Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/3758c344-8618-3225-b26f-acd90e5ffeae.roa
File: 3758c344-8618-3225-b26f-acd90e5ffeae.roa (raw, json)
Hash identifier: qO3ZV98qqtc2PibvI5gnAiVZCia5Fu7X5h1AZBYceGA=
Subject key identifier: 50:11:27:EF:32:05:3C:B1:63:7D:FE:CC:01:9F:C4:E0:20:B3:96:17
Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial: 010D0C9F4328584930DE679935B40F2000BAD6C0
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/3758c344-8618-3225-b26f-acd90e5ffeae.roa
Signing time: Sat 15 Mar 2025 01:00:39 +0000
ROA not before: Sat 15 Mar 2025 01:00:39 +0000
ROA not after: Fri 13 Jun 2025 01:00:39 +0000
asID: 14618
IP address blocks: 192.175.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:de:67:99:35:b4:0f:20:00:ba:d6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Validity
Not Before: Mar 15 01:00:39 2025 GMT
Not After : Jun 13 01:00:39 2025 GMT
Subject: CN=c2dc3d67-33cf-4644-895a-bfa775f6ed5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1b:5d:ff:96:0a:db:30:11:03:c5:41:ac:a9:
1e:df:53:32:44:50:36:bc:23:e4:98:23:11:f4:27:
d6:76:41:1f:cb:fe:f9:8e:eb:02:47:e7:55:f6:71:
03:7f:ec:22:03:a9:f9:d1:85:16:3a:d9:d3:17:8a:
bf:c8:05:f6:11:3c:67:e5:1a:52:42:7f:86:d3:70:
af:3c:96:9f:95:0c:e0:89:6f:56:a7:d9:be:c3:e0:
92:be:9e:5f:75:63:df:6c:6e:31:26:2f:31:e5:97:
05:38:6a:19:1e:b0:a6:85:cd:be:8d:75:6c:f2:57:
b5:a5:f1:cb:42:20:99:1a:e8:ff:04:cc:82:b9:c9:
12:59:6a:f3:91:b9:02:f3:e1:62:09:32:02:fb:64:
fb:34:08:00:9b:0f:d3:db:13:a9:67:3b:1f:97:e0:
89:cd:90:b8:d2:31:65:44:ab:4e:44:07:a5:ba:f8:
38:06:23:06:e4:0e:f0:9b:69:05:ea:d8:53:d4:80:
13:71:33:67:bc:ac:cc:9b:ad:ac:a6:d8:5e:3e:07:
63:e6:be:4c:06:62:6d:74:0e:75:33:2f:fa:cb:cd:
c5:7f:4b:7c:fa:70:b9:09:44:ad:51:32:c2:d6:a3:
57:8f:6c:2d:e7:5d:ac:49:39:d9:d1:65:d6:bc:fd:
c0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:11:27:EF:32:05:3C:B1:63:7D:FE:CC:01:9F:C4:E0:20:B3:96:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/3758c344-8618-3225-b26f-acd90e5ffeae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
X509v3 Authority Key Identifier:
keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
sbgp-ipAddrBlock: critical
IPv4:
192.175.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:ca:82:df:ce:85:68:86:0e:cf:c8:e4:f6:4e:d3:58:8d:8a:
8b:76:e9:84:28:3b:f9:e5:b9:19:1c:10:cd:35:61:1b:ff:51:
07:58:6a:a6:66:c0:43:d2:9f:b2:d3:0a:e5:01:02:83:23:a6:
0d:74:fc:fe:40:f2:5a:b3:aa:9f:06:be:46:78:f4:4d:d7:fe:
b8:5c:48:a2:e2:48:d4:db:93:b6:6c:fb:cb:45:73:0d:f3:12:
43:d6:25:53:a3:a5:cd:3e:43:50:0c:45:e1:87:1f:89:d0:3d:
e1:4d:a5:07:6d:7a:3e:ae:73:bd:a3:0d:4b:9b:56:5e:0a:d6:
fe:59:81:9b:b1:6c:af:50:c6:df:9a:df:b6:cd:42:3a:12:21:
78:97:c7:59:f7:9e:7e:6f:18:14:fb:db:47:39:1d:ef:73:df:
1c:47:e4:14:bf:31:88:83:19:31:58:e1:32:e2:57:cb:be:2c:
83:99:95:f8:09:0b:d1:f9:c4:6d:82:80:0a:24:b3:87:7c:89:
5f:cb:0b:7f:6b:8c:de:1b:cb:b0:73:8e:c9:65:bf:70:d6:87:
2a:e6:9f:ce:1c:04:60:1b:87:65:96:12:2e:72:c6:32:d0:ca:
40:1a:c2:5b:74:79:b1:ca:45:4d:19:2c:42:bf:0c:5d:d8:e9:
e1:9e:73:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3meZNbQPIAC61sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1
YTA0MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk
YzJkYzNkNjctMzNjZi00NjQ0LTg5NWEtYmZhNzc1ZjZlZDVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxtd/5YK2zARA8VBrKke31MyRFA2vCPkmCMR
9CfWdkEfy/75jusCR+dV9nEDf+wiA6n50YUWOtnTF4q/yAX2ETxn5RpSQn+G03Cv
PJaflQzgiW9Wp9m+w+CSvp5fdWPfbG4xJi8x5ZcFOGoZHrCmhc2+jXVs8le1pfHL
QiCZGuj/BMyCuckSWWrzkbkC8+FiCTIC+2T7NAgAmw/T2xOpZzsfl+CJzZC40jFl
RKtORAeluvg4BiMG5A7wm2kF6thT1IATcTNnvKzMm62spthePgdj5r5MBmJtdA51
My/6y83Ff0t8+nC5CUStUTLC1qNXj2wt512sSTnZ0WXWvP3AOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFARJ+8yBTyxY33+zAGfxOAgs5YXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh
Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvMzc1OGMzNDQtODYxOC0z
MjI1LWIyNmYtYWNkOTBlNWZmZWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh
M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi
NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx
OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwK8DMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHzKgt/OhWiGDs/I5PZO01iNiot26YQoO/nluRkcEM01YRv/UQdYaqZm
wEPSn7LTCuUBAoMjpg10/P5A8lqzqp8GvkZ49E3X/rhcSKLiSNTbk7Zs+8tFcw3z
EkPWJVOjpc0+Q1AMReGHH4nQPeFNpQdtej6uc72jDUubVl4K1v5ZgZuxbK9Qxt+a
37bNQjoSIXiXx1n3nn5vGBT720c5He9z3xxH5BS/MYiDGTFY4TLiV8u+LIOZlfgJ
C9H5xG2CgAoks4d8iV/LC39rjN4by7Bzjsllv3DWhyrmn84cBGAbh2WWEi5yxjLQ
ykAawlt0ebHKRU0ZLEK/DF3Y6eGec1U=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:38:22 2025 by rpki-client