Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/affcab7d-6094-3982-8b34-38221efc1254.roa
File: affcab7d-6094-3982-8b34-38221efc1254.roa (raw, json)
Hash identifier: AV2g7xdE2tYBVD6yYOV8ne+rWIkTmYbjmTfaNm3Mr/U=
Subject key identifier: 1A:92:63:CA:0D:6A:1D:75:96:CE:14:C6:73:09:43:D6:A5:4A:68:31
Certificate issuer: /CN=f0b45f79-612d-4c7e-8c24-5f64ac75c113
Certificate serial: 010D0C9F4328584832F039567B3C4605FE45FAC0
Authority key identifier: C2:00:C2:3A:7C:C9:49:2C:CE:F7:9C:29:EC:5E:9D:60:97:58:62:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/affcab7d-6094-3982-8b34-38221efc1254.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 8075
IP address blocks: 199.255.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:39:56:7b:3c:46:05:fe:45:fa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0b45f79-612d-4c7e-8c24-5f64ac75c113
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=d37bf965-0c60-4b5c-8ac8-9550c00ab6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:41:b7:03:f5:be:aa:29:48:f5:3d:32:b0:0a:
19:f9:3f:b8:0d:7b:e9:40:c6:64:b1:6a:99:f5:56:
58:61:94:63:ed:73:65:07:ef:6e:09:c6:7d:88:19:
01:3d:dd:67:2d:9a:bd:fd:0a:b4:0c:80:78:e0:3a:
24:8a:55:1e:66:58:ca:c0:72:28:5a:9a:43:49:77:
db:07:c8:95:df:d2:cf:60:52:51:2f:9c:b9:04:62:
d6:54:ff:cc:77:82:49:c3:4d:29:1e:81:03:7c:ed:
9d:34:af:c9:aa:e2:be:7a:fa:c9:72:3f:f5:f2:08:
91:16:92:64:b7:8c:07:63:a0:81:6a:ee:3e:3c:3b:
e3:19:5b:94:3b:cf:95:c7:35:14:85:4e:2b:52:ad:
75:73:c2:65:0f:f3:2e:d0:73:e1:6e:f8:3b:dc:0f:
6d:c7:00:66:e1:ab:52:09:38:89:37:cd:47:34:68:
7a:1f:37:72:07:6f:9a:25:68:7b:98:41:7f:ff:7f:
ef:f5:76:92:58:a4:5a:eb:e0:9c:35:09:d1:f2:7d:
75:17:83:49:ea:dc:87:f5:33:fd:14:9f:a1:9e:59:
05:95:a6:99:05:37:c4:56:de:6c:6e:d9:42:8b:e5:
56:6e:12:03:8a:2b:bd:5d:5a:2c:a3:08:56:6d:79:
3b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:92:63:CA:0D:6A:1D:75:96:CE:14:C6:73:09:43:D6:A5:4A:68:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/affcab7d-6094-3982-8b34-38221efc1254.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113/f0b45f79-612d-4c7e-8c24-5f64ac75c113.crl
X509v3 Authority Key Identifier:
keyid:C2:00:C2:3A:7C:C9:49:2C:CE:F7:9C:29:EC:5E:9D:60:97:58:62:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f0b45f79-612d-4c7e-8c24-5f64ac75c113.cer
sbgp-ipAddrBlock: critical
IPv4:
199.255.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:28:97:38:8f:61:a4:3e:11:cd:30:33:58:3d:f8:ce:58:18:
