Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/f2a698c5-0709-39f9-ae58-e419ba0b629f.roa
File: f2a698c5-0709-39f9-ae58-e419ba0b629f.roa (raw, json)
Hash identifier: 2umzezHs+o/QCbUy2idyOoW8THSYSEl2SEkelU2FlC4=
Subject key identifier: CC:9F:3D:DB:6F:89:D3:41:2F:64:A3:A4:D0:70:ED:4A:64:C4:DA:3B
Certificate issuer: /CN=a92da870-be06-471e-89b6-f5063eb7350b
Certificate serial: 010D0C9F432858483E1ABD8B53E22BD30F2DF5F8
Authority key identifier: A7:74:2E:49:15:B9:70:2F:E8:B7:60:50:ED:7A:A4:DD:14:A3:74:A6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/f2a698c5-0709-39f9-ae58-e419ba0b629f.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 397050
IP address blocks: 199.45.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:bd:8b:53:e2:2b:d3:0f:2d:f5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92da870-be06-471e-89b6-f5063eb7350b
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=9e78ea6f-e968-4de5-b5cd-83041037f623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6a:3c:ba:08:de:f8:37:22:76:b6:0e:71:fb:
a3:1b:90:bc:c9:13:9b:f6:9a:4f:27:7e:5c:c2:a2:
15:13:fd:90:d7:ca:31:66:e4:06:0e:3a:c0:49:ba:
f8:0d:b0:b7:12:e9:53:d5:0a:ab:11:17:ba:db:7f:
fe:7b:f3:4b:0f:99:11:7e:f3:bc:be:bc:ca:0f:19:
74:11:b6:0d:4d:11:69:ec:7e:35:22:b9:f3:df:eb:
db:66:25:5a:a9:fb:a1:7a:5c:46:f7:7d:44:47:7a:
28:b4:f1:67:be:7a:92:83:38:29:5a:5f:89:bf:0d:
44:2c:ef:ff:81:6a:97:44:f3:64:fc:ce:20:a0:06:
94:91:37:56:3e:56:b5:4b:ec:95:ba:19:3c:d2:99:
e2:59:20:61:50:23:40:81:a9:7e:49:ed:56:74:ac:
b0:9c:ed:45:2e:f2:81:7e:2e:3d:2d:7e:4d:55:bc:
a1:40:e5:03:b8:67:68:3b:aa:36:99:6a:3d:90:e0:
c1:ed:97:1a:99:98:04:a5:20:3e:08:e7:44:70:19:
78:bf:13:6d:5d:1d:b4:46:97:41:4e:fc:32:73:5b:
3b:92:30:01:9d:60:4b:33:6f:f3:f0:c5:79:0b:8d:
e6:78:b9:4c:73:79:d2:01:a7:62:d4:ca:5a:a2:3d:
c1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9F:3D:DB:6F:89:D3:41:2F:64:A3:A4:D0:70:ED:4A:64:C4:DA:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/f2a698c5-0709-39f9-ae58-e419ba0b629f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/a92da870-be06-471e-89b6-f5063eb7350b.crl
X509v3 Authority Key Identifier:
keyid:A7:74:2E:49:15:B9:70:2F:E8:B7:60:50:ED:7A:A4:DD:14:A3:74:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b.cer
sbgp-ipAddrBlock: critical
IPv4:
199.45.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:9e:9d:03:da:c6:bb:9a:e1:e6:85:eb:ce:1c:fc:6d:a4:4b:
e8:ab:bf:f2:24:af:9e:02:c4:a2:3e:95:90:d9:dc:ca:c5:93:
