Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/4b8edbb6-688d-3baa-b267-d7c192012f14.roa
File: 4b8edbb6-688d-3baa-b267-d7c192012f14.roa (raw, json)
Hash identifier: iKXymcRmr1JaL9XyZQ+A/iqki7ziTc9e8Wj5sF/q5L8=
Subject key identifier: AA:4F:4E:6E:2A:47:84:8B:76:08:E2:E1:6D:DF:DD:BC:74:C4:AD:F9
Certificate issuer: /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial: 010D0C9F43285848F4F69F085337692E2F14F980
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/4b8edbb6-688d-3baa-b267-d7c192012f14.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 54548
IP address blocks: 198.251.76.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:9f:08:53:37:69:2e:2f:14:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=38c0deeb-3548-4460-ba19-2694c96d616c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8d:21:75:22:60:53:69:80:9e:78:fa:ab:36:
18:f7:f6:5c:6e:68:33:80:37:8c:be:f8:7f:57:6c:
d1:34:c7:07:9f:aa:37:c1:67:f3:b1:7f:52:6e:ce:
d6:82:1a:e1:75:f9:af:26:61:ed:9c:21:0e:7e:0c:
2d:d5:70:2c:1e:07:d5:db:a5:f7:df:b0:70:aa:e5:
94:66:f1:63:36:eb:f7:5a:bf:89:74:10:f1:43:da:
1d:ea:a6:6b:d5:7d:ea:f2:a9:b9:90:0a:1c:90:e3:
3d:07:03:35:99:b8:b2:20:09:8a:1d:18:ae:1c:f3:
c9:50:cc:66:89:14:dc:f6:ae:8c:e9:9f:90:c7:05:
05:1d:1c:53:1a:a5:5d:a8:71:e2:b4:bb:aa:82:c9:
0f:78:d3:c3:21:a1:96:d6:9e:de:37:ce:69:fe:72:
13:96:ac:ac:a1:80:ca:a6:c6:b9:68:2b:b4:da:df:
77:79:8d:6a:1f:45:66:80:30:9c:83:70:38:13:96:
8d:53:76:22:87:83:69:fa:e0:c7:44:7a:d3:4a:b0:
e9:33:cb:83:59:38:af:e4:47:01:2e:87:1f:5c:70:
e6:d9:29:72:c4:74:95:4c:dc:b3:70:08:42:5a:3d:
40:ad:6c:87:61:3d:42:cd:b1:a5:85:db:7d:0a:1f:
b5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4F:4E:6E:2A:47:84:8B:76:08:E2:E1:6D:DF:DD:BC:74:C4:AD:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/4b8edbb6-688d-3baa-b267-d7c192012f14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
X509v3 Authority Key Identifier:
keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
sbgp-ipAddrBlock: critical
IPv4:
198.251.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:bf:81:b6:53:62:10:2d:13:4d:49:f9:b2:1c:1b:90:28:af:
84:e3:84:50:6d:e6:79:22:d9:c1:df:a0:d1:c1:d2:d1:96:3a:
50:15:cd:e9:5e:e7:f7:10:40:9b:56:e3:67:22:85:0a:f4:89:
93:1e:6d:b6:74:89:57:42:cb:2b:4d:42:da:a6:5f:76:c0:d7:
97:ed:62:05:3a:d9:83:d7:fa:ed:4b:1b:84:00:66:8f:2a:1a:
63:38:91:7b:0a:40:b1:7d:7e:eb:1e:03:16:08:41:4f:7d:19:
2d:f4:3d:85:b1:39:3a:dd:f8:b8:09:f3:5e:3c:b5:f2:2c:19:
98:4c:a7:a3:6f:02:70:60:bc:41:69:04:b0:d6:43:ec:d0:06:
11:33:f0:42:16:59:b5:1c:42:79:33:6a:eb:96:0d:86:43:4f:
a9:68:5e:a5:b7:af:29:16:8b:e3:48:35:8a:69:63:6b:e6:bb:
f6:1a:c7:24:c3:1d:07:be:00:5f:6b:eb:4e:ea:ed:42:f2:2b:
4b:9e:b5:84:ff:67:30:d6:dc:8f:0e:6d:16:3b:d6:97:d6:2a:
73:48:5e:6a:36:97:1f:b0:2b:e5:fd:86:1d:7a:98:c0:88:ab:
01:01:54:8d:f1:59:76:79:39:29:3f:d7:1e:9b:22:ac:5c:3f:
e4:0d:3f:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09p8IUzdpLi8U+YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2JhNzk5ODgtODBiYy00ZmNiLThmYWYtNjI0NDAwZDVm
MWNlMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
MzhjMGRlZWItMzU0OC00NDYwLWJhMTktMjY5NGM5NmQ2MTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj40hdSJgU2mAnnj6qzYY9/ZcbmgzgDeMvvh/
V2zRNMcHn6o3wWfzsX9Sbs7WghrhdfmvJmHtnCEOfgwt1XAsHgfV26X337BwquWU
ZvFjNuv3Wr+JdBDxQ9od6qZr1X3q8qm5kAockOM9BwM1mbiyIAmKHRiuHPPJUMxm
iRTc9q6M6Z+QxwUFHRxTGqVdqHHitLuqgskPeNPDIaGW1p7eN85p/nITlqysoYDK
psa5aCu02t93eY1qH0VmgDCcg3A4E5aNU3Yih4Np+uDHRHrTSrDpM8uDWTiv5EcB
LocfXHDm2SlyxHSVTNyzcAhCWj1ArWyHYT1CzbGlhdt9Ch+1KQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKpPTm4qR4SLdgji4W3f3bx0xK35MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3
OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0MDBkNWYxY2UvNGI4ZWRiYjYtNjg4ZC0z
YmFhLWIyNjctZDdjMTkyMDEyZjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2JhNzk5ODgtODBiYy00ZmNiLThm
YWYtNjI0NDAwZDVmMWNlLzdiYTc5OTg4LTgwYmMtNGZjYi04ZmFmLTYyNDQwMGQ1
ZjFjZS5jcmwwHwYDVR0jBBgwFoAUNBe8v2tKYwrKo8WIvEUP5ZR5xFowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0
MDBkNWYxY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvtMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABC/gbZTYhAtE01J+bIcG5Aor4TjhFBt5nki2cHfoNHB0tGWOlAVzele
5/cQQJtW42cihQr0iZMebbZ0iVdCyytNQtqmX3bA15ftYgU62YPX+u1LG4QAZo8q
GmM4kXsKQLF9fuseAxYIQU99GS30PYWxOTrd+LgJ8148tfIsGZhMp6NvAnBgvEFp
BLDWQ+zQBhEz8EIWWbUcQnkzauuWDYZDT6loXqW3rykWi+NINYppY2vmu/YaxyTD
HQe+AF9r607q7ULyK0uetYT/ZzDW3I8ObRY71pfWKnNIXmo2lx+wK+X9hh16mMCI
qwEBVI3xWXZ5OSk/1x6bIqxcP+QNPxo=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:55 2025 by rpki-client