Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032/733f4b75-21a2-3402-a1ba-b2033671249c.roa
File: 733f4b75-21a2-3402-a1ba-b2033671249c.roa (raw, json)
Hash identifier: t0k+IxgPR2VXJv0I3HVZVcAzh+tQyZMhgpCmfQTocqM=
Subject key identifier: FD:CF:2F:DF:FD:05:E6:D9:CD:0D:86:E5:0C:2F:76:B2:24:0A:7F:9C
Certificate issuer: /CN=b4251da6-e12c-464e-918b-9c9e6f10c032
Certificate serial: 010D0C9F43285848C580F381313827A269730FC0
Authority key identifier: 28:53:14:50:AD:3E:41:C8:83:44:ED:44:E6:0B:D0:70:CF:69:9D:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032/733f4b75-21a2-3402-a1ba-b2033671249c.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 62965
IP address blocks: 198.97.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:80:f3:81:31:38:27:a2:69:73:0f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4251da6-e12c-464e-918b-9c9e6f10c032
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=39aa8134-adbd-49a5-b2f3-adaaf78ec13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bf:83:4c:96:a4:5f:87:82:4c:78:31:85:6a:
c9:f1:44:28:60:0c:41:67:9e:e2:a6:19:69:72:f3:
e6:24:f3:27:f6:e3:8a:73:ba:f2:ea:ff:53:6d:50:
30:64:c2:f9:4d:3f:9c:ab:c2:63:54:45:b4:16:a3:
6b:1d:37:3a:61:58:91:50:91:c9:8c:90:af:b8:13:
c0:96:4d:f1:cb:6c:7f:f1:12:15:86:35:d1:2b:49:
83:66:16:5d:4c:44:fc:4b:ed:64:8d:c1:ab:a8:a4:
51:4d:28:f5:fd:ff:b5:81:00:a4:9f:5d:0c:48:2b:
5f:93:e3:c6:d3:5f:85:2b:65:f4:b1:1d:db:bb:63:
e3:41:56:bb:d3:79:88:49:4b:15:83:66:99:e8:80:
dc:ea:8a:86:57:ec:d4:9f:a8:94:a4:63:85:5f:f1:
64:5f:13:e5:4e:6d:9d:3a:d7:4a:8f:0d:54:71:fd:
1d:bf:96:85:9a:d7:24:85:a3:08:07:2f:fa:5b:b0:
55:3c:a8:af:fd:d0:59:59:6a:4f:5b:20:ac:b1:cb:
99:3c:8c:f1:be:dd:3c:ad:29:47:67:d6:5c:fd:b0:
40:99:a7:68:b7:b2:f0:0d:6f:22:d3:60:5a:1b:eb:
87:07:c3:c9:a8:a8:6b:24:a4:fd:5a:11:df:d8:51:
35:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CF:2F:DF:FD:05:E6:D9:CD:0D:86:E5:0C:2F:76:B2:24:0A:7F:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032/733f4b75-21a2-3402-a1ba-b2033671249c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032/b4251da6-e12c-464e-918b-9c9e6f10c032.crl
X509v3 Authority Key Identifier:
keyid:28:53:14:50:AD:3E:41:C8:83:44:ED:44:E6:0B:D0:70:CF:69:9D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032.cer
sbgp-ipAddrBlock: critical
IPv4:
198.97.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:98:ff:3d:ea:34:1a:c3:06:3e:2f:01:20:96:10:f4:82:ac:
e3:0d:0f:2d:1d:6f:f4:75:2c:5d:1b:24:be:00:a7:0d:55:d7:
