Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/06f0edf4-50e6-3949-9a21-f6bb0d2f0313.roa
File: 06f0edf4-50e6-3949-9a21-f6bb0d2f0313.roa (raw, json)
Hash identifier: tgjIyHBCv1mJak624KUqLCUk16TbUWbdWZ3mFx1NlK4=
Subject key identifier: 31:33:4C:E0:74:1C:D8:CB:C5:2D:9D:35:37:75:52:6F:30:19:BE:A3
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F432858486D9056B2A6AA408C6380393C
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/06f0edf4-50e6-3949-9a21-f6bb0d2f0313.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 0
IP address blocks: 198.41.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:56:b2:a6:aa:40:8c:63:80:39:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=b819b37c-b4d2-42f7-b99f-332fcb805ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d4:c8:36:97:18:bb:9d:bd:4e:41:6e:5b:94:
8a:fa:95:ba:a9:b0:5d:da:e9:26:09:21:5a:d5:7c:
03:00:85:8f:5d:db:31:51:82:a4:92:7b:3e:ea:5a:
1d:c7:2a:cc:b0:64:c8:3b:f7:2d:31:46:9b:c5:a6:
0d:a1:2a:a9:f6:35:b7:27:24:3b:ae:2a:af:c4:ee:
55:7e:73:e6:33:0e:44:09:6d:b3:88:a2:c0:74:6c:
4d:3b:c6:53:04:c4:49:39:25:f1:f1:4e:8b:91:8e:
c5:e1:40:8a:d2:65:76:a1:64:b8:ad:b0:a5:3c:71:
6a:8a:53:b4:69:18:33:05:2a:c1:28:4f:7d:29:4e:
0f:71:01:be:08:1d:7b:17:57:2b:89:00:c1:cd:88:
54:3d:62:53:c9:87:bb:58:09:03:71:f8:6f:9f:43:
f2:46:5c:b0:e6:14:43:84:8f:01:ae:46:4a:61:35:
b2:77:f8:99:c1:31:54:1f:ab:83:82:99:c2:5d:a6:
f1:a6:71:23:fd:ec:36:ba:9c:6b:49:23:50:63:6e:
e3:7c:63:31:2c:68:7e:ab:8b:db:b0:bc:03:39:ad:
07:bb:cf:2d:15:34:cd:46:de:08:81:e7:b8:73:18:
11:8e:9f:e1:08:8b:55:3a:57:5e:9f:41:93:02:bb:
83:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:33:4C:E0:74:1C:D8:CB:C5:2D:9D:35:37:75:52:6F:30:19:BE:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/06f0edf4-50e6-3949-9a21-f6bb0d2f0313.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:04:26:65:16:30:f3:dd:57:86:03:84:96:62:73:88:7a:fc:
26:96:b4:e0:44:c4:34:d6:81:c1:7a:8e:e8:cf:10:39:66:cd:
46:18:78:7e:9d:52:32:a0:23:fd:1d:7d:ca:fe:11:c8:42:83:
f8:b5:59:6f:05:a4:bc:d8:ea:dd:86:b8:fc:ad:5e:12:5c:bb:
ac:4a:6d:63:5e:97:77:74:f3:ed:73:b4:eb:ec:1b:d4:20:c7:
65:0e:39:fe:2d:85:53:b1:fe:7b:47:5a:f9:9f:44:a0:88:13:
bd:5f:6f:c1:17:50:83:20:2e:1a:c9:81:06:29:46:0e:f2:d1:
7f:a8:a1:25:11:5d:df:f4:63:f0:b1:50:b8:7e:14:bc:8e:48:
96:55:d2:4b:c3:90:88:83:ab:aa:ee:3e:99:72:f7:49:d0:81:
c6:2f:51:04:61:a1:35:86:f1:e8:9e:61:4a:3d:3f:06:a8:18:
48:d4:47:ae:b8:af:ea:b9:fe:2e:30:18:f6:3f:de:c0:62:37:
f9:3c:22:c7:9f:63:f6:2f:c4:30:ec:c7:57:ff:ef:2a:59:37:
79:4c:30:d7:8d:58:12:f9:1c:51:d8:47:f6:cd:ed:03:0b:22:
2b:b1:a2:00:d7:cc:e7:78:f6:70:f3:87:63:3d:45:49:ed:fe:
f3:84:e9:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtkFaypqpAjGOAOTwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk
YjgxOWIzN2MtYjRkMi00MmY3LWI5OWYtMzMyZmNiODA1YWUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNTINpcYu529TkFuW5SK+pW6qbBd2ukmCSFa
1XwDAIWPXdsxUYKkkns+6lodxyrMsGTIO/ctMUabxaYNoSqp9jW3JyQ7riqvxO5V
fnPmMw5ECW2ziKLAdGxNO8ZTBMRJOSXx8U6LkY7F4UCK0mV2oWS4rbClPHFqilO0
aRgzBSrBKE99KU4PcQG+CB17F1criQDBzYhUPWJTyYe7WAkDcfhvn0PyRlyw5hRD
hI8BrkZKYTWyd/iZwTFUH6uDgpnCXabxpnEj/ew2upxrSSNQY27jfGMxLGh+q4vb
sLwDOa0Hu88tFTTNRt4Igee4cxgRjp/hCItVOlden0GTAruDCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDEzTOB0HNjLxS2dNTd1Um8wGb6jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDZmMGVkZjQtNTBlNi0z
OTQ5LTlhMjEtZjZiYjBkMmYwMzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIwEJmUWMPPdV4YDhJZic4h6/CaWtOBExDTWgcF6jujPEDlmzUYYeH6d
UjKgI/0dfcr+EchCg/i1WW8FpLzY6t2GuPytXhJcu6xKbWNel3d08+1ztOvsG9Qg
x2UOOf4thVOx/ntHWvmfRKCIE71fb8EXUIMgLhrJgQYpRg7y0X+ooSURXd/0Y/Cx
ULh+FLyOSJZV0kvDkIiDq6ruPply90nQgcYvUQRhoTWG8eieYUo9PwaoGEjUR664
r+q5/i4wGPY/3sBiN/k8IsefY/YvxDDsx1f/7ypZN3lMMNeNWBL5HFHYR/bN7QML
IiuxogDXzOd49nDzh2M9RUnt/vOE6YE=
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:18 2025 by rpki-client