Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f920443e-ab0e-3df1-beae-30701559a976.roa
File: f920443e-ab0e-3df1-beae-30701559a976.roa (raw, json)
Hash identifier: lLToPkpxCjVUxz5ibLCmVl8Wg70Fw3KuiEjdF6Qjdh4=
Subject key identifier: BA:06:09:5C:A0:30:8A:72:A6:74:4E:24:9A:AF:BC:E3:C3:19:A4:B5
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F432858485CD030DE437FC52E495A9960
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f920443e-ab0e-3df1-beae-30701559a976.roa
Signing time: Sun 29 Dec 2024 02:00:39 +0000
ROA not before: Sun 29 Dec 2024 02:00:39 +0000
ROA not after: Sat 29 Mar 2025 01:00:39 +0000
asID: 21949
IP address blocks: 198.98.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5c:d0:30:de:43:7f:c5:2e:49:5a:99:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Dec 29 02:00:39 2024 GMT
Not After : Mar 29 01:00:39 2025 GMT
Subject: CN=fab926c5-690c-43db-a36d-386b2a40fa6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:77:e7:86:4f:c7:ef:0d:02:46:ab:92:b2:62:
3e:19:cc:c1:8d:26:e2:21:0c:69:32:5d:0e:f4:fe:
6c:82:0a:d0:e9:12:c0:8e:7f:7b:81:9d:3d:44:01:
26:69:ff:eb:67:e2:a4:a3:1b:68:72:e1:70:9a:4c:
7c:0c:9a:b7:53:30:e4:e1:14:28:12:5a:78:a2:95:
1e:1e:0b:94:c1:2b:66:51:70:74:88:02:7b:fd:f6:
b8:a1:4a:4b:48:bb:9e:4a:c6:fc:65:50:d4:42:b2:
87:ae:7e:b9:02:bd:2d:3e:19:e9:ff:c2:f3:73:2e:
f2:5b:18:48:db:5d:88:fb:9f:66:dd:22:7d:d1:c4:
0d:2d:20:e0:d4:24:59:6a:26:71:1f:90:24:3f:60:
ae:50:95:74:f3:5b:6c:7b:ce:95:07:05:1f:b9:45:
08:73:42:1b:79:45:7a:06:ef:4d:b0:61:78:bd:da:
27:07:47:4a:c2:51:c4:0c:ca:75:92:b1:ee:59:fc:
a2:7b:55:58:54:1b:d9:da:d6:28:ca:fe:96:a4:42:
23:a9:44:1b:12:52:44:55:7b:e9:eb:b7:52:5a:92:
bd:44:6d:99:cf:65:a9:79:d5:f9:44:7c:71:a4:80:
ae:9a:c0:00:e6:c6:0b:ef:46:83:9b:b4:ec:ce:f3:
84:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:06:09:5C:A0:30:8A:72:A6:74:4E:24:9A:AF:BC:E3:C3:19:A4:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f920443e-ab0e-3df1-beae-30701559a976.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.98.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:61:2f:15:08:6a:ef:48:29:b6:29:8c:a7:35:94:d5:ff:ab:
95:9d:bf:43:ba:b7:58:77:f3:63:e6:3d:f0:7f:c6:89:ec:ce:
c2:6d:1d:82:4c:65:f4:c0:16:f4:19:e2:db:17:90:5f:f4:4d:
aa:e6:fa:6f:c0:4b:8a:b6:51:c8:78:20:e8:4d:b9:bf:5f:29:
24:ab:12:a5:21:a9:be:7a:de:05:cf:de:05:33:45:19:27:f1:
c9:1f:8a:49:b1:e9:cc:7e:de:19:31:d2:0f:b6:90:29:25:65:
8f:d2:00:54:0a:11:af:13:25:22:2c:3f:d6:56:1e:81:a9:a7:
a0:9b:cf:13:50:de:0e:27:49:e4:5f:3a:51:00:85:11:b3:9d:
0c:73:0d:fa:5d:f4:53:92:8a:d1:1c:0d:bb:f2:15:8d:7e:b1:
23:79:45:1f:f6:4c:02:4c:2f:54:a1:87:a4:d5:10:65:65:d3:
35:ff:c6:ef:70:e5:19:b5:9f:f6:87:25:60:71:ce:80:3c:19:
23:f4:d7:26:10:7e:fc:c4:48:3c:61:44:31:1c:99:ec:41:29:
7d:33:bf:92:3a:93:8d:04:3f:f2:07:9d:40:7c:08:69:0c:85:
11:49:5c:c7:c5:b6:3d:b7:0c:86:15:bc:b4:94:c1:f6:32:ea:
3c:d9:6d:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhc0DDeQ3/FLklamWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx
YzViMB4XDTI0MTIyOTAyMDAzOVoXDTI1MDMyOTAxMDAzOVowLzEtMCsGA1UEAxMk
ZmFiOTI2YzUtNjkwYy00M2RiLWEzNmQtMzg2YjJhNDBmYTZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+3fnhk/H7w0CRquSsmI+GczBjSbiIQxpMl0O
9P5sggrQ6RLAjn97gZ09RAEmaf/rZ+KkoxtocuFwmkx8DJq3UzDk4RQoElp4opUe
HguUwStmUXB0iAJ7/fa4oUpLSLueSsb8ZVDUQrKHrn65Ar0tPhnp/8Lzcy7yWxhI
212I+59m3SJ90cQNLSDg1CRZaiZxH5AkP2CuUJV081tse86VBwUfuUUIc0IbeUV6
Bu9NsGF4vdonB0dKwlHEDMp1krHuWfyie1VYVBvZ2tYoyv6WpEIjqUQbElJEVXvp
67dSWpK9RG2Zz2WpedX5RHxxpICumsAA5sYL70aDm7TszvOERwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLoGCVygMIpypnROJJqvvOPDGaS1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx
NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvZjkyMDQ0M2UtYWIwZS0z
ZGYxLWJlYWUtMzA3MDE1NTlhOTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx
MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk
MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk
MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxmJgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAZhLxUIau9IKbYpjKc1lNX/q5Wdv0O6t1h382PmPfB/xonszsJtHYJM
ZfTAFvQZ4tsXkF/0Tarm+m/AS4q2Uch4IOhNub9fKSSrEqUhqb563gXP3gUzRRkn
8ckfikmx6cx+3hkx0g+2kCklZY/SAFQKEa8TJSIsP9ZWHoGpp6CbzxNQ3g4nSeRf
OlEAhRGznQxzDfpd9FOSitEcDbvyFY1+sSN5RR/2TAJML1Shh6TVEGVl0zX/xu9w
5Rm1n/aHJWBxzoA8GSP01yYQfvzESDxhRDEcmexBKX0zv5I6k40EP/IHnUB8CGkM
hRFJXMfFtj23DIYVvLSUwfYy6jzZbYc=
-----END CERTIFICATE-----
Generated at Sat Apr 26 22:57:18 2025 by rpki-client