Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5256e48-88f9-413d-a1bf-e14eaab2e51b/76fd694a-9b12-33c3-95f0-cf5fb6e77a89.roa
File: 76fd694a-9b12-33c3-95f0-cf5fb6e77a89.roa (raw, json)
Hash identifier: hB4S8JGwJDHFKCmbYgJq24/ffHwnrukRb2t00l7Y2xg=
Subject key identifier: 82:2E:34:69:33:AA:59:60:AD:D9:F6:26:77:1C:DE:61:5F:F8:33:49
Certificate issuer: /CN=c5256e48-88f9-413d-a1bf-e14eaab2e51b
Certificate serial: 010D0C9F432858485B6AF7F53548656CE4D00F00
Authority key identifier: B9:88:57:D7:0A:19:65:04:8C:ED:4B:19:B2:24:E5:62:E2:77:8B:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5256e48-88f9-413d-a1bf-e14eaab2e51b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5256e48-88f9-413d-a1bf-e14eaab2e51b/76fd694a-9b12-33c3-95f0-cf5fb6e77a89.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 394414
IP address blocks: 192.154.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6a:f7:f5:35:48:65:6c:e4:d0:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5256e48-88f9-413d-a1bf-e14eaab2e51b
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=438c6982-5950-4604-b37d-9f181df362e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a6:92:8b:b9:92:fa:e5:4b:3d:bf:70:dd:25:
7f:48:f5:5e:5c:dc:95:ce:63:c2:55:c4:32:be:14:
c0:65:d4:13:03:d8:43:e8:f3:97:dd:18:f3:10:ae:
90:86:35:56:6b:60:99:57:d8:10:b4:b2:cd:6f:ef:
62:c5:df:ee:76:20:2a:c8:6b:79:50:02:7c:aa:93:
4e:34:34:0f:17:bd:2c:5f:8a:23:74:6e:8c:8e:60:
3d:2d:68:31:c4:46:f9:b3:ce:9a:31:c9:9d:b4:dc:
53:9c:10:27:6d:ff:48:16:bd:c6:44:aa:95:a8:74:
1d:6d:b9:d4:2f:fc:31:03:2f:f6:a2:ca:32:05:8a:
70:a6:91:9b:a2:84:05:a3:93:dd:c5:3a:2c:50:5d:
c5:84:f0:04:ae:46:d8:66:61:24:94:bb:8b:91:1a:
b1:61:0a:60:f0:cb:b3:23:20:1b:4c:e6:71:0c:6a:
52:36:0f:54:4d:70:b6:e1:7a:81:42:81:d4:af:3c:
1f:5b:e2:f8:46:11:be:96:bf:a3:42:6e:89:a3:1c:
36:dd:d5:fd:83:18:08:6b:fb:f6:fd:37:f3:76:fd:
5d:62:aa:b1:2a:37:01:59:a6:ff:d9:91:75:81:40:
1a:1f:9c:31:d0:ff:1b:7c:2a:76:fd:e8:77:d0:77:
aa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2E:34:69:33:AA:59:60:AD:D9:F6:26:77:1C:DE:61:5F:F8:33:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5256e48-88f9-413d-a1bf-e14eaab2e51b/76fd694a-9b12-33c3-95f0-cf5fb6e77a89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5256e48-88f9-413d-a1bf-e14eaab2e51b/c5256e48-88f9-413d-a1bf-e14eaab2e51b.crl
X509v3 Authority Key Identifier:
keyid:B9:88:57:D7:0A:19:65:04:8C:ED:4B:19:B2:24:E5:62:E2:77:8B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5256e48-88f9-413d-a1bf-e14eaab2e51b.cer
sbgp-ipAddrBlock: critical
IPv4:
