmXkvZenrJJfTytSRkqwfDADFJWXOFw8
IXUp58rPNZbCNLjTiqSJtzc6OHvhK/Sss6Yi5/4dM/CqFYpaDyraSRPi6jY3x+SJ
hpVLL+Sykn/vbxbCu6rBamL+9OxXL1r1UFW7jwNYM2fu9x4m5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDNlXR4ohm4cNo8bqCWyxzLxws51MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvOGM0YmQwZjgtMjMzYS0z
ZDk4LWI1ODItOTBkY2M3NTBmYzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJo6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE/1ahQj4Ky7sYOvJccyjMFGMi9qFnD9jOaCXYibW9HHC0VMQF1BnknJ
rQzxo61KXCQaZ4SwuspAIKpGsGAD2mlQOAuzRD86X83N23gYRUY2MTjs//SP0+/7
3/h/uTl9XzmfwFnDAeud7zmChiiKf2LmhgmBx3/KHJVI96rqn8F5nZz0F13GDOFH
E/BFT8GCpB8xRNmT7nJdr6ppEgVQ9e311yjYxNuTKDIwnYrGD2b5dE9Ub1P0OPcf
DCdOgOhzPEOqmEjFXN/Aoao/8EpN99TMKH2lDCLP5lJN++eK8yohKIPZSEvPrdIF
u6ws40/YAIR3uvIzvd/OmpeY0MzIIVQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:08:05 2025 by rpki-client