Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/be6b4668-09eb-3bbe-b723-0d495011f763.roa
File: be6b4668-09eb-3bbe-b723-0d495011f763.roa (raw, json)
Hash identifier: vML/0d2LB6helE1JCN8zxwpCwqQlczns++IHunyE4a0=
Subject key identifier: 50:FD:D0:45:A5:2F:C9:37:EC:76:F7:3E:D5:9E:A5:8D:2E:69:9F:E3
Certificate issuer: /CN=48b02ed2-f897-45be-b9fb-346294418ecb
Certificate serial: 010D0C9F43285848F9269BD5D6EF7D1E61A67200
Authority key identifier: F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/be6b4668-09eb-3bbe-b723-0d495011f763.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 19331
IP address blocks: 192.81.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:9b:d5:d6:ef:7d:1e:61:a6:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48b02ed2-f897-45be-b9fb-346294418ecb
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=a410a6c5-a4ff-4739-966a-70f92601c4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fc:f5:ef:97:e5:c1:c4:d3:a2:25:fd:76:f6:
9e:f8:32:3f:30:48:fc:5a:12:64:ff:80:2d:41:2f:
4f:39:4d:01:79:a2:e7:c6:06:11:f3:ba:3b:4f:3e:
b8:b1:8f:08:ac:6b:49:ef:53:b9:73:22:af:35:12:
48:62:9f:e6:4d:6b:7e:52:e9:27:69:6c:57:dd:e2:
e3:fa:02:df:e8:d7:b7:6f:1d:5c:25:da:d0:d2:f9:
93:7d:ce:6b:41:6c:a3:a2:24:56:c0:a3:c3:09:f2:
77:ce:db:a8:db:a9:82:53:df:f0:10:f5:da:b0:19:
67:7d:03:4b:82:4e:77:8f:d4:cd:61:13:db:f5:98:
25:cd:bd:b0:7c:44:d9:6b:36:cf:89:e0:3a:9d:32:
17:3b:43:d4:47:0c:a6:13:16:85:b5:71:ad:fa:36:
1f:37:fb:a5:0e:7d:ef:8d:35:aa:df:e3:95:65:aa:
d9:c0:fe:2c:71:02:2d:8b:0d:d4:25:1c:8a:8e:6d:
55:cc:64:95:72:17:38:df:63:cb:60:a3:86:44:df:
ac:23:3f:10:2c:10:37:a3:b6:a5:4a:c3:05:71:0c:
93:a9:e9:47:50:0e:7d:3a:a9:e4:91:f0:04:97:e2:
89:08:df:ac:ce:40:5e:03:fe:50:e4:72:73:2b:c5:
5d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FD:D0:45:A5:2F:C9:37:EC:76:F7:3E:D5:9E:A5:8D:2E:69:9F:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/be6b4668-09eb-3bbe-b723-0d495011f763.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl
X509v3 Authority Key Identifier:
keyid:F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer
sbgp-ipAddrBlock: critical
IPv4:
192.81.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:ad:5e:ec:f1:43:fa:0a:40:fe:83:75:18:72:0b:af:99:cc:
65:80:68:9e:80:23:f1:fc:44:c5:63:41:67:39:e4:6a:d1:dc:
e3:6b:b3:07:91:4e:75:29:7b:13:47:70:e5:e2:98:a3:84:ef:
92:a8:e5:e0:48:e1:40:f2:22:91:e5:10:29:c5:4b:6d:fd:06:
70:46:bd:70:b4:b7:eb:92:12:78:2b:0c:f8:11:19:5b:0a:43:
d7:5d:c9:8c:ff:8b:00:37:b5:5f:d6:20:ee:2c:53:b4:d4:a1:
7c:52:0e:67:c5:b7:91:6e:85:30:e4:66:a7:69:7b:6f:43:a6:
68:7b:73:25:20:09:bb:84:69:88:b2:b2:bf:64:ac:f7:fc:a5:
3d:23:ed:d4:69:2d:e6:31:ec:d9:b1:f2:53:b0:5f:50:2e:0e:
76:09:14:de:6c:0a:25:36:c5:95:e5:88:14:cd:db:d1:53:14:
9e:53:c5:f1:f9:70:55:07:59:87:81:4d:45:9a:8e:5d:37:f5:
1a:eb:ac:19:1f:48:2d:f1:81:36:7c:3f:43:9b:6c:90:33:3b:
64:f5:ae:7e:31:53:9a:91:9c:92:a2:74:db:07:4b:34:eb:1d:
f5:ce:27:33:8f:91:6e:d6:c3:1b:fa:df:28:d8:29:2d:6c:e8:
10:46:85:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JpvV1u99HmGmcgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDhiMDJlZDItZjg5Ny00NWJlLWI5ZmItMzQ2Mjk0NDE4
ZWNiMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
YTQxMGE2YzUtYTRmZi00NzM5LTk2NmEtNzBmOTI2MDFjNGU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/z175flwcTToiX9dvae+DI/MEj8WhJk/4At
QS9POU0BeaLnxgYR87o7Tz64sY8IrGtJ71O5cyKvNRJIYp/mTWt+UuknaWxX3eLj
+gLf6Ne3bx1cJdrQ0vmTfc5rQWyjoiRWwKPDCfJ3ztuo26mCU9/wEPXasBlnfQNL
gk53j9TNYRPb9Zglzb2wfETZazbPieA6nTIXO0PURwymExaFtXGt+jYfN/ulDn3v
jTWq3+OVZarZwP4scQItiw3UJRyKjm1VzGSVchc432PLYKOGRN+sIz8QLBA3o7al
SsMFcQyTqelHUA59OqnkkfAEl+KJCN+szkBeA/5Q5HJzK8VdgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFD90EWlL8k37Hb3PtWepY0uaZ/jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80OGIw
MmVkMi1mODk3LTQ1YmUtYjlmYi0zNDYyOTQ0MThlY2IvYmU2YjQ2NjgtMDllYi0z
YmJlLWI3MjMtMGQ0OTUwMTFmNzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDhiMDJlZDItZjg5Ny00NWJlLWI5
ZmItMzQ2Mjk0NDE4ZWNiLzQ4YjAyZWQyLWY4OTctNDViZS1iOWZiLTM0NjI5NDQx
OGVjYi5jcmwwHwYDVR0jBBgwFoAU8ShDZzN0rvFkkge9rUVjecCogvAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80OGIwMmVkMi1mODk3LTQ1YmUtYjlmYi0zNDYy
OTQ0MThlY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwFFoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFOtXuzxQ/oKQP6DdRhyC6+ZzGWAaJ6AI/H8RMVjQWc55GrR3ONrsweR
TnUpexNHcOXimKOE75Ko5eBI4UDyIpHlECnFS239BnBGvXC0t+uSEngrDPgRGVsK
Q9ddyYz/iwA3tV/WIO4sU7TUoXxSDmfFt5FuhTDkZqdpe29Dpmh7cyUgCbuEaYiy
sr9krPf8pT0j7dRpLeYx7Nmx8lOwX1AuDnYJFN5sCiU2xZXliBTN29FTFJ5TxfH5
cFUHWYeBTUWajl039RrrrBkfSC3xgTZ8P0ObbJAzO2T1rn4xU5qRnJKidNsHSzTr
HfXOJzOPkW7Wwxv63yjYKS1s6BBGhaM=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:28 2025 by rpki-client