Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/480d7a14-dda4-3eaa-860b-15903be57295.roa
File: 480d7a14-dda4-3eaa-860b-15903be57295.roa (raw, json)
Hash identifier: d3HNJ7iQrYZnwoJqZNDC5Dcrhs5xnd7F4ReXYlGvE90=
Subject key identifier: 0B:2E:43:E3:2C:71:E2:19:DA:E8:79:95:59:25:27:F9:C3:18:5B:00
Certificate issuer: /CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
Certificate serial: 010D0C9F432858485F9AE28D2568041FF6631500
Authority key identifier: 56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/480d7a14-dda4-3eaa-860b-15903be57295.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 10497
IP address blocks: 199.165.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:e2:8d:25:68:04:1f:f6:63:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=bfc1124e-8ebf-4050-921b-cfae842f31a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:aa:b4:2b:6d:fd:8e:10:2e:23:bf:4c:fc:1c:
46:32:a6:9b:a3:83:0f:39:e5:46:73:67:20:ac:b8:
59:41:93:7c:9b:9f:28:bc:27:fe:2a:b3:9a:f0:e8:
23:96:e8:a8:08:2b:6f:d4:6c:ff:e0:79:c8:81:c2:
19:5f:b0:77:65:86:40:92:bb:80:09:67:75:ac:89:
6e:ab:3b:b8:e0:a4:98:18:9a:04:34:7f:1c:f9:96:
cf:fc:b1:9a:3c:d3:f7:2a:de:79:dd:11:0f:df:aa:
cf:1b:b3:6a:78:cd:d8:80:75:5f:7a:b3:83:2e:c4:
9b:9a:45:c3:ef:07:f4:de:c7:af:b9:f2:92:a3:fa:
53:02:c0:29:b9:fa:b0:00:e9:8e:73:89:49:90:79:
4d:d4:96:bf:b4:f2:b3:88:8d:20:90:5f:82:9d:a7:
66:6a:49:02:49:dc:5b:7c:cf:77:b7:60:d6:7d:e5:
00:28:7f:23:35:b9:f6:e9:4b:c7:80:d6:98:aa:2b:
86:52:82:50:14:f8:65:27:c5:4f:4a:a5:0f:59:75:
69:e8:08:42:1c:04:04:4d:45:0a:65:c2:12:3d:6e:
80:a3:5b:b4:1f:a0:07:ac:29:37:14:c6:8d:ab:1f:
09:fb:73:8b:01:15:51:fa:98:b8:bd:af:ab:f2:6a:
c3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2E:43:E3:2C:71:E2:19:DA:E8:79:95:59:25:27:F9:C3:18:5B:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/480d7a14-dda4-3eaa-860b-15903be57295.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl
X509v3 Authority Key Identifier:
keyid:56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
sbgp-ipAddrBlock: critical
IPv4:
199.165.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:de:80:76:e1:e1:11:31:76:32:dd:d9:be:42:d6:28:31:df:
de:ca:fc:d8:a1:43:9a:3f:de:d9:fb:52:85:43:2d:90:16:17:
81:1f:a0:ac:5c:35:f1:7b:76:65:39:dc:ca:d1:a1:3e:ee:0b:
99:ee:65:a3:5c:1d:3d:e7:f1:65:9a:66:83:32:ea:11:ca:02:
6c:b7:4d:c5:01:ac:f2:c0:b6:05:d1:f6:84:e6:e9:7e:bc:b2:
c3:b9:c8:c0:61:15:cc:d6:b4:da:7f:a7:29:ca:ae:0a:9b:f3:
04:22:b0:0a:d2:16:6f:81:e9:1d:30:77:e0:12:9f:2a:0c:a2:
0c:8d:b2:78:82:b5:e0:43:1c:26:48:8f:39:f4:4f:40:65:9b:
55:70:af:f2:b9:81:aa:87:a6:d4:09:19:16:c0:3f:a2:91:c6:
fe:55:56:06:bb:4d:f1:c3:5a:52:5f:82:14:8a:22:bc:67:52:
b9:c0:8f:73:a5:65:42:69:f7:2c:d4:08:3c:d1:3d:75:79:59:
4b:94:a8:88:c4:d1:ab:1c:52:15:fc:d0:0b:6b:7b:3b:e9:ff:
fd:01:cd:39:2e:54:9d:70:6d:75:4c:ce:b3:17:04:c1:14:6b:
e7:8e:77:af:02:62:37:73:27:e9:69:61:f6:a6:2a:70:f2:41:
51:3b:12:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhfmuKNJWgEH/ZjFQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2I2MzVmZGQtODFhNy00YzVkLThmOTAtOWU3NTEzYjNk
Y2RjMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk
YmZjMTEyNGUtOGViZi00MDUwLTkyMWItY2ZhZTg0MmYzMWE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaq0K239jhAuI79M/BxGMqabo4MPOeVGc2cg
rLhZQZN8m58ovCf+KrOa8OgjluioCCtv1Gz/4HnIgcIZX7B3ZYZAkruACWd1rIlu
qzu44KSYGJoENH8c+ZbP/LGaPNP3Kt553REP36rPG7NqeM3YgHVferODLsSbmkXD
7wf03sevufKSo/pTAsApufqwAOmOc4lJkHlN1Ja/tPKziI0gkF+CnadmakkCSdxb
fM93t2DWfeUAKH8jNbn26UvHgNaYqiuGUoJQFPhlJ8VPSqUPWXVp6AhCHAQETUUK
ZcISPW6Ao1u0H6AHrCk3FMaNqx8J+3OLARVR+pi4va+r8mrD7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAsuQ+MsceIZ2uh5lVklJ/nDGFsAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYjYz
NWZkZC04MWE3LTRjNWQtOGY5MC05ZTc1MTNiM2RjZGMvNDgwZDdhMTQtZGRhNC0z
ZWFhLTg2MGItMTU5MDNiZTU3Mjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2I2MzVmZGQtODFhNy00YzVkLThm
OTAtOWU3NTEzYjNkY2RjLzNiNjM1ZmRkLTgxYTctNGM1ZC04ZjkwLTllNzUxM2Iz
ZGNkYy5jcmwwHwYDVR0jBBgwFoAUVjRw2StghbGnfKCXfaV6HbgnVAUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zYjYzNWZkZC04MWE3LTRjNWQtOGY5MC05ZTc1
MTNiM2RjZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6WeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF3egHbh4RExdjLd2b5C1igx397K/NihQ5o/3tn7UoVDLZAWF4EfoKxc
NfF7dmU53MrRoT7uC5nuZaNcHT3n8WWaZoMy6hHKAmy3TcUBrPLAtgXR9oTm6X68
ssO5yMBhFczWtNp/pynKrgqb8wQisArSFm+B6R0wd+ASnyoMogyNsniCteBDHCZI
jzn0T0Blm1Vwr/K5gaqHptQJGRbAP6KRxv5VVga7TfHDWlJfghSKIrxnUrnAj3Ol
ZUJp9yzUCDzRPXV5WUuUqIjE0ascUhX80Atrezvp//0BzTkuVJ1wbXVMzrMXBMEU
a+eOd68CYjdzJ+lpYfamKnDyQVE7EpI=
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:50:45 2025 by rpki-client