Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/adb992f1-1226-30cc-9ac8-4a06351806b6.roa
File: adb992f1-1226-30cc-9ac8-4a06351806b6.roa (raw, json)
Hash identifier: ERYnF6SYcN8ThnbdAr4+kt0lTF7y2YyrwF9F3Lp8gmc=
Subject key identifier: A9:25:03:18:6F:C4:CC:B0:4B:8E:EA:40:39:28:79:67:B0:8F:33:8F
Certificate issuer: /CN=6f65c9e2-b250-402e-aa3e-eb6f9552d378
Certificate serial: 010D0C9F4328584957F4119B827540D5C7297C75
Authority key identifier: 19:32:7F:F7:D4:07:EF:BC:E0:B8:AB:37:CC:34:96:F5:C7:84:B6:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/adb992f1-1226-30cc-9ac8-4a06351806b6.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 3855
IP address blocks: 192.40.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:11:9b:82:75:40:d5:c7:29:7c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f65c9e2-b250-402e-aa3e-eb6f9552d378
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=6c446ded-64e2-4906-b6ef-60938f1e9433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:86:8e:ff:d3:7f:5e:66:ed:5e:53:da:2e:22:
2b:1d:33:d4:4d:e9:1a:78:b2:76:9a:60:5b:aa:0b:
80:d6:e3:4a:9e:2f:cd:f4:17:0c:da:cd:05:a9:40:
60:5a:6c:f7:98:61:a2:12:a0:55:d2:38:cc:ce:2b:
d2:11:6a:29:ec:41:b1:02:8b:e8:ab:ca:08:9f:3f:
c9:49:2e:46:e5:fb:83:12:f4:3c:5e:17:bd:14:7e:
3a:a7:c8:79:6d:5a:f7:21:ed:30:b6:95:d9:c7:38:
05:41:be:ff:cb:5e:63:a1:cf:89:cf:86:74:40:d6:
36:99:cd:93:fc:62:6b:5c:d7:4c:4c:76:c6:2f:2e:
a9:8a:08:ba:18:57:e4:9e:1f:db:d1:3d:58:13:74:
5a:7c:5f:9a:3a:08:ee:1e:1e:a0:c4:2b:4a:c9:81:
73:c4:f4:4b:2b:9b:f1:12:32:d5:d9:e7:49:59:32:
f1:f2:11:2f:7b:64:92:77:80:a1:e0:37:09:04:08:
5b:03:e5:6f:e7:14:ee:58:eb:ab:02:16:22:6e:a0:
22:cc:48:2d:03:00:43:ca:95:ed:9e:6d:49:ac:eb:
83:e0:85:29:35:3a:8a:15:a1:41:0b:95:14:48:62:
7a:5b:be:94:1f:be:1e:95:56:c3:7d:36:c9:b7:ee:
bf:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:25:03:18:6F:C4:CC:B0:4B:8E:EA:40:39:28:79:67:B0:8F:33:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/adb992f1-1226-30cc-9ac8-4a06351806b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/6f65c9e2-b250-402e-aa3e-eb6f9552d378.crl
X509v3 Authority Key Identifier:
keyid:19:32:7F:F7:D4:07:EF:BC:E0:B8:AB:37:CC:34:96:F5:C7:84:B6:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378.cer
sbgp-ipAddrBlock: critical
IPv4:
192.40.84.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:50:aa:1a:9d:f8:50:5b:b0:c0:5d:0d:69:7d:70:22:5c:fd:
ad:5e:87:a4:5e:6b:3e:21:e0:c6:0c:1e:b0:2c:ea:99:81:35:
eb:a8:e3:5d:64:ad:2e:b8:3c:5d:e7:1d:f2:b9:86:31:c2:be:
ba:16:a2:6c:8f:54:82:15:3b:ee:d9:4d:46:79:1d:63:db:a8:
6e:96:60:ed:45:23:4b:b7:79:72:bf:5f:1b:d6:38:71:ed:a0:
ec:42:a5:fa:79:b4:1d:72:7b:b9:51:2d:d3:21:88:61:e7:a8:
33:97:0e:b0:a2:c4:57:7f:c8:f4:2b:74:1f:9d:5d:8b:96:8f:
1c:04:e1:3c:d4:de:a8:3a:be:27:be:1d:de:c9:9a:32:52:c5:
d7:73:99:0d:77:f9:eb:11:9b:f7:fe:2a:fd:73:e6:0e:bd:ec:
78:ab:39:91:65:77:a0:f7:70:35:fe:76:2f:03:dd:92:d7:d3:
1a:e8:e1:40:f2:db:82:1b:9c:14:83:02:71:2a:64:14:ab:e7:
d3:a8:c4:c4:99:42:3d:4e:f6:d1:9a:ff:b3:7a:c8:bd:5c:97:
4c:1e:7b:95:2d:9b:6f:0c:41:8f:8b:f9:29:da:1e:f0:39:b4:
6f:77:4c:df:5a:8a:f2:23:48:d1:50:8d:18:4b:20:ca:28:9c:
25:23:11:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9BGbgnVA1ccpfHUwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY2NWM5ZTItYjI1MC00MDJlLWFhM2UtZWI2Zjk1NTJk
Mzc4MB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk
NmM0NDZkZWQtNjRlMi00OTA2LWI2ZWYtNjA5MzhmMWU5NDMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIaO/9N/XmbtXlPaLiIrHTPUTekaeLJ2mmBb
qguA1uNKni/N9BcM2s0FqUBgWmz3mGGiEqBV0jjMzivSEWop7EGxAovoq8oInz/J
SS5G5fuDEvQ8Xhe9FH46p8h5bVr3Ie0wtpXZxzgFQb7/y15joc+Jz4Z0QNY2mc2T
/GJrXNdMTHbGLy6pigi6GFfknh/b0T1YE3RafF+aOgjuHh6gxCtKyYFzxPRLK5vx
EjLV2edJWTLx8hEve2SSd4Ch4DcJBAhbA+Vv5xTuWOurAhYibqAizEgtAwBDypXt
nm1JrOuD4IUpNTqKFaFBC5UUSGJ6W76UH74elVbDfTbJt+6/NQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKklAxhvxMywS47qQDkoeWewjzOPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82ZjY1
YzllMi1iMjUwLTQwMmUtYWEzZS1lYjZmOTU1MmQzNzgvYWRiOTkyZjEtMTIyNi0z
MGNjLTlhYzgtNGEwNjM1MTgwNmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNmY2NWM5ZTItYjI1MC00MDJlLWFh
M2UtZWI2Zjk1NTJkMzc4LzZmNjVjOWUyLWIyNTAtNDAyZS1hYTNlLWViNmY5NTUy
ZDM3OC5jcmwwHwYDVR0jBBgwFoAUGTJ/99QH77zguKs3zDSW9ceEtoIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi82ZjY1YzllMi1iMjUwLTQwMmUtYWEzZS1lYjZm
OTU1MmQzNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwChUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHVQqhqd+FBbsMBdDWl9cCJc/a1eh6Reaz4h4MYMHrAs6pmBNeuo411k
rS64PF3nHfK5hjHCvroWomyPVIIVO+7ZTUZ5HWPbqG6WYO1FI0u3eXK/XxvWOHHt
oOxCpfp5tB1ye7lRLdMhiGHnqDOXDrCixFd/yPQrdB+dXYuWjxwE4TzU3qg6vie+
Hd7JmjJSxddzmQ13+esRm/f+Kv1z5g697HirOZFld6D3cDX+di8D3ZLX0xro4UDy
24IbnBSDAnEqZBSr59OoxMSZQj1O9tGa/7N6yL1cl0wee5Utm28MQY+L+SnaHvA5
tG93TN9aivIjSNFQjRhLIMoonCUjEZ4=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:07:18 2025 by rpki-client