Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/651543bd-02d0-3f0e-8d8b-98378be41fbc.roa
File: 651543bd-02d0-3f0e-8d8b-98378be41fbc.roa (raw, json)
Hash identifier: cKrCnWal1msI7I1qgxgRYCIL0E5zCTEh/6EopSalBlg=
Subject key identifier: D0:2A:04:E9:3A:C5:24:DC:8B:34:DD:26:F9:9F:9B:4F:AB:71:E9:7B
Certificate issuer: /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial: 010D0C9F432858488DAB48B83713F6638D5A3F00
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/651543bd-02d0-3f0e-8d8b-98378be41fbc.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 36103
IP address blocks: 198.135.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:48:b8:37:13:f6:63:8d:5a:3f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=30e30b4e-1a27-460e-af18-c921a0470266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:96:1e:eb:50:6e:a3:c7:a0:e5:7d:f6:4b:12:
60:89:6e:bb:3c:3a:9e:f4:de:2e:6d:ff:71:00:9b:
59:06:2f:af:e4:34:2e:20:6d:34:19:1d:e5:5b:f0:
1e:dd:9e:24:50:d6:63:c4:bb:26:ce:98:82:fe:49:
92:af:a9:79:36:73:d8:59:90:68:50:08:f4:be:d8:
ea:43:d8:62:5f:ec:41:5a:9e:b6:78:3c:09:fc:90:
ea:94:76:2a:cf:b4:26:dc:64:7e:82:07:38:55:5e:
32:0e:c3:9a:92:4b:16:23:ac:a0:9e:14:4b:f3:d4:
54:b8:68:4a:99:ba:8f:df:d8:8a:cd:22:5b:67:a2:
cf:2c:17:9a:4e:e0:de:0a:94:86:36:83:94:00:f0:
79:0b:5e:93:56:2f:5f:0c:dc:f1:27:28:6f:18:ba:
c6:df:f7:e9:81:98:62:b9:a9:ac:02:cb:2c:56:e6:
99:80:5a:05:dc:33:7c:48:3b:d2:9d:f1:2c:73:81:
22:a5:23:98:6d:b5:2b:16:67:f6:81:00:3d:9f:09:
4b:a7:52:e5:79:a4:de:4f:be:bd:bd:51:72:73:68:
a6:4c:9c:73:f6:63:2d:78:0e:c5:0a:17:ff:b8:28:
04:9e:b9:1d:ad:04:e8:53:32:bc:3f:1f:ae:e2:4f:
7c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2A:04:E9:3A:C5:24:DC:8B:34:DD:26:F9:9F:9B:4F:AB:71:E9:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/651543bd-02d0-3f0e-8d8b-98378be41fbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
X509v3 Authority Key Identifier:
keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
sbgp-ipAddrBlock: critical
IPv4:
198.135.172.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:99:0c:55:61:e4:7c:8a:1f:24:45:61:3d:f1:0f:62:ae:7d:
14:be:fe:b3:b3:cd:e9:f9:b8:c1:ad:e9:67:ff:96:7e:3f:21:
d8:5d:89:b0:86:6a:a7:cd:7d:9c:53:84:9b:33:06:2b:e4:20:
cd:21:97:65:ac:f1:54:8a:1a:54:9b:e8:a5:79:7f:b2:ca:e0:
85:82:b6:89:f5:38:ba:63:ef:4c:e2:81:61:4b:b4:4d:28:49:
c8:84:45:5f:52:7c:7c:4c:a2:00:49:1e:00:d0:2c:20:ca:40:
6e:6c:52:24:df:03:10:87:3a:67:94:c1:8b:69:71:6e:3b:6d:
44:b1:6c:55:9f:73:5f:d5:7f:f7:17:8e:e6:90:f0:3c:f9:f2:
29:77:46:e9:67:0e:10:22:12:53:d0:df:b3:20:c5:7d:04:d4:
f6:9f:56:5f:27:39:27:bb:df:f0:60:e7:b9:5e:ad:33:88:13:
b3:57:1e:fc:2b:61:27:1d:b7:92:06:d5:0c:54:d5:2d:00:fa:
7a:9b:6d:75:a9:95:ee:cf:65:35:e8:01:52:2a:3f:24:c2:db:
90:06:b8:cb:00:30:7d:c1:b0:9b:04:53:01:1a:84:68:9b:c4:
6c:c2:6d:c9:a5:ce:31:54:1b:e4:02:d5:08:59:c3:ff:7c:c6:
46:34:aa:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq0i4NxP2Y41aPwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmE4YTZmNzktMDhmZi00NTEyLTlmM2UtNThjNDJhODRl
ZDI1MB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk
MzBlMzBiNGUtMWEyNy00NjBlLWFmMTgtYzkyMWEwNDcwMjY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5Ye61Buo8eg5X32SxJgiW67PDqe9N4ubf9x
AJtZBi+v5DQuIG00GR3lW/Ae3Z4kUNZjxLsmzpiC/kmSr6l5NnPYWZBoUAj0vtjq
Q9hiX+xBWp62eDwJ/JDqlHYqz7Qm3GR+ggc4VV4yDsOakksWI6ygnhRL89RUuGhK
mbqP39iKzSJbZ6LPLBeaTuDeCpSGNoOUAPB5C16TVi9fDNzxJyhvGLrG3/fpgZhi
uamsAsssVuaZgFoF3DN8SDvSnfEsc4EipSOYbbUrFmf2gQA9nwlLp1LleaTeT769
vVFyc2imTJxz9mMteA7FChf/uCgEnrkdrQToUzK8Px+u4k98qQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNAqBOk6xSTcizTdJvmfm0+rcel7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82YThh
NmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0MmE4NGVkMjUvNjUxNTQzYmQtMDJkMC0z
ZjBlLThkOGItOTgzNzhiZTQxZmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNmE4YTZmNzktMDhmZi00NTEyLTlm
M2UtNThjNDJhODRlZDI1LzZhOGE2Zjc5LTA4ZmYtNDUxMi05ZjNlLTU4YzQyYTg0
ZWQyNS5jcmwwHwYDVR0jBBgwFoAUwsB6azjvqoFVWA83c9qfk0ges38wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82YThhNmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0
MmE4NGVkMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxoesMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIeZDFVh5HyKHyRFYT3xD2KufRS+/rOzzen5uMGt6Wf/ln4/IdhdibCG
aqfNfZxThJszBivkIM0hl2Ws8VSKGlSb6KV5f7LK4IWCton1OLpj70zigWFLtE0o
SciERV9SfHxMogBJHgDQLCDKQG5sUiTfAxCHOmeUwYtpcW47bUSxbFWfc1/Vf/cX
juaQ8Dz58il3RulnDhAiElPQ37MgxX0E1PafVl8nOSe73/Bg57lerTOIE7NXHvwr
YScdt5IG1QxU1S0A+nqbbXWple7PZTXoAVIqPyTC25AGuMsAMH3BsJsEUwEahGib
xGzCbcmlzjFUG+QC1QhZw/98xkY0qto=
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:52:49 2025 by rpki-client