Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/d68f0325-6ddc-3af8-8f80-76f8c3ca8584.roa
File: d68f0325-6ddc-3af8-8f80-76f8c3ca8584.roa (raw, json)
Hash identifier: n0kklZpvDDgNCA461h+jymNCH4lQ+gv8iVuQJWXuFeE=
Subject key identifier: BB:A2:0D:15:48:40:9A:74:92:BF:6E:D1:A9:2E:A9:BA:9A:30:9B:B2
Certificate issuer: /CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
Certificate serial: 010D0C9F4328584894A5E5058B7B029163958400
Authority key identifier: 5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/d68f0325-6ddc-3af8-8f80-76f8c3ca8584.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 14618
IP address blocks: 198.176.124.0/24 maxlen: 24
198.176.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:e5:05:8b:7b:02:91:63:95:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=18c0f043-4d5b-49c7-b6f4-e557f93c897b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:04:2f:0b:7c:cb:1a:db:78:83:6f:77:38:db:
2d:5a:26:e2:0c:7f:5a:c3:25:3a:10:e6:af:01:03:
5b:ce:ad:f8:7a:30:2c:30:b9:71:70:fb:07:e9:21:
c7:51:58:e1:39:54:e5:ea:06:e8:b2:c2:b6:5b:5b:
4a:2b:77:f7:1e:68:e2:9b:e6:f2:88:68:0a:68:08:
7b:60:80:77:f8:fd:67:87:9c:59:f6:cd:41:9e:68:
0a:86:41:38:de:35:a7:78:27:7b:b2:44:6d:80:1a:
dd:44:ff:e0:37:2c:16:e4:23:a5:4c:36:74:6c:46:
f0:a1:14:0e:ed:68:0c:9b:77:3e:05:a1:0c:ed:15:
94:14:85:92:34:f1:07:0e:cd:79:e7:f9:4d:78:b4:
50:4b:95:f3:9c:81:d2:99:8b:57:b6:ca:6c:36:62:
ae:2a:02:2d:74:00:1f:3c:b6:1d:02:45:c9:6d:d0:
3a:b7:f1:88:7a:40:64:06:f9:e4:4c:ac:26:93:39:
18:84:f3:67:98:69:30:d3:6e:e2:1f:3f:53:3a:5e:
48:b4:01:e0:6a:96:6b:4e:a9:a1:f8:4e:2a:96:02:
86:16:16:c6:30:91:00:88:32:81:8e:1b:c7:ac:8e:
79:4f:be:ef:0e:6c:44:21:87:95:02:83:92:63:5c:
70:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A2:0D:15:48:40:9A:74:92:BF:6E:D1:A9:2E:A9:BA:9A:30:9B:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/d68f0325-6ddc-3af8-8f80-76f8c3ca8584.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.crl
X509v3 Authority Key Identifier:
keyid:5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.176.124.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:eb:5a:bb:b4:f2:7f:38:2c:db:43:13:41:a9:b2:c9:5e:95:
6b:48:9e:cf:6e:63:82:59:ea:20:35:86:15:a2:ad:e3:44:15:
7c:86:da:63:93:34:60:de:65:8c:79:d8:e8:75:32:3a:e4:2f:
53:7f:df:4e:c0:53:89:72:d3:2e:13:67:17:41:cb:7a:76:c5:
f3:62:59:e0:fa:05:e0:60:fc:11:38:70:f4:05:28:a3:fd:86:
a5:be:80:79:fb:45:8c:00:89:c9:c6:1e:fa:f0:a3:29:4e:23:
73:84:dd:3f:c2:88:33:74:6b:98:d0:92:1b:52:d7:59:86:67:
91:57:b0:b5:35:d4:29:81:f2:2e:13:e8:13:3c:00:0d:5d:fb:
31:6b:b1:69:a9:4f:fd:9a:60:9c:4d:b9:fa:29:c0:ed:ac:5f:
d0:d7:2c:30:04:09:14:78:a2:ae:46:e7:22:b7:36:ef:3e:38:
af:f5:f5:e3:58:88:c8:ad:7b:40:c4:be:b8:15:46:12:70:ae:
e3:2a:46:dd:e4:82:90:b1:50:35:9d:0f:70:98:53:c1:c6:67:
bf:82:8e:3d:96:cf:44:a9:7b:dc:6d:58:07:ed:01:36:bd:52:
8f:55:bd:a7:73:5c:26:b5:98:b6:b8:b6:29:55:15:46:a4:c2:
2e:ef:21:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiUpeUFi3sCkWOVhAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTYyMzkxNDktZmEwYi00MzI1LWI4ZGMtZmQwZTI1MDQ1
NGMyMB4XDTI1MDExODAyMDAzOFoXDTI1MDQxODAxMDAzOFowLzEtMCsGA1UEAxMk
MThjMGYwNDMtNGQ1Yi00OWM3LWI2ZjQtZTU1N2Y5M2M4OTdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgQvC3zLGtt4g293ONstWibiDH9awyU6EOav
AQNbzq34ejAsMLlxcPsH6SHHUVjhOVTl6gbossK2W1tKK3f3Hmjim+byiGgKaAh7
YIB3+P1nh5xZ9s1BnmgKhkE43jWneCd7skRtgBrdRP/gNywW5COlTDZ0bEbwoRQO
7WgMm3c+BaEM7RWUFIWSNPEHDs155/lNeLRQS5XznIHSmYtXtspsNmKuKgItdAAf
PLYdAkXJbdA6t/GIekBkBvnkTKwmkzkYhPNnmGkw027iHz9TOl5ItAHgapZrTqmh
+E4qlgKGFhbGMJEAiDKBjhvHrI55T77vDmxEIYeVAoOSY1xwFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLuiDRVIQJp0kr9u0akuqbqaMJuyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNjIz
OTE0OS1mYTBiLTQzMjUtYjhkYy1mZDBlMjUwNDU0YzIvZDY4ZjAzMjUtNmRkYy0z
YWY4LThmODAtNzZmOGMzY2E4NTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTYyMzkxNDktZmEwYi00MzI1LWI4
ZGMtZmQwZTI1MDQ1NGMyL2E2MjM5MTQ5LWZhMGItNDMyNS1iOGRjLWZkMGUyNTA0
NTRjMi5jcmwwHwYDVR0jBBgwFoAUXhqfqO2JLdZA54wAofK0/3LXMWswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hNjIzOTE0OS1mYTBiLTQzMjUtYjhkYy1mZDBl
MjUwNDU0YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxrB8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI7rWru08n84LNtDE0GpsslelWtIns9uY4JZ6iA1hhWireNEFXyG2mOT
NGDeZYx52Oh1MjrkL1N/307AU4ly0y4TZxdBy3p2xfNiWeD6BeBg/BE4cPQFKKP9
hqW+gHn7RYwAicnGHvrwoylOI3OE3T/CiDN0a5jQkhtS11mGZ5FXsLU11CmB8i4T
6BM8AA1d+zFrsWmpT/2aYJxNufopwO2sX9DXLDAECRR4oq5G5yK3Nu8+OK/19eNY
iMite0DEvrgVRhJwruMqRt3kgpCxUDWdD3CYU8HGZ7+Cjj2Wz0Spe9xtWAftATa9
Uo9VvadzXCa1mLa4tilVFUakwi7vIQM=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:32:43 2025 by rpki-client