192.154.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:4a:9e:3a:23:83:89:22:8a:2d:9b:fc:de:59:1b:a2:83:b9:
8a:14:bc:02:71:97:18:05:3f:de:dc:74:1f:5d:ca:c8:0a:ec:
0b:75:66:e9:9d:40:bf:c1:c8:2f:d8:58:56:8a:66:cc:a1:26:
87:62:74:81:58:fd:bb:ac:a8:25:a0:b4:5c:14:23:0d:5a:97:
cd:79:7d:7a:78:b9:c3:55:61:4a:95:cb:6a:3b:0d:50:99:17:
01:a3:40:6c:24:9a:1d:75:cd:5b:6a:23:a9:f7:16:0f:0c:42:
94:4e:d7:6d:bc:4b:4d:4f:f1:a9:dc:47:15:3a:b6:a5:af:fb:
f3:c8:4a:bd:f8:a6:ea:62:ab:3c:ed:1d:ad:08:f4:fb:53:29:
a9:00:1a:62:14:de:30:c3:89:7a:ed:48:a3:d7:d8:21:bc:e3:
a8:69:fe:d0:04:71:47:ef:50:f1:ad:f9:c6:8a:0c:80:2e:a2:
75:6f:60:0a:fa:b5:20:42:ac:2e:7c:08:e6:36:74:57:2a:ae:
ae:45:75:6c:ac:fa:7f:e1:ee:da:46:ff:ce:53:5e:3b:d2:ec:
af:7f:28:ea:6a:ff:4b:57:99:07:52:bb:95:83:b0:df:27:eb:
73:f9:ee:9a:70:f8:d7:a1:93:79:10:38:64:70:c2:7e:a4:95:
86:b2:80:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhbavf1NUhlbOTQDwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzUyNTZlNDgtODhmOS00MTNkLWExYmYtZTE0ZWFhYjJl
NTFiMB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk
NDM4YzY5ODItNTk1MC00NjA0LWIzN2QtOWYxODFkZjM2MmU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKaSi7mS+uVLPb9w3SV/SPVeXNyVzmPCVcQy
vhTAZdQTA9hD6POX3RjzEK6QhjVWa2CZV9gQtLLNb+9ixd/udiAqyGt5UAJ8qpNO
NDQPF70sX4ojdG6MjmA9LWgxxEb5s86aMcmdtNxTnBAnbf9IFr3GRKqVqHQdbbnU
L/wxAy/2osoyBYpwppGbooQFo5PdxTosUF3FhPAErkbYZmEklLuLkRqxYQpg8Muz
IyAbTOZxDGpSNg9UTXC24XqBQoHUrzwfW+L4RhG+lr+jQm6Joxw23dX9gxgIa/v2
/Tfzdv1dYqqxKjcBWab/2ZF1gUAaH5wx0P8bfCp2/eh30HeqBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIIuNGkzqllgrdn2Jncc3mFf+DNJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jNTI1
NmU0OC04OGY5LTQxM2QtYTFiZi1lMTRlYWFiMmU1MWIvNzZmZDY5NGEtOWIxMi0z
M2MzLTk1ZjAtY2Y1ZmI2ZTc3YTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzUyNTZlNDgtODhmOS00MTNkLWEx
YmYtZTE0ZWFhYjJlNTFiL2M1MjU2ZTQ4LTg4ZjktNDEzZC1hMWJmLWUxNGVhYWIy
ZTUxYi5jcmwwHwYDVR0jBBgwFoAUuYhX1woZZQSM7UsZsiTlYuJ3i2QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9jNTI1NmU0OC04OGY5LTQxM2QtYTFiZi1lMTRl
YWFiMmU1MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJoDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEhKnjojg4kiii2b/N5ZG6KDuYoUvAJxlxgFP97cdB9dysgK7At1Zumd
QL/ByC/YWFaKZsyhJodidIFY/busqCWgtFwUIw1al815fXp4ucNVYUqVy2o7DVCZ
FwGjQGwkmh11zVtqI6n3Fg8MQpRO1228S01P8ancRxU6tqWv+/PISr34pupiqzzt
Ha0I9PtTKakAGmIU3jDDiXrtSKPX2CG846hp/tAEcUfvUPGt+caKDIAuonVvYAr6
tSBCrC58COY2dFcqrq5FdWys+n/h7tpG/85TXjvS7K9/KOpq/0tXmQdSu5WDsN8n
63P57ppw+Nehk3kQOGRwwn6klYaygLw=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:13:18 2025 by rpki-client