Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/71a6dee7-eaad-36d8-abc3-a0fc6c6c78ad.roa
File: 71a6dee7-eaad-36d8-abc3-a0fc6c6c78ad.roa (raw, json)
Hash identifier: Y2L/zLMhXHHXnklwgSlGcfwcpRSWkZKLkruty64rMkk=
Subject key identifier: CB:34:5E:F2:5D:74:8E:18:AD:0F:21:29:C2:6E:51:EF:48:64:15:86
Certificate issuer: /CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
Certificate serial: 010D0C9F432858494B6415E142B2FFFA87A28460
Authority key identifier: 58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/71a6dee7-eaad-36d8-abc3-a0fc6c6c78ad.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 19905
IP address blocks: 199.119.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:15:e1:42:b2:ff:fa:87:a2:84:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=440bdf53-9f1f-47f6-a040-cc17a67d9e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:44:71:28:e7:49:a6:24:38:59:d0:bf:89:b7:
cb:80:a8:f3:e1:de:45:86:70:e2:02:e9:34:88:32:
0f:6f:df:e0:8f:c7:41:fd:6e:c7:4b:dc:bf:a1:ca:
e6:0c:69:08:34:b7:83:d1:6e:76:72:e5:df:04:c7:
59:2c:5d:c3:3c:4d:2c:5a:89:bf:ad:d6:3a:ac:0f:
13:4f:3b:06:7b:d8:27:f9:2d:5a:5f:61:48:b6:bb:
51:e3:ea:7b:8e:e9:8f:31:13:a7:76:4c:ab:e7:04:
79:54:16:27:d7:68:c2:8e:97:de:78:6e:d6:ac:20:
37:b5:e0:3c:fc:fd:02:36:9d:9e:19:c0:1a:0b:2f:
57:22:e9:25:95:15:16:7c:5e:cf:5d:4f:f8:ae:cd:
5c:ef:c1:00:9b:c3:1d:c7:39:bd:38:1d:34:70:4f:
45:84:44:32:1f:7c:09:87:5e:ce:e9:98:15:d0:8e:
89:27:40:cb:b5:20:05:43:ae:02:5c:d8:49:e0:9b:
55:70:2b:38:25:f6:08:71:ff:94:ed:21:1c:84:a9:
e2:36:58:74:c6:75:2f:7c:11:d8:54:a5:e3:f4:29:
19:df:ed:d7:b7:35:ff:63:93:40:f5:3e:cc:6b:b4:
94:7b:ac:09:0c:ff:dd:75:8a:35:b4:50:f8:fd:7b:
e0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:34:5E:F2:5D:74:8E:18:AD:0F:21:29:C2:6E:51:EF:48:64:15:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/71a6dee7-eaad-36d8-abc3-a0fc6c6c78ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl
X509v3 Authority Key Identifier:
keyid:58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
sbgp-ipAddrBlock: critical
IPv4:
199.119.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:5f:78:46:84:4c:7e:7c:04:77:a7:0c:49:72:4c:f1:33:9f:
c1:01:70:19:58:ee:a1:36:ee:5b:70:05:91:b4:95:42:af:ca:
b2:6b:d5:4f:46:38:93:bb:a8:26:fe:54:8a:41:98:78:b9:0a:
ef:8b:c9:c7:fb:14:88:19:e5:9e:27:d1:0c:a7:97:f7:a0:b7:
a5:51:27:6c:d8:c9:7a:4d:23:ff:cf:82:cc:a8:a9:f3:ab:4f:
a6:24:16:ac:76:03:5d:c4:ee:d1:ae:93:55:22:ab:b7:3c:8d:
67:79:f9:e3:03:59:15:e5:63:63:7b:70:7e:cd:76:e3:bd:fc:
e0:fd:da:80:f4:4f:78:e3:a7:f6:77:f4:c6:d2:e0:87:ca:56:
ea:ca:b9:b7:ad:bf:c6:08:65:bc:54:ad:6a:48:db:ed:f5:50:
e5:eb:ac:e5:5f:14:be:5b:be:3d:01:a0:f3:4e:86:04:67:6e:
0b:f0:a9:03:b1:ce:73:f7:fc:02:48:6b:f2:48:19:29:6a:66:
48:07:3c:96:9e:0e:10:8d:76:01:a5:aa:87:05:a3:96:9e:b6:
51:52:4d:d1:f2:5f:d1:cd:a4:d9:0c:25:96:7d:b8:e0:af:d8:
c6:35:27:4b:f1:6e:e3:bb:52:c7:e0:3d:9d:bd:db:cb:a3:40:
0f:7a:2d:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZBXhQrL/+oeihGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U5YzRjYTMtMWRjNy00MmViLTg1NmUtZmQ5OWJiZTRm
NTZmMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk
NDQwYmRmNTMtOWYxZi00N2Y2LWEwNDAtY2MxN2E2N2Q5ZTgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApURxKOdJpiQ4WdC/ibfLgKjz4d5FhnDiAuk0
iDIPb9/gj8dB/W7HS9y/ocrmDGkINLeD0W52cuXfBMdZLF3DPE0sWom/rdY6rA8T
TzsGe9gn+S1aX2FItrtR4+p7jumPMROndkyr5wR5VBYn12jCjpfeeG7WrCA3teA8
/P0CNp2eGcAaCy9XIukllRUWfF7PXU/4rs1c78EAm8Mdxzm9OB00cE9FhEQyH3wJ
h17O6ZgV0I6JJ0DLtSAFQ64CXNhJ4JtVcCs4JfYIcf+U7SEchKniNlh0xnUvfBHY
VKXj9CkZ3+3XtzX/Y5NA9T7Ma7SUe6wJDP/ddYo1tFD4/XvgxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMs0XvJddI4YrQ8hKcJuUe9IZBWGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ZTlj
NGNhMy0xZGM3LTQyZWItODU2ZS1mZDk5YmJlNGY1NmYvNzFhNmRlZTctZWFhZC0z
NmQ4LWFiYzMtYTBmYzZjNmM3OGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2U5YzRjYTMtMWRjNy00MmViLTg1
NmUtZmQ5OWJiZTRmNTZmLzdlOWM0Y2EzLTFkYzctNDJlYi04NTZlLWZkOTliYmU0
ZjU2Zi5jcmwwHwYDVR0jBBgwFoAUWD7pxA2Q0bK1HzDfDQ7zvT1hzaIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83ZTljNGNhMy0xZGM3LTQyZWItODU2ZS1mZDk5
YmJlNGY1NmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx3dEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFVfeEaETH58BHenDElyTPEzn8EBcBlY7qE27ltwBZG0lUKvyrJr1U9G
OJO7qCb+VIpBmHi5Cu+Lycf7FIgZ5Z4n0Qynl/egt6VRJ2zYyXpNI//PgsyoqfOr
T6YkFqx2A13E7tGuk1Uiq7c8jWd5+eMDWRXlY2N7cH7NduO9/OD92oD0T3jjp/Z3
9MbS4IfKVurKubetv8YIZbxUrWpI2+31UOXrrOVfFL5bvj0BoPNOhgRnbgvwqQOx
znP3/AJIa/JIGSlqZkgHPJaeDhCNdgGlqocFo5aetlFSTdHyX9HNpNkMJZZ9uOCv
2MY1J0vxbuO7UsfgPZ2928ujQA96LRA=
-----END CERTIFICATE-----
Generated at Wed Apr 9 05:08:29 2025 by rpki-client