Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/c76d9779-fcb1-3b9b-8aaf-05a3ce372a6e.roa
File: c76d9779-fcb1-3b9b-8aaf-05a3ce372a6e.roa (raw, json)
Hash identifier: x9gSzsYKcJc5tJ9At1tby7GgBg8AoYjpM8+ng9wjjgY=
Subject key identifier: AA:26:AC:BD:EB:77:09:AA:62:4A:F1:8F:17:11:73:83:03:11:51:AC
Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial: 010D0C9F4328584902EC301F47DC3739A9A6B440
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/c76d9779-fcb1-3b9b-8aaf-05a3ce372a6e.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 19905
IP address blocks: 104.255.192.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:30:1f:47:dc:37:39:a9:a6:b4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=57b4a552-6510-4525-b878-ec8c5f6ce3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:58:9e:58:49:bf:4f:2a:21:3e:9a:28:9c:17:
b0:08:0c:dc:7d:1a:42:ed:ab:89:0a:6c:8d:59:6a:
6a:18:19:dd:a9:28:8f:1b:95:b0:2b:23:5c:e6:c1:
2c:02:04:3e:09:76:9f:ff:50:ca:d4:99:51:5d:07:
b5:66:61:40:06:45:1e:32:c4:9b:36:97:fd:60:95:
98:ca:c1:c3:37:2d:63:8d:bf:07:20:8d:9d:79:e1:
a7:97:5f:00:b3:6c:fc:36:33:12:55:f2:61:60:8e:
a8:16:87:14:84:cc:1a:fc:06:e8:1a:e0:a1:a8:fa:
78:b2:71:78:0b:f6:4e:93:d2:57:30:b7:c9:a8:a2:
c1:1a:48:e2:80:b9:b2:83:c9:7b:93:89:c8:8b:19:
e4:18:a9:53:d9:fa:63:dc:a3:95:8b:a1:77:33:c9:
d9:25:1f:83:31:dc:35:ed:4a:28:d4:d4:5d:02:41:
1b:c0:05:27:6c:e6:1d:af:cf:1e:14:dc:97:1d:c1:
3f:6f:8b:ea:be:5e:73:ec:c1:26:6d:59:ad:39:bc:
18:ec:2c:0a:60:33:c7:d5:57:9c:ee:1b:06:d2:ea:
90:64:97:00:76:c8:50:3e:d4:74:d7:55:2f:70:2d:
ab:0e:a3:59:38:f1:12:a3:dc:db:7d:7a:ef:03:bc:
09:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:26:AC:BD:EB:77:09:AA:62:4A:F1:8F:17:11:73:83:03:11:51:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/c76d9779-fcb1-3b9b-8aaf-05a3ce372a6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
X509v3 Authority Key Identifier:
keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
sbgp-ipAddrBlock: critical
IPv4:
104.255.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:1f:7b:81:81:02:da:e8:37:2c:99:01:77:50:90:22:7a:0b:
bb:14:d4:b8:6d:8d:a2:c2:73:d2:33:34:ea:6c:07:bc:bc:c2:
39:7e:d0:9e:76:24:6d:54:43:70:39:49:91:e9:72:f3:7f:10:
96:a2:b3:db:da:cc:e5:83:39:3e:2f:73:97:d2:f9:e6:e0:7e:
e9:fd:e0:3d:c7:aa:e7:c8:ff:8f:ca:a1:5d:12:8c:e0:e4:17:
12:b9:10:5e:71:d4:7a:d6:59:ef:49:3e:ca:e6:cb:97:65:c0:
3b:9b:ea:13:bd:29:f3:92:33:9c:5c:01:25:e5:76:ef:6a:31:
1c:63:62:27:84:a0:51:85:49:61:37:c5:c0:3e:79:64:0a:bf:
48:f6:b0:94:a8:bf:38:46:cc:24:e7:5a:d4:c5:62:d7:27:f3:
f6:f1:82:88:7c:0e:9a:2f:a9:f9:a6:d7:d0:77:29:6a:f6:25:
65:08:ff:17:cb:65:4a:95:c8:2a:dc:a2:8e:9b:1f:ce:3d:d9:
ba:c8:2a:d2:05:b7:51:c0:c6:80:df:88:ff:f8:03:1b:4a:7d:
7f:10:2c:da:44:88:a9:5d:2c:aa:80:10:b8:cd:1d:84:da:d1:
da:20:e3:94:5c:2e:62:c7:81:53:3f:ea:c8:fe:1e:07:ac:d4:
aa:34:5b:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7DAfR9w3OammtEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1
YjU4MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
NTdiNGE1NTItNjUxMC00NTI1LWI4NzgtZWM4YzVmNmNlM2JjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVieWEm/TyohPpoonBewCAzcfRpC7auJCmyN
WWpqGBndqSiPG5WwKyNc5sEsAgQ+CXaf/1DK1JlRXQe1ZmFABkUeMsSbNpf9YJWY
ysHDNy1jjb8HII2deeGnl18As2z8NjMSVfJhYI6oFocUhMwa/AboGuChqPp4snF4
C/ZOk9JXMLfJqKLBGkjigLmyg8l7k4nIixnkGKlT2fpj3KOVi6F3M8nZJR+DMdw1
7Uoo1NRdAkEbwAUnbOYdr88eFNyXHcE/b4vqvl5z7MEmbVmtObwY7CwKYDPH1Vec
7hsG0uqQZJcAdshQPtR011UvcC2rDqNZOPESo9zbfXrvA7wJeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKomrL3rdwmqYkrxjxcRc4MDEVGsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz
ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvYzc2ZDk3NzktZmNiMS0z
YjliLThhYWYtMDVhM2NlMzcyYTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm
ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj
NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5
ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaP/AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC8fe4GBAtroNyyZAXdQkCJ6C7sU1LhtjaLCc9IzNOpsB7y8wjl+0J52
JG1UQ3A5SZHpcvN/EJais9vazOWDOT4vc5fS+ebgfun94D3HqufI/4/KoV0SjODk
FxK5EF5x1HrWWe9JPsrmy5dlwDub6hO9KfOSM5xcASXldu9qMRxjYieEoFGFSWE3
xcA+eWQKv0j2sJSovzhGzCTnWtTFYtcn8/bxgoh8Dpovqfmm19B3KWr2JWUI/xfL
ZUqVyCrcoo6bH8492brIKtIFt1HAxoDfiP/4AxtKfX8QLNpEiKldLKqAELjNHYTa
0dog45RcLmLHgVM/6sj+Hges1Ko0W8k=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:26:21 2025 by rpki-client