Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/d14790e7-dd79-381f-8bae-9db9eff096c1.roa
File: d14790e7-dd79-381f-8bae-9db9eff096c1.roa (raw, json)
Hash identifier: A6t4dPaeRZdk4vpuFTiUXsfaac4I9wZDvB9vVwfdf70=
Subject key identifier: A2:84:82:3C:D4:A7:17:3D:AA:0B:FB:DB:94:C9:C2:C5:6E:56:BB:99
Certificate issuer: /CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
Certificate serial: 010D0C9F432858494B640F4E90C5D4EF7E64C38C
Authority key identifier: F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/d14790e7-dd79-381f-8bae-9db9eff096c1.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 62494
IP address blocks: 198.60.113.0/24 maxlen: 24
198.60.114.0/24 maxlen: 24
2607:fa18:8000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:0f:4e:90:c5:d4:ef:7e:64:c3:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=c15be5ab-df6b-458e-af66-c5c7074b2607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:86:a6:14:5d:b1:52:d0:5b:2c:28:c4:6d:82:
57:bc:85:b8:8a:0d:d7:db:22:30:19:ba:2a:98:4b:
c1:1b:c1:dd:ac:28:c1:1e:00:b2:d4:67:39:3e:bf:
03:f5:7f:f7:80:85:31:43:ec:44:62:a6:32:af:b5:
8a:c0:4b:70:66:cf:8a:5a:01:85:ca:ba:4b:27:94:
62:d0:7d:92:9b:44:ee:d6:99:b3:69:0f:9c:52:b0:
9f:7e:32:88:c8:2f:8a:25:10:ae:2b:06:e4:b4:0d:
94:27:a6:de:6b:6f:b4:39:1c:18:e4:96:ef:41:86:
65:48:0e:93:69:9e:49:88:65:65:96:72:ed:8d:a3:
86:52:ae:bd:c6:08:96:0d:e4:9e:ff:79:73:e4:8c:
3d:b8:2b:d5:73:48:0f:62:c1:01:ef:62:97:63:4f:
a2:c9:4c:16:cb:c4:6f:5b:ea:7a:1f:02:6a:cd:2f:
32:22:4e:83:9e:ba:ac:fd:3e:33:bd:ac:dd:e5:e6:
cf:e5:93:a8:2f:62:ad:f5:8d:e3:c4:29:c3:b0:05:
b6:36:50:4f:4e:df:19:23:3c:e7:30:5f:85:49:d9:
d5:f9:08:bd:7d:91:4b:13:34:6a:c5:ed:1a:53:c7:
30:aa:37:ec:fe:ea:08:27:7c:24:18:e3:57:a8:53:
61:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:84:82:3C:D4:A7:17:3D:AA:0B:FB:DB:94:C9:C2:C5:6E:56:BB:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/d14790e7-dd79-381f-8bae-9db9eff096c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl
X509v3 Authority Key Identifier:
keyid:F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
sbgp-ipAddrBlock: critical
IPv4:
198.60.113.0-198.60.114.255
IPv6:
2607:fa18:8000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:30:98:e1:17:1c:85:9f:14:0d:d6:7d:5e:b5:8a:01:d0:0d:
1b:20:0b:eb:62:ed:7b:b0:92:56:27:6c:ec:2f:15:15:fb:5f:
a1:ff:af:de:94:a8:af:7e:11:05:52:66:6f:f0:51:fb:e6:4a:
c0:82:5a:45:20:15:22:a5:e7:b6:41:91:73:f1:f9:aa:06:52:
0a:dc:02:d0:19:93:7d:75:08:c5:56:99:0c:34:e6:8f:06:41:
f7:a0:45:d9:40:0d:a0:81:44:66:25:32:5f:78:bf:8b:89:00:
a9:06:48:f4:5a:55:f6:85:a6:7d:ce:49:a9:37:a4:66:3c:6c:
4f:c4:4b:85:bb:5d:6e:1d:d5:bb:0d:38:bf:87:1f:5c:61:4f:
98:5f:26:89:17:77:5b:89:fe:f0:df:66:60:e2:5e:9a:53:33:
9b:c8:ab:4e:c9:cb:63:ea:c2:51:c2:b4:18:f3:9b:15:7b:3b:
59:1a:cd:3f:8b:8e:0f:37:23:9d:47:8e:43:f7:86:a0:36:34:
44:ce:1a:07:9b:ec:0e:88:99:6f:88:48:99:e6:39:88:22:44:
2b:f0:1d:96:bc:a4:f8:ba:03:8e:95:32:a2:34:f9:91:22:b2:
45:7d:90:6d:9a:db:7d:5b:95:54:81:69:db:bd:bd:17:0f:a2:
d1:96:69:e7
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWElLZA9OkMXU735kw4wwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGZlNzgwNGYtZjE2YS00Zjc4LTk5NzktNmE4ZDUwOTll
NWU3MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk
YzE1YmU1YWItZGY2Yi00NThlLWFmNjYtYzVjNzA3NGIyNjA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoamFF2xUtBbLCjEbYJXvIW4ig3X2yIwGboq
mEvBG8HdrCjBHgCy1Gc5Pr8D9X/3gIUxQ+xEYqYyr7WKwEtwZs+KWgGFyrpLJ5Ri
0H2Sm0Tu1pmzaQ+cUrCffjKIyC+KJRCuKwbktA2UJ6bea2+0ORwY5JbvQYZlSA6T
aZ5JiGVllnLtjaOGUq69xgiWDeSe/3lz5Iw9uCvVc0gPYsEB72KXY0+iyUwWy8Rv
W+p6HwJqzS8yIk6Dnrqs/T4zvazd5ebP5ZOoL2Kt9Y3jxCnDsAW2NlBPTt8ZIzzn
MF+FSdnV+Qi9fZFLEzRqxe0aU8cwqjfs/uoIJ3wkGONXqFNhTwIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFKKEgjzUpxc9qgv725TJwsVuVruZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZmU3
ODA0Zi1mMTZhLTRmNzgtOTk3OS02YThkNTA5OWU1ZTcvZDE0NzkwZTctZGQ3OS0z
ODFmLThiYWUtOWRiOWVmZjA5NmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGZlNzgwNGYtZjE2YS00Zjc4LTk5
NzktNmE4ZDUwOTllNWU3LzBmZTc4MDRmLWYxNmEtNGY3OC05OTc5LTZhOGQ1MDk5
ZTVlNy5jcmwwHwYDVR0jBBgwFoAU+VXAQ4RRLwbPOrS6kfJqw02k5GgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8wZmU3ODA0Zi1mMTZhLTRmNzgtOTk3OS02YThk
NTA5OWU1ZTcuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAUBAIAATAOMAwDBADGPHED
BADGPHIwDgQCAAIwCAMGBCYH+hiAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAAwmOEXHIWfFA3WfV61igHQ
DRsgC+ti7XuwklYnbOwvFRX7X6H/r96UqK9+EQVSZm/wUfvmSsCCWkUgFSKl57ZB
kXPx+aoGUgrcAtAZk311CMVWmQw05o8GQfegRdlADaCBRGYlMl94v4uJAKkGSPRa
VfaFpn3OSak3pGY8bE/ES4W7XW4d1bsNOL+HH1xhT5hfJokXd1uJ/vDfZmDiXppT
M5vIq07Jy2PqwlHCtBjzmxV7O1kazT+Ljg83I51HjkP3hqA2NETOGgeb7A6ImW+I
SJnmOYgiRCvwHZa8pPi6A46VMqI0+ZEiskV9kG2a231blVSBadu9vRcPotGWaec=
-----END CERTIFICATE-----
Generated at Wed Apr 9 02:55:30 2025 by rpki-client