Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/aaa15e59-d5a0-3d24-8b0a-7c3e178b4350.roa
File: aaa15e59-d5a0-3d24-8b0a-7c3e178b4350.roa (raw, json)
Hash identifier: 6PbNNzO740qzgotLY8CuB7evN669YivaxnlZoJg5cf0=
Subject key identifier: 97:14:B8:D7:CD:64:0B:53:EB:EB:AA:E1:F4:23:54:84:F7:CB:0C:87
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F432858487E5066C4F9A3722133E14500
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/aaa15e59-d5a0-3d24-8b0a-7c3e178b4350.roa
Signing time: Fri 10 Jan 2025 02:00:40 +0000
ROA not before: Fri 10 Jan 2025 02:00:40 +0000
ROA not after: Thu 10 Apr 2025 01:00:40 +0000
asID: 0
IP address blocks: 192.58.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7e:50:66:c4:f9:a3:72:21:33:e1:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Jan 10 02:00:40 2025 GMT
Not After : Apr 10 01:00:40 2025 GMT
Subject: CN=e740e2c4-272e-45d9-a420-36fc53739b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e0:95:a8:41:2c:80:52:bb:d4:1b:9a:5d:1d:
09:2b:e8:2b:ee:68:6e:40:a5:66:10:f8:49:cb:d0:
08:48:d0:59:7e:7e:d3:e7:e0:83:bc:a9:1a:90:2a:
d1:6b:10:3c:d8:f9:1b:01:ac:3c:9d:86:c9:15:23:
b1:0a:7d:c9:70:2c:a4:5b:6d:5b:b1:b1:44:d3:d0:
08:37:d9:50:9f:d8:8c:1a:6e:de:4b:22:e3:64:bd:
13:c7:80:ce:09:89:6a:20:a8:1c:1c:a1:cc:ee:1b:
2b:5f:31:a0:1b:7c:37:05:ef:f7:6f:43:e7:3b:f1:
ec:f6:83:c1:da:43:d4:db:8d:8f:f4:f6:4e:02:11:
2e:98:b1:d0:fb:ec:8f:d3:68:b8:a2:d9:61:75:13:
03:2b:ec:51:fa:57:fe:42:23:ad:b5:fe:1e:77:f4:
1f:1f:2e:c0:73:da:cd:a2:4b:d8:4f:48:f7:2c:8e:
fc:68:1b:09:1a:19:1b:ba:41:0d:63:f4:7b:6b:20:
50:50:7d:6e:f0:c3:36:70:6e:65:62:78:4f:97:b4:
f4:7c:1c:ee:5c:3f:39:3f:1a:82:01:61:ce:bf:00:
f4:37:73:e5:87:a1:b5:d6:4f:15:69:69:e2:ce:4e:
d8:6a:e0:d4:d2:c9:de:61:e0:5a:a9:0f:e7:49:11:
04:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:14:B8:D7:CD:64:0B:53:EB:EB:AA:E1:F4:23:54:84:F7:CB:0C:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/aaa15e59-d5a0-3d24-8b0a-7c3e178b4350.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:65:c4:d1:72:40:f7:74:e2:e9:49:d6:ef:9c:91:5c:f2:45:
6d:40:e5:de:8e:94:bc:6e:49:eb:6f:d0:3d:24:42:06:d1:a9:
ab:d7:92:0b:32:d1:c7:7d:b0:bd:32:3a:51:05:c6:e0:2e:e8:
34:b7:10:04:e7:4b:d4:94:10:b0:c5:56:91:02:a7:96:99:e7:
01:11:fe:ad:d9:a9:8a:22:28:ec:2d:df:ec:09:45:6d:d4:70:
33:8a:a1:ae:3d:70:28:dd:c0:04:9d:fe:41:12:18:fd:e3:43:
5e:9b:59:20:fd:d9:c3:94:2b:1f:1b:c2:9d:cc:75:23:2b:56:
07:80:2f:13:13:37:24:9b:bc:f9:2d:37:9f:0b:7e:0c:4d:cb:
a0:f3:84:85:ab:ae:c9:b1:62:b8:46:34:70:e7:17:8b:d1:2b:
30:cd:97:d0:21:61:b4:ce:53:08:29:c5:d7:8c:3c:9a:a6:4e:
e4:73:8e:59:23:ce:02:24:23:a5:ed:94:ed:c2:72:92:67:4c:
44:d5:a6:25:3c:ac:88:56:e0:eb:49:8d:be:ef:67:c4:b2:b4:
db:ba:4c:5d:26:c7:9a:43:4c:51:34:47:62:28:32:ce:59:c7:
48:18:e0:93:cc:69:41:dc:db:78:2c:97:11:0c:a1:a2:3b:56:
24:22:8d:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh+UGbE+aNyITPhRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5
YzIwMB4XDTI1MDExMDAyMDA0MFoXDTI1MDQxMDAxMDA0MFowLzEtMCsGA1UEAxMk
ZTc0MGUyYzQtMjcyZS00NWQ5LWE0MjAtMzZmYzUzNzM5YjcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+CVqEEsgFK71BuaXR0JK+gr7mhuQKVmEPhJ
y9AISNBZfn7T5+CDvKkakCrRaxA82PkbAaw8nYbJFSOxCn3JcCykW21bsbFE09AI
N9lQn9iMGm7eSyLjZL0Tx4DOCYlqIKgcHKHM7hsrXzGgG3w3Be/3b0PnO/Hs9oPB
2kPU242P9PZOAhEumLHQ++yP02i4otlhdRMDK+xR+lf+QiOttf4ed/QfHy7Ac9rN
okvYT0j3LI78aBsJGhkbukENY/R7ayBQUH1u8MM2cG5lYnhPl7T0fBzuXD85PxqC
AWHOvwD0N3Plh6G11k8VaWnizk7YauDU0sneYeBaqQ/nSREEVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJcUuNfNZAtT6+uq4fQjVIT3ywyHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx
MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvYWFhMTVlNTktZDVhMC0z
ZDI0LThiMGEtN2MzZTE3OGI0MzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi
M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi
OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm
YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDrrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAllxNFyQPd04ulJ1u+ckVzyRW1A5d6OlLxuSetv0D0kQgbRqavXkgsy
0cd9sL0yOlEFxuAu6DS3EATnS9SUELDFVpECp5aZ5wER/q3ZqYoiKOwt3+wJRW3U
cDOKoa49cCjdwASd/kESGP3jQ16bWSD92cOUKx8bwp3MdSMrVgeALxMTNySbvPkt
N58LfgxNy6DzhIWrrsmxYrhGNHDnF4vRKzDNl9AhYbTOUwgpxdeMPJqmTuRzjlkj
zgIkI6XtlO3CcpJnTETVpiU8rIhW4OtJjb7vZ8SytNu6TF0mx5pDTFE0R2IoMs5Z
x0gY4JPMaUHc23gslxEMoaI7ViQijWE=
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:09 2025 by rpki-client