Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/0c7defca-cfd4-337a-b47d-fa13a7fdbc43.roa
File: 0c7defca-cfd4-337a-b47d-fa13a7fdbc43.roa (raw, json)
Hash identifier: ik6ZXDTHeCoJuoBDTc2/sdSMBeMjXQAlckotXjPEzcY=
Subject key identifier: 4D:14:91:06:D3:04:FF:51:EA:EC:ED:46:ED:DC:7D:A7:C2:61:F3:3E
Certificate issuer: /CN=9fbd098f-9e01-4c26-9395-e5b63399acaf
Certificate serial: 010D0C9F43285848A996240E20DC01ED44F8BB80
Authority key identifier: 38:52:68:1E:F9:A1:C1:15:72:67:A3:05:E1:1A:68:FC:23:8B:73:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/0c7defca-cfd4-337a-b47d-fa13a7fdbc43.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 14939
IP address blocks: 199.191.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:24:0e:20:dc:01:ed:44:f8:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fbd098f-9e01-4c26-9395-e5b63399acaf
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=e85b474e-dfe3-45d2-a094-a8cc0000a2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:82:40:6e:60:19:b1:a1:75:24:e5:ce:74:f2:
32:e9:36:11:68:b5:d3:e6:8a:e7:1f:ea:1d:8e:b9:
72:76:52:ba:78:f6:ec:5a:17:8a:d4:1b:dd:74:07:
75:78:03:bb:4d:bd:eb:a7:28:ad:84:d8:f9:cf:32:
eb:07:3e:12:51:3a:37:de:65:e7:ac:0f:61:87:16:
4e:26:62:3e:23:8c:73:6b:19:a9:ae:af:d0:c5:0f:
ac:a1:4f:4f:92:1a:a6:6d:f9:6b:4e:87:78:59:e5:
4b:09:5b:c5:f9:c9:46:f1:d5:06:38:71:da:4a:ee:
f6:35:e7:ae:22:82:d1:48:63:73:55:76:59:6d:36:
dd:67:4d:1f:48:25:ce:f0:28:34:5b:4a:0b:54:d5:
25:0e:4b:64:b3:d7:23:53:80:27:4c:ea:55:59:c9:
14:4c:f0:4c:7b:cc:e2:19:8f:fc:9c:3c:8f:31:98:
f6:0b:e4:90:a6:e6:4e:e4:ec:3e:b3:5d:f7:44:52:
56:00:09:48:f7:67:6b:03:d8:74:b0:19:bf:e1:9a:
e9:2f:58:34:8a:96:63:2c:ea:40:9c:49:07:5b:4b:
69:35:63:83:16:fe:46:a3:f8:86:83:ad:08:bf:05:
0e:c2:84:ea:5b:14:45:cc:50:12:b8:60:5f:a8:a1:
9c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:14:91:06:D3:04:FF:51:EA:EC:ED:46:ED:DC:7D:A7:C2:61:F3:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/0c7defca-cfd4-337a-b47d-fa13a7fdbc43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.crl
X509v3 Authority Key Identifier:
keyid:38:52:68:1E:F9:A1:C1:15:72:67:A3:05:E1:1A:68:FC:23:8B:73:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer
sbgp-ipAddrBlock: critical
IPv4:
199.191.62.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:2f:02:42:36:0e:7a:14:46:f6:dd:82:63:af:71:75:5e:64:
a7:f5:9f:51:56:23:33:7d:b4:41:f9:c1:9f:63:78:65:ac:7a:
1e:e5:fa:ae:ba:a9:88:88:98:c5:99:1d:77:10:86:55:75:e0:
31:a1:17:de:74:7c:9f:0c:99:da:b5:32:02:03:01:e1:63:fd:
59:b1:cc:4a:36:66:41:bd:95:ad:30:9b:62:5c:3b:4c:90:95:
9a:d3:c1:25:ba:22:f9:54:74:be:51:36:ac:98:88:90:80:79:
aa:a7:88:e0:56:30:ea:59:cf:e6:72:97:5e:98:aa:ce:21:d6:
ea:96:be:d4:30:2f:10:53:aa:de:30:7a:85:58:17:4d:58:12:
24:14:5c:d3:82:ce:7f:d4:6a:a0:d3:08:2a:40:a3:d5:db:0e:
6a:9c:b0:53:f4:88:a7:d6:60:48:a6:29:66:90:14:b0:a8:3c:
c8:d0:dd:70:14:f5:06:7d:b7:81:cb:ce:ad:67:3a:09:e9:22:
9d:22:c5:49:18:36:57:67:89:6a:bd:8c:3d:d7:e9:e0:ba:c0:
ee:66:c7:c6:9a:b4:b4:85:36:4e:50:a6:39:af:44:de:74:13:
ab:f9:91:f6:70:1e:cc:bd:6f:ba:31:e5:d6:1d:34:ab:1b:94:
cb:fd:79:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipliQOINwB7UT4u4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWZiZDA5OGYtOWUwMS00YzI2LTkzOTUtZTViNjMzOTlh
Y2FmMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZTg1YjQ3NGUtZGZlMy00NWQyLWEwOTQtYThjYzAwMDBhMmQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoJAbmAZsaF1JOXOdPIy6TYRaLXT5ornH+od
jrlydlK6ePbsWheK1BvddAd1eAO7Tb3rpyithNj5zzLrBz4SUTo33mXnrA9hhxZO
JmI+I4xzaxmprq/QxQ+soU9PkhqmbflrTod4WeVLCVvF+clG8dUGOHHaSu72Neeu
IoLRSGNzVXZZbTbdZ00fSCXO8Cg0W0oLVNUlDktks9cjU4AnTOpVWckUTPBMe8zi
GY/8nDyPMZj2C+SQpuZO5Ow+s133RFJWAAlI92drA9h0sBm/4ZrpL1g0ipZjLOpA
nEkHW0tpNWODFv5Go/iGg60IvwUOwoTqWxRFzFASuGBfqKGcnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE0UkQbTBP9R6uztRu3cfafCYfM+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85ZmJk
MDk4Zi05ZTAxLTRjMjYtOTM5NS1lNWI2MzM5OWFjYWYvMGM3ZGVmY2EtY2ZkNC0z
MzdhLWI0N2QtZmExM2E3ZmRiYzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWZiZDA5OGYtOWUwMS00YzI2LTkz
OTUtZTViNjMzOTlhY2FmLzlmYmQwOThmLTllMDEtNGMyNi05Mzk1LWU1YjYzMzk5
YWNhZi5jcmwwHwYDVR0jBBgwFoAUOFJoHvmhwRVyZ6MF4Rpo/COLcxAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85ZmJkMDk4Zi05ZTAxLTRjMjYtOTM5NS1lNWI2
MzM5OWFjYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx78+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGMvAkI2DnoURvbdgmOvcXVeZKf1n1FWIzN9tEH5wZ9jeGWseh7l+q66
qYiImMWZHXcQhlV14DGhF950fJ8Mmdq1MgIDAeFj/VmxzEo2ZkG9la0wm2JcO0yQ
lZrTwSW6IvlUdL5RNqyYiJCAeaqniOBWMOpZz+Zyl16Yqs4h1uqWvtQwLxBTqt4w
eoVYF01YEiQUXNOCzn/UaqDTCCpAo9XbDmqcsFP0iKfWYEimKWaQFLCoPMjQ3XAU
9QZ9t4HLzq1nOgnpIp0ixUkYNldniWq9jD3X6eC6wO5mx8aatLSFNk5QpjmvRN50
E6v5kfZwHsy9b7ox5dYdNKsblMv9eeA=
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:06:33 2025 by rpki-client