Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/5541f7e0-be22-3912-8530-ba893395da94.roa
File: 5541f7e0-be22-3912-8530-ba893395da94.roa (raw, json)
Hash identifier: XjYFyh7ULCvT04rX4bxVpDExd+2OlZdUtaerCZCasXE=
Subject key identifier: 16:84:2A:BB:71:1D:01:C1:FC:79:86:47:4C:9B:C1:50:31:F1:7A:F6
Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Certificate serial: 010D0C9F43285848E9CBD9F99EA4CE114B950940
Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/5541f7e0-be22-3912-8530-ba893395da94.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 1206
IP address blocks: 192.101.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:d9:f9:9e:a4:ce:11:4b:95:09:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=62d8d1d8-e88f-42f7-a32f-574fbb61920b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:14:26:15:02:03:69:3d:d8:2d:d3:b4:fa:6c:
19:69:9b:b8:7f:ed:47:de:20:dc:a9:f8:29:32:09:
b4:c2:4f:68:c7:62:11:e9:70:3d:06:64:33:a1:27:
fd:57:dc:44:92:da:05:40:8b:8e:fd:a1:ca:a1:8f:
f3:05:89:db:ad:ae:c7:4d:f5:2e:8e:45:99:86:ff:
6d:6f:d3:33:4b:1c:a0:43:ac:30:34:91:63:99:d6:
ad:83:8d:e9:08:18:6e:78:c1:6f:bf:91:81:87:e5:
20:ae:21:04:14:c8:c4:77:47:b3:da:6b:a2:06:e9:
30:b7:53:46:44:41:9c:62:eb:dc:d5:d9:9c:f5:c8:
39:64:29:ef:d6:c9:f9:64:9d:a3:ef:e3:a8:39:ff:
d6:1c:38:34:bb:cb:d7:fa:f6:0a:d2:f7:13:f3:ff:
d6:72:d3:cf:7e:2e:81:8a:9c:5a:c0:b0:d8:58:10:
b9:a6:90:8f:4b:14:0b:b6:e7:26:cf:7b:33:b1:e8:
a7:06:57:b7:1f:e0:2d:c1:a9:38:9b:a0:bf:c6:7e:
f3:e6:71:61:bf:96:f9:7b:83:22:48:63:a6:19:7b:
d8:8d:7a:ed:ff:35:f8:08:29:d6:79:b9:bf:ca:aa:
2e:c9:d4:d1:7a:eb:98:eb:01:1e:c8:1a:f1:d7:3f:
f5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:84:2A:BB:71:1D:01:C1:FC:79:86:47:4C:9B:C1:50:31:F1:7A:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/5541f7e0-be22-3912-8530-ba893395da94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl
X509v3 Authority Key Identifier:
keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.101.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:61:cc:1f:95:39:66:15:cd:f0:22:81:87:8e:2b:e1:72:83:
1b:9d:6f:1c:d5:fa:cc:53:c8:22:1d:27:3f:89:9a:24:8b:3f:
cf:67:9a:30:9d:76:4a:78:9b:c1:70:77:d7:1f:b9:3b:7e:13:
29:e7:57:34:12:d6:22:d0:3f:c9:e6:3c:52:90:1c:dc:bb:77:
dc:a4:6c:d5:f9:36:4f:dc:7b:f5:c3:66:2b:97:9c:a2:5a:ec:
fa:be:34:f4:8d:eb:72:ee:7b:6d:e7:18:d9:6a:70:26:78:1e:
28:08:9f:67:22:b7:9d:14:5f:a1:fd:9e:55:c9:e3:9a:33:bb:
be:1d:6a:c8:e3:6a:6a:91:5a:5d:cb:1e:bf:4e:5f:ca:03:1d:
7c:d4:59:7e:64:fe:00:6d:99:fd:af:64:7c:78:1d:1d:dc:fc:
17:f4:09:66:d9:c4:9c:51:80:fb:18:85:ad:0a:15:4c:80:ec:
ca:ff:36:df:6a:8b:c3:ea:36:ae:5b:fc:ef:ba:6c:b0:b8:98:
80:79:d2:68:62:f0:a3:5d:78:52:30:2c:a1:67:37:e8:c9:b2:
1d:88:a1:f3:cf:b4:5b:29:1c:2e:1e:17:39:d5:9d:a3:d9:1a:
5b:6c:28:68:e9:66:64:b4:39:03:e4:a1:5a:ca:ff:99:2a:e8:
07:92:a5:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy9n5nqTOEUuVCUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz
MGQyMB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk
NjJkOGQxZDgtZTg4Zi00MmY3LWEzMmYtNTc0ZmJiNjE5MjBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxQmFQIDaT3YLdO0+mwZaZu4f+1H3iDcqfgp
Mgm0wk9ox2IR6XA9BmQzoSf9V9xEktoFQIuO/aHKoY/zBYnbra7HTfUujkWZhv9t
b9MzSxygQ6wwNJFjmdatg43pCBhueMFvv5GBh+UgriEEFMjEd0ez2muiBukwt1NG
REGcYuvc1dmc9cg5ZCnv1sn5ZJ2j7+OoOf/WHDg0u8vX+vYK0vcT8//WctPPfi6B
ipxawLDYWBC5ppCPSxQLtucmz3szseinBle3H+Atwak4m6C/xn7z5nFhv5b5e4Mi
SGOmGXvYjXrt/zX4CCnWebm/yqouydTReuuY6wEeyBrx1z/1PQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBaEKrtxHQHB/HmGR0ybwVAx8Xr2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4
YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvNTU0MWY3ZTAtYmUyMi0z
OTEyLTg1MzAtYmE4OTMzOTVkYTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0
OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz
MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw
MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGWMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIVhzB+VOWYVzfAigYeOK+FygxudbxzV+sxTyCIdJz+JmiSLP89nmjCd
dkp4m8Fwd9cfuTt+EynnVzQS1iLQP8nmPFKQHNy7d9ykbNX5Nk/ce/XDZiuXnKJa
7Pq+NPSN63Lue23nGNlqcCZ4HigIn2cit50UX6H9nlXJ45ozu74dasjjamqRWl3L
Hr9OX8oDHXzUWX5k/gBtmf2vZHx4HR3c/Bf0CWbZxJxRgPsYha0KFUyA7Mr/Nt9q
i8PqNq5b/O+6bLC4mIB50mhi8KNdeFIwLKFnN+jJsh2IofPPtFspHC4eFznVnaPZ
GltsKGjpZmS0OQPkoVrK/5kq6AeSpbk=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:29 2025 by rpki-client