Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c656b6b-cda2-308f-9d04-80808e67e293.roa
File: 3c656b6b-cda2-308f-9d04-80808e67e293.roa (raw, json)
Hash identifier: NMN6aI2coceuff7O6iNEUYf93Ij6FMCnw3EDYD6hDr4=
Subject key identifier: EB:E9:FE:5B:55:E7:14:5A:D2:B3:15:43:D3:D2:F9:D0:D7:32:D6:D6
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C5822622848F6FAF6C63AC80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c656b6b-cda2-308f-9d04-80808e67e293.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 216.58.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:26:22:84:8f:6f:af:6c:63:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=686432e8-9a83-476d-8313-100f4f0fcd3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:98:60:ed:52:6b:24:2c:99:19:b0:bb:3b:02:
70:bc:1d:03:83:40:06:c6:f9:e3:2f:5e:57:fd:f6:
d3:02:cc:20:cb:cb:f9:ac:d0:5b:e2:b6:02:b5:ea:
45:cc:65:91:e5:4c:2e:e7:f3:11:b3:9e:74:68:b3:
ef:3b:a2:b7:77:1c:09:0f:64:ba:92:11:e5:fb:58:
d3:3f:f2:2a:e2:72:be:e7:e5:95:25:b1:c6:d6:17:
ad:96:7c:4d:44:dd:47:93:b5:b7:e4:93:4b:5d:06:
01:6f:6a:ae:02:13:ce:55:ed:4e:d6:45:bc:1a:d4:
40:7d:12:82:d6:c7:35:2b:4e:bc:84:14:b0:d3:2b:
b5:ea:2b:a0:78:8b:45:a3:3f:d0:28:67:fd:4b:0d:
30:70:ce:18:b5:74:56:17:e1:0d:d3:5b:aa:ef:a7:
d7:71:63:61:e1:74:a5:2a:b7:63:73:7a:b8:31:2d:
f0:59:d3:f7:62:e2:1b:f4:69:07:1f:c4:44:62:bc:
6a:50:65:03:16:e8:f9:d6:0c:8c:8a:f1:13:d5:e5:
93:18:fb:da:fb:d6:da:ef:88:bd:c8:84:1b:c5:2a:
1d:17:0c:57:bd:3a:38:18:c6:e0:d1:e6:12:4f:b0:
f3:84:58:2d:af:c3:a3:24:17:1f:c6:a9:e5:52:3a:
f9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E9:FE:5B:55:E7:14:5A:D2:B3:15:43:D3:D2:F9:D0:D7:32:D6:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c656b6b-cda2-308f-9d04-80808e67e293.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
216.58.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:79:5a:c9:cf:5d:3f:35:c0:d8:7f:ec:60:9e:15:f3:ca:9d:
8e:98:87:93:18:ee:68:e6:0e:ac:a9:2d:cb:07:49:a3:0e:08:
a7:9e:e2:b2:e5:a6:2c:ca:61:a6:12:90:c2:17:d4:64:b3:5a:
b0:56:d5:5f:27:68:60:e3:c0:51:70:41:35:ff:fe:c6:1d:b2:
a6:81:4b:9a:98:57:a1:6a:4d:44:9f:56:35:7f:ff:1b:f7:49:
35:49:5e:cb:ec:a2:43:49:2e:c1:20:1e:4d:f3:e9:49:12:12:
1e:bc:0d:47:14:a7:7a:47:a6:3d:9c:61:c3:98:85:33:88:26:
d5:df:1b:e5:66:c1:9a:5c:58:53:98:36:6d:fd:07:8f:e3:27:
8b:b8:55:16:9c:0a:d2:ad:5d:d4:54:33:00:65:fc:af:40:8a:
79:81:3a:56:3e:e0:57:cf:6b:52:c5:de:2c:ee:b4:fb:bd:18:
68:22:79:2a:56:06:c6:d7:39:31:ee:10:d7:d0:c1:f2:f4:10:
80:28:39:39:a8:5f:bf:d7:36:de:b2:26:6a:3d:08:48:29:f8:
af:5c:79:ab:df:34:a9:33:8c:05:b7:71:e1:c8:c6:54:0f:8f:
ba:cb:b4:a1:67:47:bf:0a:3b:1a:7e:6a:ab:90:86:d3:e0:83:
97:cb:42:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgiYihI9vr2xjrIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
Njg2NDMyZTgtOWE4My00NzZkLTgzMTMtMTAwZjRmMGZjZDNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtphg7VJrJCyZGbC7OwJwvB0Dg0AGxvnjL15X
/fbTAswgy8v5rNBb4rYCtepFzGWR5Uwu5/MRs550aLPvO6K3dxwJD2S6khHl+1jT
P/Iq4nK+5+WVJbHG1hetlnxNRN1Hk7W35JNLXQYBb2quAhPOVe1O1kW8GtRAfRKC
1sc1K068hBSw0yu16iugeItFoz/QKGf9Sw0wcM4YtXRWF+EN01uq76fXcWNh4XSl
Krdjc3q4MS3wWdP3YuIb9GkHH8REYrxqUGUDFuj51gyMivET1eWTGPva+9ba74i9
yIQbxSodFwxXvTo4GMbg0eYST7DzhFgtr8OjJBcfxqnlUjr50QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOvp/ltV5xRa0rMVQ9PS+dDXMtbWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2M2NTZiNmItY2RhMi0z
MDhmLTlkMDQtODA4MDhlNjdlMjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2DrAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKt5WsnPXT81wNh/7GCeFfPKnY6Yh5MY7mjmDqypLcsHSaMOCKee4rLl
pizKYaYSkMIX1GSzWrBW1V8naGDjwFFwQTX//sYdsqaBS5qYV6FqTUSfVjV//xv3
STVJXsvsokNJLsEgHk3z6UkSEh68DUcUp3pHpj2cYcOYhTOIJtXfG+VmwZpcWFOY
Nm39B4/jJ4u4VRacCtKtXdRUMwBl/K9AinmBOlY+4FfPa1LF3izutPu9GGgieSpW
BsbXOTHuENfQwfL0EIAoOTmoX7/XNt6yJmo9CEgp+K9ceavfNKkzjAW3ceHIxlQP
j7rLtKFnR78KOxp+aquQhtPgg5fLQn0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:36 2025 by rpki-client