Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/aa79dcc5-3425-3a74-950f-19df4a0d77ee.roa
File: aa79dcc5-3425-3a74-950f-19df4a0d77ee.roa (raw, json)
Hash identifier: GteD12DtiCbnbmON1/i4YiOvr8O4dG57P4mCaZM5Bts=
Subject key identifier: CB:E8:C7:DF:51:56:43:F0:BF:01:5E:AB:34:1E:E3:73:C7:3A:A4:57
Certificate issuer: /CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e
Certificate serial: 010D0C9F432858494B64167BCB8C6410AE526400
Authority key identifier: 03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/aa79dcc5-3425-3a74-950f-19df4a0d77ee.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 14203
IP address blocks: 198.186.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:16:7b:cb:8c:64:10:ae:52:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=ba343a7e-6076-4456-9fb5-e59c90bed3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2d:4d:5b:8a:77:0b:4e:fe:2f:14:74:e6:cd:
97:95:0f:d2:b7:95:f5:2e:33:d6:2a:1a:76:aa:f5:
4a:54:4e:4e:4c:2d:91:48:20:d2:b0:6b:5f:57:b2:
af:0a:8f:b1:0d:ba:5f:6b:79:d8:0f:af:e4:97:ba:
6c:ef:32:c1:d2:37:97:b2:91:63:50:83:92:c7:ab:
41:3c:28:fa:6f:08:4f:06:33:74:af:ed:6a:04:04:
3b:77:40:5b:c4:ce:36:e4:30:00:78:82:2b:80:46:
3a:9d:ab:18:d4:aa:72:e8:2f:00:3f:ed:e4:22:b7:
e3:57:ad:84:19:bc:ef:8e:1d:3d:5d:e0:b2:2e:0f:
f5:6a:43:b9:99:e1:29:2f:42:c9:96:70:cf:47:b2:
e0:94:32:a0:70:ed:fa:f8:ce:52:2b:1c:a5:b1:6b:
f5:00:a1:13:bf:6f:3f:98:b7:72:2a:7b:e8:45:d6:
21:8c:ff:36:5b:69:c8:00:a1:61:40:ea:d0:6d:f8:
c2:64:cf:cb:e8:c3:7d:72:a6:2b:8f:70:38:2d:e6:
e1:6e:7a:16:35:be:03:71:5f:a9:37:2f:e6:25:c1:
1c:78:51:84:32:27:02:de:25:db:15:26:c5:28:3a:
20:f3:cb:06:47:27:77:cf:6f:2a:1d:a8:73:86:cf:
91:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E8:C7:DF:51:56:43:F0:BF:01:5E:AB:34:1E:E3:73:C7:3A:A4:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/aa79dcc5-3425-3a74-950f-19df4a0d77ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.crl
X509v3 Authority Key Identifier:
keyid:03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer
sbgp-ipAddrBlock: critical
IPv4:
198.186.160.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:21:a0:7f:47:c7:d6:a2:6f:1c:85:d3:7e:93:5b:16:32:f8:
0e:ce:4b:12:ba:4d:c1:6c:39:e4:50:d8:fe:68:c4:5d:c1:9b:
d4:69:28:96:f2:5a:1b:66:25:36:10:f3:1d:bb:e5:91:40:8c:
ee:93:25:0a:47:3d:f2:14:37:11:dd:fa:0e:94:71:ee:db:6d:
7e:0e:4f:6b:b5:29:4a:83:ee:84:59:0a:81:8e:40:38:9e:a9:
36:c5:83:24:47:24:13:91:6f:01:9a:39:2f:e0:cb:17:2e:5f:
fd:39:83:42:da:43:81:55:02:f8:2e:6d:26:04:52:8f:fc:37:
11:0f:1b:55:51:ea:75:bc:26:6d:80:b5:08:ce:ca:23:e2:b1:
52:82:91:61:45:55:89:bb:44:b4:6c:20:c9:e4:98:4d:84:0a:
a8:1f:d1:d3:7a:22:de:d0:7d:d3:dc:c7:a2:18:71:c8:da:e6:
f3:3b:9a:dd:60:60:2f:80:c1:0c:a3:8c:b9:25:86:2d:f6:81:
c6:1d:80:cd:d4:b3:fd:07:6f:bc:9c:88:e1:f1:f6:06:3d:b3:
94:92:a5:67:c7:25:64:53:84:c9:38:9e:15:36:ca:a3:17:65:
a7:2b:53:83:5d:d5:ab:b6:12:6b:de:2b:b2:4c:8a:97:61:ec:
a9:95:f0:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZBZ7y4xkEK5SZAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGE2YzdmNmItODE2OC00NDI5LTk0ZDUtY2ZiMTRlNTdk
ZDJlMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk
YmEzNDNhN2UtNjA3Ni00NDU2LTlmYjUtZTU5YzkwYmVkM2MxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgi1NW4p3C07+LxR05s2XlQ/St5X1LjPWKhp2
qvVKVE5OTC2RSCDSsGtfV7KvCo+xDbpfa3nYD6/kl7ps7zLB0jeXspFjUIOSx6tB
PCj6bwhPBjN0r+1qBAQ7d0BbxM425DAAeIIrgEY6nasY1Kpy6C8AP+3kIrfjV62E
Gbzvjh09XeCyLg/1akO5meEpL0LJlnDPR7LglDKgcO36+M5SKxylsWv1AKETv28/
mLdyKnvoRdYhjP82W2nIAKFhQOrQbfjCZM/L6MN9cqYrj3A4LebhbnoWNb4DcV+p
Ny/mJcEceFGEMicC3iXbFSbFKDog88sGRyd3z28qHahzhs+RawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMvox99RVkPwvwFeqzQe43PHOqRXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kYTZj
N2Y2Yi04MTY4LTQ0MjktOTRkNS1jZmIxNGU1N2RkMmUvYWE3OWRjYzUtMzQyNS0z
YTc0LTk1MGYtMTlkZjRhMGQ3N2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGE2YzdmNmItODE2OC00NDI5LTk0
ZDUtY2ZiMTRlNTdkZDJlL2RhNmM3ZjZiLTgxNjgtNDQyOS05NGQ1LWNmYjE0ZTU3
ZGQyZS5jcmwwHwYDVR0jBBgwFoAUA3k0rC78UNQi5NbDk13OTGnEefYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kYTZjN2Y2Yi04MTY4LTQ0MjktOTRkNS1jZmIx
NGU1N2RkMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrqgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADMhoH9Hx9aibxyF036TWxYy+A7OSxK6TcFsOeRQ2P5oxF3Bm9RpKJby
WhtmJTYQ8x275ZFAjO6TJQpHPfIUNxHd+g6Uce7bbX4OT2u1KUqD7oRZCoGOQDie
qTbFgyRHJBORbwGaOS/gyxcuX/05g0LaQ4FVAvgubSYEUo/8NxEPG1VR6nW8Jm2A
tQjOyiPisVKCkWFFVYm7RLRsIMnkmE2ECqgf0dN6It7QfdPcx6IYccja5vM7mt1g
YC+AwQyjjLklhi32gcYdgM3Us/0Hb7yciOHx9gY9s5SSpWfHJWRThMk4nhU2yqMX
ZacrU4Nd1au2EmveK7JMipdh7KmV8PE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:32:37 2025 by rpki-client