Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3ce21712-b94a-3447-9f03-1e14d2a7ad98.roa
File: 3ce21712-b94a-3447-9f03-1e14d2a7ad98.roa (raw, json)
Hash identifier: oTFug422idwOFswXwQoAOwVaGcMln4s2Ji+Jb5uz7po=
Subject key identifier: 52:73:9E:FA:99:E0:A7:38:0C:96:1F:40:7C:37:D3:42:9E:AE:7F:CF
Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial: 010D0C9F43285848037B668C80BE9E3D92B6B180
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3ce21712-b94a-3447-9f03-1e14d2a7ad98.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 14061
IP address blocks: 198.232.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:66:8c:80:be:9e:3d:92:b6:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=0fe44a00-e5d8-470b-9a47-0c0a0586df9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c5:9e:37:5c:f1:6f:1a:56:23:59:e7:2b:1e:
3b:9c:1c:20:55:a2:8c:b9:8c:cd:09:76:50:69:e4:
05:37:77:b8:30:b7:0b:29:22:cc:c5:04:9a:38:f4:
12:46:0d:e0:eb:0d:ad:37:e8:42:e5:26:67:09:c7:
97:23:6b:29:ed:8e:a1:a3:e5:b8:b4:b5:21:e7:2e:
55:39:6b:57:13:ab:9a:34:83:e0:a0:fe:f5:42:98:
2f:30:98:8e:79:fd:a7:4c:88:88:3d:47:72:88:e6:
4c:4b:72:99:30:17:ff:e0:35:06:aa:ee:ee:85:9b:
3b:dd:9a:69:3b:98:52:ea:95:bc:9f:ae:e4:25:21:
58:33:dc:b3:f3:d4:53:73:1c:87:85:2b:dd:99:03:
e3:64:4b:9e:c2:fe:c8:91:13:38:af:d6:70:16:ca:
e9:54:c5:73:6e:73:ed:0f:d3:0b:14:0e:c9:85:0e:
5a:ba:e8:42:2f:f8:07:64:4e:c2:67:35:3f:8a:b9:
94:a7:49:09:ba:77:91:e5:17:be:97:36:e8:5b:dc:
55:fa:82:91:5f:6b:56:40:f2:9b:64:c8:55:cf:58:
31:6d:3d:4a:86:d3:53:72:8d:66:07:c5:54:85:f0:
81:ee:a1:02:40:64:f8:9f:4c:38:66:7b:cc:f2:24:
39:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:73:9E:FA:99:E0:A7:38:0C:96:1F:40:7C:37:D3:42:9E:AE:7F:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3ce21712-b94a-3447-9f03-1e14d2a7ad98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
X509v3 Authority Key Identifier:
keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
sbgp-ipAddrBlock: critical
IPv4:
198.232.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:e8:68:48:c5:91:03:3a:13:86:7d:17:ba:14:67:c1:bb:3f:
d5:7a:a8:aa:a4:8b:87:a1:30:1c:12:d6:4a:20:f1:da:bb:34:
56:fa:dc:7a:4b:5c:41:00:8e:1a:00:85:27:cf:48:72:b4:91:
5f:21:d4:a5:4c:2c:b4:93:d6:d6:bb:f0:59:81:60:32:1f:35:
50:08:b3:2b:fd:cf:b5:12:da:5e:49:58:59:7a:de:b2:3a:46:
30:a6:ee:c9:71:ea:79:99:21:4b:3a:ae:46:44:a4:3b:d9:10:
1a:1e:84:45:af:ad:90:c2:03:35:5b:bf:79:c1:8f:ca:0a:5f:
ea:d6:be:3f:a5:3d:66:53:13:85:02:ab:2f:82:bc:3c:94:b2:
56:45:13:5e:38:57:69:fc:01:f7:2e:64:7b:1a:54:bb:f0:64:
39:0c:a4:88:2e:06:19:06:29:dd:32:1d:40:94:46:2c:de:5a:
98:d5:a2:12:81:ef:f8:10:73:de:4c:95:13:6f:90:fd:1a:1a:
e1:9b:ce:77:bc:13:46:9f:f4:e8:cc:9c:cf:7d:93:85:91:6f:
a1:7e:35:4c:05:f0:d8:7a:f0:a9:46:ac:e6:dd:91:89:fd:d6:
f6:66:1c:ce:9b:d3:c6:06:9f:02:cf:0e:29:d9:c8:02:97:57:
b3:2e:b8:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDe2aMgL6ePZK2sYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy
Njk4MB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
MGZlNDRhMDAtZTVkOC00NzBiLTlhNDctMGMwYTA1ODZkZjlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMWeN1zxbxpWI1nnKx47nBwgVaKMuYzNCXZQ
aeQFN3e4MLcLKSLMxQSaOPQSRg3g6w2tN+hC5SZnCceXI2sp7Y6ho+W4tLUh5y5V
OWtXE6uaNIPgoP71QpgvMJiOef2nTIiIPUdyiOZMS3KZMBf/4DUGqu7uhZs73Zpp
O5hS6pW8n67kJSFYM9yz89RTcxyHhSvdmQPjZEuewv7IkRM4r9ZwFsrpVMVzbnPt
D9MLFA7JhQ5auuhCL/gHZE7CZzU/irmUp0kJuneR5Re+lzboW9xV+oKRX2tWQPKb
ZMhVz1gxbT1KhtNTco1mB8VUhfCB7qECQGT4n0w4ZnvM8iQ5hwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFJznvqZ4Kc4DJYfQHw300Kern/PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4
ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvM2NlMjE3MTItYjk0YS0z
NDQ3LTlmMDMtMWUxNGQyYTdhZDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh
ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl
MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3
ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxuiTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFjoaEjFkQM6E4Z9F7oUZ8G7P9V6qKqki4ehMBwS1kog8dq7NFb63HpL
XEEAjhoAhSfPSHK0kV8h1KVMLLST1ta78FmBYDIfNVAIsyv9z7US2l5JWFl63rI6
RjCm7slx6nmZIUs6rkZEpDvZEBoehEWvrZDCAzVbv3nBj8oKX+rWvj+lPWZTE4UC
qy+CvDyUslZFE144V2n8AfcuZHsaVLvwZDkMpIguBhkGKd0yHUCURizeWpjVohKB
7/gQc95MlRNvkP0aGuGbzne8E0af9OjMnM99k4WRb6F+NUwF8Nh68KlGrObdkYn9
1vZmHM6b08YGnwLPDinZyAKXV7MuuCg=
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:25:04 2025 by rpki-client