Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/8d49585c-078a-3eae-a1d7-7c479bf35c7e.roa
File: 8d49585c-078a-3eae-a1d7-7c479bf35c7e.roa (raw, json)
Hash identifier: MyVUp+ftEHtFwOgvMtz94rPhzNhdKohORuHfdYmELpo=
Subject key identifier: 2A:70:18:2B:4B:94:13:9C:78:9A:03:A4:93:E3:E3:4E:92:3B:E2:D4
Certificate issuer: /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d
Certificate serial: 010D0C9F43285848A99629E98B1FAFA06FFC07C0
Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/8d49585c-078a-3eae-a1d7-7c479bf35c7e.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 26512
IP address blocks: 199.119.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:29:e9:8b:1f:af:a0:6f:fc:07:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=11c8ac1f-f6c9-441b-8d98-9dc8e53268ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a9:58:31:3d:3a:7e:2f:ec:25:56:46:33:89:
fe:35:4a:f4:5e:50:8e:42:44:b3:36:ba:43:b3:7e:
83:74:ed:26:3f:f4:c5:c3:7a:5d:f3:99:cb:c7:ca:
0a:0b:0a:16:d3:de:b9:a3:be:44:c6:17:e7:c6:50:
a0:99:03:60:8b:b5:30:bb:ae:e6:ca:38:05:c7:a5:
e9:37:18:e5:51:7a:d7:dc:c2:53:a9:a5:b1:1e:1c:
d0:8d:47:45:5e:70:75:b2:7d:36:10:79:c0:f3:a6:
80:12:2f:e5:1b:df:6c:50:9b:aa:52:c9:00:b9:56:
11:d3:1e:c3:72:f1:da:7d:49:c5:d8:02:19:0c:4b:
e2:96:9c:65:4c:7c:16:cf:55:de:bd:2e:cc:32:ce:
ee:a2:44:87:6d:d8:6f:d9:e3:e8:f5:00:a9:18:3c:
2c:19:e0:41:a9:02:fd:15:77:0e:c5:91:c0:18:8e:
75:ee:5a:8e:7d:21:51:55:37:e2:d3:e0:1f:fd:d4:
0d:a3:6c:13:58:93:40:cb:b7:4f:c3:43:4c:ed:18:
b0:3b:cd:05:23:c9:59:bd:d6:c8:2a:cf:dd:cd:4b:
6c:22:bc:20:da:cb:ec:f1:1e:35:38:72:e5:25:4c:
e6:1d:ba:20:4a:88:ed:b9:49:49:94:4a:b9:a2:33:
04:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:70:18:2B:4B:94:13:9C:78:9A:03:A4:93:E3:E3:4E:92:3B:E2:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/8d49585c-078a-3eae-a1d7-7c479bf35c7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl
X509v3 Authority Key Identifier:
keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer
sbgp-ipAddrBlock: critical
IPv4:
199.119.134.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:4f:0e:8d:dd:b1:55:e7:23:87:a7:c2:c6:91:1e:6d:8c:db:
65:90:4a:23:4f:46:cf:9d:a2:01:15:0b:de:65:b1:20:2a:b7:
df:30:e0:3f:e7:4c:37:d8:c7:f4:23:89:a3:ff:0c:48:2e:bc:
9a:02:be:1a:4a:b5:2d:41:5a:ce:d1:04:9c:3e:6b:e5:5c:ff:
5a:52:d6:3a:7a:c1:30:07:f3:c1:4d:2d:f9:b1:dd:66:67:7e:
cf:71:d4:0d:45:40:78:07:0c:ad:bc:3a:c2:33:b2:2d:73:12:
c4:41:ec:76:ec:1b:30:6f:65:53:6b:c3:f3:41:ec:1b:53:33:
8c:6a:f9:14:e6:ee:c6:d9:ca:35:91:40:f6:63:99:45:d3:21:
c9:fa:47:a6:3f:42:6a:62:16:8f:6e:59:b3:58:a7:80:1b:3f:
47:f3:57:df:94:fd:3b:89:7a:f9:8a:4d:c7:a5:3f:9f:46:6f:
b3:1c:cf:0b:7e:9a:ba:bb:ba:62:0f:ce:52:b9:de:c6:f9:fd:
03:0b:87:e9:0f:dc:c5:4c:8d:d6:fb:59:12:45:0b:62:ab:4b:
58:83:57:00:27:5a:d8:7c:e7:6f:12:12:48:e9:8a:45:a1:07:
1c:de:19:fb:91:f8:a9:3f:e0:c8:22:eb:79:c8:78:fb:7e:4f:
ba:cb:f6:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplinpix+voG/8B8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVmMmM4MDQtYjNiOS00YjU2LWE3MTktZGQ3MjI2MmE3
YTZkMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
MTFjOGFjMWYtZjZjOS00NDFiLThkOTgtOWRjOGU1MzI2OGFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqlYMT06fi/sJVZGM4n+NUr0XlCOQkSzNrpD
s36DdO0mP/TFw3pd85nLx8oKCwoW0965o75ExhfnxlCgmQNgi7Uwu67myjgFx6Xp
NxjlUXrX3MJTqaWxHhzQjUdFXnB1sn02EHnA86aAEi/lG99sUJuqUskAuVYR0x7D
cvHafUnF2AIZDEvilpxlTHwWz1XevS7MMs7uokSHbdhv2ePo9QCpGDwsGeBBqQL9
FXcOxZHAGI517lqOfSFRVTfi0+Af/dQNo2wTWJNAy7dPw0NM7RiwO80FI8lZvdbI
Ks/dzUtsIrwg2svs8R41OHLlJUzmHbogSojtuUlJlEq5ojMEOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCpwGCtLlBOceJoDpJPj406SO+LUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWYy
YzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcyMjYyYTdhNmQvOGQ0OTU4NWMtMDc4YS0z
ZWFlLWExZDctN2M0NzliZjM1YzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVmMmM4MDQtYjNiOS00YjU2LWE3
MTktZGQ3MjI2MmE3YTZkL2Y1ZjJjODA0LWIzYjktNGI1Ni1hNzE5LWRkNzIyNjJh
N2E2ZC5jcmwwHwYDVR0jBBgwFoAUxGAfl7n2ifTPOb15P9g9I3XsQiEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mNWYyYzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcy
MjYyYTdhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3eGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG9PDo3dsVXnI4enwsaRHm2M22WQSiNPRs+dogEVC95lsSAqt98w4D/n
TDfYx/QjiaP/DEguvJoCvhpKtS1BWs7RBJw+a+Vc/1pS1jp6wTAH88FNLfmx3WZn
fs9x1A1FQHgHDK28OsIzsi1zEsRB7HbsGzBvZVNrw/NB7BtTM4xq+RTm7sbZyjWR
QPZjmUXTIcn6R6Y/QmpiFo9uWbNYp4AbP0fzV9+U/TuJevmKTcelP59Gb7Mczwt+
mrq7umIPzlK53sb5/QMLh+kP3MVMjdb7WRJFC2KrS1iDVwAnWth8528SEkjpikWh
BxzeGfuR+Kk/4Mgi63nIePt+T7rL9jM=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:36:18 2025 by rpki-client