Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/fbe85ee6-2ece-3892-8d7e-72ac921695cf.roa
File: fbe85ee6-2ece-3892-8d7e-72ac921695cf.roa (raw, json)
Hash identifier: kCsUH/BIsQEM3paXaB/AGgbmLzjVN5OnS0GU0Td6Gho=
Subject key identifier: 2D:28:1A:DE:B5:55:32:40:16:93:F2:9D:4A:35:3F:93:A4:C6:6A:9F
Certificate issuer: /CN=687c869a-fd9c-4db9-8dab-54b737103513
Certificate serial: 010D0C9F4328584937D93374050DF78755266600
Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/fbe85ee6-2ece-3892-8d7e-72ac921695cf.roa
Signing time: Mon 17 Mar 2025 13:00:52 +0000
ROA not before: Mon 17 Mar 2025 13:00:52 +0000
ROA not after: Sun 15 Jun 2025 13:00:52 +0000
asID: 36511
IP address blocks: 199.101.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:37:d9:33:74:05:0d:f7:87:55:26:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513
Validity
Not Before: Mar 17 13:00:52 2025 GMT
Not After : Jun 15 13:00:52 2025 GMT
Subject: CN=e25e6f78-67af-4e2a-836d-e9c9b0983ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7e:2c:a2:fb:f3:cd:ba:6e:75:ac:de:ad:12:
cb:a4:5b:b0:3b:9d:fe:fc:8d:6e:e6:2a:13:8a:a4:
8b:bd:00:dc:71:aa:e5:a4:7e:8a:e3:25:33:1a:49:
76:d3:a4:af:b8:e7:65:29:8a:8f:44:c5:ac:35:10:
c9:46:41:97:3f:6a:00:ca:b4:08:d4:b9:63:f7:ce:
ef:f5:41:d5:3a:06:f7:26:50:28:f7:c6:03:68:9b:
34:c6:78:74:b6:c3:a0:76:04:d0:51:06:55:12:f4:
d6:dc:50:a7:2e:1c:ba:fe:26:84:0e:fc:66:44:1d:
9c:8b:67:80:e7:30:51:18:28:a6:ec:0a:c5:a6:4b:
39:5a:b1:e9:db:ef:87:56:4d:b0:9f:93:eb:83:ab:
f0:60:95:9c:1f:6b:34:01:43:7b:a3:70:63:aa:99:
e5:82:ab:68:bb:b1:4e:4e:b7:36:80:26:6b:01:8e:
62:23:81:a7:26:43:3a:46:1a:f2:6d:a4:fe:08:6d:
c4:ab:e1:15:a4:08:88:41:d2:34:1a:f2:31:44:99:
ef:f6:af:09:2e:54:42:ef:ab:27:d2:93:07:7e:d1:
e5:b2:3d:6b:08:0a:c6:bc:53:82:0f:62:c2:fd:fe:
2c:c6:4a:df:fe:28:11:1b:83:39:2c:3d:d0:b7:fc:
d9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:28:1A:DE:B5:55:32:40:16:93:F2:9D:4A:35:3F:93:A4:C6:6A:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/fbe85ee6-2ece-3892-8d7e-72ac921695cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl
X509v3 Authority Key Identifier:
keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
sbgp-ipAddrBlock: critical
IPv4:
199.101.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:34:e0:7d:fe:5d:cf:14:ad:12:43:8b:d6:ab:7a:a0:63:e1:
e4:4e:c0:62:7b:a1:ac:e8:72:eb:8a:0e:07:30:5f:61:f9:a3:
f5:dd:bf:63:c0:c1:b6:c7:a4:36:21:cb:75:ee:26:7f:a0:e5:
