Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c/c4cf259e-e700-3217-b9f2-8c833c86c901.roa
File: c4cf259e-e700-3217-b9f2-8c833c86c901.roa (raw, json)
Hash identifier: 1xgNPJGIVDrM5u8wme0DKOhOdKZIPkw3xkPzZgLC00E=
Subject key identifier: D0:DD:D3:6B:9F:98:AB:E7:6B:D3:C7:4C:26:D3:23:8A:2C:48:07:E3
Certificate issuer: /CN=9ff91cfb-8c05-4ee8-9006-f7a1e162f92c
Certificate serial: 010D0C9F432858490B4C2433F1210269D3F6AB40
Authority key identifier: 09:F4:11:37:AC:74:7E:B2:59:25:BC:46:14:9E:F9:6E:C9:B7:8A:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c/c4cf259e-e700-3217-b9f2-8c833c86c901.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 8075
IP address blocks: 199.38.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:24:33:f1:21:02:69:d3:f6:ab:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff91cfb-8c05-4ee8-9006-f7a1e162f92c
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=6f3eb870-399c-4f22-8bbe-d291dc4099a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6c:c2:c3:ce:99:f7:55:49:46:6f:45:6f:0e:
3b:45:cd:60:c5:fb:23:7d:3e:40:46:db:d7:48:a2:
83:2c:e1:49:78:ee:71:bb:da:ed:9b:ab:59:31:bc:
48:e8:81:fb:01:c6:e3:04:5e:0a:07:f7:f8:7d:5d:
3b:23:04:f5:07:36:94:51:26:af:8a:fb:f9:2a:6e:
89:87:67:13:24:8e:1d:21:3b:f5:91:9b:b8:cd:67:
e2:d0:00:ab:8f:ee:65:6d:8a:db:30:8a:19:c4:a2:
0d:24:47:aa:b9:9e:f3:15:fd:c5:31:8b:ba:90:05:
7d:03:a2:f7:db:44:29:71:0c:5c:41:a8:fd:d2:99:
cc:2d:06:15:cc:2b:1f:a3:bb:a8:8b:80:1c:5c:a5:
63:18:5e:50:1b:30:84:10:07:f6:34:4a:db:06:20:
fc:84:6a:d7:7b:e8:9c:35:e9:53:aa:de:8e:2b:9b:
b9:26:34:59:1a:c7:fd:25:af:5f:e3:45:89:af:41:
1d:9f:b8:1c:db:39:40:35:60:ce:bd:31:ae:70:f4:
b2:1f:a0:51:53:f4:ce:d1:ad:1f:72:d8:f2:56:b4:
98:a4:b2:ff:d5:01:32:ff:e1:5f:16:e1:db:2a:4a:
02:50:83:b9:78:db:1a:5d:f5:a3:6c:38:d9:cc:73:
ff:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DD:D3:6B:9F:98:AB:E7:6B:D3:C7:4C:26:D3:23:8A:2C:48:07:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c/c4cf259e-e700-3217-b9f2-8c833c86c901.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c.crl
X509v3 Authority Key Identifier:
keyid:09:F4:11:37:AC:74:7E:B2:59:25:BC:46:14:9E:F9:6E:C9:B7:8A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c.cer
sbgp-ipAddrBlock: critical
IPv4:
199.38.175.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:bf:ce:84:ae:28:6c:47:8a:20:4d:dd:d6:7e:22:17:56:38:
05:58:1d:ba:6e:bb:4e:68:38:3c:24:22:0f:7b:f2:6b:eb:f1:
