Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e33ddde1-e0ad-324e-9aed-02e20ed3c9b1.roa
File: e33ddde1-e0ad-324e-9aed-02e20ed3c9b1.roa (raw, json)
Hash identifier: F/Kai+XKLY5L5X9ybsXfYoHrMDB0AQ7GBBfr5KHK7R8=
Subject key identifier: 77:43:E5:22:A2:B2:AC:3E:7C:23:B5:54:22:4C:AC:0B:C8:4A:85:18
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584944694278D4611AA7BA91F980
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e33ddde1-e0ad-324e-9aed-02e20ed3c9b1.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 64267
IP address blocks: 199.250.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:42:78:d4:61:1a:a7:ba:91:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=43ac6d66-3144-4575-824f-a5c31758c072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:64:a3:bb:6a:9b:a9:15:43:63:6c:85:1a:5d:
71:4c:3f:ff:a4:95:5a:6c:66:90:eb:c0:90:ba:38:
e5:01:0e:05:6c:47:9d:cb:20:65:7c:d5:01:f3:90:
da:94:ba:c5:90:d8:5e:4e:bf:2e:79:44:49:ba:98:
a0:13:d1:84:72:dc:f4:82:2d:b6:60:59:7f:52:2a:
9f:61:a8:98:dc:87:e3:2a:67:1e:74:44:6c:6c:b8:
4a:94:f0:39:be:71:8b:24:cb:72:85:bd:33:0c:67:
56:13:54:11:67:fd:a4:1e:c2:53:e8:d5:20:4b:48:
06:6f:27:26:79:1c:d5:80:a3:5b:ce:f5:b5:73:cc:
61:5f:65:73:f2:74:65:66:30:a1:84:56:5d:a8:b3:
fc:f4:5f:c0:bf:8b:77:5c:27:e8:e4:5d:98:80:66:
3a:3f:34:7e:61:ee:da:77:1a:76:e8:17:fe:ac:08:
fe:2a:a4:80:00:00:a5:8d:f6:bf:67:89:19:1a:07:
31:68:90:9e:a5:01:25:17:ae:c8:60:50:6b:b7:ed:
ee:9b:c9:a5:8e:61:ba:94:72:f6:e6:5d:01:78:11:
b9:12:74:5f:37:83:32:8b:42:ae:aa:80:33:12:12:
34:c7:e9:0f:7a:92:71:7a:8d:f5:bf:70:19:f4:44:
78:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:43:E5:22:A2:B2:AC:3E:7C:23:B5:54:22:4C:AC:0B:C8:4A:85:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e33ddde1-e0ad-324e-9aed-02e20ed3c9b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
199.250.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:7a:74:27:e0:94:b4:11:a7:24:fe:d1:2a:f3:69:64:56:9c:
f5:f4:49:b4:57:94:46:83:5d:32:fc:e3:42:f6:bd:1e:8d:23:
2c:48:9d:35:1f:ba:fc:cd:d2:65:6c:88:6f:ec:80:3a:09:35:
6f:75:16:60:14:06:b5:ea:54:5e:7a:a2:cf:50:c4:ba:5b:64:
44:c5:4d:c4:85:89:e4:f8:55:ac:6e:b7:b5:42:dc:62:df:37:
a4:17:02:b5:86:26:af:fe:d0:5b:f2:ff:aa:56:15:d2:76:15:
5c:32:61:a8:95:1a:72:5f:c6:d8:c8:b2:09:1f:f7:fa:16:a8:
c3:85:9f:6b:19:aa:fe:8b:76:1d:ad:8b:2b:e7:e8:4f:b0:49:
b3:de:68:b7:0c:19:6b:bf:54:5d:e6:be:31:f9:bf:6c:b5:c7:
0f:e2:94:f6:7c:b8:d6:c7:f6:0d:07:b2:de:38:40:7d:7b:3b:
9f:88:50:d7:3c:fb:e0:41:ae:ef:35:1f:84:8a:a4:3f:68:e5:
25:b0:6e:6b:af:cf:ff:ce:fe:8f:74:c8:b1:b7:f6:2b:42:63:
34:0f:65:32:df:1a:43:9d:c3:ea:66:6b:0f:fb:b2:85:0c:30:
8b:ea:0f:b3:87:32:7c:6d:a2:67:95:aa:e7:d3:e9:f7:4e:f9:
c2:99:0e:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaUJ41GEap7qR+YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk
NDNhYzZkNjYtMzE0NC00NTc1LTgyNGYtYTVjMzE3NThjMDcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmSju2qbqRVDY2yFGl1xTD//pJVabGaQ68CQ
ujjlAQ4FbEedyyBlfNUB85DalLrFkNheTr8ueURJupigE9GEctz0gi22YFl/Uiqf
YaiY3IfjKmcedERsbLhKlPA5vnGLJMtyhb0zDGdWE1QRZ/2kHsJT6NUgS0gGbycm
eRzVgKNbzvW1c8xhX2Vz8nRlZjChhFZdqLP89F/Av4t3XCfo5F2YgGY6PzR+Ye7a
dxp26Bf+rAj+KqSAAACljfa/Z4kZGgcxaJCepQElF67IYFBrt+3um8mljmG6lHL2
5l0BeBG5EnRfN4Myi0KuqoAzEhI0x+kPepJxeo31v3AZ9ER4bwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHdD5SKisqw+fCO1VCJMrAvISoUYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZTMzZGRkZTEtZTBhZC0z
MjRlLTlhZWQtMDJlMjBlZDNjOWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/q8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJF6dCfglLQRpyT+0SrzaWRWnPX0SbRXlEaDXTL840L2vR6NIyxInTUf
uvzN0mVsiG/sgDoJNW91FmAUBrXqVF56os9QxLpbZETFTcSFieT4Vaxut7VC3GLf
N6QXArWGJq/+0Fvy/6pWFdJ2FVwyYaiVGnJfxtjIsgkf9/oWqMOFn2sZqv6Ldh2t
iyvn6E+wSbPeaLcMGWu/VF3mvjH5v2y1xw/ilPZ8uNbH9g0Hst44QH17O5+IUNc8
++BBru81H4SKpD9o5SWwbmuvz//O/o90yLG39itCYzQPZTLfGkOdw+pmaw/7soUM
MIvqD7OHMnxtomeVqufT6fdO+cKZDhM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:30:29 2025 by rpki-client