24:c4:80:01:44:2f:e9:e1:8b:bc:ee:f7:36:b7:2e:d5:e0:8e:
83:b2:e1:dc:e5:bb:8c:fc:6c:e6:4d:65:59:63:77:08:d5:f2:
ce:52:7a:2a:b6:2f:70:41:8a:b4:e6:d8:5a:25:12:d5:85:26:
51:b8:62:5e:fa:02:a1:e3:6a:4a:25:44:0d:7b:9a:db:ae:bf:
d0:24:74:44:bf:ba:c8:75:bc:89:9d:77:d9:be:b2:b6:60:b1:
0f:93:ae:fc:fa:28:d2:63:ce:08:33:be:de:fc:b8:74:72:83:
02:77:64:9f:f1:38:9a:b4:f4:9b:24:10:dc:53:bb:1e:fc:0e:
5a:cf:6d:2e:08:32:61:9d:0e:c5:76:1c:3b:e6:78:80:97:e0:
23:b0:c4:8e:be:8c:99:54:6d:53:3e:41:48:04:56:a0:77:f1:
79:9d:b7:27:e5:49:76:72:f3:db:dc:03:0b:eb:56:94:53:00:
2f:6c:90:a4:54:d5:31:8d:93:13:02:04:29:84:b6:bf:f8:02:
62:34:43:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk32TN0BQ33h1UmZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjg3Yzg2OWEtZmQ5Yy00ZGI5LThkYWItNTRiNzM3MTAz
NTEzMB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZTI1ZTZmNzgtNjdhZi00ZTJhLTgzNmQtZTljOWIwOTgzZWNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq34sovvzzbpudazerRLLpFuwO53+/I1u5ioT
iqSLvQDccarlpH6K4yUzGkl206SvuOdlKYqPRMWsNRDJRkGXP2oAyrQI1Llj987v
9UHVOgb3JlAo98YDaJs0xnh0tsOgdgTQUQZVEvTW3FCnLhy6/iaEDvxmRB2ci2eA
5zBRGCim7ArFpks5WrHp2++HVk2wn5Prg6vwYJWcH2s0AUN7o3Bjqpnlgqtou7FO
Trc2gCZrAY5iI4GnJkM6RhrybaT+CG3Eq+EVpAiIQdI0GvIxRJnv9q8JLlRC76sn
0pMHftHlsj1rCArGvFOCD2LC/f4sxkrf/igRG4M5LD3Qt/zZ6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC0oGt61VTJAFpPynUo1P5OkxmqfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ODdj
ODY5YS1mZDljLTRkYjktOGRhYi01NGI3MzcxMDM1MTMvZmJlODVlZTYtMmVjZS0z
ODkyLThkN2UtNzJhYzkyMTY5NWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjg3Yzg2OWEtZmQ5Yy00ZGI5LThk
YWItNTRiNzM3MTAzNTEzLzY4N2M4NjlhLWZkOWMtNGRiOS04ZGFiLTU0YjczNzEw
MzUxMy5jcmwwHwYDVR0jBBgwFoAU4uiNCUXNrgKVNNtusLIBOCL3Hl4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82ODdjODY5YS1mZDljLTRkYjktOGRhYi01NGI3
MzcxMDM1MTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2W/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEY04H3+Xc8UrRJDi9areqBj4eROwGJ7oazocuuKDgcwX2H5o/Xdv2PA
wbbHpDYhy3XuJn+g5STEgAFEL+nhi7zu9za3LtXgjoOy4dzlu4z8bOZNZVljdwjV
8s5Seiq2L3BBirTm2FolEtWFJlG4Yl76AqHjakolRA17mtuuv9AkdES/ush1vImd
d9m+srZgsQ+Trvz6KNJjzggzvt78uHRygwJ3ZJ/xOJq09JskENxTux78DlrPbS4I
MmGdDsV2HDvmeICX4COwxI6+jJlUbVM+QUgEVqB38XmdtyflSXZy89vcAwvrVpRT
AC9skKRU1TGNkxMCBCmEtr/4AmI0Q8k=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:06 2025 by rpki-client