Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/394f8688-f311-3954-970a-3702e916c381.roa
File: 394f8688-f311-3954-970a-3702e916c381.roa (raw, json)
Hash identifier: aVk6nKR+k6HCxeTFsvqB5kV1aKZ8r6L0LHg3f6M9/IA=
Subject key identifier: 0F:BA:86:0C:94:F6:9A:06:C2:F1:49:F8:8A:9A:E4:92:9D:F5:83:48
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C581798D45B3FC5505932580
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/394f8688-f311-3954-970a-3702e916c381.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 199.36.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:79:8d:45:b3:fc:55:05:93:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=6f306fb9-d812-41f8-8e3d-a804c5d5a32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b7:19:e4:2d:92:67:43:6d:1b:68:dc:76:8c:
4b:6f:c1:9b:04:c7:dc:f7:a7:ab:dc:9f:12:08:d6:
18:e0:5f:4d:21:13:5b:81:e4:7b:16:f8:57:25:ba:
67:2a:06:52:9d:83:ed:b9:88:04:24:bb:0b:37:8b:
87:ca:d3:07:e4:a4:c7:6f:14:ec:d0:bf:0b:4b:f8:
77:a7:9a:0c:1e:92:82:4a:97:34:99:52:9d:18:44:
4c:ee:2e:0b:9c:a6:95:b6:80:9a:56:fe:bb:a0:9b:
31:4f:65:26:4e:3c:50:9b:fa:c9:5c:c6:3c:0d:22:
45:69:a4:57:b0:77:e3:76:d7:1f:0d:cd:b3:35:56:
73:ff:98:38:97:6f:15:5a:8b:97:13:0c:9c:0c:28:
e8:47:bc:cf:1b:87:f8:89:87:56:cd:61:cc:99:a7:
f4:14:72:91:12:71:32:85:ea:e9:2f:49:96:70:a9:
fb:95:ea:52:d5:21:08:f7:cd:92:45:2c:4a:79:ab:
ba:df:27:72:2c:2d:b7:d4:3e:81:f5:45:c6:a7:25:
07:56:da:2c:1f:ef:12:98:d5:60:9f:dc:30:fd:56:
8b:60:34:a4:38:33:b2:91:0b:dc:62:07:0f:b6:d3:
17:77:a4:b2:7d:81:60:82:04:1c:c8:77:43:80:5d:
5d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BA:86:0C:94:F6:9A:06:C2:F1:49:F8:8A:9A:E4:92:9D:F5:83:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/394f8688-f311-3954-970a-3702e916c381.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
199.36.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:a0:3d:0f:a0:e3:e1:62:a3:cf:94:40:57:76:1b:f6:8f:8a:
ce:18:8d:37:d5:64:9c:96:08:2a:59:94:47:9c:93:d6:b1:24:
0b:f8:48:b3:e8:7a:b2:73:15:e5:65:24:56:49:7b:cd:58:b2:
b7:0b:e5:fc:04:7c:4e:57:b1:a4:c9:60:a5:fb:c2:cd:82:ba:
e7:ed:86:22:6f:3b:fd:d4:2c:68:09:ab:41:4a:3f:13:9a:68:
c5:62:61:5d:76:64:10:be:42:74:0f:c8:20:dc:d0:cf:55:1e:
0c:8a:71:46:97:d6:ac:30:bd:1e:77:90:3f:fd:7c:ae:36:0b:
88:5f:51:6e:0a:f9:3c:5e:a2:e6:b5:dd:69:6b:6e:d1:ba:25:
68:4a:21:ee:49:44:9d:ac:2b:39:06:fd:c2:04:db:3a:9b:22:
b3:9c:e0:89:48:66:38:32:dd:0f:5e:ff:37:c0:36:80:92:3a:
44:8b:51:2a:09:66:01:ea:dd:bf:5d:c5:8b:4b:7b:fb:22:53:
a7:04:8d:e4:b3:49:c8:e4:ea:bc:ac:55:c8:a6:13:17:2b:00:
d0:27:00:81:ea:9e:e1:5b:90:26:84:fe:84:9a:b1:52:ec:fe:
1a:16:35:d8:4b:8f:e8:8d:b5:38:fd:c6:0f:fc:01:6e:13:c0:
aa:99:25:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXmNRbP8VQWTJYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
NmYzMDZmYjktZDgxMi00MWY4LThlM2QtYTgwNGM1ZDVhMzJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7cZ5C2SZ0NtG2jcdoxLb8GbBMfc96er3J8S
CNYY4F9NIRNbgeR7FvhXJbpnKgZSnYPtuYgEJLsLN4uHytMH5KTHbxTs0L8LS/h3
p5oMHpKCSpc0mVKdGERM7i4LnKaVtoCaVv67oJsxT2UmTjxQm/rJXMY8DSJFaaRX
sHfjdtcfDc2zNVZz/5g4l28VWouXEwycDCjoR7zPG4f4iYdWzWHMmaf0FHKREnEy
herpL0mWcKn7lepS1SEI982SRSxKeau63ydyLC231D6B9UXGpyUHVtosH+8SmNVg
n9ww/VaLYDSkODOykQvcYgcPttMXd6SyfYFgggQcyHdDgF1dywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA+6hgyU9poGwvFJ+Iqa5JKd9YNIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzk0Zjg2ODgtZjMxMS0z
OTU0LTk3MGEtMzcwMmU5MTZjMzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxySdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADqgPQ+g4+Fio8+UQFd2G/aPis4YjTfVZJyWCCpZlEeck9axJAv4SLPo
erJzFeVlJFZJe81YsrcL5fwEfE5XsaTJYKX7ws2CuufthiJvO/3ULGgJq0FKPxOa
aMViYV12ZBC+QnQPyCDc0M9VHgyKcUaX1qwwvR53kD/9fK42C4hfUW4K+Txeoua1
3WlrbtG6JWhKIe5JRJ2sKzkG/cIE2zqbIrOc4IlIZjgy3Q9e/zfANoCSOkSLUSoJ
ZgHq3b9dxYtLe/siU6cEjeSzScjk6rysVcimExcrANAnAIHqnuFbkCaE/oSasVLs
/hoWNdhLj+iNtTj9xg/8AW4TwKqZJS0=
-----END CERTIFICATE-----
Generated at Fri Apr 4 09:04:37 2025 by rpki-client