Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/d3b79aec-ef9d-33c7-8fb8-e1edbffbfbee.roa
File: d3b79aec-ef9d-33c7-8fb8-e1edbffbfbee.roa (raw, json)
Hash identifier: yJ/QUxgWeFGtnkJ1CE5s2hr3lnHN/+i2rWYL2V34ksY=
Subject key identifier: 40:45:59:F7:68:61:58:30:15:5A:4F:2E:D2:5F:0D:72:2A:4C:F9:0C
Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial: 010D0C9F4328584929E3CE2362322003A56E6680
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/d3b79aec-ef9d-33c7-8fb8-e1edbffbfbee.roa
Signing time: Wed 12 Mar 2025 13:00:53 +0000
ROA not before: Wed 12 Mar 2025 13:00:53 +0000
ROA not after: Tue 10 Jun 2025 13:00:53 +0000
asID: 395963
IP address blocks: 198.150.24.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:29:e3:ce:23:62:32:20:03:a5:6e:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
Validity
Not Before: Mar 12 13:00:53 2025 GMT
Not After : Jun 10 13:00:53 2025 GMT
Subject: CN=87a9eaab-eb27-467d-9e3c-c3fd769de12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:24:03:7d:7a:0a:de:4f:3b:bc:36:94:8c:6c:
93:2e:73:33:c8:05:c6:97:35:e4:58:dc:d4:24:a9:
02:ae:d2:77:5f:e5:d7:3a:55:08:00:db:31:b0:4f:
98:fe:84:ef:27:33:10:ce:4b:90:de:e1:15:0a:c4:
48:a7:a3:32:2c:a1:86:e1:46:6a:8e:f7:83:5a:59:
7b:f9:0e:7d:39:db:09:88:5d:6e:db:4e:c6:69:ef:
eb:05:be:6c:53:05:19:df:9d:21:99:10:02:00:d3:
00:fd:e3:9d:bf:e6:1e:73:1f:69:0c:15:5f:4b:69:
01:eb:11:ac:c4:77:85:46:61:17:f9:47:cb:f8:e1:
83:37:b3:ab:81:a8:75:d4:ec:0f:ef:64:57:46:d2:
66:11:ef:81:62:ba:cb:89:9e:19:2c:6a:b4:04:0a:
91:9b:ad:74:3c:ed:63:47:13:5d:46:fc:2b:8a:c0:
11:2e:28:c4:19:11:82:6f:4a:12:0c:f0:d6:82:8c:
50:87:06:39:d7:35:74:06:94:04:be:1a:4f:91:2d:
7e:aa:56:c8:c8:39:da:92:d5:e7:14:7a:62:af:d1:
14:c6:94:65:e4:62:36:05:31:b9:53:f2:c3:02:2d:
c0:9d:9a:df:30:f1:68:0c:9c:98:67:93:ff:3e:23:
26:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:45:59:F7:68:61:58:30:15:5A:4F:2E:D2:5F:0D:72:2A:4C:F9:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/d3b79aec-ef9d-33c7-8fb8-e1edbffbfbee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
X509v3 Authority Key Identifier:
keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
sbgp-ipAddrBlock: critical
IPv4:
198.150.24.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:74:6e:a0:09:95:a4:d2:02:19:81:d7:b9:29:78:83:f2:be:
19:2f:52:f5:c5:61:74:0b:40:7a:44:59:0b:30:a5:8f:37:dc:
90:91:8d:b0:5c:35:d6:e9:9c:3e:0f:ca:de:03:07:f8:38:62:
f8:49:20:2e:18:eb:ea:8c:af:5f:87:05:a7:02:f1:a2:dc:e4:
43:13:fa:37:b2:87:b9:bd:cc:00:a7:7e:2b:1d:86:a4:98:86:
00:28:6f:73:71:e6:cc:93:9b:7a:a5:ca:88:57:2d:69:f6:7d:
bc:30:ea:3b:fa:d6:de:48:25:dd:78:4c:cf:f6:50:22:36:ef:
be:76:25:e5:49:f0:a6:b0:27:fd:5c:60:87:41:9f:8e:54:12:
ba:2c:6e:09:36:46:29:d1:e2:6d:48:50:b4:cd:a0:01:f9:55:
ce:bd:c8:7a:12:44:cb:df:60:17:8a:85:22:2a:13:32:84:1c:
92:8b:26:98:10:35:5a:8f:80:8d:24:54:c8:a8:16:2c:00:2a:
a9:11:4e:87:4d:12:71:3f:d3:b5:96:21:92:b3:45:d9:61:21:
9b:58:87:6b:b0:e2:a1:e9:5b:eb:f3:58:af:e8:b6:87:38:0e:
49:37:b9:0c:b4:67:98:55:82:d8:d9:fb:52:42:66:83:77:e5:
1a:fc:a9:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkp484jYjIgA6VuZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWEwMzM5NTMtOTc1Mi00NzlkLWI5ZWUtNDIxM2NmNjQ4
NDc5MB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk
ODdhOWVhYWItZWIyNy00NjdkLTllM2MtYzNmZDc2OWRlMTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSQDfXoK3k87vDaUjGyTLnMzyAXGlzXkWNzU
JKkCrtJ3X+XXOlUIANsxsE+Y/oTvJzMQzkuQ3uEVCsRIp6MyLKGG4UZqjveDWll7
+Q59OdsJiF1u207Gae/rBb5sUwUZ350hmRACANMA/eOdv+Yecx9pDBVfS2kB6xGs
xHeFRmEX+UfL+OGDN7Orgah11OwP72RXRtJmEe+BYrrLiZ4ZLGq0BAqRm610PO1j
RxNdRvwrisARLijEGRGCb0oSDPDWgoxQhwY51zV0BpQEvhpPkS1+qlbIyDnaktXn
FHpir9EUxpRl5GI2BTG5U/LDAi3AnZrfMPFoDJyYZ5P/PiMmrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEBFWfdoYVgwFVpPLtJfDXIqTPkMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAz
Mzk1My05NzUyLTQ3OWQtYjllZS00MjEzY2Y2NDg0NzkvZDNiNzlhZWMtZWY5ZC0z
M2M3LThmYjgtZTFlZGJmZmJmYmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWEwMzM5NTMtOTc1Mi00NzlkLWI5
ZWUtNDIxM2NmNjQ4NDc5L2FhMDMzOTUzLTk3NTItNDc5ZC1iOWVlLTQyMTNjZjY0
ODQ3OS5jcmwwHwYDVR0jBBgwFoAUhCZLjuQsOm5/g8Ywel2MTTjmuLMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAzMzk1My05NzUyLTQ3OWQtYjllZS00MjEz
Y2Y2NDg0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxpYYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIh0bqAJlaTSAhmB17kpeIPyvhkvUvXFYXQLQHpEWQswpY833JCRjbBc
NdbpnD4Pyt4DB/g4YvhJIC4Y6+qMr1+HBacC8aLc5EMT+jeyh7m9zACnfisdhqSY
hgAob3Nx5syTm3qlyohXLWn2fbww6jv61t5IJd14TM/2UCI27752JeVJ8KawJ/1c
YIdBn45UErosbgk2RinR4m1IULTNoAH5Vc69yHoSRMvfYBeKhSIqEzKEHJKLJpgQ
NVqPgI0kVMioFiwAKqkRTodNEnE/07WWIZKzRdlhIZtYh2uw4qHpW+vzWK/otoc4
Dkk3uQy0Z5hVgtjZ+1JCZoN35Rr8qW0=
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:38:01 2025 by rpki-client