Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f/9a555038-c6bf-32aa-a116-4d2bebb13665.roa
File: 9a555038-c6bf-32aa-a116-4d2bebb13665.roa (raw, json)
Hash identifier: 4x8KqkO+qWrsFi28+WS5OG3PxiVxsz2n51CyDXYRRuo=
Subject key identifier: F3:D6:13:B3:9B:48:AD:43:3B:AF:A0:26:EE:4D:22:A8:1C:F0:46:C9
Certificate issuer: /CN=91f245d2-ace9-4f2b-ab8e-927934d9805f
Certificate serial: 010D0C9F4328584902EC253F0B6600340ADC5EE0
Authority key identifier: 7B:81:F3:E6:29:C6:08:6B:E8:1A:B4:36:4F:D1:89:2E:37:B5:0C:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f/9a555038-c6bf-32aa-a116-4d2bebb13665.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 14618
IP address blocks: 172.99.14.0/24 maxlen: 24
172.99.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:25:3f:0b:66:00:34:0a:dc:5e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f245d2-ace9-4f2b-ab8e-927934d9805f
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=fbfa4a34-1079-40c9-860c-e153161f581e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b3:2e:4a:dc:98:86:d4:80:f7:b9:65:26:8b:
d4:57:59:be:98:e1:2c:82:0c:b1:2a:f9:89:f7:08:
38:e3:ab:9d:cc:47:9d:46:ff:d1:84:e9:77:79:96:
04:58:3e:a2:43:bc:47:07:7e:38:08:bc:1a:9f:5a:
10:f8:10:8b:44:f8:b1:1f:a7:f9:ee:d4:60:c1:6d:
63:e6:38:1e:e9:96:6a:f4:ba:f3:93:72:8b:01:36:
10:17:9f:59:b9:10:5d:ce:37:f3:87:66:1e:ad:b5:
0b:75:8d:a9:5a:3f:f7:c9:46:eb:3e:8f:ff:a4:4f:
68:2b:2f:3a:0a:d3:86:65:7b:76:14:f9:a5:af:f8:
1f:f9:f7:19:b8:f7:16:6b:95:57:e9:2e:52:40:24:
13:51:65:51:74:46:8e:73:db:59:85:93:09:1f:fd:
1e:45:bf:c5:ee:db:60:2e:e8:a7:5f:55:8a:b5:90:
bd:61:a7:7d:eb:92:f9:cb:13:f8:b5:bc:0f:a1:1a:
d5:88:9a:f9:65:47:8a:27:9d:7b:27:31:3f:4c:56:
02:8c:77:77:75:f1:c0:1f:fd:17:18:be:d7:ca:d2:
14:95:72:c0:3b:e8:40:5d:fb:13:32:bd:5f:1e:b3:
9f:d4:74:98:4a:37:cd:ff:50:dc:d9:62:47:72:81:
46:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D6:13:B3:9B:48:AD:43:3B:AF:A0:26:EE:4D:22:A8:1C:F0:46:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f/9a555038-c6bf-32aa-a116-4d2bebb13665.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f/91f245d2-ace9-4f2b-ab8e-927934d9805f.crl
X509v3 Authority Key Identifier:
keyid:7B:81:F3:E6:29:C6:08:6B:E8:1A:B4:36:4F:D1:89:2E:37:B5:0C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f.cer
sbgp-ipAddrBlock: critical
IPv4:
172.99.14.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:76:aa:77:31:47:6a:7c:a7:75:85:c9:8f:9b:bb:e7:4f:86:
69:45:94:ec:7f:df:76:ea:93:78:5b:66:1d:0e:91:a2:49:33:
