Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fa5fdf44-02a2-3082-b7ce-46b64e0e50f7.roa
File: fa5fdf44-02a2-3082-b7ce-46b64e0e50f7.roa (raw, json)
Hash identifier: LlDVni3jBuwbfNdBbTZ3RzXo/b6MQl9pKliL/ffqW40=
Subject key identifier: B4:ED:DC:E1:97:7A:52:8C:DF:BD:23:D6:A5:51:EF:82:A4:AE:D4:52
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848387C200F3B8B246D221F3C00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fa5fdf44-02a2-3082-b7ce-46b64e0e50f7.roa
Signing time: Mon 16 Dec 2024 01:42:15 +0000
ROA not before: Mon 16 Dec 2024 01:42:15 +0000
ROA not after: Sun 16 Mar 2025 00:42:15 +0000
asID: 132892
IP address blocks: 198.41.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:7c:20:0f:3b:8b:24:6d:22:1f:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 16 01:42:15 2024 GMT
Not After : Mar 16 00:42:15 2025 GMT
Subject: CN=c92a9681-ca9a-4c12-953e-4f71c8346c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:83:f5:c5:d6:97:dc:a0:fc:f1:82:a5:b6:b3:
ec:cb:59:d3:df:85:20:af:58:27:30:2f:63:fd:20:
b4:b7:d2:a3:d9:f7:10:12:fb:e3:e7:16:75:e2:35:
2a:e1:af:fa:a3:88:32:ed:d7:82:a4:93:b4:d4:99:
32:01:bb:44:9a:5e:92:ba:18:21:40:09:16:31:89:
b0:1d:01:4a:63:cd:43:dd:c9:94:ae:fc:fa:b6:f3:
58:86:12:86:c6:8e:be:67:63:c5:b6:65:2f:44:6f:
77:81:34:90:99:17:1e:55:11:a7:a1:84:99:93:ac:
46:e4:f1:40:c8:8a:e9:0a:0b:a7:e0:ed:e0:48:9f:
f8:72:63:07:6f:14:22:57:74:a4:3a:4e:0c:22:2f:
e1:a8:8f:c4:4d:6a:20:76:ff:1c:84:69:87:bb:da:
46:5c:3f:07:ea:32:dd:63:19:e5:bf:d9:cc:55:17:
ba:00:25:f3:36:a5:7d:0d:30:22:30:5b:d9:24:dc:
27:f2:e4:28:a2:6a:0f:af:51:32:77:35:32:20:dd:
0e:4e:aa:8c:f8:55:98:20:4b:d2:06:97:85:27:78:
ba:5e:ea:01:e9:fa:33:36:61:98:a2:c0:f7:cf:01:
f7:19:c2:9d:81:30:22:d3:22:12:5d:72:0b:7c:56:
b5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:ED:DC:E1:97:7A:52:8C:DF:BD:23:D6:A5:51:EF:82:A4:AE:D4:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fa5fdf44-02a2-3082-b7ce-46b64e0e50f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:95:c5:05:39:8b:ab:0f:51:20:a1:b7:e6:30:91:7a:20:6a:
f2:ec:86:89:6e:eb:90:3e:30:ea:b3:f4:81:c5:78:7b:3c:f5:
d1:fe:4c:02:fb:c1:52:f8:38:db:2f:90:5f:24:9a:ef:6e:eb:
0d:0f:33:d3:a8:11:04:f2:15:55:6e:66:20:03:56:da:9d:10:
a3:1a:3c:0c:87:e2:89:08:eb:1a:1b:23:51:c7:37:9f:4d:a1:
8c:0a:a6:66:9f:fd:6f:6a:05:48:5e:fb:8d:7e:64:03:14:cd:
03:a1:79:8c:4a:f4:0f:6e:89:41:47:d8:72:09:51:a6:dc:3c:
02:d7:53:5c:77:af:d3:26:a2:3c:67:31:04:c6:11:77:8b:61:
73:f3:24:8a:1f:e8:b7:ce:92:22:cb:95:31:bf:22:5c:c3:b0:
6b:a2:3f:13:d8:29:41:54:b7:d4:ea:ed:97:e5:04:1d:e3:05:
5f:57:16:4c:9b:c5:5a:f9:0e:fd:3f:06:23:dc:b1:39:9d:13:
95:e1:36:6f:ae:9e:49:e5:a2:a5:ba:5d:6d:4c:57:f7:49:0c:
01:8d:15:70:2e:e2:17:51:d8:d3:38:09:76:8e:10:17:5b:87:
f9:c9:e4:4b:04:c8:ee:9b:d6:4e:fe:df:cd:a9:c1:aa:5f:9b:
33:1a:ce:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg4fCAPO4skbSIfPAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxNjAxNDIxNVoXDTI1MDMxNjAwNDIxNVowLzEtMCsGA1UEAxMk
YzkyYTk2ODEtY2E5YS00YzEyLTk1M2UtNGY3MWM4MzQ2YzJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoP1xdaX3KD88YKltrPsy1nT34Ugr1gnMC9j
/SC0t9Kj2fcQEvvj5xZ14jUq4a/6o4gy7deCpJO01JkyAbtEml6SuhghQAkWMYmw
HQFKY81D3cmUrvz6tvNYhhKGxo6+Z2PFtmUvRG93gTSQmRceVRGnoYSZk6xG5PFA
yIrpCgun4O3gSJ/4cmMHbxQiV3SkOk4MIi/hqI/ETWogdv8chGmHu9pGXD8H6jLd
Yxnlv9nMVRe6ACXzNqV9DTAiMFvZJNwn8uQoomoPr1EydzUyIN0OTqqM+FWYIEvS
BpeFJ3i6XuoB6fozNmGYosD3zwH3GcKdgTAi0yISXXILfFa13wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLTt3OGXelKM370j1qVR74KkrtRSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmE1ZmRmNDQtMDJhMi0z
MDgyLWI3Y2UtNDZiNjRlMGU1MGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxin1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKCVxQU5i6sPUSCht+YwkXogavLsholu65A+MOqz9IHFeHs89dH+TAL7
wVL4ONsvkF8kmu9u6w0PM9OoEQTyFVVuZiADVtqdEKMaPAyH4okI6xobI1HHN59N
oYwKpmaf/W9qBUhe+41+ZAMUzQOheYxK9A9uiUFH2HIJUabcPALXU1x3r9Mmojxn
MQTGEXeLYXPzJIof6LfOkiLLlTG/IlzDsGuiPxPYKUFUt9Tq7ZflBB3jBV9XFkyb
xVr5Dv0/BiPcsTmdE5XhNm+unknloqW6XW1MV/dJDAGNFXAu4hdR2NM4CXaOEBdb
h/nJ5EsEyO6b1k7+382pwapfmzMazhY=
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:10:08 2025 by rpki-client