70:25:b9:6b:cd:b4:94:a8:66:04:d9:a9:51:d3:df:d2:13:ab:
b9:4e:09:d2:51:bd:44:02:ae:63:4d:1d:da:1a:b1:79:5a:af:
3b:0b:e9:bf:93:b3:76:36:35:25:25:2a:eb:0c:ea:0b:ea:10:
66:26:16:37:37:b0:6a:e6:4a:82:6a:92:6e:1f:3e:f9:0a:0c:
c2:ee:e4:fc:79:8f:01:75:be:cd:15:7b:7f:94:00:d6:43:a3:
3b:a5:3f:dd:64:60:fd:2b:64:bc:21:cb:f1:8f:97:0b:c3:27:
f1:77:fb:b1:97:53:82:37:8a:ce:41:0c:2c:78:4a:38:50:66:
2a:5a:ce:fe:2b:87:c8:ac:e9:af:68:12:0e:02:c2:e4:1a:a4:
a9:83:6e:0e:40:e6:a6:75:0b:d0:c4:ed:30:b8:09:82:61:16:
9b:e3:23:69:2a:f3:2a:0c:79:54:6f:1d:6a:26:21:dc:8a:ed:
e7:7d:96:00:9e:a8:a1:25:18:ee:42:ec:fe:39:39:c6:19:fb:
0a:e7:6c:12:7f:36:3d:47:61:89:27:ac:ab:8a:e9:c7:de:c2:
4f:ce:82:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTCQz8SECadP2q0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWZmOTFjZmItOGMwNS00ZWU4LTkwMDYtZjdhMWUxNjJm
OTJjMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk
NmYzZWI4NzAtMzk5Yy00ZjIyLThiYmUtZDI5MWRjNDA5OWE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmzCw86Z91VJRm9Fbw47Rc1gxfsjfT5ARtvX
SKKDLOFJeO5xu9rtm6tZMbxI6IH7AcbjBF4KB/f4fV07IwT1BzaUUSavivv5Km6J
h2cTJI4dITv1kZu4zWfi0ACrj+5lbYrbMIoZxKINJEequZ7zFf3FMYu6kAV9A6L3
20QpcQxcQaj90pnMLQYVzCsfo7uoi4AcXKVjGF5QGzCEEAf2NErbBiD8hGrXe+ic
NelTqt6OK5u5JjRZGsf9Ja9f40WJr0Edn7gc2zlANWDOvTGucPSyH6BRU/TO0a0f
ctjyVrSYpLL/1QEy/+FfFuHbKkoCUIO5eNsaXfWjbDjZzHP/AQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNDd02ufmKvna9PHTCbTI4osSAfjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85ZmY5
MWNmYi04YzA1LTRlZTgtOTAwNi1mN2ExZTE2MmY5MmMvYzRjZjI1OWUtZTcwMC0z
MjE3LWI5ZjItOGM4MzNjODZjOTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWZmOTFjZmItOGMwNS00ZWU4LTkw
MDYtZjdhMWUxNjJmOTJjLzlmZjkxY2ZiLThjMDUtNGVlOC05MDA2LWY3YTFlMTYy
ZjkyYy5jcmwwHwYDVR0jBBgwFoAUCfQRN6x0frJZJbxGFJ75bsm3ikUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy85ZmY5MWNmYi04YzA1LTRlZTgtOTAwNi1mN2Ex
ZTE2MmY5MmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyavMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB+/zoSuKGxHiiBN3dZ+IhdWOAVYHbpuu05oODwkIg978mvr8XAluWvN
tJSoZgTZqVHT39ITq7lOCdJRvUQCrmNNHdoasXlarzsL6b+Ts3Y2NSUlKusM6gvq
EGYmFjc3sGrmSoJqkm4fPvkKDMLu5Px5jwF1vs0Ve3+UANZDozulP91kYP0rZLwh
y/GPlwvDJ/F3+7GXU4I3is5BDCx4SjhQZipazv4rh8is6a9oEg4CwuQapKmDbg5A
5qZ1C9DE7TC4CYJhFpvjI2kq8yoMeVRvHWomIdyK7ed9lgCeqKElGO5C7P45OcYZ
+wrnbBJ/Nj1HYYknrKuK6cfewk/Ogqk=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:08:58 2025 by rpki-client