cf:9b:a6:d3:3e:97:c7:8f:3f:ef:18:04:3a:cc:d2:a6:02:00:
c3:e3:85:a9:91:58:86:db:a6:b4:28:47:80:99:24:67:23:04:
4d:d8:ec:24:bf:7d:b9:26:bc:73:c7:e6:fd:bf:22:a0:b8:3b:
c5:e3:c3:4c:3f:2c:78:10:a5:7d:db:b7:eb:b6:d0:af:25:71:
86:a5:c8:80:ec:02:fa:b9:4a:f9:e7:d7:31:02:79:ba:80:6a:
90:11:cc:f5:d7:c0:45:28:39:13:03:5a:84:ad:ad:36:bc:c4:
cf:a3:14:93:41:13:56:61:46:e8:c4:a2:10:73:87:e6:a2:3a:
d7:1a:d3:57:f7:50:9b:51:29:b9:27:58:43:f2:91:50:24:09:
ea:e6:31:37:14:6e:97:bf:29:27:4f:95:c9:d7:27:e8:3c:aa:
82:95:72:af:cd:f1:dd:c6:91:0e:00:8c:27:73:18:ed:cb:50:
e4:be:4e:65:d3:46:e3:57:59:b5:cc:5f:08:a2:db:69:de:eb:
81:d6:bf:5b:1c:ce:a4:ff:16:cb:b7:3e:df:0b:50:91:d2:ae:
06:16:b6:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+Gr2LU+Ir0w8t9fgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTkyZGE4NzAtYmUwNi00NzFlLTg5YjYtZjUwNjNlYjcz
NTBiMB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk
OWU3OGVhNmYtZTk2OC00ZGU1LWI1Y2QtODMwNDEwMzdmNjIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWo8ugje+DcidrYOcfujG5C8yROb9ppPJ35c
wqIVE/2Q18oxZuQGDjrASbr4DbC3EulT1QqrERe623/+e/NLD5kRfvO8vrzKDxl0
EbYNTRFp7H41Irnz3+vbZiVaqfuhelxG931ER3ootPFnvnqSgzgpWl+Jvw1ELO//
gWqXRPNk/M4goAaUkTdWPla1S+yVuhk80pniWSBhUCNAgal+Se1WdKywnO1FLvKB
fi49LX5NVbyhQOUDuGdoO6o2mWo9kODB7ZcamZgEpSA+COdEcBl4vxNtXR20RpdB
Tvwyc1s7kjABnWBLM2/z8MV5C43meLlMc3nSAadi1Mpaoj3B6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMyfPdtvidNBL2SjpNBw7UpkxNo7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hOTJk
YTg3MC1iZTA2LTQ3MWUtODliNi1mNTA2M2ViNzM1MGIvZjJhNjk4YzUtMDcwOS0z
OWY5LWFlNTgtZTQxOWJhMGI2MjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYTkyZGE4NzAtYmUwNi00NzFlLTg5
YjYtZjUwNjNlYjczNTBiL2E5MmRhODcwLWJlMDYtNDcxZS04OWI2LWY1MDYzZWI3
MzUwYi5jcmwwHwYDVR0jBBgwFoAUp3QuSRW5cC/ot2BQ7Xqk3RSjdKYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9hOTJkYTg3MC1iZTA2LTQ3MWUtODliNi1mNTA2
M2ViNzM1MGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxy2oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHCenQPaxrua4eaF684c/G2kS+irv/Ikr54CxKI+lZDZ3MrFk8+bptM+
l8ePP+8YBDrM0qYCAMPjhamRWIbbprQoR4CZJGcjBE3Y7CS/fbkmvHPH5v2/IqC4
O8Xjw0w/LHgQpX3bt+u20K8lcYalyIDsAvq5Svnn1zECebqAapARzPXXwEUoORMD
WoStrTa8xM+jFJNBE1ZhRujEohBzh+aiOtca01f3UJtRKbknWEPykVAkCermMTcU
bpe/KSdPlcnXJ+g8qoKVcq/N8d3GkQ4AjCdzGO3LUOS+TmXTRuNXWbXMXwii22ne
64HWv1sczqT/Fsu3Pt8LUJHSrgYWtvM=
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:50:35 2025 by rpki-client