Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/3d4c8873-0b9b-31ef-92d2-2dd82ebb5be9.roa
File: 3d4c8873-0b9b-31ef-92d2-2dd82ebb5be9.roa (raw, json)
Hash identifier: NG3+aoFx5qpwT/hTGVeJyqOCkmVIrbEBnuRVUuNRsjg=
Subject key identifier: 39:5E:E3:95:97:30:72:D9:A9:5E:65:15:7E:B5:DD:58:A7:D7:4B:11
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F43285848143A830FF61DBEAE2AC4B380
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/3d4c8873-0b9b-31ef-92d2-2dd82ebb5be9.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 2648
IP address blocks: 192.64.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:83:0f:f6:1d:be:ae:2a:c4:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=08c976f1-e29a-472e-a061-ca97081115fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b0:2b:b2:80:f1:3e:44:91:ec:0f:dd:84:b0:
c4:49:3b:5f:aa:06:1b:0c:3a:48:88:c5:0a:0a:c0:
04:be:a2:32:70:04:4d:e6:e2:c2:04:e4:4e:b0:f5:
7b:de:1d:d0:e6:b6:58:22:86:19:0a:5e:d0:a8:d8:
59:bd:18:a4:49:59:59:4c:17:3c:f1:a5:be:93:26:
c2:d2:79:e6:ba:82:89:4d:38:1c:09:bc:68:8d:dc:
24:82:59:05:8c:3d:dc:5f:ea:30:05:12:5d:55:26:
48:a4:05:49:c5:13:d7:a0:2f:45:f8:1b:d9:fd:ca:
f5:ef:f4:59:9c:52:fe:e8:f7:b9:f3:11:ae:c3:5f:
42:7b:74:af:ea:d7:b7:9d:81:f8:bd:b5:cc:db:8c:
77:e4:32:39:36:68:e8:64:45:bb:26:9b:ec:f4:61:
4e:e3:ff:57:3c:ef:c3:f4:55:db:93:35:91:6b:73:
91:bb:c3:17:84:1f:a4:2d:64:1b:c2:13:5f:cd:ae:
07:09:f9:b3:6f:b6:60:71:28:08:8f:7f:fc:0a:f5:
1f:94:95:ec:fa:ac:44:5e:82:a0:b9:c5:b0:28:d6:
c1:ec:a8:f7:5e:b9:9b:4e:0c:01:f4:23:c6:5e:22:
78:1c:3f:d8:f6:1f:09:de:d4:4b:49:14:25:1f:bd:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5E:E3:95:97:30:72:D9:A9:5E:65:15:7E:B5:DD:58:A7:D7:4B:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/3d4c8873-0b9b-31ef-92d2-2dd82ebb5be9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
192.64.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:40:7c:f0:0b:ba:f6:84:be:3a:98:bd:c0:ad:85:d6:01:5c:
80:44:a9:67:78:11:98:e6:49:41:ba:2e:98:04:8a:4a:27:68:
8d:0c:e2:9e:4b:6d:93:cd:0a:db:4d:60:ec:89:e7:8f:44:4e:
7f:bd:1a:1a:94:72:0c:7b:69:6b:fe:40:6b:b5:e7:a6:12:56:
e6:bb:32:c3:fb:5d:5a:09:54:c6:e4:e0:9c:38:63:d9:95:21:
f6:b9:1f:08:dd:89:b3:0b:34:b8:04:bf:6c:e0:5c:89:7c:8f:
26:2d:04:79:ca:15:47:f0:be:c3:7a:77:cb:5c:a3:45:73:e0:
4b:35:74:ff:0f:03:47:27:07:c1:7c:e2:9b:92:88:2f:9d:c1:
c0:5f:8a:84:b3:8b:42:f5:a0:2c:eb:e2:99:db:dd:ce:d0:a5:
e8:eb:86:7c:16:73:06:3e:59:ea:c2:8e:ad:97:53:77:8d:28:
7c:d1:ad:33:04:00:70:bd:17:db:25:fa:b3:36:c0:a2:95:24:
4c:85:60:0d:f0:b1:70:9a:e0:00:e9:f1:a5:b9:02:b4:10:9f:
81:03:36:2a:17:04:fa:7c:61:42:e6:1f:03:2b:6a:01:02:45:
ef:0e:af:9b:c5:d3:cf:22:00:8d:e3:39:37:d5:69:4e:1b:f1:
16:ee:a5:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOoMP9h2+rirEs4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5
YzIwMB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
MDhjOTc2ZjEtZTI5YS00NzJlLWEwNjEtY2E5NzA4MTExNWZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLArsoDxPkSR7A/dhLDESTtfqgYbDDpIiMUK
CsAEvqIycARN5uLCBOROsPV73h3Q5rZYIoYZCl7QqNhZvRikSVlZTBc88aW+kybC
0nnmuoKJTTgcCbxojdwkglkFjD3cX+owBRJdVSZIpAVJxRPXoC9F+BvZ/cr17/RZ
nFL+6Pe58xGuw19Ce3Sv6te3nYH4vbXM24x35DI5NmjoZEW7Jpvs9GFO4/9XPO/D
9FXbkzWRa3ORu8MXhB+kLWQbwhNfza4HCfmzb7ZgcSgIj3/8CvUflJXs+qxEXoKg
ucWwKNbB7Kj3XrmbTgwB9CPGXiJ4HD/Y9h8J3tRLSRQlH708RQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDle45WXMHLZqV5lFX613Vin10sRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx
MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvM2Q0Yzg4NzMtMGI5Yi0z
MWVmLTkyZDItMmRkODJlYmI1YmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi
M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi
OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm
YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEBEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF1AfPALuvaEvjqYvcCthdYBXIBEqWd4EZjmSUG6LpgEikonaI0M4p5L
bZPNCttNYOyJ549ETn+9GhqUcgx7aWv+QGu156YSVua7MsP7XVoJVMbk4Jw4Y9mV
Ifa5HwjdibMLNLgEv2zgXIl8jyYtBHnKFUfwvsN6d8tco0Vz4Es1dP8PA0cnB8F8
4puSiC+dwcBfioSzi0L1oCzr4pnb3c7QpejrhnwWcwY+WerCjq2XU3eNKHzRrTME
AHC9F9sl+rM2wKKVJEyFYA3wsXCa4ADp8aW5ArQQn4EDNioXBPp8YULmHwMragEC
Re8Or5vF088iAI3jOTfVaU4b8RbupdY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:23:58 2025 by rpki-client