Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/0542bc1a-6e2d-397d-b832-1d1a5ac0c36d.roa
File: 0542bc1a-6e2d-397d-b832-1d1a5ac0c36d.roa (raw, json)
Hash identifier: wNMZe/Wkn+XMmZ5hRg6pe8EdMdy7pcmaf5q/7zrxvRo=
Subject key identifier: 50:8E:8F:A8:6C:CC:A6:52:78:18:94:0A:4B:F4:3D:4F:55:33:EF:FA
Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial: 010D0C9F432858488EBE43E3A2FB7E733C02B180
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/0542bc1a-6e2d-397d-b832-1d1a5ac0c36d.roa
Signing time: Wed 15 Jan 2025 23:15:02 +0000
ROA not before: Wed 15 Jan 2025 23:15:02 +0000
ROA not after: Tue 15 Apr 2025 22:15:02 +0000
asID: 26042
IP address blocks: 198.1.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8e:be:43:e3:a2:fb:7e:73:3c:02:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Validity
Not Before: Jan 15 23:15:02 2025 GMT
Not After : Apr 15 22:15:02 2025 GMT
Subject: CN=5d60689c-a418-4bc7-a6ae-285d9cc7f898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:63:80:1f:3a:c7:2c:a4:30:84:91:5c:ce:0e:
5a:cb:fb:43:8c:08:de:52:82:38:e1:b1:67:2a:64:
1d:f2:62:d3:5d:e4:bf:1d:b8:1d:d0:65:cf:a7:72:
76:04:f7:b0:95:62:62:8f:63:28:c0:fc:1d:c0:bd:
7f:e0:5f:25:80:8a:be:e7:ee:de:5d:bf:59:78:f5:
43:82:21:da:ad:17:b9:2e:b4:c6:26:54:14:65:75:
5a:19:55:9c:e5:66:af:e4:95:4b:ec:2a:c7:cd:d3:
05:39:59:d8:24:a0:64:88:2d:05:cf:9c:78:ae:5b:
92:62:1e:58:39:8c:0c:84:26:f6:8f:90:03:9d:fe:
6d:30:bf:ad:f2:40:3d:2a:52:87:89:76:6d:2f:f4:
ff:f6:e3:e3:79:fe:db:fe:59:e8:61:47:cb:78:27:
0c:33:3e:cb:08:4a:37:79:c6:1e:ad:fc:b1:ab:a8:
2d:cf:ea:ae:69:0d:72:ec:4f:f8:9d:0f:af:5d:05:
79:60:a8:65:b2:6e:a7:90:13:5a:ed:4f:18:7c:10:
d4:e5:00:76:30:ab:e9:c1:dd:c3:04:18:57:59:11:
ce:ec:be:9a:c1:13:09:8f:eb:7f:e9:cd:3f:b5:a6:
23:8b:e3:1e:ab:5f:9b:d0:99:29:c2:d1:b9:b9:12:
f7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8E:8F:A8:6C:CC:A6:52:78:18:94:0A:4B:F4:3D:4F:55:33:EF:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/0542bc1a-6e2d-397d-b832-1d1a5ac0c36d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
X509v3 Authority Key Identifier:
keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
sbgp-ipAddrBlock: critical
IPv4:
198.1.218.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:26:3b:7c:c5:6c:16:6c:b4:8a:80:da:ac:2f:9e:be:df:2e:
c3:19:31:0d:8c:c7:42:65:e7:3b:d4:3b:6d:fb:84:8d:d2:57:
34:f1:2d:61:38:d5:e3:f6:20:b5:f2:de:13:40:ce:fc:40:f8:
5d:09:27:54:13:04:c2:6d:0e:d0:96:b5:ac:da:07:fa:58:02:
3e:b6:70:7b:fa:55:9c:d8:f7:94:50:c2:66:58:93:1a:0a:8a:
80:8d:38:57:3c:35:60:1f:d2:9e:fd:d4:ee:8f:72:4f:f0:a9:
82:f0:c7:7f:45:18:ee:fd:96:c2:44:3a:30:54:dd:b9:bb:56:
1f:54:52:e4:68:22:7c:4e:e2:06:09:07:2f:96:c7:00:8f:48:
b8:9f:ff:dd:f9:40:31:fe:b0:5d:20:2d:76:35:69:1f:45:c2:
cd:93:0b:c4:24:30:c5:c7:e6:78:dd:df:98:7a:77:11:41:91:
d5:0b:42:08:bf:98:9c:c7:0d:51:7e:99:fb:50:4d:be:df:91:
20:dc:cd:a4:84:94:26:7e:7d:ad:f0:da:bb:af:d9:57:e3:d0:
f5:c3:08:28:00:d5:3b:a3:91:ff:78:10:e2:f4:7e:c4:d6:cf:
f2:ba:0a:0e:0d:36:0e:b8:a9:97:18:33:c0:a1:cd:ff:89:a4:
4f:16:70:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiOvkPjovt+czwCsYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh
MjJmMB4XDTI1MDExNTIzMTUwMloXDTI1MDQxNTIyMTUwMlowLzEtMCsGA1UEAxMk
NWQ2MDY4OWMtYTQxOC00YmM3LWE2YWUtMjg1ZDljYzdmODk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGOAHzrHLKQwhJFczg5ay/tDjAjeUoI44bFn
KmQd8mLTXeS/Hbgd0GXPp3J2BPewlWJij2MowPwdwL1/4F8lgIq+5+7eXb9ZePVD
giHarRe5LrTGJlQUZXVaGVWc5Wav5JVL7CrHzdMFOVnYJKBkiC0Fz5x4rluSYh5Y
OYwMhCb2j5ADnf5tML+t8kA9KlKHiXZtL/T/9uPjef7b/lnoYUfLeCcMMz7LCEo3
ecYerfyxq6gtz+quaQ1y7E/4nQ+vXQV5YKhlsm6nkBNa7U8YfBDU5QB2MKvpwd3D
BBhXWRHO7L6awRMJj+t/6c0/taYji+Meq1+b0JkpwtG5uRL3vwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFCOj6hszKZSeBiUCkv0PU9VM+/6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0
ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvMDU0MmJjMWEtNmUyZC0z
OTdkLWI4MzItMWQxYTVhYzBjMzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi
NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll
YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm
NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGImO3zFbBZstIqA2qwvnr7fLsMZMQ2Mx0Jl5zvUO237hI3SVzTxLWE4
1eP2ILXy3hNAzvxA+F0JJ1QTBMJtDtCWtazaB/pYAj62cHv6VZzY95RQwmZYkxoK
ioCNOFc8NWAf0p791O6Pck/wqYLwx39FGO79lsJEOjBU3bm7Vh9UUuRoInxO4gYJ
By+WxwCPSLif/935QDH+sF0gLXY1aR9Fws2TC8QkMMXH5njd35h6dxFBkdULQgi/
mJzHDVF+mftQTb7fkSDczaSElCZ+fa3w2ruv2Vfj0PXDCCgA1Tujkf94EOL0fsTW
z/K6Cg4NNg64qZcYM8Chzf+JpE8WcN0=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:16 2025 by rpki-client