0e:a0:d4:d5:82:53:af:f6:bf:cb:02:08:61:fa:0f:9d:b5:54:
b1:f1:0f:74:0f:8b:55:e3:f3:5c:52:2a:c1:23:09:8b:28:9d:
92:75:a9:15:c2:ed:3b:25:de:ef:bb:62:4f:22:c9:27:aa:56:
d6:98:e8:aa:06:74:37:52:80:1e:bd:a6:bb:54:f0:64:c1:d2:
e8:97:23:45:f2:ee:3a:6d:d3:17:e1:14:60:a4:86:63:b7:40:
c8:7c:d6:3f:76:ea:c7:59:18:30:cf:da:f4:ca:e0:2b:64:17:
69:89:83:6f:e5:01:50:b8:83:95:fd:40:61:2f:e1:e0:97:88:
ae:63:11:86:b1:c2:eb:b8:f8:5b:19:0a:14:6d:42:dd:a9:9c:
6f:26:36:96:b5:1c:6b:03:a4:8c:f6:71:16:95:34:5b:d9:ec:
46:39:7c:73:62:74:96:85:2c:bd:36:81:59:6b:22:bd:46:ee:
f6:bf:43:5d:1a:97:23:56:65:d1:2c:65:2a:28:cf:66:d4:69:
ad:f6:12:4a:b8:0e:9f:d0:33:db:25:8d:20:89:eb:47:24:b0:
a0:f8:11:66:1c:42:17:44:db:18:55:e4:ea:3d:08:40:35:3c:
ad:b2:82:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8DlWezxGBf5F+sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjBiNDVmNzktNjEyZC00YzdlLThjMjQtNWY2NGFjNzVj
MTEzMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
ZDM3YmY5NjUtMGM2MC00YjVjLThhYzgtOTU1MGMwMGFiNmRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0G3A/W+qilI9T0ysAoZ+T+4DXvpQMZksWqZ
9VZYYZRj7XNlB+9uCcZ9iBkBPd1nLZq9/Qq0DIB44DokilUeZljKwHIoWppDSXfb
B8iV39LPYFJRL5y5BGLWVP/Md4JJw00pHoEDfO2dNK/JquK+evrJcj/18giRFpJk
t4wHY6CBau4+PDvjGVuUO8+VxzUUhU4rUq11c8JlD/Mu0HPhbvg73A9txwBm4atS
CTiJN81HNGh6HzdyB2+aJWh7mEF//3/v9XaSWKRa6+CcNQnR8n11F4NJ6tyH9TP9
FJ+hnlkFlaaZBTfEVt5sbtlCi+VWbhIDiiu9XVosowhWbXk7AQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBqSY8oNah11ls4UxnMJQ9alSmgxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mMGI0
NWY3OS02MTJkLTRjN2UtOGMyNC01ZjY0YWM3NWMxMTMvYWZmY2FiN2QtNjA5NC0z
OTgyLThiMzQtMzgyMjFlZmMxMjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjBiNDVmNzktNjEyZC00YzdlLThj
MjQtNWY2NGFjNzVjMTEzL2YwYjQ1Zjc5LTYxMmQtNGM3ZS04YzI0LTVmNjRhYzc1
YzExMy5jcmwwHwYDVR0jBBgwFoAUwgDCOnzJSSzO95wp7F6dYJdYYncwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mMGI0NWY3OS02MTJkLTRjN2UtOGMyNC01ZjY0
YWM3NWMxMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx//9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADYolziPYaQ+Ec0wM1g9+M5YGA6g1NWCU6/2v8sCCGH6D521VLHxD3QP
i1Xj81xSKsEjCYsonZJ1qRXC7Tsl3u+7Yk8iySeqVtaY6KoGdDdSgB69prtU8GTB
0uiXI0Xy7jpt0xfhFGCkhmO3QMh81j926sdZGDDP2vTK4CtkF2mJg2/lAVC4g5X9
QGEv4eCXiK5jEYaxwuu4+FsZChRtQt2pnG8mNpa1HGsDpIz2cRaVNFvZ7EY5fHNi
dJaFLL02gVlrIr1G7va/Q10alyNWZdEsZSooz2bUaa32Ekq4Dp/QM9sljSCJ60ck
sKD4EWYcQhdE2xhV5Oo9CEA1PK2ygv8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:23 2025 by rpki-client