Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/617c09a2-b74a-348a-bb1b-065e2212399f.roa
File: 617c09a2-b74a-348a-bb1b-065e2212399f.roa (raw, json)
Hash identifier: TfQ0GMtJk8Gj8kIT+zZuwxk2mSDNqTcTvsAaDvt7Isw=
Subject key identifier: ED:7E:C9:C6:78:FE:3E:6E:CE:FF:B2:4F:79:71:51:A9:3D:50:0E:EE
Certificate issuer: /CN=3fcccdf8-e770-4c4c-abd1-c8b63238594b
Certificate serial: 010D0C9F43285849393E6F49333971902F2D5BC0
Authority key identifier: 78:94:5F:4E:F8:F5:A3:42:58:B9:55:C3:C3:39:0E:17:70:D1:13:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/617c09a2-b74a-348a-bb1b-065e2212399f.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 395635
IP address blocks: 192.101.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:6f:49:33:39:71:90:2f:2d:5b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fcccdf8-e770-4c4c-abd1-c8b63238594b
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=9b1d0b18-c1e6-448f-9aed-1a6d87a67504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3e:10:cd:c8:a1:49:02:26:16:fe:3f:70:5c:
88:70:ba:60:27:cb:8c:66:6d:79:1b:88:d6:02:30:
b1:cb:58:c1:1d:c3:8e:09:ad:95:7d:80:27:17:a8:
38:fb:93:db:b0:48:37:cb:48:f5:04:58:19:45:51:
cd:98:1e:f7:d2:4f:8e:dc:98:db:76:7e:4a:dc:76:
a1:5e:90:de:0a:d9:f9:af:8b:16:49:27:a2:e5:96:
40:cb:d4:22:a2:10:b6:34:33:ec:ec:75:12:09:c5:
71:04:d5:5d:c4:4d:59:9b:1d:59:85:00:be:89:55:
d6:6e:dd:ba:84:79:66:37:8f:30:42:d6:11:6a:34:
ac:d6:ed:0d:cd:97:e1:0a:f0:31:0c:be:e4:5b:d3:
a5:3c:92:be:c8:73:ba:25:8c:5c:94:7d:e2:62:5c:
d1:11:7d:be:e9:a5:85:cf:55:b6:06:b8:99:1f:7e:
91:a2:a4:d4:88:7e:bb:f2:7e:26:0e:27:9b:eb:ec:
1d:93:3e:10:85:25:f6:cc:8f:91:55:ac:a4:45:c9:
90:c8:60:9f:8e:e1:6b:96:c7:27:19:cd:da:d7:51:
6f:97:5a:4e:98:bd:4d:cf:d8:e9:59:c8:2e:2e:31:
a9:99:da:16:94:54:e8:18:67:c5:cb:20:fc:c1:b0:
8c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7E:C9:C6:78:FE:3E:6E:CE:FF:B2:4F:79:71:51:A9:3D:50:0E:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/617c09a2-b74a-348a-bb1b-065e2212399f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/3fcccdf8-e770-4c4c-abd1-c8b63238594b.crl
X509v3 Authority Key Identifier:
keyid:78:94:5F:4E:F8:F5:A3:42:58:B9:55:C3:C3:39:0E:17:70:D1:13:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b.cer
sbgp-ipAddrBlock: critical
IPv4:
192.101.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:2b:04:e0:98:30:bf:32:cd:0c:2e:53:60:73:be:fe:b5:0f:
79:11:01:8b:e0:6b:26:e7:ee:fb:5a:06:fe:3b:1a:67:af:6a:
