Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/8db1943e-17fa-375d-aa4b-b018e52e3c40.roa
File: 8db1943e-17fa-375d-aa4b-b018e52e3c40.roa (raw, json)
Hash identifier: 5n3DzNf4Oq09Nd0ke72WHtYeaiBq/bJeQe1fLSFrbKU=
Subject key identifier: 56:DD:12:D4:58:B9:F8:9B:0F:74:9E:99:B6:5D:5C:3A:A0:16:D4:FD
Certificate issuer: /CN=bad5af20-8385-44d4-815f-bb83497d4a0e
Certificate serial: 010D0C9F432858488AE096A8480BA6C1F4844480
Authority key identifier: 11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/8db1943e-17fa-375d-aa4b-b018e52e3c40.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 21777
IP address blocks: 199.45.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:96:a8:48:0b:a6:c1:f4:84:44:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad5af20-8385-44d4-815f-bb83497d4a0e
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=8d6b8493-2fed-4ad5-84c8-9ad3621badbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bd:e3:0c:fe:69:1f:4a:38:c8:db:e4:28:e1:
c5:ed:a7:2b:51:e3:f7:c5:16:e0:72:d2:72:ae:66:
1a:85:66:b5:30:18:2a:e7:f0:43:40:42:84:3c:39:
0e:6d:cd:d1:e2:e7:4a:e5:38:b3:db:bf:d2:1b:c9:
17:d6:cc:93:f6:6c:f1:72:15:ab:9e:05:00:46:e2:
d8:6f:a9:8a:a4:1b:01:1f:a4:5f:30:4f:48:7b:7b:
6a:cd:04:0a:8b:8c:f8:9b:47:2d:36:23:98:1f:34:
61:b6:f2:88:62:36:0c:24:4a:5b:51:34:63:3b:be:
49:b2:ec:d0:5e:2f:37:6c:e7:6c:95:af:a9:98:11:
ed:39:55:95:34:19:c9:c3:74:a9:60:48:53:ef:99:
8b:e2:06:bc:97:e8:2d:38:1f:96:39:c5:15:49:9a:
1c:e3:61:7e:32:ec:f9:8d:09:88:64:6b:1b:ae:8b:
03:1e:ab:d1:f9:e4:70:a6:fb:51:a5:27:9f:b5:c5:
87:9e:bf:43:ce:23:50:d6:79:0e:25:c4:7e:06:38:
a4:81:88:0d:07:e7:a4:8a:3b:d4:04:68:70:36:1a:
be:1f:ec:ff:93:4c:b8:e2:a4:b7:fa:7a:c1:bc:8b:
c6:47:48:0e:45:2b:7e:67:77:2a:ca:58:5d:d6:a7:
49:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DD:12:D4:58:B9:F8:9B:0F:74:9E:99:B6:5D:5C:3A:A0:16:D4:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/8db1943e-17fa-375d-aa4b-b018e52e3c40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl
X509v3 Authority Key Identifier:
keyid:11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer
sbgp-ipAddrBlock: critical
IPv4:
199.45.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:eb:ea:7f:80:66:90:1f:1a:45:d2:1d:1e:48:ea:f3:60:96:
28:36:cd:9f:8b:62:41:5f:ad:8c:70:53:09:14:c6:65:9a:b8:
ec:e0:ec:bf:b7:bb:73:fe:51:24:6e:53:4b:dd:d9:79:3f:f2:
c7:3a:6e:0c:f6:25:e8:3c:81:38:a4:87:bf:00:8e:26:c6:a5:
85:8e:31:59:cf:a6:ec:22:43:ef:01:82:6c:53:73:93:dd:23:
c7:b5:0f:15:a0:a1:e6:2a:a4:8b:83:0a:6e:7b:f6:fc:fb:50:
1b:97:40:c3:1c:ea:a3:46:65:99:4f:47:1b:c6:9b:6f:e1:c5:
d6:35:2d:0a:ed:0c:e1:d9:c0:96:b2:d2:98:6e:0b:5d:c7:87:
d7:0b:91:90:75:0c:2a:b4:bf:94:3a:62:10:3a:ee:d6:6e:da:
74:d4:fe:32:b2:84:aa:2c:d6:5b:fa:cd:f4:fa:fe:a4:d7:bd:
97:d0:30:75:35:67:6f:41:65:16:e9:dc:0d:03:9f:c0:c7:47:
c1:7f:6a:4f:0c:e2:78:66:40:31:70:56:c4:03:3e:7c:c8:8c:
b1:86:07:92:84:a3:c8:a6:bf:b3:7b:c6:b1:cd:34:32:51:f0:
7c:50:0b:16:ad:8c:8d:c2:2c:ef:b4:a7:06:93:71:e8:98:65:
07:3c:0d:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiK4JaoSAumwfSERIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmFkNWFmMjAtODM4NS00NGQ0LTgxNWYtYmI4MzQ5N2Q0
YTBlMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk
OGQ2Yjg0OTMtMmZlZC00YWQ1LTg0YzgtOWFkMzYyMWJhZGJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjb3jDP5pH0o4yNvkKOHF7acrUeP3xRbgctJy
rmYahWa1MBgq5/BDQEKEPDkObc3R4udK5Tiz27/SG8kX1syT9mzxchWrngUARuLY
b6mKpBsBH6RfME9Ie3tqzQQKi4z4m0ctNiOYHzRhtvKIYjYMJEpbUTRjO75JsuzQ
Xi83bOdsla+pmBHtOVWVNBnJw3SpYEhT75mL4ga8l+gtOB+WOcUVSZoc42F+Muz5
jQmIZGsbrosDHqvR+eRwpvtRpSeftcWHnr9DziNQ1nkOJcR+BjikgYgNB+ekijvU
BGhwNhq+H+z/k0y44qS3+nrBvIvGR0gORSt+Z3cqylhd1qdJxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFbdEtRYufibD3SembZdXDqgFtT9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1
YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgzNDk3ZDRhMGUvOGRiMTk0M2UtMTdmYS0z
NzVkLWFhNGItYjAxOGU1MmUzYzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFkNWFmMjAtODM4NS00NGQ0LTgx
NWYtYmI4MzQ5N2Q0YTBlL2JhZDVhZjIwLTgzODUtNDRkNC04MTVmLWJiODM0OTdk
NGEwZS5jcmwwHwYDVR0jBBgwFoAUEapw8wRQo6yCOXMUtq3WNdHdOZQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgz
NDk3ZDRhMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy2YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHPr6n+AZpAfGkXSHR5I6vNglig2zZ+LYkFfrYxwUwkUxmWauOzg7L+3
u3P+USRuU0vd2Xk/8sc6bgz2Jeg8gTikh78AjibGpYWOMVnPpuwiQ+8BgmxTc5Pd
I8e1DxWgoeYqpIuDCm579vz7UBuXQMMc6qNGZZlPRxvGm2/hxdY1LQrtDOHZwJay
0phuC13Hh9cLkZB1DCq0v5Q6YhA67tZu2nTU/jKyhKos1lv6zfT6/qTXvZfQMHU1
Z29BZRbp3A0Dn8DHR8F/ak8M4nhmQDFwVsQDPnzIjLGGB5KEo8imv7N7xrHNNDJR
8HxQCxatjI3CLO+0pwaTceiYZQc8DTc=
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:47:57 2025 by rpki-client