Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/4f854a41-341c-3751-a8f4-828af737083f.roa
File: 4f854a41-341c-3751-a8f4-828af737083f.roa (raw, json)
Hash identifier: 3/7Bx7XdA7fm3UOo0pt98qBxGnK9BVAn/DugkvMng0E=
Subject key identifier: 8F:2E:49:FD:78:7F:F4:81:99:0B:37:D1:E4:2E:AC:39:6B:8F:B3:26
Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial: 010D0C9F432858485B6AF776E6C598594AEFFA00
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/4f854a41-341c-3751-a8f4-828af737083f.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 29802
IP address blocks: 91.191.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6a:f7:76:e6:c5:98:59:4a:ef:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=9e9b623e-0cd2-4353-993e-5b959ea2f877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d6:dc:9c:f3:b0:9c:28:d7:fa:a4:1c:d8:13:
e5:bf:cd:66:e7:c4:a6:28:c8:98:5c:f5:1d:80:90:
71:7e:7d:a0:d0:84:cd:2d:62:21:59:c4:f0:b6:f6:
f3:32:59:08:09:2f:b3:ed:a6:db:8c:61:40:03:4b:
dd:77:94:c9:de:2d:84:eb:ed:cf:26:65:52:27:b4:
82:09:cf:61:ba:96:59:b7:f7:60:84:d2:75:c1:f9:
73:4b:98:c6:79:e7:fd:db:46:bb:fb:5f:ef:a8:30:
90:30:02:81:61:ba:cc:e7:59:48:0d:05:0e:d9:4c:
2e:ee:44:75:0c:de:c7:ae:f0:01:94:a7:86:78:11:
e4:ac:22:68:43:62:aa:e4:3e:f5:d4:6a:75:86:47:
3e:b5:8b:f5:af:f9:2d:c2:d6:ec:e6:26:3e:8e:3a:
0c:9e:e9:ca:23:19:2d:a2:05:bf:7f:99:1a:d9:aa:
a8:c8:de:24:83:c6:2d:1f:0d:2e:2f:df:75:5e:4e:
a8:c4:c0:16:18:62:89:54:08:c1:20:1a:49:e2:29:
8f:a9:a8:8d:18:4e:f1:4a:9e:35:8d:ff:bb:46:07:
51:21:9d:88:49:65:3e:39:32:5b:4a:66:ae:c7:a1:
95:a5:6a:89:1e:e0:5d:17:8e:dd:38:8b:df:ef:93:
99:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2E:49:FD:78:7F:F4:81:99:0B:37:D1:E4:2E:AC:39:6B:8F:B3:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/4f854a41-341c-3751-a8f4-828af737083f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
X509v3 Authority Key Identifier:
keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
sbgp-ipAddrBlock: critical
IPv4:
91.191.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:e2:30:8f:34:07:fc:ca:db:1c:9d:18:fe:25:91:14:d9:a1:
f3:a7:f0:61:5f:f7:51:ec:29:fd:69:4a:81:fb:25:46:1f:b1:
63:e9:fa:46:a0:ee:50:40:b7:0f:60:ce:e5:c7:a8:8e:e6:c8:
0c:1a:34:00:41:a6:9e:e4:d8:30:85:95:6c:0e:47:a7:1c:d7:
c3:c2:2e:1b:18:c3:ec:5c:4e:9e:d6:cc:3a:68:3f:2c:3a:4f:
ad:0a:f3:9a:81:bd:c7:02:5c:59:8f:b9:b3:d6:98:ef:98:8c:
d5:6b:a4:cd:81:5a:fe:70:bf:de:c8:9d:49:db:03:1c:7a:54:
7a:23:41:fa:5f:d2:1f:b5:2d:6d:05:0b:66:b6:aa:7b:98:45:
e1:51:f6:14:b3:ce:f2:6c:b2:4a:0e:be:9f:e3:48:bd:4e:bf:
5a:94:00:0e:c1:25:67:0b:2a:bc:c1:76:eb:21:3a:1d:c8:99:
ba:c6:5f:77:23:6e:c2:84:91:46:67:ae:ed:4f:08:f6:68:58:
52:05:b0:b6:29:29:f7:38:80:0c:8c:e0:b2:86:ab:f4:e0:d3:
c6:bc:b9:fc:c5:34:0a:ba:46:f3:9d:2d:fc:b7:bf:db:cc:51:
e9:aa:60:59:ed:68:fd:93:a1:41:94:e5:54:a6:d8:fe:4a:20:
d2:f1:11:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhbavd25sWYWUrv+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz
ZjFiMB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk
OWU5YjYyM2UtMGNkMi00MzUzLTk5M2UtNWI5NTllYTJmODc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9bcnPOwnCjX+qQc2BPlv81m58SmKMiYXPUd
gJBxfn2g0ITNLWIhWcTwtvbzMlkICS+z7abbjGFAA0vdd5TJ3i2E6+3PJmVSJ7SC
Cc9hupZZt/dghNJ1wflzS5jGeef920a7+1/vqDCQMAKBYbrM51lIDQUO2Uwu7kR1
DN7HrvABlKeGeBHkrCJoQ2Kq5D711Gp1hkc+tYv1r/ktwtbs5iY+jjoMnunKIxkt
ogW/f5ka2aqoyN4kg8YtHw0uL991Xk6oxMAWGGKJVAjBIBpJ4imPqaiNGE7xSp41
jf+7RgdRIZ2ISWU+OTJbSmaux6GVpWqJHuBdF47dOIvf75OZ4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI8uSf14f/SBmQs30eQurDlrj7MmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy
MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvNGY4NTRhNDEtMzQxYy0z
NzUxLWE4ZjQtODI4YWY3MzcwODNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli
N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi
M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy
NzkyYjNmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW7/QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFfiMI80B/zK2xydGP4lkRTZofOn8GFf91HsKf1pSoH7JUYfsWPp+kag
7lBAtw9gzuXHqI7myAwaNABBpp7k2DCFlWwOR6cc18PCLhsYw+xcTp7WzDpoPyw6
T60K85qBvccCXFmPubPWmO+YjNVrpM2BWv5wv97InUnbAxx6VHojQfpf0h+1LW0F
C2a2qnuYReFR9hSzzvJsskoOvp/jSL1Ov1qUAA7BJWcLKrzBdushOh3ImbrGX3cj
bsKEkUZnru1PCPZoWFIFsLYpKfc4gAyM4LKGq/Tg08a8ufzFNAq6RvOdLfy3v9vM
UemqYFntaP2ToUGU5VSm2P5KINLxEQs=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:21:16 2025 by rpki-client