3d:fb:df:fe:34:9d:10:52:ab:5e:2f:d9:f2:f1:40:d0:b9:3f:
d6:56:53:af:4b:21:b6:ab:af:54:9f:45:03:a4:d3:df:f0:ad:
a2:0e:5b:78:55:9a:e9:c9:ea:8e:d7:64:6c:2d:1d:bb:c5:36:
04:ba:8f:aa:e2:b3:ec:e4:15:57:bd:95:7d:62:2b:a7:cb:ca:
5a:64:28:27:ac:76:8a:33:2b:d0:40:8f:7c:c8:27:7d:4f:3f:
b9:d9:3a:92:35:96:9a:86:7e:cd:b5:72:cd:6d:90:c8:68:eb:
07:4e:5d:47:75:84:f0:15:08:33:76:19:91:c9:83:d1:6c:a0:
e3:9c:b8:7a:11:4f:33:3d:5d:b7:27:34:73:3d:96:6c:ba:95:
8a:a8:78:56:47:c8:39:86:8e:bd:5b:af:ec:d1:8e:1d:9a:16:
7f:71:76:47:b3:56:5f:a6:ab:69:32:6a:e7:a1:43:fd:21:33:
2c:53:ec:be:33:88:e3:a6:09:ef:fe:66:7f:d8:a9:e7:f4:21:
58:56:90:bf:4b:f6:95:3e:7f:03:e0:8e:b6:6b:b2:03:86:4c:
42:83:88:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgPOBMTgnomlzD8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQyNTFkYTYtZTEyYy00NjRlLTkxOGItOWM5ZTZmMTBj
MDMyMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
MzlhYTgxMzQtYWRiZC00OWE1LWIyZjMtYWRhYWY3OGVjMTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxb+DTJakX4eCTHgxhWrJ8UQoYAxBZ57iphlp
cvPmJPMn9uOKc7ry6v9TbVAwZML5TT+cq8JjVEW0FqNrHTc6YViRUJHJjJCvuBPA
lk3xy2x/8RIVhjXRK0mDZhZdTET8S+1kjcGrqKRRTSj1/f+1gQCkn10MSCtfk+PG
01+FK2X0sR3bu2PjQVa703mISUsVg2aZ6IDc6oqGV+zUn6iUpGOFX/FkXxPlTm2d
OtdKjw1Ucf0dv5aFmtckhaMIBy/6W7BVPKiv/dBZWWpPWyCsscuZPIzxvt08rSlH
Z9Zc/bBAmadot7LwDW8i02BaG+uHB8PJqKhrJKT9WhHf2FE1ewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP3PL9/9BebZzQ2G5QwvdrIkCn+cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iNDI1
MWRhNi1lMTJjLTQ2NGUtOTE4Yi05YzllNmYxMGMwMzIvNzMzZjRiNzUtMjFhMi0z
NDAyLWExYmEtYjIwMzM2NzEyNDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjQyNTFkYTYtZTEyYy00NjRlLTkx
OGItOWM5ZTZmMTBjMDMyL2I0MjUxZGE2LWUxMmMtNDY0ZS05MThiLTljOWU2ZjEw
YzAzMi5jcmwwHwYDVR0jBBgwFoAUKFMUUK0+QciDRO1E5gvQcM9pnSswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9iNDI1MWRhNi1lMTJjLTQ2NGUtOTE4Yi05Yzll
NmYxMGMwMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmHJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAICY/z3qNBrDBj4vASCWEPSCrOMNDy0db/R1LF0bJL4Apw1V1z373/40
nRBSq14v2fLxQNC5P9ZWU69LIbarr1SfRQOk09/wraIOW3hVmunJ6o7XZGwtHbvF
NgS6j6ris+zkFVe9lX1iK6fLylpkKCesdoozK9BAj3zIJ31PP7nZOpI1lpqGfs21
cs1tkMho6wdOXUd1hPAVCDN2GZHJg9FsoOOcuHoRTzM9XbcnNHM9lmy6lYqoeFZH
yDmGjr1br+zRjh2aFn9xdkezVl+mq2kyauehQ/0hMyxT7L4ziOOmCe/+Zn/Yqef0
IVhWkL9L9pU+fwPgjrZrsgOGTEKDiEA=
-----END CERTIFICATE-----
Generated at Sat Apr 12 09:29:09 2025 by rpki-client