Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/07c30033-c037-384c-b725-0b56b7f2738d.roa
File: 07c30033-c037-384c-b725-0b56b7f2738d.roa (raw, json)
Hash identifier: WwNRs5IJO3gqxEsIZI+L7uN5YGdxuvEc2K6DOCtDONg=
Subject key identifier: 03:AC:2A:70:2A:88:27:37:E0:3E:B7:42:1E:CB:B6:42:4B:28:0B:27
Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial: 010D0C9F432858492CB22A14F7ABB76EA3103680
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/07c30033-c037-384c-b725-0b56b7f2738d.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 4181
IP address blocks: 198.150.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b2:2a:14:f7:ab:b7:6e:a3:10:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=e48567a8-f798-42e1-8c34-2b00d82f4dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fb:93:f5:00:e1:d3:3b:64:9d:ab:f0:25:2a:
7e:20:6c:fa:79:6b:fc:6b:90:83:d9:71:b2:26:1c:
25:df:70:a1:68:d7:5b:54:ea:a5:1e:ed:4e:8d:da:
52:a7:4a:34:e4:b2:58:79:f4:4b:62:07:a5:06:93:
e1:99:91:0a:f7:72:89:16:d6:ea:9d:d3:51:9e:2e:
e2:23:3d:4d:6d:84:db:eb:58:af:f4:0c:d0:36:e5:
7b:1b:a4:8b:3b:77:dd:8f:cf:e5:c3:0c:0a:26:e6:
81:1b:74:e1:57:83:a5:c5:e0:ec:57:a9:10:92:02:
0e:7a:46:c5:14:37:ac:5e:4c:83:3b:cc:70:c2:a8:
42:3a:e8:4e:c5:dc:5e:68:bb:af:83:f3:76:1a:0f:
20:3d:8c:7d:48:50:e5:bc:9c:9a:02:1d:7b:82:02:
23:5a:87:f7:c4:43:7e:c6:a7:c4:18:25:f9:bd:5c:
df:f1:88:f1:18:95:92:96:95:99:4b:34:05:c9:1b:
43:fa:e7:b5:27:7a:6c:d8:99:90:93:8e:b3:78:23:
09:57:db:db:a8:54:c4:ea:de:af:50:2c:2a:6e:72:
d6:a0:b7:9a:7d:20:37:9e:91:26:3a:a0:32:c6:35:
8f:ac:15:f4:51:5a:ef:9b:47:57:cd:26:eb:40:9c:
e3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AC:2A:70:2A:88:27:37:E0:3E:B7:42:1E:CB:B6:42:4B:28:0B:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/07c30033-c037-384c-b725-0b56b7f2738d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
X509v3 Authority Key Identifier:
keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
sbgp-ipAddrBlock: critical
IPv4:
198.150.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:e5:fb:36:76:71:c6:b1:a3:63:d8:d4:29:e9:f8:7c:b2:48:
0b:ed:82:61:22:af:8f:52:47:50:63:20:c3:7e:37:6a:95:4e:
af:f6:e2:71:df:9f:48:21:d0:e6:d1:be:4c:cc:27:67:cf:9b:
f9:c5:f7:51:52:ce:63:0d:70:4c:9a:88:81:56:2e:b6:a4:5d:
24:86:1c:a4:3f:47:db:1f:27:7d:67:7b:4c:c6:b5:e2:64:0e:
a2:bf:9a:70:53:c3:60:5f:fb:44:3b:15:13:27:92:aa:ee:70:
b8:22:07:eb:3c:c0:cb:e1:24:09:54:54:34:22:63:53:5f:42:
ac:3c:ad:39:6f:2a:82:51:39:25:b5:0a:06:98:5e:df:88:e5:
95:d5:2e:08:4f:39:e7:7f:d1:0f:ab:16:7f:3f:82:14:fc:af:
d8:e9:e8:6a:16:32:bf:c8:8e:27:af:30:b1:07:5f:40:d1:48:
61:78:f4:c1:c7:d0:9c:30:72:b9:f4:1d:56:50:8f:e4:68:db:
12:f3:23:a9:43:67:96:df:b3:8e:20:5f:89:08:9b:c1:36:81:
c0:e0:ff:82:8e:8f:9e:95:b7:f0:f5:0d:bc:bc:6d:1b:d3:74:
7c:e5:56:a1:ca:cd:92:5c:f6:81:de:e1:45:89:3a:13:68:41:
bf:c4:77:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssioU96u3bqMQNoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWEwMzM5NTMtOTc1Mi00NzlkLWI5ZWUtNDIxM2NmNjQ4
NDc5MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZTQ4NTY3YTgtZjc5OC00MmUxLThjMzQtMmIwMGQ4MmY0ZGQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPuT9QDh0ztknavwJSp+IGz6eWv8a5CD2XGy
Jhwl33ChaNdbVOqlHu1OjdpSp0o05LJYefRLYgelBpPhmZEK93KJFtbqndNRni7i
Iz1NbYTb61iv9AzQNuV7G6SLO3fdj8/lwwwKJuaBG3ThV4OlxeDsV6kQkgIOekbF
FDesXkyDO8xwwqhCOuhOxdxeaLuvg/N2Gg8gPYx9SFDlvJyaAh17ggIjWof3xEN+
xqfEGCX5vVzf8YjxGJWSlpWZSzQFyRtD+ue1J3ps2JmQk46zeCMJV9vbqFTE6t6v
UCwqbnLWoLeafSA3npEmOqAyxjWPrBX0UVrvm0dXzSbrQJzjGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAOsKnAqiCc34D63Qh7LtkJLKAsnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAz
Mzk1My05NzUyLTQ3OWQtYjllZS00MjEzY2Y2NDg0NzkvMDdjMzAwMzMtYzAzNy0z
ODRjLWI3MjUtMGI1NmI3ZjI3MzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWEwMzM5NTMtOTc1Mi00NzlkLWI5
ZWUtNDIxM2NmNjQ4NDc5L2FhMDMzOTUzLTk3NTItNDc5ZC1iOWVlLTQyMTNjZjY0
ODQ3OS5jcmwwHwYDVR0jBBgwFoAUhCZLjuQsOm5/g8Ywel2MTTjmuLMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAzMzk1My05NzUyLTQ3OWQtYjllZS00MjEz
Y2Y2NDg0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpasMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHHl+zZ2ccaxo2PY1Cnp+HyySAvtgmEir49SR1BjIMN+N2qVTq/24nHf
n0gh0ObRvkzMJ2fPm/nF91FSzmMNcEyaiIFWLrakXSSGHKQ/R9sfJ31ne0zGteJk
DqK/mnBTw2Bf+0Q7FRMnkqrucLgiB+s8wMvhJAlUVDQiY1NfQqw8rTlvKoJROSW1
CgaYXt+I5ZXVLghPOed/0Q+rFn8/ghT8r9jp6GoWMr/IjievMLEHX0DRSGF49MHH
0Jwwcrn0HVZQj+Ro2xLzI6lDZ5bfs44gX4kIm8E2gcDg/4KOj56Vt/D1Dby8bRvT
dHzlVqHKzZJc9oHe4UWJOhNoQb/Ed5w=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:08:33 2025 by rpki-client