Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd/a88b6ded-b271-3d3c-bd9e-fc6f82b7dff3.roa
File: a88b6ded-b271-3d3c-bd9e-fc6f82b7dff3.roa (raw, json)
Hash identifier: /Nz+rdwkn9bAPHeNyVSzokgUH7BzUfDhr2qMi2YyRZ4=
Subject key identifier: EA:E7:5C:50:1C:6E:23:5F:0E:69:9F:61:FB:E9:CF:CC:2B:3D:F4:4A
Certificate issuer: /CN=6e6db562-79f7-40ba-9870-3eaf80e519fd
Certificate serial: 010D0C9F43285848A99632C389DB3361A4D2C700
Authority key identifier: 8D:38:A8:E4:7F:F7:84:11:E7:4D:A6:EA:F8:9B:EF:1B:C4:27:D9:A5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd/a88b6ded-b271-3d3c-bd9e-fc6f82b7dff3.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 40403
IP address blocks: 199.89.230.0/24 maxlen: 24
2602:fab9::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:32:c3:89:db:33:61:a4:d2:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e6db562-79f7-40ba-9870-3eaf80e519fd
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=27f1fb61-ad3e-4bed-99cb-e6f138625ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:10:19:0d:a4:5a:9f:2f:f5:48:62:81:de:08:
58:2f:1f:0e:70:43:54:69:3a:aa:52:e0:07:6d:10:
17:d7:28:02:d5:78:7c:44:c8:17:bf:bc:20:b2:62:
ce:3e:65:bf:ec:31:e0:bd:5c:75:24:c8:46:4d:8b:
db:1f:b8:f0:29:86:ee:e3:fe:9b:c8:a2:cf:dd:55:
5c:84:d5:60:b1:5f:f1:8a:24:95:38:31:60:6c:7f:
14:2a:e8:ac:73:58:d6:45:15:cf:48:3a:49:97:9c:
be:9f:3d:42:cf:eb:ad:a4:9a:05:ce:55:82:68:13:
99:71:c9:9d:69:7e:05:41:34:4e:c0:a8:16:54:92:
7a:97:4c:9b:fc:49:ec:83:eb:dd:01:9a:17:1b:68:
77:a2:fa:4d:03:b9:bd:ca:10:e4:c7:7b:fc:52:b6:
d0:75:c9:b5:fe:26:09:fa:8e:1c:c4:ff:87:29:2c:
75:57:a4:ac:24:2f:27:29:05:6f:4d:d3:4c:26:0f:
32:7e:35:55:fd:be:9c:76:7d:56:9a:55:35:f5:9f:
83:e7:fc:48:e4:13:92:d4:e4:b3:b1:a8:02:79:a5:
df:14:b2:37:53:56:28:17:8c:a5:87:f8:33:43:c1:
44:76:9a:cc:e2:6d:cc:d9:69:3e:bf:33:df:a6:7f:
31:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E7:5C:50:1C:6E:23:5F:0E:69:9F:61:FB:E9:CF:CC:2B:3D:F4:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd/a88b6ded-b271-3d3c-bd9e-fc6f82b7dff3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd/6e6db562-79f7-40ba-9870-3eaf80e519fd.crl
X509v3 Authority Key Identifier:
keyid:8D:38:A8:E4:7F:F7:84:11:E7:4D:A6:EA:F8:9B:EF:1B:C4:27:D9:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6e6db562-79f7-40ba-9870-3eaf80e519fd.cer
sbgp-ipAddrBlock: critical
IPv4:
199.89.230.0/24
IPv6:
2602:fab9::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:7f:81:77:b0:f9:f2:ff:da:bb:78:85:5d:ce:77:58:5e:fa:
03:38:ad:99:0c:d1:a1:81:7e:7a:39:bc:90:ed:27:6d:7a:1e:
78:93:6a:ed:9a:64:65:00:39:39:53:20:c4:77:28:5c:74:18:
b0:b9:16:64:87:6e:70:37:74:55:6b:ab:47:a1:e1:90:a8:08:
ba:4d:48:6f:4d:3e:71:99:c6:f7:09:46:b6:27:52:7d:51:e1:
b8:e4:03:0c:40:8e:82:d0:12:6a:34:5d:90:fb:48:4a:83:41:
09:d5:2a:2e:f9:8a:85:82:c4:d4:fc:ba:d2:ae:7a:b7:0f:96:
bc:b6:66:30:bd:48:f4:44:7f:6d:52:05:4a:1d:80:70:93:ba:
71:6d:b4:39:1a:e8:3c:ad:3b:d4:35:5a:8e:8b:bf:02:eb:84:
fa:97:6b:a1:bd:f7:34:3f:ea:fe:5d:6b:85:c3:4c:a1:6c:dc:
f8:d3:7f:fa:c0:7a:62:00:b4:c3:8a:30:46:66:58:9f:ce:99:
2e:ad:9f:1d:e7:72:31:20:b5:8a:40:13:e4:81:4d:5d:4c:cb:
da:ae:eb:05:1d:ef:db:51:ac:27:b7:3d:e1:3b:d0:ae:31:19:
ec:fb:24:37:fd:5d:22:9f:02:5f:73:42:21:8e:b4:7b:a7:8c:
b3:0f:07:8d
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEipljLDidszYaTSxwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmU2ZGI1NjItNzlmNy00MGJhLTk4NzAtM2VhZjgwZTUx
OWZkMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
MjdmMWZiNjEtYWQzZS00YmVkLTk5Y2ItZTZmMTM4NjI1Y2U5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRAZDaRany/1SGKB3ghYLx8OcENUaTqqUuAH
bRAX1ygC1Xh8RMgXv7wgsmLOPmW/7DHgvVx1JMhGTYvbH7jwKYbu4/6byKLP3VVc
hNVgsV/xiiSVODFgbH8UKuisc1jWRRXPSDpJl5y+nz1Cz+utpJoFzlWCaBOZccmd
aX4FQTROwKgWVJJ6l0yb/Ensg+vdAZoXG2h3ovpNA7m9yhDkx3v8UrbQdcm1/iYJ
+o4cxP+HKSx1V6SsJC8nKQVvTdNMJg8yfjVV/b6cdn1WmlU19Z+D5/xI5BOS1OSz
sagCeaXfFLI3U1YoF4ylh/gzQ8FEdprM4m3M2Wk+vzPfpn8xWQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFOrnXFAcbiNfDmmfYfvpz8wrPfRKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82ZTZk
YjU2Mi03OWY3LTQwYmEtOTg3MC0zZWFmODBlNTE5ZmQvYTg4YjZkZWQtYjI3MS0z
ZDNjLWJkOWUtZmM2ZjgyYjdkZmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNmU2ZGI1NjItNzlmNy00MGJhLTk4
NzAtM2VhZjgwZTUxOWZkLzZlNmRiNTYyLTc5ZjctNDBiYS05ODcwLTNlYWY4MGU1
MTlmZC5jcmwwHwYDVR0jBBgwFoAUjTio5H/3hBHnTabq+JvvG8Qn2aUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy82ZTZkYjU2Mi03OWY3LTQwYmEtOTg3MC0zZWFm
ODBlNTE5ZmQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAx1nmMA4E
AgACMAgDBgAmAvq5ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBVf4F3sPny/9q7eIVdzndYXvoDOK2ZDNGh
gX56ObyQ7Sdteh54k2rtmmRlADk5UyDEdyhcdBiwuRZkh25wN3RVa6tHoeGQqAi6
TUhvTT5xmcb3CUa2J1J9UeG45AMMQI6C0BJqNF2Q+0hKg0EJ1Sou+YqFgsTU/LrS
rnq3D5a8tmYwvUj0RH9tUgVKHYBwk7pxbbQ5Gug8rTvUNVqOi78C64T6l2uhvfc0
P+r+XWuFw0yhbNz403/6wHpiALTDijBGZlifzpkurZ8d53IxILWKQBPkgU1dTMva
rusFHe/bUawntz3hO9CuMRns+yQ3/V0inwJfc0IhjrR7p4yzDweN
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:00:55 2025 by rpki-client