Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/41c2f58e-b9d8-3806-973c-7e6256c0f28f.roa
File: 41c2f58e-b9d8-3806-973c-7e6256c0f28f.roa (raw, json)
Hash identifier: agXJoAbn8ZNIsH5dY2ZPB5sZq3LP7Kmjsdq06ToFlt0=
Subject key identifier: E9:89:19:8F:41:6B:74:B4:17:80:6A:44:AF:6E:29:98:F7:CF:4A:D9
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848222FE29BEB6E9CBA2274A200
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/41c2f58e-b9d8-3806-973c-7e6256c0f28f.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 3223
IP address blocks: 192.253.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:e2:9b:eb:6e:9c:ba:22:74:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=cd2878fe-775c-405c-bf23-b30d50b6f01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:56:ee:9f:32:10:a6:3a:21:bb:04:5c:bd:6c:
2f:4e:7b:32:c8:2a:dd:89:2f:da:8f:1a:b2:d3:79:
41:43:a0:4e:1a:8e:18:18:ac:08:8a:c5:81:29:85:
d0:06:77:07:a8:40:32:2e:f2:13:16:d7:fa:0f:c1:
92:24:f4:a3:7a:41:d1:7d:6c:84:ba:e0:68:61:84:
5b:f6:c9:fa:ee:38:df:3d:ce:74:ec:75:65:96:b7:
01:b1:7f:b9:c0:13:fc:0a:df:c9:b6:71:ec:53:25:
8e:5c:7e:15:78:3e:2f:9a:07:3b:cd:98:2d:cd:8c:
78:b5:29:78:1e:c1:bf:5a:18:0c:e0:0a:1c:a2:fd:
de:c8:a6:af:72:26:64:ec:4e:62:3b:6a:33:fd:df:
33:aa:bb:97:e8:f9:18:c3:9f:6d:42:b3:ca:0d:1c:
ce:95:1a:61:81:b6:99:5a:30:b2:0d:98:51:a2:4d:
b2:4e:82:c1:3d:1c:9a:c1:7c:cf:46:4f:ee:b7:18:
3f:5b:9e:c3:4d:05:1a:0f:51:03:e2:15:51:64:75:
0e:a7:fa:da:83:42:da:19:5b:b5:f5:4a:4e:94:68:
2d:90:c4:71:74:94:4a:ca:42:01:9d:ba:a3:8e:d7:
fe:6b:73:5f:50:0d:fd:49:9b:09:c2:59:e9:22:60:
ee:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:89:19:8F:41:6B:74:B4:17:80:6A:44:AF:6E:29:98:F7:CF:4A:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/41c2f58e-b9d8-3806-973c-7e6256c0f28f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
192.253.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:e2:63:78:45:74:8a:1f:c9:92:25:e5:21:f8:fb:df:2c:9b:
52:75:56:4a:fc:c0:2f:dd:2f:4f:b8:33:cb:50:d8:7d:e5:6a:
76:56:d8:39:7d:2c:1c:0b:41:fa:3e:58:95:80:04:2a:fd:29:
ba:cd:11:ed:0b:1a:2a:4e:63:0f:3d:83:c4:f0:ad:9a:bd:0e:
57:b7:d9:55:8b:d2:33:21:ae:22:16:0f:38:e7:50:5b:bd:ae:
64:79:20:52:e0:60:bb:50:9e:31:1b:f1:22:64:f2:b9:f5:28:
6f:89:29:a9:28:bd:01:6b:c0:dd:95:08:28:03:13:b3:dc:16:
bc:00:46:44:23:37:b8:9a:33:82:bf:e6:3c:c5:fa:44:ef:b6:
c6:e4:a7:88:94:c9:8b:60:bd:39:df:09:09:e1:84:bb:93:92:
21:7d:3b:60:2f:f4:6e:72:50:5d:5a:70:30:9b:a5:a5:d5:29:
8a:e6:ab:77:18:7d:9e:f6:8a:70:07:df:f9:5a:63:e3:37:93:
4a:94:d0:21:09:8f:dd:4d:c9:93:29:61:8a:55:58:b2:d3:2c:
a1:7b:31:6b:f6:05:d0:6d:6d:e3:d1:e7:e0:fd:a8:9a:b5:9d:
e4:42:d2:18:40:88:71:c1:8d:97:83:23:e3:d0:1b:65:2f:48:
d3:15:88:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgiL+Kb626cuiJ0ogAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MTIwODAyMDAzOVoXDTI1MDMwODAyMDAzOVowLzEtMCsGA1UEAxMk
Y2QyODc4ZmUtNzc1Yy00MDVjLWJmMjMtYjMwZDUwYjZmMDFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVbunzIQpjohuwRcvWwvTnsyyCrdiS/ajxqy
03lBQ6BOGo4YGKwIisWBKYXQBncHqEAyLvITFtf6D8GSJPSjekHRfWyEuuBoYYRb
9sn67jjfPc507HVllrcBsX+5wBP8Ct/JtnHsUyWOXH4VeD4vmgc7zZgtzYx4tSl4
HsG/WhgM4Aocov3eyKavciZk7E5iO2oz/d8zqruX6PkYw59tQrPKDRzOlRphgbaZ
WjCyDZhRok2yToLBPRyawXzPRk/utxg/W57DTQUaD1ED4hVRZHUOp/rag0LaGVu1
9UpOlGgtkMRxdJRKykIBnbqjjtf+a3NfUA39SZsJwlnpImDuVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOmJGY9Ba3S0F4BqRK9uKZj3z0rZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDFjMmY1OGUtYjlkOC0z
ODA2LTk3M2MtN2U2MjU2YzBmMjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP31MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAXiY3hFdIofyZIl5SH4+98sm1J1Vkr8wC/dL0+4M8tQ2H3lanZW2Dl9
LBwLQfo+WJWABCr9KbrNEe0LGipOYw89g8TwrZq9Dle32VWL0jMhriIWDzjnUFu9
rmR5IFLgYLtQnjEb8SJk8rn1KG+JKakovQFrwN2VCCgDE7PcFrwARkQjN7iaM4K/
5jzF+kTvtsbkp4iUyYtgvTnfCQnhhLuTkiF9O2Av9G5yUF1acDCbpaXVKYrmq3cY
fZ72inAH3/laY+M3k0qU0CEJj91NyZMpYYpVWLLTLKF7MWv2BdBtbePR5+D9qJq1
neRC0hhAiHHBjZeDI+PQG2UvSNMViOI=
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:25:20 2025 by rpki-client