Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230/fdef4dfe-785c-327d-b08a-efd834f24f40.roa
File: fdef4dfe-785c-327d-b08a-efd834f24f40.roa (raw, json)
Hash identifier: NeYZYNDxqfZ/n4D+JZXkkEmw4wSzvMsdwIGDBaZrlZU=
Subject key identifier: ED:C9:96:FE:D3:5F:5F:9F:6A:53:79:41:38:30:0C:F7:27:44:93:9D
Certificate issuer: /CN=ea4790bc-4699-4a2d-8cae-17f809013230
Certificate serial: 010D0C9F43285849002152302580F277C1015E80
Authority key identifier: BB:7E:52:56:B2:3A:0C:40:CC:7F:81:32:9E:48:87:05:56:80:E9:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230/fdef4dfe-785c-327d-b08a-efd834f24f40.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 54749
IP address blocks: 199.231.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:52:30:25:80:f2:77:c1:01:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea4790bc-4699-4a2d-8cae-17f809013230
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=1205fc8c-9455-4a71-9c16-940bbb51e7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9c:17:dd:5d:dd:e3:d4:a3:12:60:99:e5:6b:
85:30:7f:aa:67:f9:0b:9f:9e:da:55:79:8a:1e:84:
f2:23:b1:08:9e:59:a4:f5:ee:3a:21:85:cd:0d:88:
d3:28:b7:13:99:5e:89:fd:d2:11:10:62:c7:59:bc:
fe:0f:66:18:2e:35:ec:35:93:ca:10:ce:00:2b:ec:
26:0d:be:a0:4a:34:8b:85:d0:c0:fb:dd:96:84:27:
83:ff:45:7e:02:34:61:93:fa:6e:a1:84:db:23:09:
1e:eb:8b:d7:68:25:0b:1e:18:ff:7b:e9:33:6e:7e:
09:b6:73:08:81:a3:b1:ce:cd:da:dd:3e:5b:fb:fc:
04:08:4b:a4:99:dc:d2:09:88:e6:7b:9a:dc:2f:bb:
42:8c:59:c2:15:d1:a7:42:da:71:8b:ca:6a:83:3c:
47:1c:61:74:f7:4a:95:9d:43:9d:83:06:2c:da:b6:
22:3a:e6:f3:4d:74:dc:87:69:77:48:a2:67:f8:50:
1e:a0:be:da:d2:28:e7:51:61:12:36:46:ca:93:17:
8d:a0:77:98:ad:5c:5b:af:b8:17:72:d7:03:ce:ea:
ae:1e:a5:c7:31:72:1c:f5:ef:b4:94:69:6f:f1:d0:
31:de:18:f1:13:5c:64:34:72:fc:58:cb:5e:1b:6e:
86:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C9:96:FE:D3:5F:5F:9F:6A:53:79:41:38:30:0C:F7:27:44:93:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230/fdef4dfe-785c-327d-b08a-efd834f24f40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230/ea4790bc-4699-4a2d-8cae-17f809013230.crl
X509v3 Authority Key Identifier:
keyid:BB:7E:52:56:B2:3A:0C:40:CC:7F:81:32:9E:48:87:05:56:80:E9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230.cer
sbgp-ipAddrBlock: critical
IPv4:
199.231.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:84:a4:08:6b:77:11:d7:13:f4:ce:2c:cf:0d:b6:dd:1b:3a:
3c:26:85:b0:7d:73:00:42:ad:29:b5:a0:b7:33:b6:6b:a0:2e:
87:05:66:a7:fc:ac:38:87:26:57:6e:d5:29:56:0d:f4:1e:31:
61:c2:fe:86:8b:11:d8:7d:f0:7f:cf:40:fa:41:81:e8:ea:ae:
b6:e2:54:6a:4f:ef:1f:f6:59:00:32:8c:1c:63:f8:a7:86:90:
fc:38:4f:27:16:0c:d8:98:90:b2:de:d1:6c:ab:ca:58:18:68:
37:59:25:fd:cf:df:27:61:14:48:7d:67:33:e0:88:03:0c:4a:
88:99:66:fc:7d:7e:33:ec:be:59:09:8c:f4:bc:3d:f3:0c:28:
9f:01:e1:96:34:56:ca:b9:31:ed:d1:14:f6:3b:b7:9f:01:64:
e2:70:68:7c:f1:f1:b5:b1:cf:35:e6:69:d7:f8:6a:d8:8c:a8:
c7:4b:29:98:03:26:dd:15:d9:c2:a9:76:2a:7b:f8:24:b3:46:
26:aa:0b:ec:f6:ac:92:70:77:65:d2:66:97:c5:e2:78:8e:87:
f2:82:01:bf:29:9f:b6:1b:01:80:79:cd:63:e4:63:62:21:65:
63:4e:a0:46:9c:cf:35:21:f3:c5:90:57:7a:3b:a4:94:a4:b6:
53:60:cd:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIVIwJYDyd8EBXoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWE0NzkwYmMtNDY5OS00YTJkLThjYWUtMTdmODA5MDEz
MjMwMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk
MTIwNWZjOGMtOTQ1NS00YTcxLTljMTYtOTQwYmJiNTFlN2M5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZwX3V3d49SjEmCZ5WuFMH+qZ/kLn57aVXmK
HoTyI7EInlmk9e46IYXNDYjTKLcTmV6J/dIREGLHWbz+D2YYLjXsNZPKEM4AK+wm
Db6gSjSLhdDA+92WhCeD/0V+AjRhk/puoYTbIwke64vXaCULHhj/e+kzbn4JtnMI
gaOxzs3a3T5b+/wECEukmdzSCYjme5rcL7tCjFnCFdGnQtpxi8pqgzxHHGF090qV
nUOdgwYs2rYiOubzTXTch2l3SKJn+FAeoL7a0ijnUWESNkbKkxeNoHeYrVxbr7gX
ctcDzuquHqXHMXIc9e+0lGlv8dAx3hjxE1xkNHL8WMteG26GXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO3Jlv7TX1+falN5QTgwDPcnRJOdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYTQ3
OTBiYy00Njk5LTRhMmQtOGNhZS0xN2Y4MDkwMTMyMzAvZmRlZjRkZmUtNzg1Yy0z
MjdkLWIwOGEtZWZkODM0ZjI0ZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWE0NzkwYmMtNDY5OS00YTJkLThj
YWUtMTdmODA5MDEzMjMwL2VhNDc5MGJjLTQ2OTktNGEyZC04Y2FlLTE3ZjgwOTAx
MzIzMC5jcmwwHwYDVR0jBBgwFoAUu35SVrI6DEDMf4EynkiHBVaA6cUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9lYTQ3OTBiYy00Njk5LTRhMmQtOGNhZS0xN2Y4
MDkwMTMyMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx+d4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFqEpAhrdxHXE/TOLM8Ntt0bOjwmhbB9cwBCrSm1oLcztmugLocFZqf8
rDiHJldu1SlWDfQeMWHC/oaLEdh98H/PQPpBgejqrrbiVGpP7x/2WQAyjBxj+KeG
kPw4TycWDNiYkLLe0WyrylgYaDdZJf3P3ydhFEh9ZzPgiAMMSoiZZvx9fjPsvlkJ
jPS8PfMMKJ8B4ZY0Vsq5Me3RFPY7t58BZOJwaHzx8bWxzzXmadf4atiMqMdLKZgD
Jt0V2cKpdip7+CSzRiaqC+z2rJJwd2XSZpfF4niOh/KCAb8pn7YbAYB5zWPkY2Ih
ZWNOoEaczzUh88WQV3o7pJSktlNgzRQ=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:14 2025 by rpki-client