Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d7a05ebe-63e1-3875-a2f2-629ca8c5acd1.roa
File: d7a05ebe-63e1-3875-a2f2-629ca8c5acd1.roa (raw, json)
Hash identifier: z/1RVFToBmAoD8x/OSMkPyaZayiUHJf8qbUeEkg95PY=
Subject key identifier: 64:EA:F7:5A:D0:70:21:A0:27:BB:2B:AA:28:F8:FF:7D:CF:79:70:F8
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F4328584953C4430080616256A6C840C0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d7a05ebe-63e1-3875-a2f2-629ca8c5acd1.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 54113
IP address blocks: 199.232.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:43:00:80:61:62:56:a6:c8:40:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=33bf75c3-ba8e-4485-ba04-e5c8aa82a317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8c:1c:60:f2:79:7a:de:8b:a7:4a:db:bd:82:
64:4f:e8:d7:df:01:d7:70:0f:ac:a5:1b:b8:42:23:
f3:0c:40:a2:d3:3c:61:86:74:e8:24:1e:87:0e:f0:
cf:1b:68:be:4c:28:76:e3:3a:7b:eb:d6:7f:0d:a4:
1c:ce:03:57:75:47:0d:74:d2:f1:dd:3e:7c:be:af:
fe:b2:61:71:59:ed:4f:11:a0:17:9b:cc:d5:b3:fb:
bb:f9:d3:70:e9:01:48:e1:e1:a7:59:10:f9:01:2f:
d1:7e:d8:7b:ac:5f:1f:e7:f7:94:e2:26:00:13:9c:
f3:21:f3:46:68:ba:5e:34:46:2f:d9:6b:1d:37:41:
ec:f0:95:b4:35:79:bc:bb:72:ef:d6:99:e1:14:f1:
7d:33:a9:39:f2:a9:62:8d:d9:97:d3:7a:f6:e3:69:
46:1e:53:d4:42:43:61:e1:a3:c5:42:03:6a:b0:73:
b4:5d:dd:18:6c:00:89:93:3f:66:9b:b0:ab:92:b0:
cd:5a:92:59:f6:74:27:fd:3e:7b:66:17:52:9c:ba:
b6:70:41:b4:bc:82:cb:99:43:f1:8e:2c:71:a9:84:
4d:38:7f:f7:12:78:6a:1c:61:bc:5b:79:31:6c:9a:
53:21:67:59:0d:f0:da:c5:fd:ca:27:2e:6b:33:21:
00:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EA:F7:5A:D0:70:21:A0:27:BB:2B:AA:28:F8:FF:7D:CF:79:70:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d7a05ebe-63e1-3875-a2f2-629ca8c5acd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
199.232.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:b9:66:b1:67:ec:04:53:dc:65:44:96:4c:73:71:e7:a3:a0:
36:93:b4:5f:6a:c0:fa:89:1c:d9:4c:fc:e0:ec:68:cf:22:4a:
2b:ca:c6:69:98:a6:52:73:53:aa:14:5b:e6:32:19:c5:36:d2:
e8:7a:97:4b:fd:3f:65:c0:4c:0c:81:53:bc:a8:8e:1d:ce:5a:
1b:87:b1:ae:c3:44:73:d0:90:c8:ac:e2:f8:97:6b:e6:c0:7f:
50:30:33:20:00:2c:98:50:5d:4c:d6:15:6d:fd:8e:a6:a4:74:
52:48:6d:82:0a:4f:22:ba:08:82:a1:d4:f9:fd:37:03:b5:a1:
25:cc:33:af:ef:7c:69:6f:ad:d4:65:6e:80:53:93:83:c0:34:
21:83:c8:42:11:e1:38:79:3d:ec:82:1c:79:19:9a:2a:e4:c3:
52:84:56:5c:2b:0b:09:6c:8c:d7:08:84:9e:51:00:64:90:a2:
4d:46:09:b2:28:7b:8b:00:bd:bc:b5:b7:fb:a0:aa:32:40:b3:
b4:77:fa:28:99:8b:3b:3d:1e:fa:ad:06:67:a1:f1:cb:00:46:
85:a2:af:74:ae:3f:5e:2c:9f:42:03:e9:60:14:4a:5d:d7:b9:
d7:ae:75:64:30:8b:f2:94:e7:f4:b3:4b:ee:48:b3:44:79:9e:
f1:93:43:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxEMAgGFiVqbIQMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
MzNiZjc1YzMtYmE4ZS00NDg1LWJhMDQtZTVjOGFhODJhMzE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIwcYPJ5et6Lp0rbvYJkT+jX3wHXcA+spRu4
QiPzDECi0zxhhnToJB6HDvDPG2i+TCh24zp769Z/DaQczgNXdUcNdNLx3T58vq/+
smFxWe1PEaAXm8zVs/u7+dNw6QFI4eGnWRD5AS/Rfth7rF8f5/eU4iYAE5zzIfNG
aLpeNEYv2WsdN0Hs8JW0NXm8u3Lv1pnhFPF9M6k58qlijdmX03r242lGHlPUQkNh
4aPFQgNqsHO0Xd0YbACJkz9mm7CrkrDNWpJZ9nQn/T57ZhdSnLq2cEG0vILLmUPx
jixxqYRNOH/3EnhqHGG8W3kxbJpTIWdZDfDaxf3KJy5rMyEAGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGTq91rQcCGgJ7srqij4/33PeXD4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZDdhMDVlYmUtNjNlMS0z
ODc1LWEyZjItNjI5Y2E4YzVhY2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx+hoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGC5ZrFn7ART3GVElkxzceejoDaTtF9qwPqJHNlM/ODsaM8iSivKxmmY
plJzU6oUW+YyGcU20uh6l0v9P2XATAyBU7yojh3OWhuHsa7DRHPQkMis4viXa+bA
f1AwMyAALJhQXUzWFW39jqakdFJIbYIKTyK6CIKh1Pn9NwO1oSXMM6/vfGlvrdRl
boBTk4PANCGDyEIR4Th5PeyCHHkZmirkw1KEVlwrCwlsjNcIhJ5RAGSQok1GCbIo
e4sAvby1t/ugqjJAs7R3+iiZizs9HvqtBmeh8csARoWir3SuP14sn0ID6WAUSl3X
udeudWQwi/KU5/SzS+5Is0R5nvGTQ3M=
-----END CERTIFICATE-----
Generated at Thu Apr 3 02:57:37 2025 by rpki-client