Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/7378fdc7-b53f-3c92-a02d-ce46be4a9374.roa
File: 7378fdc7-b53f-3c92-a02d-ce46be4a9374.roa (raw, json)
Hash identifier: 9khxNH5klJsRkba1wRP0LPZ9j9PQsZd3Rv+vtETIHXY=
Subject key identifier: 86:F0:21:59:32:AF:93:EE:20:28:68:62:C7:07:D7:3A:31:7A:3D:E4
Certificate issuer: /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Certificate serial: 010D0C9F432858492CAE97434A1DF1714A802D78
Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/7378fdc7-b53f-3c92-a02d-ce46be4a9374.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 216382
IP address blocks: 199.119.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:97:43:4a:1d:f1:71:4a:80:2d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=dfa5aea0-8ea7-4380-b262-498a43ec21c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:65:4a:ed:60:47:da:56:51:c5:68:c5:10:24:
ce:66:06:3c:55:d2:7f:13:fc:c4:77:59:38:62:29:
a9:02:13:34:6e:9b:43:8c:bd:6c:87:57:2d:6f:9e:
2d:73:90:9e:70:be:6d:50:54:cc:d5:c8:df:26:22:
bc:c3:4f:09:3d:b5:6a:c5:63:1e:79:91:02:df:cb:
03:66:94:23:a9:38:87:f4:53:83:f6:66:d9:4b:b8:
38:0b:68:ac:21:38:58:ba:d4:0b:69:cc:ea:40:03:
d2:6f:aa:02:e1:da:04:b1:75:6a:9d:52:e2:b4:36:
9f:6e:31:12:20:0a:b2:0a:79:96:c8:19:3f:44:67:
0f:57:8b:84:49:98:f9:16:1e:13:a2:70:23:cf:1c:
dd:d3:04:d6:3e:6d:38:64:83:b7:ca:29:59:db:cb:
c2:28:3d:91:26:f7:36:09:94:31:24:20:8d:98:64:
6b:53:92:60:3a:03:c0:ca:7b:24:dd:b7:21:ab:29:
85:20:8b:de:1c:4e:15:ee:71:5f:2b:b5:f4:89:77:
5b:21:d4:18:2e:bc:48:27:94:47:ec:17:2f:43:5d:
f9:62:12:fa:44:9b:8f:0f:89:dd:af:38:39:66:61:
0e:80:29:b0:79:50:a0:97:ba:c7:86:88:ba:42:ed:
30:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F0:21:59:32:AF:93:EE:20:28:68:62:C7:07:D7:3A:31:7A:3D:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/7378fdc7-b53f-3c92-a02d-ce46be4a9374.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl
X509v3 Authority Key Identifier:
keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
sbgp-ipAddrBlock: critical
IPv4:
199.119.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:2d:65:8c:18:04:d4:05:04:a8:42:e1:48:82:40:fc:ec:7c:
37:e5:e9:42:b8:22:4e:9f:70:b2:1f:91:62:73:86:bd:14:d8:
40:1f:24:27:b6:c0:cb:23:a4:86:e1:76:7a:d8:0b:e7:9f:dd:
c0:95:39:39:79:6a:5c:83:de:48:96:a2:a3:02:57:b8:86:3c:
95:f9:70:cc:7b:d9:54:c2:ae:cb:00:41:b8:6a:0a:1a:49:65:
48:7e:05:a2:d5:19:47:3d:06:b9:6e:a9:03:27:f7:78:5f:6d:
17:fb:2c:4e:05:68:a3:3f:29:e9:23:15:11:4a:23:df:54:86:
16:57:7a:b3:ec:63:40:f3:c4:a8:bd:ac:7f:26:36:02:b2:23:
81:08:94:88:cf:b4:e2:73:98:d7:90:bc:ba:0e:2b:85:45:02:
71:e8:5c:5f:61:5e:a6:f8:00:d3:1b:03:06:01:ca:93:78:59:
b3:47:7d:70:3f:13:80:2c:29:81:1d:d8:c6:da:e1:61:de:0b:
4b:49:5d:66:8d:99:02:81:85:a2:28:41:49:ec:82:96:a1:d1:
de:20:92:49:f7:42:c3:e3:41:69:f4:55:59:f0:58:86:70:1f:
84:c8:c1:40:34:99:62:df:a3:d4:b3:6c:eb:8b:10:fd:72:95:
29:df:03:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrpdDSh3xcUqALXgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDhmODUzNGYtNTdjZC00NWJhLWJmYTQtY2U2MDg0MjQ2
M2E0MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZGZhNWFlYTAtOGVhNy00MzgwLWIyNjItNDk4YTQzZWMyMWMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGVK7WBH2lZRxWjFECTOZgY8VdJ/E/zEd1k4
YimpAhM0bptDjL1sh1ctb54tc5CecL5tUFTM1cjfJiK8w08JPbVqxWMeeZEC38sD
ZpQjqTiH9FOD9mbZS7g4C2isIThYutQLaczqQAPSb6oC4doEsXVqnVLitDafbjES
IAqyCnmWyBk/RGcPV4uESZj5Fh4TonAjzxzd0wTWPm04ZIO3yilZ28vCKD2RJvc2
CZQxJCCNmGRrU5JgOgPAynsk3bchqymFIIveHE4V7nFfK7X0iXdbIdQYLrxIJ5RH
7BcvQ135YhL6RJuPD4ndrzg5ZmEOgCmweVCgl7rHhoi6Qu0whwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIbwIVkyr5PuIChoYscH1zoxej3kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80OGY4
NTM0Zi01N2NkLTQ1YmEtYmZhNC1jZTYwODQyNDYzYTQvNzM3OGZkYzctYjUzZi0z
YzkyLWEwMmQtY2U0NmJlNGE5Mzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDhmODUzNGYtNTdjZC00NWJhLWJm
YTQtY2U2MDg0MjQ2M2E0LzQ4Zjg1MzRmLTU3Y2QtNDViYS1iZmE0LWNlNjA4NDI0
NjNhNC5jcmwwHwYDVR0jBBgwFoAU6FPdCXJVOiBqm33uUEZSal9iZggwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80OGY4NTM0Zi01N2NkLTQ1YmEtYmZhNC1jZTYw
ODQyNDYzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3eKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABEtZYwYBNQFBKhC4UiCQPzsfDfl6UK4Ik6fcLIfkWJzhr0U2EAfJCe2
wMsjpIbhdnrYC+ef3cCVOTl5alyD3kiWoqMCV7iGPJX5cMx72VTCrssAQbhqChpJ
ZUh+BaLVGUc9BrluqQMn93hfbRf7LE4FaKM/KekjFRFKI99UhhZXerPsY0DzxKi9
rH8mNgKyI4EIlIjPtOJzmNeQvLoOK4VFAnHoXF9hXqb4ANMbAwYBypN4WbNHfXA/
E4AsKYEd2Mba4WHeC0tJXWaNmQKBhaIoQUnsgpah0d4gkkn3QsPjQWn0VVnwWIZw
H4TIwUA0mWLfo9SzbOuLEP1ylSnfA7M=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:21:01 2025 by rpki-client