Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d6c9b4a-e364-3f50-b73c-8f68786ecd29.roa
File: 3d6c9b4a-e364-3f50-b73c-8f68786ecd29.roa (raw, json)
Hash identifier: Lg3stx5XqTY16QRD2Ng35r9m83YU1vMjjUD8Ir7Vsmk=
Subject key identifier: ED:55:87:50:BF:B9:68:9C:D3:C5:27:34:85:99:C7:86:5B:69:C6:AA
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB7A2C251FE7154F6B6B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d6c9b4a-e364-3f50-b73c-8f68786ecd29.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 0
IP address blocks: 198.133.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:7a:2c:25:1f:e7:15:4f:6b:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=c1084d72-d3ce-48db-b831-f3646e6a2dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:da:ff:e4:31:b6:2b:db:45:01:55:91:2b:43:
1e:4e:b0:1b:f7:28:d5:ff:44:89:1a:20:03:d2:10:
ca:83:8f:9e:aa:e9:e9:b3:29:a3:e5:5c:03:47:c3:
70:2b:f7:d8:b5:84:da:96:c5:ac:34:a2:fc:1f:a1:
90:d8:c4:79:fe:c2:94:96:31:b9:bc:30:0a:f5:bf:
f7:39:fd:78:da:13:2d:b2:6a:44:d5:9d:c9:6c:f9:
ad:a7:e0:34:b3:fd:96:da:23:1b:27:2b:81:d0:7e:
38:08:48:f1:74:1e:f3:df:bf:66:d7:79:e6:3e:b3:
87:0e:1a:fd:0b:73:15:b0:7b:0c:a9:ab:ec:be:38:
c2:0c:64:2d:60:a9:24:d7:91:ad:09:05:f3:3a:99:
6a:b1:a7:58:11:95:4b:ba:6d:a9:78:f7:b2:bf:46:
73:8c:5a:1e:07:14:1e:85:8f:aa:12:22:59:0a:f1:
af:c1:57:8e:38:2f:cc:f9:78:30:d9:c4:b0:6a:1a:
e2:eb:ef:66:ce:2d:82:d7:30:61:56:8e:81:c5:2d:
d8:53:25:fb:34:fd:fd:d8:09:d8:25:28:0e:ce:d5:
a1:e5:7f:25:cf:db:1d:52:fc:6d:f6:cf:57:53:30:
7f:9c:45:de:a3:20:56:8b:ed:c5:4f:8e:a5:1a:f5:
e0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:55:87:50:BF:B9:68:9C:D3:C5:27:34:85:99:C7:86:5B:69:C6:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d6c9b4a-e364-3f50-b73c-8f68786ecd29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
198.133.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:b6:1d:18:f1:95:85:37:8e:79:89:1f:37:97:03:97:52:da:
cb:eb:89:f3:89:d3:c9:15:b7:28:89:2f:9e:f2:8d:4d:3b:3a:
1a:84:eb:0b:92:22:56:ee:c4:ff:80:d8:ac:5a:e6:bb:5d:e2:
7c:79:7f:a1:2e:07:0b:8a:b3:51:0f:e0:ad:a8:ee:fa:c1:a4:
a3:7e:eb:47:ce:1a:7a:37:b3:c2:7b:8e:85:61:ed:99:98:e2:
98:72:e5:13:e9:41:60:4c:7a:9d:fa:fd:b3:d1:09:3c:8b:c3:
f7:b7:2a:f1:60:b1:55:aa:37:83:56:44:76:e7:ec:8a:52:48:
86:16:e3:46:40:f3:47:28:b8:ac:1b:83:f5:1d:85:c6:45:7f:
82:39:17:00:e0:3e:88:71:0e:75:7e:db:7b:08:01:cd:a4:4a:
71:e1:74:54:74:75:30:1d:da:60:e0:9d:e1:41:d3:22:ff:24:
93:a3:49:3c:4c:b4:6d:8a:68:3a:9f:2a:d0:f5:0b:86:68:aa:
15:46:99:c7:e7:c6:fe:51:0e:91:03:94:a8:1d:b2:02:55:c9:
35:96:45:3c:ae:1e:ba:27:69:3e:86:f3:79:31:a2:69:c9:5f:
ca:61:f3:58:3e:90:ab:12:6a:fe:ce:90:97:df:73:41:d8:dd:
6f:a3:56:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh863osJR/nFU9ra4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk
YzEwODRkNzItZDNjZS00OGRiLWI4MzEtZjM2NDZlNmEyZGJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Nr/5DG2K9tFAVWRK0MeTrAb9yjV/0SJGiAD
0hDKg4+equnpsymj5VwDR8NwK/fYtYTalsWsNKL8H6GQ2MR5/sKUljG5vDAK9b/3
Of142hMtsmpE1Z3JbPmtp+A0s/2W2iMbJyuB0H44CEjxdB7z379m13nmPrOHDhr9
C3MVsHsMqavsvjjCDGQtYKkk15GtCQXzOplqsadYEZVLum2pePeyv0ZzjFoeBxQe
hY+qEiJZCvGvwVeOOC/M+Xgw2cSwahri6+9mzi2C1zBhVo6BxS3YUyX7NP392AnY
JSgOztWh5X8lz9sdUvxt9s9XUzB/nEXeoyBWi+3FT46lGvXgBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO1Vh1C/uWic08UnNIWZx4ZbacaqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2Q2YzliNGEtZTM2NC0z
ZjUwLWI3M2MtOGY2ODc4NmVjZDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoVjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGe2HRjxlYU3jnmJHzeXA5dS2svrifOJ08kVtyiJL57yjU07OhqE6wuS
IlbuxP+A2Kxa5rtd4nx5f6EuBwuKs1EP4K2o7vrBpKN+60fOGno3s8J7joVh7ZmY
4phy5RPpQWBMep36/bPRCTyLw/e3KvFgsVWqN4NWRHbn7IpSSIYW40ZA80couKwb
g/UdhcZFf4I5FwDgPohxDnV+23sIAc2kSnHhdFR0dTAd2mDgneFB0yL/JJOjSTxM
tG2KaDqfKtD1C4ZoqhVGmcfnxv5RDpEDlKgdsgJVyTWWRTyuHronaT6G83kxomnJ
X8ph81g+kKsSav7OkJffc0HY3W+jVlM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:08 2025 by rpki-client