Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/54fa5541-fc93-3994-8d7f-7112e1803d57.roa
File: 54fa5541-fc93-3994-8d7f-7112e1803d57.roa (raw, json)
Hash identifier: lA+wXzf77GOIPsMU4US1MR+OCffcW1h2tWP6LF9BpOQ=
Subject key identifier: 5B:71:FD:0F:85:44:0D:76:EC:41:E1:0C:78:B8:85:43:D6:6A:6A:7E
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F43285848222FE4D490ED19A074F55D80
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/54fa5541-fc93-3994-8d7f-7112e1803d57.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 16696
IP address blocks: 199.192.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:e4:d4:90:ed:19:a0:74:f5:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=82a706e1-9ebf-4df5-87b1-e5fa1687b497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8a:a0:b8:58:df:57:d5:8b:2d:30:e6:4d:e1:
db:b9:a3:e0:f2:7f:79:55:57:9a:a9:f0:bc:93:85:
f7:03:45:db:35:18:02:ee:7f:b3:eb:23:0c:7b:52:
da:87:b8:3d:e7:a3:d5:59:3e:52:95:de:a2:96:30:
b9:99:94:53:29:b5:29:2f:65:e6:a6:96:62:55:43:
26:2e:9f:ea:fb:8c:07:9a:cd:5d:44:bb:71:30:24:
5d:dd:d4:95:ba:e8:a9:1a:c7:16:a0:1c:29:d5:4e:
70:d5:24:75:66:06:e3:10:15:6e:42:b5:c0:22:99:
9b:ed:8a:28:40:21:11:9d:98:22:7f:59:63:41:47:
11:c7:ea:94:bc:34:74:69:04:34:51:ee:c5:aa:68:
18:36:05:28:03:93:9e:7e:cc:1b:5c:32:4c:d3:1b:
2c:f2:dc:5e:46:0e:9b:ee:a5:45:1b:14:1c:a2:d2:
d2:4e:8c:99:a1:3f:cc:1d:28:91:96:6c:22:1e:94:
e5:2b:d3:bc:a3:f8:eb:7a:f4:42:c5:78:a8:74:04:
fe:c3:39:a2:2b:96:3f:c2:7e:4e:3b:69:98:38:dc:
ef:10:12:d3:1c:6e:d4:e3:0e:2f:0a:55:97:fa:7f:
4b:54:73:fe:05:79:df:dc:a2:5c:7a:1a:4a:e9:51:
2b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:71:FD:0F:85:44:0D:76:EC:41:E1:0C:78:B8:85:43:D6:6A:6A:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/54fa5541-fc93-3994-8d7f-7112e1803d57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
199.192.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:d3:9c:e7:98:a2:e2:dd:10:5d:4d:a8:5a:bd:ef:f6:01:62:
c9:67:23:ea:7e:b5:ed:fa:98:66:aa:e3:0a:a2:09:13:63:84:
b1:49:ac:db:c3:5d:72:06:2f:78:d6:21:85:c1:c1:de:c7:e2:
3b:3e:08:b8:9d:48:10:d6:40:d3:19:ba:27:1e:46:7b:6d:7f:
1d:6c:7f:71:e8:da:44:a0:f4:b7:90:1e:2a:33:f1:29:f2:71:
ae:5c:92:ea:bf:0d:a3:45:d5:17:87:92:33:3b:18:54:f1:bd:
4d:d7:de:0c:7a:f7:3c:2e:dd:14:21:34:bc:1a:ec:fd:83:fd:
ae:d0:aa:81:de:63:76:47:63:47:eb:2c:05:57:c2:43:08:18:
72:47:36:9a:80:75:4b:9d:f4:b0:37:6d:12:b0:11:4c:cf:e8:
fd:c0:55:e2:c6:35:7c:86:82:d2:9c:b3:e2:8e:c3:b0:d5:13:
e4:8e:b4:49:4b:bc:ac:25:d5:d4:7f:d1:8b:17:54:b0:b5:1d:
4e:12:6c:e6:cf:f3:ec:9a:a6:1e:15:0c:ff:02:fe:e5:20:81:
af:25:04:43:ba:58:8a:95:da:a3:e8:f7:68:85:99:92:83:83:
6c:bf:ca:3b:72:4f:50:b1:7f:6e:48:81:97:8c:3f:3c:e3:93:
7a:41:4a:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgiL+TUkO0ZoHT1XYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm
YzYwMB4XDTI0MTIwODAyMDAzOVoXDTI1MDMwODAyMDAzOVowLzEtMCsGA1UEAxMk
ODJhNzA2ZTEtOWViZi00ZGY1LTg3YjEtZTVmYTE2ODdiNDk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYqguFjfV9WLLTDmTeHbuaPg8n95VVeaqfC8
k4X3A0XbNRgC7n+z6yMMe1Lah7g956PVWT5Sld6iljC5mZRTKbUpL2XmppZiVUMm
Lp/q+4wHms1dRLtxMCRd3dSVuuipGscWoBwp1U5w1SR1ZgbjEBVuQrXAIpmb7Yoo
QCERnZgif1ljQUcRx+qUvDR0aQQ0Ue7FqmgYNgUoA5OefswbXDJM0xss8txeRg6b
7qVFGxQcotLSToyZoT/MHSiRlmwiHpTlK9O8o/jrevRCxXiodAT+wzmiK5Y/wn5O
O2mYONzvEBLTHG7U4w4vClWX+n9LVHP+BXnf3KJcehpK6VErAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFtx/Q+FRA127EHhDHi4hUPWamp+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl
OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvNTRmYTU1NDEtZmM5My0z
OTk0LThkN2YtNzExMmUxODAzZDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz
YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh
ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1
YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8BoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACTTnOeYouLdEF1NqFq97/YBYslnI+p+te36mGaq4wqiCRNjhLFJrNvD
XXIGL3jWIYXBwd7H4js+CLidSBDWQNMZuiceRnttfx1sf3Ho2kSg9LeQHioz8Sny
ca5ckuq/DaNF1ReHkjM7GFTxvU3X3gx69zwu3RQhNLwa7P2D/a7QqoHeY3ZHY0fr
LAVXwkMIGHJHNpqAdUud9LA3bRKwEUzP6P3AVeLGNXyGgtKcs+KOw7DVE+SOtElL
vKwl1dR/0YsXVLC1HU4SbObP8+yaph4VDP8C/uUgga8lBEO6WIqV2qPo92iFmZKD
g2y/yjtyT1Cxf25IgZeMPzzjk3pBSpI=
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:35:44 2025 by rpki-client