a6:69:88:c5:69:5e:a0:0a:d0:d2:c4:db:68:7d:fc:cf:f8:a8:
9c:1d:8b:3e:91:4a:bb:e0:bc:3e:05:90:1c:82:4d:22:6b:38:
ea:97:d2:ed:5c:69:fe:5c:a3:ad:53:ac:f8:6c:c7:cf:4e:4a:
b8:e7:6e:41:dc:f0:ba:3b:5b:94:fc:f9:4b:c5:e7:f5:8d:b4:
01:78:ca:17:e6:63:31:85:ff:08:79:56:a5:0e:0c:ed:c7:a5:
6d:24:97:79:a1:63:15:7a:e0:38:72:a6:e0:2f:5d:90:2e:cf:
64:d6:0f:ee:b7:45:9a:fa:58:3b:ef:15:a7:9b:27:f9:d8:77:
2a:57:22:ab:5c:ab:a6:a1:46:ba:b4:26:9c:d6:49:0a:fc:bf:
c2:12:90:5f:25:51:be:35:ff:8f:08:13:fd:89:c3:64:d1:28:
e0:6d:1e:81:91:7f:75:1a:0c:04:47:99:ba:ab:e5:07:a0:5d:
f3:51:14:02:2f:0a:26:a8:7e:ac:fa:1e:c4:b0:28:fb:8a:cc:
b5:df:72:06:6b:64:ae:49:5d:a9:c8:85:59:ea:85:f3:62:96:
f8:48:bb:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5Pm9JMzlxkC8tW8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2ZjY2NkZjgtZTc3MC00YzRjLWFiZDEtYzhiNjMyMzg1
OTRiMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk
OWIxZDBiMTgtYzFlNi00NDhmLTlhZWQtMWE2ZDg3YTY3NTA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz4QzcihSQImFv4/cFyIcLpgJ8uMZm15G4jW
AjCxy1jBHcOOCa2VfYAnF6g4+5PbsEg3y0j1BFgZRVHNmB730k+O3Jjbdn5K3Hah
XpDeCtn5r4sWSSei5ZZAy9QiohC2NDPs7HUSCcVxBNVdxE1Zmx1ZhQC+iVXWbt26
hHlmN48wQtYRajSs1u0NzZfhCvAxDL7kW9OlPJK+yHO6JYxclH3iYlzREX2+6aWF
z1W2BriZH36RoqTUiH678n4mDieb6+wdkz4QhSX2zI+RVaykRcmQyGCfjuFrlscn
Gc3a11Fvl1pOmL1Nz9jpWcguLjGpmdoWlFToGGfFyyD8wbCMtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO1+ycZ4/j5uzv+yT3lxUak9UA7uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZmNj
Y2RmOC1lNzcwLTRjNGMtYWJkMS1jOGI2MzIzODU5NGIvNjE3YzA5YTItYjc0YS0z
NDhhLWJiMWItMDY1ZTIyMTIzOTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2ZjY2NkZjgtZTc3MC00YzRjLWFi
ZDEtYzhiNjMyMzg1OTRiLzNmY2NjZGY4LWU3NzAtNGM0Yy1hYmQxLWM4YjYzMjM4
NTk0Yi5jcmwwHwYDVR0jBBgwFoAUeJRfTvj1o0JYuVXDwzkOF3DRE3UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZmNjY2RmOC1lNzcwLTRjNGMtYWJkMS1jOGI2
MzIzODU5NGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGV3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADIrBOCYML8yzQwuU2Bzvv61D3kRAYvgaybn7vtaBv47GmevaqZpiMVp
XqAK0NLE22h9/M/4qJwdiz6RSrvgvD4FkByCTSJrOOqX0u1caf5co61TrPhsx89O
SrjnbkHc8Lo7W5T8+UvF5/WNtAF4yhfmYzGF/wh5VqUODO3HpW0kl3mhYxV64Dhy
puAvXZAuz2TWD+63RZr6WDvvFaebJ/nYdypXIqtcq6ahRrq0JpzWSQr8v8ISkF8l
Ub41/48IE/2Jw2TRKOBtHoGRf3UaDARHmbqr5QegXfNRFAIvCiaofqz6HsSwKPuK
zLXfcgZrZK5JXanIhVnqhfNilvhIuzg=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:39:46 2025 by rpki-client