Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/45097e41-5714-3974-bd1e-65826485fa4f.roa
File: 45097e41-5714-3974-bd1e-65826485fa4f.roa (raw, json)
Hash identifier: ITp/ump5DaqQeszkKRe82+WEKGEfEJj6kbyPM6HCnM0=
Subject key identifier: 79:20:53:15:80:61:2D:0A:C3:5D:23:49:DB:9F:CF:8C:E8:D7:85:3E
Certificate issuer: /CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5
Certificate serial: 010D0C9F432858483E1ABEAF023FCF3F95DF1B80
Authority key identifier: 92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/45097e41-5714-3974-bd1e-65826485fa4f.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 53904
IP address blocks: 199.212.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:be:af:02:3f:cf:3f:95:df:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=1df63384-17a0-4e5c-b2d8-9fc3059f87ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d2:74:b9:72:25:44:01:f0:fc:11:0d:93:0f:
69:63:0b:5d:18:da:c0:19:a7:7d:a8:fb:38:eb:b4:
5b:12:af:ae:ab:52:7e:4e:8b:9a:cd:2b:6e:9f:98:
57:69:7e:71:14:e1:9e:95:ab:de:24:7a:c0:25:f3:
ff:38:17:21:b1:3d:06:0a:4c:77:e6:ee:d2:7c:71:
66:da:ef:5e:35:22:e7:e3:29:88:4c:74:f4:46:5f:
d1:7d:13:89:59:10:92:33:c2:7d:aa:ac:32:55:67:
57:98:e4:09:d9:3a:f2:5c:30:dd:5a:fb:0d:59:d6:
8b:7d:20:9b:3a:fc:6c:d8:56:82:b3:bc:e2:27:a3:
0c:62:a6:32:17:75:37:5d:94:30:89:77:19:bd:74:
e9:e4:71:5a:ed:85:59:9f:32:89:cb:85:cd:99:1a:
84:9d:08:62:06:a1:a7:51:c3:6f:a6:1f:d0:8f:52:
39:fe:d8:ea:b3:3b:6d:fc:6c:02:ee:ab:5b:24:ac:
d5:09:bc:ed:ee:46:44:d2:4c:36:b2:15:86:22:f7:
02:6b:1a:82:2c:86:b6:6d:6a:e4:5d:32:60:4d:61:
ff:ff:7d:22:e4:4a:28:95:df:c1:aa:d3:c2:b1:14:
10:6b:a5:80:eb:91:cd:e4:b0:98:4a:ad:63:38:a3:
44:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:20:53:15:80:61:2D:0A:C3:5D:23:49:DB:9F:CF:8C:E8:D7:85:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/45097e41-5714-3974-bd1e-65826485fa4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl
X509v3 Authority Key Identifier:
keyid:92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer
sbgp-ipAddrBlock: critical
IPv4:
199.212.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:04:d1:a0:d5:ad:7b:f9:ea:74:83:81:34:ec:5b:52:75:d7:
07:06:2d:5a:09:fa:77:a7:c7:42:c4:45:df:e8:ce:f8:e7:72:
55:57:e0:08:63:6b:d9:17:76:8a:0e:9b:4d:01:fb:c5:96:04:
ac:0a:4d:40:c9:4b:a7:8b:d0:01:85:50:dd:c2:37:c7:94:e4:
b9:19:66:54:6b:12:7c:85:e5:7f:66:a7:5e:5b:9f:fc:ea:81:
ab:72:23:85:89:8b:9a:71:fa:fc:14:f2:17:a0:83:bf:52:e3:
68:62:d6:eb:9f:fc:a3:ec:37:21:51:ba:07:08:f8:e8:13:40:
b0:a7:8f:5c:76:cc:13:4c:ae:0f:0d:4a:8f:dd:d7:a6:a0:6e:
7e:0a:f5:b8:c9:7f:ad:86:e3:b6:aa:d5:8d:6e:ea:7b:a1:0e:
cb:ac:5c:2e:35:6e:74:30:ab:f4:86:cb:fb:d7:73:57:a1:ef:
33:89:13:13:83:e0:5e:82:d0:a5:ec:26:cd:c2:5e:de:00:c9:
78:cb:e2:2c:cc:63:e5:b4:0e:bb:93:61:67:f9:49:ba:61:a2:
82:0e:60:c4:b5:1b:43:b4:18:01:ec:fe:2c:d1:6c:11:c4:c9:
c9:03:e1:36:a9:39:07:dd:0b:19:70:36:9b:af:37:59:46:3b:
db:69:b5:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+Gr6vAj/PP5XfG4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGM5ZjUzYzctZTY0ZC00ZjE0LWE1ZTEtYzE0ZThiMWUz
OGI1MB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk
MWRmNjMzODQtMTdhMC00ZTVjLWIyZDgtOWZjMzA1OWY4N2JhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9J0uXIlRAHw/BENkw9pYwtdGNrAGad9qPs4
67RbEq+uq1J+TouazStun5hXaX5xFOGelaveJHrAJfP/OBchsT0GCkx35u7SfHFm
2u9eNSLn4ymITHT0Rl/RfROJWRCSM8J9qqwyVWdXmOQJ2TryXDDdWvsNWdaLfSCb
Ovxs2FaCs7ziJ6MMYqYyF3U3XZQwiXcZvXTp5HFa7YVZnzKJy4XNmRqEnQhiBqGn
UcNvph/Qj1I5/tjqsztt/GwC7qtbJKzVCbzt7kZE0kw2shWGIvcCaxqCLIa2bWrk
XTJgTWH//30i5Eoold/BqtPCsRQQa6WA65HN5LCYSq1jOKNENwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHkgUxWAYS0Kw10jSdufz4zo14U+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84Yzlm
NTNjNy1lNjRkLTRmMTQtYTVlMS1jMTRlOGIxZTM4YjUvNDUwOTdlNDEtNTcxNC0z
OTc0LWJkMWUtNjU4MjY0ODVmYTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGM5ZjUzYzctZTY0ZC00ZjE0LWE1
ZTEtYzE0ZThiMWUzOGI1LzhjOWY1M2M3LWU2NGQtNGYxNC1hNWUxLWMxNGU4YjFl
MzhiNS5jcmwwHwYDVR0jBBgwFoAUkgQ6o8r4DzyNRaFJtV9LrfXD2Q4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84YzlmNTNjNy1lNjRkLTRmMTQtYTVlMS1jMTRl
OGIxZTM4YjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9QYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADYE0aDVrXv56nSDgTTsW1J11wcGLVoJ+nenx0LERd/ozvjnclVX4Ahj
a9kXdooOm00B+8WWBKwKTUDJS6eL0AGFUN3CN8eU5LkZZlRrEnyF5X9mp15bn/zq
gatyI4WJi5px+vwU8hegg79S42hi1uuf/KPsNyFRugcI+OgTQLCnj1x2zBNMrg8N
So/d16agbn4K9bjJf62G47aq1Y1u6nuhDsusXC41bnQwq/SGy/vXc1eh7zOJExOD
4F6C0KXsJs3CXt4AyXjL4izMY+W0DruTYWf5SbphooIOYMS1G0O0GAHs/izRbBHE
yckD4TapOQfdCxlwNpuvN1lGO9tptdI=
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:07:47 2025 by rpki-client