Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5/c6144019-73d4-38c7-a8ea-97fb922f85d6.roa
File: c6144019-73d4-38c7-a8ea-97fb922f85d6.roa (raw, json)
Hash identifier: 544Vd13K+FmOrNvrUQR59LgMZYyWi830uqGhZcsp8uQ=
Subject key identifier: 30:1A:2F:2A:CE:DA:74:88:AF:2E:07:A1:20:02:77:68:25:EE:F9:A7
Certificate issuer: /CN=98e62aba-8b05-4785-a899-f75688a272a5
Certificate serial: 010D0C9F432858488A7A44C67E58F0D8D4A1C080
Authority key identifier: 74:7D:5D:2A:D3:27:BD:3E:FE:B1:28:14:6F:46:1F:7D:D7:1F:13:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5/c6144019-73d4-38c7-a8ea-97fb922f85d6.roa
Signing time: Tue 14 Jan 2025 10:34:48 +0000
ROA not before: Tue 14 Jan 2025 10:34:48 +0000
ROA not after: Mon 14 Apr 2025 09:34:48 +0000
asID: 197537
IP address blocks: 199.204.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:7a:44:c6:7e:58:f0:d8:d4:a1:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e62aba-8b05-4785-a899-f75688a272a5
Validity
Not Before: Jan 14 10:34:48 2025 GMT
Not After : Apr 14 09:34:48 2025 GMT
Subject: CN=4e4fbcc8-6e28-4844-903a-ed72cfdc9c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:da:0f:0f:b6:90:ef:99:6b:cd:c0:a4:69:81:
f5:c6:6f:9f:a2:8d:07:aa:a5:aa:02:ae:6b:f6:e6:
76:d7:18:6c:38:b8:fa:19:cd:de:bc:e3:28:76:e2:
8f:d5:cc:eb:46:1a:a8:0e:5c:f7:e9:10:75:bd:6f:
b3:23:1c:ce:68:9d:ca:64:ca:fb:a1:98:2d:d5:55:
af:b4:8e:c8:f9:32:04:a9:2c:9d:39:ee:2f:dc:dd:
b2:d6:06:b8:5f:fb:a5:9d:18:e7:9a:48:71:1f:b1:
38:cc:7b:17:5a:b2:81:23:3a:50:23:9e:5e:bf:08:
e1:20:90:81:78:19:92:4e:23:de:cc:1c:50:63:1d:
24:c4:ad:1c:27:11:e2:22:59:5e:34:a0:c1:f7:fe:
26:d2:b3:ef:a9:79:4a:e1:32:13:11:b1:e7:23:47:
ce:32:58:d6:e5:4f:ba:01:64:5a:9c:ff:d2:27:4a:
eb:cf:7c:c0:1b:50:8a:61:b2:29:b8:bb:a3:b6:69:
62:c9:5f:74:85:72:7b:1f:2b:53:59:61:0f:62:79:
a5:40:e9:56:2c:f9:2a:9d:90:4f:fe:96:e2:be:b5:
69:d0:0a:c0:06:ea:c8:e7:15:25:48:d1:f4:dd:6d:
f7:36:8f:15:2c:0d:3c:00:74:c4:83:67:60:17:c4:
90:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1A:2F:2A:CE:DA:74:88:AF:2E:07:A1:20:02:77:68:25:EE:F9:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5/c6144019-73d4-38c7-a8ea-97fb922f85d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5/98e62aba-8b05-4785-a899-f75688a272a5.crl
X509v3 Authority Key Identifier:
keyid:74:7D:5D:2A:D3:27:BD:3E:FE:B1:28:14:6F:46:1F:7D:D7:1F:13:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98e62aba-8b05-4785-a899-f75688a272a5.cer
sbgp-ipAddrBlock: critical
IPv4:
199.204.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:85:be:8f:8f:7e:23:e0:c7:ef:bd:ba:d6:f9:15:5c:a5:07:
