Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/c5a6e91d-3880-31fc-8236-9664ca23a0fc.roa
File: c5a6e91d-3880-31fc-8236-9664ca23a0fc.roa (raw, json)
Hash identifier: JJZQfb8+4pID5rNHQ2sepZSakjETo62FDh9qbAstZxs=
Subject key identifier: 4A:7C:21:5F:52:16:00:85:24:30:DB:EE:81:87:58:A5:82:5F:01:57
Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial: 010D0C9F43285848D641130964342FC353C65200
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/c5a6e91d-3880-31fc-8236-9664ca23a0fc.roa
Signing time: Mon 10 Feb 2025 14:00:52 +0000
ROA not before: Mon 10 Feb 2025 14:00:52 +0000
ROA not after: Sun 11 May 2025 13:00:52 +0000
asID: 36666
IP address blocks: 198.145.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:41:13:09:64:34:2f:c3:53:c6:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Validity
Not Before: Feb 10 14:00:52 2025 GMT
Not After : May 11 13:00:52 2025 GMT
Subject: CN=d3bdfdae-8b38-4f9c-b6e7-995fdc9f978c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f8:c4:72:68:ee:72:11:91:d0:4d:de:ad:e5:
41:4a:1f:e2:99:89:de:bd:07:b7:19:63:1e:26:92:
b7:34:bc:05:05:ea:7a:18:7c:f6:8c:e1:af:c4:a5:
42:fa:84:d1:3f:75:42:7d:d3:9d:45:4f:22:73:8e:
1f:20:fd:ce:39:88:e1:fd:d9:b9:f8:71:f7:34:62:
d5:59:61:f0:96:dd:fc:45:6f:f8:b3:aa:3e:4e:2c:
ab:da:1b:3f:b4:bb:3d:c8:e0:86:44:db:a4:cc:7b:
23:4b:ce:fd:c2:5f:90:0a:96:ca:fa:48:49:65:44:
a1:e0:30:10:43:30:05:b5:53:9c:5a:69:3e:28:b1:
d8:52:f6:0d:14:24:c2:57:da:e1:16:74:dd:6e:0e:
c0:76:25:c1:1a:f3:32:d7:e5:5a:3f:0e:a1:52:ef:
78:e6:d8:7f:4c:2d:e1:5e:0a:2f:09:bc:c6:99:a2:
d7:0f:d7:51:ca:07:27:a4:36:2c:85:3e:8d:f7:da:
59:de:f8:9b:b3:cb:b8:cf:5d:90:3d:cc:ed:9e:98:
b9:9e:40:4e:1d:19:99:50:4d:16:e0:73:3c:ff:f5:
32:4a:52:7b:a8:fa:73:d0:72:01:54:72:2a:c3:19:
da:58:0e:a5:c1:b1:1a:51:6b:72:5c:0b:c0:c0:50:
e3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7C:21:5F:52:16:00:85:24:30:DB:EE:81:87:58:A5:82:5F:01:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/c5a6e91d-3880-31fc-8236-9664ca23a0fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
X509v3 Authority Key Identifier:
keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.145.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:50:3f:fa:24:f2:e2:cb:31:63:47:18:03:5d:78:b3:63:e0:
31:8d:bb:d9:7a:8b:c2:4d:54:7c:68:3c:6d:f5:95:52:aa:dc:
52:8e:d0:68:31:de:b8:fe:d5:14:e4:38:c7:9e:20:22:0b:ce:
ba:4c:82:a3:8f:7a:95:d9:d1:7c:ef:92:96:d6:21:a9:bb:e5:
6d:b9:5d:dc:58:ef:97:1b:59:8a:b2:ba:e5:8a:f0:e3:02:33:
28:14:6f:99:16:3c:21:6f:b9:8f:d0:2f:66:5b:2c:c5:fa:e7:
fb:6f:a2:b0:0e:31:52:e8:f2:74:37:f8:35:a1:9e:0b:4b:93:
30:98:12:e9:da:01:a8:fb:49:d5:4d:fe:bd:a5:09:a6:8f:65:
c3:e5:c5:24:47:a2:ef:83:4c:3b:ec:d7:9a:ad:9f:e2:27:cf:
b4:5b:7e:8e:f5:ee:6e:1e:61:20:cc:e7:ce:e1:ce:7b:02:9e:
60:21:bc:62:08:4f:2f:5b:35:e9:52:65:04:21:30:73:59:83:
b6:e1:f5:e3:b8:c7:56:e0:b3:b6:f0:17:0d:53:0f:63:0f:e4:
1e:7c:d5:3e:18:8b:6d:87:dc:b5:cf:c6:46:60:51:e6:35:f4:
b3:ba:a6:c9:b5:31:fe:58:34:41:90:59:9e:e6:87:46:43:50:
29:f4:f2:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQRMJZDQvw1PGUgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz
NjFiMB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZDNiZGZkYWUtOGIzOC00ZjljLWI2ZTctOTk1ZmRjOWY5NzhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPjEcmjuchGR0E3ereVBSh/imYnevQe3GWMe
JpK3NLwFBep6GHz2jOGvxKVC+oTRP3VCfdOdRU8ic44fIP3OOYjh/dm5+HH3NGLV
WWHwlt38RW/4s6o+Tiyr2hs/tLs9yOCGRNukzHsjS879wl+QCpbK+khJZUSh4DAQ
QzAFtVOcWmk+KLHYUvYNFCTCV9rhFnTdbg7AdiXBGvMy1+VaPw6hUu945th/TC3h
XgovCbzGmaLXD9dRygcnpDYshT6N99pZ3vibs8u4z12QPcztnpi5nkBOHRmZUE0W
4HM8//UySlJ7qPpz0HIBVHIqwxnaWA6lwbEaUWtyXAvAwFDjpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEp8IV9SFgCFJDDb7oGHWKWCXwFXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx
Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvYzVhNmU5MWQtMzg4MC0z
MWZjLTgyMzYtOTY2NGNhMjNhMGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2
ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw
MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh
NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpFrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKVQP/ok8uLLMWNHGANdeLNj4DGNu9l6i8JNVHxoPG31lVKq3FKO0Ggx
3rj+1RTkOMeeICILzrpMgqOPepXZ0XzvkpbWIam75W25XdxY75cbWYqyuuWK8OMC
MygUb5kWPCFvuY/QL2ZbLMX65/tvorAOMVLo8nQ3+DWhngtLkzCYEunaAaj7SdVN
/r2lCaaPZcPlxSRHou+DTDvs15qtn+Inz7Rbfo717m4eYSDM587hznsCnmAhvGII
Ty9bNelSZQQhMHNZg7bh9eO4x1bgs7bwFw1TD2MP5B581T4Yi22H3LXPxkZgUeY1
9LO6psm1Mf5YNEGQWZ7mh0ZDUCn08jc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 05:24:56 2025 by rpki-client