Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/1c801033-394b-322a-bebc-f2d3a732f913.roa
File: 1c801033-394b-322a-bebc-f2d3a732f913.roa (raw, json)
Hash identifier: HpJEfFJer+1AfZIFgUTkIbHj5nfaEXABC6WOUYKRKLk=
Subject key identifier: 50:85:14:62:50:AE:CE:23:A9:1B:39:7E:52:37:83:60:7F:A2:AF:A5
Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial: 010D0C9F43285848F65BCE0E60B047748F6D5800
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/1c801033-394b-322a-bebc-f2d3a732f913.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 30133
IP address blocks: 192.158.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:ce:0e:60:b0:47:74:8f:6d:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=a6637ece-fc57-46cf-a02d-a18ac8306d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cd:9e:86:7b:fe:67:0a:a8:9d:a4:db:7e:82:
86:66:92:e5:d2:9b:7d:97:f7:83:cb:86:7c:09:1d:
7d:9f:5c:34:4f:ac:12:40:f6:a8:9d:b4:7d:77:e0:
d1:2f:4a:b8:d1:24:43:ce:40:22:d8:57:5c:b1:83:
f6:87:40:51:77:12:d0:ea:b5:be:44:11:c0:b8:1e:
4e:38:02:c6:93:87:cf:7a:78:f6:7a:3b:a4:07:57:
80:74:d0:b1:6f:8b:8c:a0:13:91:24:ac:ea:60:8c:
cb:3a:e5:68:a6:df:c9:d5:d7:11:13:df:be:95:08:
51:dd:0d:fa:bb:b2:30:d5:93:e3:c5:9e:59:de:d6:
fa:cc:1c:25:41:de:cc:7d:b4:30:cc:a3:e1:10:b7:
04:2c:39:3d:9d:bd:cf:f4:78:29:a4:c9:03:09:75:
0d:50:90:6d:03:04:9e:e9:66:11:38:85:8a:21:32:
f9:c1:57:3b:17:d0:d1:f7:d3:a1:fd:d7:98:7a:ce:
dd:fa:ff:11:9a:7f:b7:04:04:e3:97:5c:cc:f5:5e:
25:01:f8:b4:5c:71:c1:c8:2f:e3:19:00:d9:4d:94:
a4:a3:68:55:88:7a:3a:bf:a0:01:9b:4e:f2:39:47:
14:ec:56:b4:31:ec:45:3b:b6:13:df:a4:c4:da:01:
88:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:85:14:62:50:AE:CE:23:A9:1B:39:7E:52:37:83:60:7F:A2:AF:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/1c801033-394b-322a-bebc-f2d3a732f913.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
X509v3 Authority Key Identifier:
keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
sbgp-ipAddrBlock: critical
IPv4:
192.158.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:35:c2:12:19:56:b8:02:02:de:a2:3b:f5:4a:21:cc:b3:3a:
b8:31:ec:60:83:fd:46:16:e1:af:02:58:26:3d:df:21:f5:4f:
df:4a:c5:ff:81:59:35:b4:0b:8e:88:1e:f4:f0:9e:f3:f8:54:
30:52:dd:2f:6a:e2:0b:2c:c9:82:b9:f4:9b:88:d8:c0:43:ca:
4f:1d:ec:d6:de:41:96:12:ec:1a:e4:9b:c6:1d:fc:d2:68:06:
8b:12:27:74:d6:b6:25:2d:46:e6:d6:8d:ff:33:4f:74:66:92:
59:f6:88:35:ff:80:6a:5e:8e:5d:30:e2:71:47:37:62:cb:95:
71:7d:8a:d7:94:e1:3c:21:d8:62:95:e0:76:75:a8:12:ab:3a:
be:fe:7e:25:3d:07:0c:88:76:bc:7a:b2:4c:35:f0:1a:90:34:
39:b2:0a:fb:8f:99:b5:70:62:fa:0b:99:35:c2:f3:b7:ec:7e:
17:51:25:1b:52:5e:74:e6:1d:6d:81:ba:21:14:98:81:9c:67:
6c:dc:f0:3c:66:c6:25:7b:f5:b5:3e:ec:4c:91:31:14:b7:d6:
6a:59:9b:ae:e6:c6:bd:8c:c7:5c:4d:b5:ce:5d:e5:b6:59:37:
7e:81:3a:97:b1:72:85:85:a1:d4:a0:70:c5:98:59:18:db:fe:
b8:95:36:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W84OYLBHdI9tWAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk
MTc3MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk
YTY2MzdlY2UtZmM1Ny00NmNmLWEwMmQtYTE4YWM4MzA2ZDE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc2ehnv+ZwqonaTbfoKGZpLl0pt9l/eDy4Z8
CR19n1w0T6wSQPaonbR9d+DRL0q40SRDzkAi2FdcsYP2h0BRdxLQ6rW+RBHAuB5O
OALGk4fPenj2ejukB1eAdNCxb4uMoBORJKzqYIzLOuVopt/J1dcRE9++lQhR3Q36
u7Iw1ZPjxZ5Z3tb6zBwlQd7MfbQwzKPhELcELDk9nb3P9HgppMkDCXUNUJBtAwSe
6WYROIWKITL5wVc7F9DR99Oh/deYes7d+v8Rmn+3BATjl1zM9V4lAfi0XHHByC/j
GQDZTZSko2hViHo6v6ABm07yOUcU7Fa0MexFO7YT36TE2gGIMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFCFFGJQrs4jqRs5flI3g2B/oq+lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1
NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvMWM4MDEwMzMtMzk0Yi0z
MjJhLWJlYmMtZjJkM2E3MzJmOTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4
ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw
ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5
MDQ4MGQxNzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ76MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGc1whIZVrgCAt6iO/VKIcyzOrgx7GCD/UYW4a8CWCY93yH1T99Kxf+B
WTW0C46IHvTwnvP4VDBS3S9q4gssyYK59JuI2MBDyk8d7NbeQZYS7Brkm8Yd/NJo
BosSJ3TWtiUtRubWjf8zT3Rmkln2iDX/gGpejl0w4nFHN2LLlXF9iteU4Twh2GKV
4HZ1qBKrOr7+fiU9BwyIdrx6skw18BqQNDmyCvuPmbVwYvoLmTXC87fsfhdRJRtS
XnTmHW2BuiEUmIGcZ2zc8DxmxiV79bU+7EyRMRS31mpZm67mxr2Mx1xNtc5d5bZZ
N36BOpexcoWFodSgcMWYWRjb/riVNtQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:21 2025 by rpki-client