29:1a:75:44:b9:cf:3a:b0:71:8d:85:53:d4:d0:fd:ad:7b:74:
24:13:02:0a:68:58:25:ea:55:53:d2:73:9f:96:1e:61:fa:82:
ae:dd:0b:53:a5:88:ca:a8:80:83:d4:c9:05:a1:11:2d:31:9d:
97:70:59:d1:a9:84:59:8a:b9:0f:29:da:e6:e6:61:c5:ff:d9:
75:26:6a:b3:02:af:a3:b8:7e:5d:18:2f:ed:dc:26:7a:cc:de:
be:6a:8b:3b:7e:fd:80:d7:2d:7f:3d:ce:96:08:74:cf:43:5b:
35:0c:36:79:6c:5a:a0:e7:94:6a:19:68:7f:13:27:f2:21:ad:
07:b0:46:fb:fd:cb:bc:84:0c:d5:84:b3:b2:31:a9:7c:8d:4a:
09:84:59:37:95:21:1d:1d:7a:d9:ea:6d:fe:67:06:d1:1a:39:
45:e8:5f:5a:85:a5:ee:74:47:44:25:ee:95:db:f1:9f:16:c2:
2d:dc:77:fa:0a:d8:05:e0:26:f5:3a:40:89:0c:21:e0:5a:91:
3c:cf:0e:e0:48:70:7a:16:66:d6:03:44:7b:a4:a2:e1:04:e0:
58:66:dd:52:b0:54:bf:01:8c:ef:dd:48:9b:43:b9:e0:2f:bd:
c9:60:23:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiKekTGfljw2NShwIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOThlNjJhYmEtOGIwNS00Nzg1LWE4OTktZjc1Njg4YTI3
MmE1MB4XDTI1MDExNDEwMzQ0OFoXDTI1MDQxNDA5MzQ0OFowLzEtMCsGA1UEAxMk
NGU0ZmJjYzgtNmUyOC00ODQ0LTkwM2EtZWQ3MmNmZGM5YzNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNoPD7aQ75lrzcCkaYH1xm+foo0HqqWqAq5r
9uZ21xhsOLj6Gc3evOModuKP1czrRhqoDlz36RB1vW+zIxzOaJ3KZMr7oZgt1VWv
tI7I+TIEqSydOe4v3N2y1ga4X/ulnRjnmkhxH7E4zHsXWrKBIzpQI55evwjhIJCB
eBmSTiPezBxQYx0kxK0cJxHiIlleNKDB9/4m0rPvqXlK4TITEbHnI0fOMljW5U+6
AWRanP/SJ0rrz3zAG1CKYbIpuLujtmliyV90hXJ7HytTWWEPYnmlQOlWLPkqnZBP
/pbivrVp0ArABurI5xUlSNH03W33No8VLA08AHTEg2dgF8SQrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDAaLyrO2nSIry4HoSACd2gl7vmnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85OGU2
MmFiYS04YjA1LTQ3ODUtYTg5OS1mNzU2ODhhMjcyYTUvYzYxNDQwMTktNzNkNC0z
OGM3LWE4ZWEtOTdmYjkyMmY4NWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOThlNjJhYmEtOGIwNS00Nzg1LWE4
OTktZjc1Njg4YTI3MmE1Lzk4ZTYyYWJhLThiMDUtNDc4NS1hODk5LWY3NTY4OGEy
NzJhNS5jcmwwHwYDVR0jBBgwFoAUdH1dKtMnvT7+sSgUb0YffdcfE30wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85OGU2MmFiYS04YjA1LTQ3ODUtYTg5OS1mNzU2
ODhhMjcyYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8zkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACSFvo+PfiPgx++9utb5FVylBykadUS5zzqwcY2FU9TQ/a17dCQTAgpo
WCXqVVPSc5+WHmH6gq7dC1OliMqogIPUyQWhES0xnZdwWdGphFmKuQ8p2ubmYcX/
2XUmarMCr6O4fl0YL+3cJnrM3r5qizt+/YDXLX89zpYIdM9DWzUMNnlsWqDnlGoZ
aH8TJ/IhrQewRvv9y7yEDNWEs7IxqXyNSgmEWTeVIR0detnqbf5nBtEaOUXoX1qF
pe50R0Ql7pXb8Z8Wwi3cd/oK2AXgJvU6QIkMIeBakTzPDuBIcHoWZtYDRHukouEE
4Fhm3VKwVL8BjO/dSJtDueAvvclgI9Q=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:59 2025 by rpki-client