Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/ad3baf08-80ff-383c-bc9e-4c7090cee332.roa
File: ad3baf08-80ff-383c-bc9e-4c7090cee332.roa (raw, json)
Hash identifier: TYs2wEd/A8+1+7wdfII8IJDEly0Dw4tj8BsXLfTjFpA=
Subject key identifier: 65:DD:00:3C:CC:32:42:96:DF:AA:3F:27:51:44:2C:5C:71:11:54:D8
Certificate issuer: /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial: 010D0C9F4328584863CAFF886A02FD5282511EC0
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/ad3baf08-80ff-383c-bc9e-4c7090cee332.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 2495
IP address blocks: 198.248.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:ca:ff:88:6a:02:fd:52:82:51:1e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=77d193da-c49d-4a59-a8a3-eb726de511a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:23:b0:ed:a9:09:2c:61:e2:80:a5:c7:4e:c9:
9f:48:6f:3e:df:8e:21:c0:cd:0a:a0:cc:e6:ad:e2:
a1:49:9a:c9:a3:1d:90:ef:66:e5:dc:af:6c:05:28:
fd:13:50:39:d0:6b:5f:69:cc:45:1a:f0:b5:87:ca:
85:ee:7c:6b:dd:89:34:e3:11:d1:b0:80:24:5c:f1:
3b:8f:35:d2:23:e4:b5:2b:37:15:08:bb:9b:ac:23:
ee:42:ba:56:1a:fa:2d:46:fe:ee:bf:19:24:e4:db:
1f:3c:2a:5d:3c:4f:52:fb:a1:c3:c7:cb:75:5c:2c:
7b:a0:4f:56:7f:4b:49:7a:40:1c:0e:8f:26:25:fd:
77:dd:07:63:4f:fd:55:5a:c3:8e:bc:3b:1c:e3:96:
1f:2b:1b:a1:84:70:9c:ed:2f:b3:41:de:cc:67:c8:
a5:75:fa:33:f7:b3:dc:6b:0d:a0:a9:ec:a7:13:1d:
7b:c1:f9:0f:56:32:1e:de:7b:a3:0e:6e:36:3c:b9:
2c:fb:f3:85:56:e4:a5:0b:ce:0a:ee:29:b4:d1:d6:
a7:cd:da:6c:49:6f:35:db:29:9e:09:93:4d:44:aa:
7c:7b:d1:32:09:06:52:6f:ad:c7:8f:42:5d:33:c2:
05:c4:a9:87:b8:7c:b4:08:d9:ed:72:46:04:b9:89:
ea:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DD:00:3C:CC:32:42:96:DF:AA:3F:27:51:44:2C:5C:71:11:54:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/ad3baf08-80ff-383c-bc9e-4c7090cee332.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
X509v3 Authority Key Identifier:
keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
sbgp-ipAddrBlock: critical
IPv4:
198.248.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:9d:8e:db:45:27:44:42:c5:ad:83:4b:ae:bb:0a:46:e2:a7:
5b:9e:3a:f9:69:af:a5:a6:3d:24:3b:a0:53:8d:35:3a:54:60:
0c:cd:d3:62:7d:3c:b4:1c:c9:56:d3:0a:8a:ca:b0:1a:87:6f:
a4:f7:b6:3c:89:94:e8:c9:b1:c8:1a:e7:8f:74:b2:01:1c:c5:
6f:81:61:5c:b5:f4:d4:58:7c:7c:6f:5e:90:62:16:03:8b:5c:
e3:0c:a5:d7:42:92:bb:86:18:86:d0:cf:4c:e9:b6:c4:73:24:
b4:aa:ce:d5:2e:3f:14:f7:e7:69:d0:99:07:32:24:38:45:39:
e7:77:b8:e3:2c:6e:ed:9e:a2:9f:ae:27:d6:ca:b2:b0:e8:14:
d8:1c:8f:0a:dd:70:e8:89:71:28:43:35:75:19:4b:17:00:ab:
23:a9:9b:30:cf:35:55:1e:b9:45:99:d3:60:db:8c:32:32:f7:
8c:1c:92:63:08:0c:48:2e:55:aa:dc:00:9d:fb:4c:bf:26:4b:
4a:57:c7:ed:e5:7e:6e:1a:62:3b:56:cf:dc:08:cf:9f:14:f2:
15:d1:0e:ff:1d:9e:1a:c7:cc:b0:b2:65:65:9e:ec:9d:c9:07:
1b:80:01:9b:62:f2:4a:9f:59:21:39:52:2a:19:6a:e5:a5:93:
01:a0:40:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhjyv+IagL9UoJRHsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRi
ODNkMB4XDTI0MTIzMTE0MDA1M1oXDTI1MDMzMTEzMDA1M1owLzEtMCsGA1UEAxMk
NzdkMTkzZGEtYzQ5ZC00YTU5LWE4YTMtZWI3MjZkZTUxMWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiOw7akJLGHigKXHTsmfSG8+344hwM0KoMzm
reKhSZrJox2Q72bl3K9sBSj9E1A50GtfacxFGvC1h8qF7nxr3Yk04xHRsIAkXPE7
jzXSI+S1KzcVCLubrCPuQrpWGvotRv7uvxkk5NsfPCpdPE9S+6HDx8t1XCx7oE9W
f0tJekAcDo8mJf133QdjT/1VWsOOvDsc45YfKxuhhHCc7S+zQd7MZ8ildfoz97Pc
aw2gqeynEx17wfkPVjIe3nujDm42PLks+/OFVuSlC84K7im00danzdpsSW812yme
CZNNRKp8e9EyCQZSb63Hj0JdM8IFxKmHuHy0CNntckYEuYnqfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGXdADzMMkKW36o/J1FELFxxEVTYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0
Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvYWQzYmFmMDgtODBmZi0z
ODNjLWJjOWUtNGM3MDkwY2VlMzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODg4NDI4NzgtMTA1MC00ZGY3LTgy
MmItZWE4ZWMyNWRiODNkLzg4ODQyODc4LTEwNTAtNGRmNy04MjJiLWVhOGVjMjVk
YjgzZC5jcmwwHwYDVR0jBBgwFoAUCvQvaSDxqtdtZzyGmgTIgB6tfZkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThl
YzI1ZGI4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxvjIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJSdjttFJ0RCxa2DS667Ckbip1ueOvlpr6WmPSQ7oFONNTpUYAzN02J9
PLQcyVbTCorKsBqHb6T3tjyJlOjJscga5490sgEcxW+BYVy19NRYfHxvXpBiFgOL
XOMMpddCkruGGIbQz0zptsRzJLSqztUuPxT352nQmQcyJDhFOed3uOMsbu2eop+u
J9bKsrDoFNgcjwrdcOiJcShDNXUZSxcAqyOpmzDPNVUeuUWZ02DbjDIy94wckmMI
DEguVarcAJ37TL8mS0pXx+3lfm4aYjtWz9wIz58U8hXRDv8dnhrHzLCyZWWe7J3J
BxuAAZti8kqfWSE5UioZauWlkwGgQDw=
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:36:55 2025 by rpki-client