Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/da28cf00-8f8b-3953-a50b-406aac3a4726.roa
File: da28cf00-8f8b-3953-a50b-406aac3a4726.roa (raw, json)
Hash identifier: 1ve0FS5tuXI5BQRglBJT9w9w89kYnZtBdBAQjSjCDT8=
Subject key identifier: 46:3D:7D:0A:E8:96:E2:EF:C9:A4:A7:BE:C6:E2:5E:4A:46:33:D3:9B
Certificate issuer: /CN=faf569a5-954e-480e-9904-712ec61652b7
Certificate serial: 010D0C9F432858488AE0A55C9F1C2FDBF1A4E200
Authority key identifier: 06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/da28cf00-8f8b-3953-a50b-406aac3a4726.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 202013
IP address blocks: 198.161.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:a5:5c:9f:1c:2f:db:f1:a4:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf569a5-954e-480e-9904-712ec61652b7
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=14ad6bf7-e279-4d81-9a15-adf474931f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6e:62:e7:7a:6d:74:39:04:03:f0:ea:24:b2:
3c:c4:ec:40:ad:8d:5c:c0:37:2e:9e:a5:10:a7:66:
93:8b:19:96:5c:d4:86:a4:7f:5b:43:36:1d:6d:f0:
05:14:f9:88:1f:1f:af:57:9c:9f:70:90:4c:8f:49:
05:e6:bc:74:42:e9:c2:d3:b2:ab:66:d0:6e:78:98:
2e:4b:a7:80:f7:9b:35:10:ea:f3:31:99:45:2c:a5:
68:81:6a:62:4f:29:bd:26:6c:9b:3c:3e:a0:6c:46:
f3:25:0f:e5:ea:bb:d2:6b:02:75:3e:07:fa:2a:26:
28:71:8d:27:31:9f:a4:be:c5:41:06:57:d1:cd:90:
24:18:79:32:b1:83:6d:d4:dd:a9:15:bc:2e:ee:01:
09:ac:b0:32:2a:b8:7e:4a:b2:37:f9:04:92:42:2f:
42:ab:a9:3a:75:cf:b5:7e:0f:df:c9:12:a7:a6:32:
09:e8:e6:ef:aa:4d:84:9f:0d:05:96:4c:e8:76:74:
2c:ec:56:cc:69:04:a3:89:79:45:0a:6a:e5:f4:77:
5a:df:ef:14:3c:97:79:f1:43:13:17:f1:c2:a9:41:
18:77:f8:84:20:39:5c:b5:fa:ca:6c:42:ee:fb:b3:
d0:14:f6:de:a8:8a:98:3b:fe:e5:e4:cf:7d:c6:14:
09:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3D:7D:0A:E8:96:E2:EF:C9:A4:A7:BE:C6:E2:5E:4A:46:33:D3:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/da28cf00-8f8b-3953-a50b-406aac3a4726.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl
X509v3 Authority Key Identifier:
keyid:06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer
sbgp-ipAddrBlock: critical
IPv4:
198.161.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c8:6b:87:ab:21:21:42:df:f8:0c:f3:63:0b:82:df:35:de:c6:
ee:80:12:2e:28:4d:b0:78:ff:fe:b6:4a:f6:fc:9e:2f:68:b1:
27:d6:08:50:a3:0e:a3:27:b2:32:60:3f:ec:ac:d9:ab:cb:f0:
37:5d:66:84:6b:66:61:50:c7:dd:7a:63:fd:11:81:85:7e:d6:
19:5e:bf:75:ce:ce:ae:ab:15:fc:b0:13:d3:a9:a6:3c:43:07:
38:a8:6e:90:8d:3f:77:6d:bc:01:05:7d:4c:32:ac:28:73:62:
5f:b8:17:55:9d:43:a3:3e:37:81:49:15:00:ad:70:60:f1:5d:
90:53:60:0f:d1:2a:0d:b9:57:7f:88:c1:74:94:0e:85:55:c5:
f9:c5:48:2b:ca:5b:b2:c7:af:85:d0:84:0e:4a:d3:0f:eb:5c:
72:1e:0f:8e:68:ae:9d:ea:ca:36:e7:31:78:30:61:25:39:05:
2a:4c:85:05:1d:c8:4a:74:22:4d:82:e7:82:23:a5:04:5f:22:
10:57:5a:f6:94:17:c0:2e:7b:d3:40:a1:e7:37:b8:3e:cb:5b:
b7:d2:4f:95:a5:8e:10:8a:cd:7b:a3:2e:96:31:1b:3b:cf:af:
f4:cd:ad:18:cf:ef:87:1a:e8:c4:7c:f9:14:1e:73:8a:26:d7:
87:71:4f:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiK4KVcnxwv2/Gk4gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmFmNTY5YTUtOTU0ZS00ODBlLTk5MDQtNzEyZWM2MTY1
MmI3MB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk
MTRhZDZiZjctZTI3OS00ZDgxLTlhMTUtYWRmNDc0OTMxZjc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG5i53ptdDkEA/DqJLI8xOxArY1cwDcunqUQ
p2aTixmWXNSGpH9bQzYdbfAFFPmIHx+vV5yfcJBMj0kF5rx0QunC07KrZtBueJgu
S6eA95s1EOrzMZlFLKVogWpiTym9JmybPD6gbEbzJQ/l6rvSawJ1Pgf6KiYocY0n
MZ+kvsVBBlfRzZAkGHkysYNt1N2pFbwu7gEJrLAyKrh+SrI3+QSSQi9Cq6k6dc+1
fg/fyRKnpjIJ6Obvqk2Enw0FlkzodnQs7FbMaQSjiXlFCmrl9Hda3+8UPJd58UMT
F/HCqUEYd/iEIDlctfrKbELu+7PQFPbeqIqYO/7l5M99xhQJ2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEY9fQroluLvyaSnvsbiXkpGM9ObMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9mYWY1
NjlhNS05NTRlLTQ4MGUtOTkwNC03MTJlYzYxNjUyYjcvZGEyOGNmMDAtOGY4Yi0z
OTUzLWE1MGItNDA2YWFjM2E0NzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZmFmNTY5YTUtOTU0ZS00ODBlLTk5
MDQtNzEyZWM2MTY1MmI3L2ZhZjU2OWE1LTk1NGUtNDgwZS05OTA0LTcxMmVjNjE2
NTJiNy5jcmwwHwYDVR0jBBgwFoAUBjJe+4snwzQj4ob2bAIaqbSBKUUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9mYWY1NjlhNS05NTRlLTQ4MGUtOTkwNC03MTJl
YzYxNjUyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqGoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMhrh6shIULf+AzzYwuC3zXexu6AEi4oTbB4//62Svb8ni9osSfWCFCj
DqMnsjJgP+ys2avL8DddZoRrZmFQx916Y/0RgYV+1hlev3XOzq6rFfywE9OppjxD
BziobpCNP3dtvAEFfUwyrChzYl+4F1WdQ6M+N4FJFQCtcGDxXZBTYA/RKg25V3+I
wXSUDoVVxfnFSCvKW7LHr4XQhA5K0w/rXHIeD45orp3qyjbnMXgwYSU5BSpMhQUd
yEp0Ik2C54IjpQRfIhBXWvaUF8Aue9NAoec3uD7LW7fST5WljhCKzXujLpYxGzvP
r/TNrRjP74ca6MR8+RQec4om14dxT44=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:19:49 2025 by rpki-client