Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/5ec95648-e970-3881-a3ff-16815631726b.roa
File: 5ec95648-e970-3881-a3ff-16815631726b.roa (raw, json)
Hash identifier: KAWKbGcc6QQgm7Vb6ldQUORv0aHFcfBuWnYg7Za+7kY=
Subject key identifier: 58:6E:54:98:0A:8D:F9:CB:FF:93:82:DA:E4:CE:1C:BF:FD:43:1A:0D
Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial: 010D0C9F43285848AF2B82EE0E1DCB2F9C412640
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/5ec95648-e970-3881-a3ff-16815631726b.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 204325
IP address blocks: 192.228.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:82:ee:0e:1d:cb:2f:9c:41:26:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=551805b8-b793-40ab-94c4-8be59a3406d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4f:5d:1d:81:32:0b:05:a5:36:55:c7:2d:fc:
14:76:c3:a1:37:de:e6:1d:07:42:72:92:92:8c:eb:
a9:87:6a:df:af:1a:de:8a:49:08:10:77:6c:91:51:
53:85:17:d3:dd:c6:4f:14:37:41:de:78:47:68:83:
75:e2:bc:77:67:49:45:70:c7:ac:1a:6f:8f:1b:cc:
fd:fc:48:e7:17:af:3d:b1:ec:00:ae:cf:ce:f7:30:
92:92:c8:8f:b4:1b:47:37:9c:eb:fd:32:dc:a5:d2:
28:66:0c:f4:b2:bc:fd:00:b1:a3:ce:fe:41:6d:5e:
2f:42:f3:d9:6d:02:d5:36:90:92:5d:17:bf:c2:4b:
d3:ed:05:3e:bb:a6:68:f1:01:ee:c6:16:5f:ac:32:
5a:7a:02:f3:50:53:16:4f:9f:d4:61:39:9b:65:27:
e8:ad:86:83:fc:70:cf:df:a8:92:4a:0a:c7:3f:50:
a7:35:52:3b:25:50:3c:52:39:41:e1:05:cb:ea:41:
33:28:a5:f4:ed:68:e0:a2:50:7a:0f:e9:31:f7:72:
8b:53:2f:82:ca:55:8d:d5:cb:2c:7c:98:a5:7f:34:
92:f1:15:64:f9:65:8d:92:e5:bf:f3:c4:b7:17:86:
11:29:b8:c6:49:3c:80:62:31:79:fd:b4:cf:2e:58:
96:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6E:54:98:0A:8D:F9:CB:FF:93:82:DA:E4:CE:1C:BF:FD:43:1A:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/5ec95648-e970-3881-a3ff-16815631726b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
X509v3 Authority Key Identifier:
keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
sbgp-ipAddrBlock: critical
IPv4:
192.228.90.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:ac:c0:f2:2c:62:a0:ac:b1:dc:30:6b:4e:47:6d:19:88:59:
0b:9f:34:59:d3:4d:e6:63:bc:c0:3d:2c:8b:14:28:56:f6:29:
30:70:5b:5d:44:2e:cb:dd:f7:91:33:9c:f3:13:89:7f:1f:16:
b1:b2:ea:0f:67:7b:46:32:1c:64:c6:3e:98:63:1a:19:55:19:
77:b5:65:25:6f:d7:97:6f:13:c7:81:05:94:5b:de:de:cf:63:
b7:f5:1e:d6:f8:86:e3:27:1f:6d:66:2a:15:f5:9d:d1:b9:e4:
64:c7:fe:0f:cd:21:8e:eb:08:55:08:21:38:4a:76:4d:7d:ec:
ae:c0:af:63:1f:d0:9f:46:eb:b6:92:84:94:38:1f:f5:9d:3f:
0f:8c:ac:f0:01:f3:af:b9:fd:10:fa:22:cb:65:ea:ee:2c:ed:
57:87:7f:0e:6a:18:7f:19:56:e8:da:08:b4:5c:9f:85:34:d2:
5e:84:98:b1:58:6d:eb:fe:6f:d7:e6:e9:71:36:e4:2a:65:ea:
a2:10:ec:96:e6:80:d6:73:4d:53:8a:01:44:ac:94:ee:20:13:
fb:8e:20:4e:d8:5c:88:6b:8f:7a:3b:2f:c4:68:6c:2a:90:30:
6b:c4:63:2a:f1:d2:dd:18:a0:8d:df:f0:5d:fe:fa:ec:65:c3:
12:29:1f:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK4LuDh3LL5xBJkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk
MTc3MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk
NTUxODA1YjgtYjc5My00MGFiLTk0YzQtOGJlNTlhMzQwNmQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE9dHYEyCwWlNlXHLfwUdsOhN97mHQdCcpKS
jOuph2rfrxreikkIEHdskVFThRfT3cZPFDdB3nhHaIN14rx3Z0lFcMesGm+PG8z9
/EjnF689sewArs/O9zCSksiPtBtHN5zr/TLcpdIoZgz0srz9ALGjzv5BbV4vQvPZ
bQLVNpCSXRe/wkvT7QU+u6Zo8QHuxhZfrDJaegLzUFMWT5/UYTmbZSforYaD/HDP
36iSSgrHP1CnNVI7JVA8UjlB4QXL6kEzKKX07WjgolB6D+kx93KLUy+CylWN1css
fJilfzSS8RVk+WWNkuW/88S3F4YRKbjGSTyAYjF5/bTPLliWIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFhuVJgKjfnL/5OC2uTOHL/9QxoNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1
NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvNWVjOTU2NDgtZTk3MC0z
ODgxLWEzZmYtMTY4MTU2MzE3MjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4
ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw
ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5
MDQ4MGQxNzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwORaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABqswPIsYqCssdwwa05HbRmIWQufNFnTTeZjvMA9LIsUKFb2KTBwW11E
Lsvd95EznPMTiX8fFrGy6g9ne0YyHGTGPphjGhlVGXe1ZSVv15dvE8eBBZRb3t7P
Y7f1Htb4huMnH21mKhX1ndG55GTH/g/NIY7rCFUIIThKdk197K7Ar2Mf0J9G67aS
hJQ4H/WdPw+MrPAB86+5/RD6Istl6u4s7VeHfw5qGH8ZVujaCLRcn4U00l6EmLFY
bev+b9fm6XE25Cpl6qIQ7JbmgNZzTVOKAUSslO4gE/uOIE7YXIhrj3o7L8RobCqQ
MGvEYyrx0t0YoI3f8F3++uxlwxIpH8I=
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:52 2025 by rpki-client