33:e6:3e:b3:c6:85:2e:ff:b3:48:67:b4:5e:83:30:51:e5:a0:
76:e6:20:f9:4b:d6:90:b5:fa:69:0c:14:1a:8d:52:50:9e:af:
53:3d:93:6c:8e:ea:e1:c1:de:7c:c0:46:d5:88:8e:36:3e:ab:
7f:37:ee:f7:09:15:1d:43:2a:30:04:5b:26:ef:9c:67:98:81:
9c:5f:c8:3f:a9:27:b5:39:1c:e7:ba:21:aa:8b:58:57:72:61:
37:3b:46:9e:0d:69:e5:63:4a:d5:39:29:6c:cd:be:4a:f3:00:
2a:27:33:7f:d9:29:7b:19:5e:17:ad:2c:e3:9a:e9:7c:0b:74:
1f:0d:a6:f5:86:a3:23:0d:5d:83:40:c1:07:1f:e6:c8:66:01:
38:3b:bc:9f:f5:81:f2:33:5e:b0:23:0e:bf:b8:7a:5a:44:43:
aa:11:72:5e:0e:87:d8:28:e4:52:28:71:78:82:5c:01:11:a8:
17:10:63:4e:48:c6:c1:1e:74:44:3b:a8:66:7a:98:ee:6e:92:
10:d3:2e:a5:b6:e9:10:ce:7a:c1:92:8a:d1:4e:66:0c:14:c9:
df:86:03:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7CU/C2YANArcXuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTFmMjQ1ZDItYWNlOS00ZjJiLWFiOGUtOTI3OTM0ZDk4
MDVmMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
ZmJmYTRhMzQtMTA3OS00MGM5LTg2MGMtZTE1MzE2MWY1ODFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbMuStyYhtSA97llJovUV1m+mOEsggyxKvmJ
9wg446udzEedRv/RhOl3eZYEWD6iQ7xHB344CLwan1oQ+BCLRPixH6f57tRgwW1j
5jge6ZZq9Lrzk3KLATYQF59ZuRBdzjfzh2YerbULdY2pWj/3yUbrPo//pE9oKy86
CtOGZXt2FPmlr/gf+fcZuPcWa5VX6S5SQCQTUWVRdEaOc9tZhZMJH/0eRb/F7ttg
LuinX1WKtZC9Yad965L5yxP4tbwPoRrViJr5ZUeKJ517JzE/TFYCjHd3dfHAH/0X
GL7XytIUlXLAO+hAXfsTMr1fHrOf1HSYSjfN/1Dc2WJHcoFGGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPPWE7ObSK1DO6+gJu5NIqgc8EbJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85MWYy
NDVkMi1hY2U5LTRmMmItYWI4ZS05Mjc5MzRkOTgwNWYvOWE1NTUwMzgtYzZiZi0z
MmFhLWExMTYtNGQyYmViYjEzNjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTFmMjQ1ZDItYWNlOS00ZjJiLWFi
OGUtOTI3OTM0ZDk4MDVmLzkxZjI0NWQyLWFjZTktNGYyYi1hYjhlLTkyNzkzNGQ5
ODA1Zi5jcmwwHwYDVR0jBBgwFoAUe4Hz5inGCGvoGrQ2T9GJLje1DJQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85MWYyNDVkMi1hY2U5LTRmMmItYWI4ZS05Mjc5
MzRkOTgwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGMOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHp2qncxR2p8p3WFyY+bu+dPhmlFlOx/33bqk3hbZh0OkaJJMzPmPrPG
hS7/s0hntF6DMFHloHbmIPlL1pC1+mkMFBqNUlCer1M9k2yO6uHB3nzARtWIjjY+
q3837vcJFR1DKjAEWybvnGeYgZxfyD+pJ7U5HOe6IaqLWFdyYTc7Rp4NaeVjStU5
KWzNvkrzAConM3/ZKXsZXhetLOOa6XwLdB8NpvWGoyMNXYNAwQcf5shmATg7vJ/1
gfIzXrAjDr+4elpEQ6oRcl4Oh9go5FIocXiCXAERqBcQY05IxsEedEQ7qGZ6mO5u
khDTLqW26RDOesGSitFOZgwUyd+GAyE=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:44:21 2025 by rpki-client