Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b0d5b319-ee82-32b7-bb84-6a47bb9c596e.roa
File: b0d5b319-ee82-32b7-bb84-6a47bb9c596e.roa (raw, json)
Hash identifier: msPLbJl5lt2rwzCBBIaiL9aPyF4CTzWT9OoWA+NRta4=
Subject key identifier: 04:03:CD:9F:BB:6C:CA:DF:67:89:B4:11:7B:39:1C:D0:5C:A3:55:68
Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial: 010D0C9F432858494B642292115209FF76F32500
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b0d5b319-ee82-32b7-bb84-6a47bb9c596e.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 11404
IP address blocks: 199.189.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:22:92:11:52:09:ff:76:f3:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=846a0239-461f-4d7a-b00a-21ed79e2d30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a1:df:36:c0:7b:4b:3d:30:9b:fc:c8:3b:fb:
d1:ba:aa:f8:20:1e:f1:a9:d2:57:b8:d7:c5:1f:15:
94:53:78:0d:7d:3f:af:a1:83:6e:cf:64:1c:20:a4:
28:e6:14:5e:ed:6e:48:01:2f:8e:f8:20:c9:04:d6:
52:27:0f:a6:a6:a6:87:41:85:5a:31:da:ac:16:90:
a1:af:db:2e:5b:2f:34:78:86:34:2b:a2:2c:23:ca:
95:5e:39:86:31:d7:67:f6:e0:44:8b:3d:91:0d:68:
da:dd:18:67:c4:ab:05:fa:27:ce:4b:74:f7:c1:e2:
3d:a6:36:41:29:ef:4b:ff:13:90:31:73:ae:fb:62:
cc:64:7e:90:48:36:35:ef:fc:a8:7b:07:25:ab:21:
19:69:bb:fc:e9:2d:ed:9f:43:7e:bd:29:d7:49:02:
eb:be:88:fd:e6:b9:85:6b:e8:7a:68:b5:d5:02:7d:
c8:b4:5d:8f:c4:f4:15:b9:f1:42:f8:fd:f0:02:6c:
9b:5b:12:52:8b:3e:0f:73:dd:96:ea:85:c0:8c:db:
6d:1e:49:f0:17:1f:d6:95:59:02:4f:1e:60:b6:f3:
47:2b:22:e9:80:55:5b:f7:d0:8e:ab:84:ce:dd:de:
06:e1:cc:64:43:a8:65:38:be:74:15:0c:af:ce:cf:
54:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:03:CD:9F:BB:6C:CA:DF:67:89:B4:11:7B:39:1C:D0:5C:A3:55:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b0d5b319-ee82-32b7-bb84-6a47bb9c596e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
X509v3 Authority Key Identifier:
keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
sbgp-ipAddrBlock: critical
IPv4:
199.189.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:e5:8f:9a:ff:90:a2:c0:5e:23:ef:e8:5a:f9:99:47:f9:47:
e0:a7:8b:8e:00:3d:a0:7c:1f:e4:41:a9:4c:2b:1a:9e:6e:b4:
93:52:df:c9:7e:f8:02:03:53:99:33:21:d2:b6:b0:85:8e:f8:
8d:d2:8a:e3:07:41:57:c4:a3:13:5d:e4:4b:f9:f1:94:54:8d:
97:bd:02:a0:fc:34:6d:8a:17:d7:50:44:4c:72:3e:e2:2f:1e:
2b:ae:b9:88:eb:38:48:6d:e5:e7:a4:f6:21:b7:d3:b2:4c:a0:
78:4e:c4:a2:e5:89:38:f7:3e:2b:4c:6b:82:f1:cd:5a:88:f2:
b8:c7:43:88:f8:0a:92:1a:f6:49:0d:7d:27:c5:5d:aa:19:61:
0e:4a:f5:d4:0b:cb:0f:13:e0:51:64:5d:79:37:cd:fd:f8:b6:
2a:17:06:de:ab:55:30:91:cd:ea:3b:42:b9:cc:32:32:94:39:
8a:ce:f1:f5:bc:fa:ad:36:60:e6:31:56:d2:42:49:c3:f0:68:
9a:bd:d0:38:a5:3b:ca:97:93:c5:14:3a:36:f6:53:b7:fe:83:
50:81:c8:7b:f9:13:6a:d2:12:ce:c3:03:22:a2:89:b9:d5:b8:
df:03:5f:a8:f3:6e:39:b9:47:7f:46:5a:fd:d6:b3:6e:5d:2d:
4d:7e:48:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZCKSEVIJ/3bzJQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk
ODQ2YTAyMzktNDYxZi00ZDdhLWIwMGEtMjFlZDc5ZTJkMzBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraHfNsB7Sz0wm/zIO/vRuqr4IB7xqdJXuNfF
HxWUU3gNfT+voYNuz2QcIKQo5hRe7W5IAS+O+CDJBNZSJw+mpqaHQYVaMdqsFpCh
r9suWy80eIY0K6IsI8qVXjmGMddn9uBEiz2RDWja3RhnxKsF+ifOS3T3weI9pjZB
Ke9L/xOQMXOu+2LMZH6QSDY17/yoewclqyEZabv86S3tn0N+vSnXSQLrvoj95rmF
a+h6aLXVAn3ItF2PxPQVufFC+P3wAmybWxJSiz4Pc92W6oXAjNttHknwFx/WlVkC
Tx5gtvNHKyLpgFVb99COq4TO3d4G4cxkQ6hlOL50FQyvzs9UuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAQDzZ+7bMrfZ4m0EXs5HNBco1VoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvYjBkNWIzMTktZWU4Mi0z
MmI3LWJiODQtNmE0N2JiOWM1OTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx71gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFnlj5r/kKLAXiPv6Fr5mUf5R+Cni44APaB8H+RBqUwrGp5utJNS38l+
+AIDU5kzIdK2sIWO+I3SiuMHQVfEoxNd5Ev58ZRUjZe9AqD8NG2KF9dQRExyPuIv
HiuuuYjrOEht5eek9iG307JMoHhOxKLliTj3PitMa4LxzVqI8rjHQ4j4CpIa9kkN
fSfFXaoZYQ5K9dQLyw8T4FFkXXk3zf34tioXBt6rVTCRzeo7QrnMMjKUOYrO8fW8
+q02YOYxVtJCScPwaJq90DilO8qXk8UUOjb2U7f+g1CByHv5E2rSEs7DAyKiibnV
uN8DX6jzbjm5R39GWv3Ws25dLU1+SHg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:07 2025 by rpki-client