Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/3539c781-77b7-3d87-9f79-249dab3df0e0.roa
File: 3539c781-77b7-3d87-9f79-249dab3df0e0.roa (raw, json)
Hash identifier: nypL/B2hdkRR+ZYcFGStxyWCSw1+qL9SHow4LMwXsSI=
Subject key identifier: BE:43:54:E2:FE:D1:B3:56:29:AF:46:7A:CF:79:1B:45:AC:11:1C:E9
Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial: 010D0C9F432858486695B94D0C33E828B60B9780
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/3539c781-77b7-3d87-9f79-249dab3df0e0.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 29802
IP address blocks: 199.119.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:b9:4d:0c:33:e8:28:b6:0b:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=c055860b-fabe-4aa3-af3b-616ea31da0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bd:b5:96:dc:0a:c7:be:20:40:69:c0:18:e8:
b8:ea:2e:8c:56:2a:e6:46:2d:d8:c6:cb:a4:1a:87:
e2:d5:60:93:f9:90:de:9b:02:0b:17:13:d4:31:c8:
7a:83:b8:c9:55:91:a7:9b:f2:4e:5a:7c:40:2f:ae:
0e:17:d2:9c:08:d4:3f:37:ad:f1:d9:57:f1:79:93:
72:cc:b0:09:87:78:d6:76:f1:5a:05:aa:95:33:a6:
85:e7:a7:4f:d1:b3:d1:f4:41:29:bd:18:b5:27:4d:
a4:6d:58:af:e4:78:54:34:de:62:d5:12:49:72:ea:
4a:a4:c0:ea:42:00:af:0c:03:3e:fc:91:8e:0f:99:
0a:b4:d9:ac:db:91:1e:65:11:05:14:9c:e5:2e:b1:
bf:1b:0a:62:8d:78:10:58:ea:98:18:c9:8c:13:a1:
ec:6d:2f:a4:3f:58:4f:05:36:50:89:e6:07:4c:4a:
9c:d2:61:2c:ea:3e:15:47:21:3e:26:85:19:0c:31:
f4:6a:c4:77:37:3d:d7:ac:f8:d0:ec:a8:2a:44:f4:
7b:80:bd:08:44:eb:ce:7c:39:82:63:72:fb:f7:85:
22:7d:1c:42:eb:69:d6:5d:8e:ca:48:2f:a3:25:77:
fe:cc:26:81:d2:95:c1:3a:2d:7e:96:af:aa:b6:7a:
a3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:43:54:E2:FE:D1:B3:56:29:AF:46:7A:CF:79:1B:45:AC:11:1C:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/3539c781-77b7-3d87-9f79-249dab3df0e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
X509v3 Authority Key Identifier:
keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
sbgp-ipAddrBlock: critical
IPv4:
199.119.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:db:fd:15:f6:37:41:a2:a9:6e:5b:07:54:08:a7:f4:d8:4d:
00:9e:2e:6d:e4:15:12:b0:c8:77:51:5d:bc:6b:a0:67:26:4f:
c2:3f:38:04:65:fe:04:1e:ad:e0:fb:25:43:87:c7:bb:60:f5:
f9:ce:de:e7:f4:36:94:87:5e:ca:4f:b2:15:97:32:2e:96:28:
fb:7f:d2:1d:45:15:50:47:47:e3:a4:23:50:0b:70:f3:84:f3:
9f:ac:cd:33:e5:8f:cc:ac:67:fd:3d:01:d5:2c:fb:4c:52:f5:
8e:42:d6:2b:d5:31:6d:89:63:11:98:5d:28:68:de:38:84:0e:
5b:df:0c:3e:f7:d7:44:a3:d8:9f:b3:c9:61:67:4a:4b:b4:76:
03:a8:79:56:91:8a:cf:b2:44:3f:35:33:2d:12:68:3a:0b:fe:
2b:39:63:1a:f6:ca:2c:78:9a:0c:f3:66:4f:4b:d7:4e:9e:74:
46:02:d0:f4:c3:af:ed:d8:d3:04:df:2f:61:15:84:99:e8:92:
3a:52:59:4b:70:e6:29:2d:0c:4a:61:8f:48:ce:f7:0f:90:bc:
73:1d:9b:b3:f1:9e:c6:3c:82:62:22:e5:c3:c7:0d:0e:60:4b:
ff:5c:0b:74:f0:8b:77:14:0a:30:07:34:b2:c5:b9:20:d5:e4:
c8:2e:c3:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhmlblNDDPoKLYLl4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz
ZjFiMB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk
YzA1NTg2MGItZmFiZS00YWEzLWFmM2ItNjE2ZWEzMWRhMGU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr21ltwKx74gQGnAGOi46i6MVirmRi3Yxsuk
Gofi1WCT+ZDemwILFxPUMch6g7jJVZGnm/JOWnxAL64OF9KcCNQ/N63x2VfxeZNy
zLAJh3jWdvFaBaqVM6aF56dP0bPR9EEpvRi1J02kbViv5HhUNN5i1RJJcupKpMDq
QgCvDAM+/JGOD5kKtNms25EeZREFFJzlLrG/GwpijXgQWOqYGMmME6HsbS+kP1hP
BTZQieYHTEqc0mEs6j4VRyE+JoUZDDH0asR3Nz3XrPjQ7KgqRPR7gL0IROvOfDmC
Y3L794UifRxC62nWXY7KSC+jJXf+zCaB0pXBOi1+lq+qtnqjJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL5DVOL+0bNWKa9Ges95G0WsERzpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy
MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMzUzOWM3ODEtNzdiNy0z
ZDg3LTlmNzktMjQ5ZGFiM2RmMGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli
N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi
M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy
NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx3dkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA7b/RX2N0GiqW5bB1QIp/TYTQCeLm3kFRKwyHdRXbxroGcmT8I/OARl
/gQereD7JUOHx7tg9fnO3uf0NpSHXspPshWXMi6WKPt/0h1FFVBHR+OkI1ALcPOE
85+szTPlj8ysZ/09AdUs+0xS9Y5C1ivVMW2JYxGYXSho3jiEDlvfDD7310Sj2J+z
yWFnSku0dgOoeVaRis+yRD81My0SaDoL/is5Yxr2yix4mgzzZk9L106edEYC0PTD
r+3Y0wTfL2EVhJnokjpSWUtw5iktDEphj0jO9w+QvHMdm7PxnsY8gmIi5cPHDQ5g
S/9cC3Twi3cUCjAHNLLFuSDV5Mguw3Q=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:19:10 2025 by rpki-client