Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/5c92f33f-ed63-3965-921b-f63d669ebe20.roa
File: 5c92f33f-ed63-3965-921b-f63d669ebe20.roa (raw, json)
Hash identifier: EC7ezC+69W1cPdonTsZhEhcjM7e++6sBVx+sROUe8AU=
Subject key identifier: 21:1C:1B:94:2F:76:D1:87:84:8B:9B:C9:8F:3D:47:A8:C4:6D:69:7E
Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial: 010D0C9F432858481F653396FE392D3BA4B4D700
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/5c92f33f-ed63-3965-921b-f63d669ebe20.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 6649
IP address blocks: 199.193.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:33:96:fe:39:2d:3b:a4:b4:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=51438e39-7b22-4ba8-b928-aad7c5e91541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:4c:79:18:17:e3:6f:54:e9:9e:e8:c7:73:41:
94:9f:6e:ee:f8:df:04:7d:f0:c2:9e:9b:75:af:98:
0c:f4:92:de:8d:6a:2e:57:f9:2b:a3:dd:32:63:c2:
3b:ff:35:a1:91:39:3b:71:7b:f7:6f:4d:f5:1b:fa:
e0:a1:9a:4a:6e:34:7e:28:e9:b2:3d:3d:02:a4:65:
ea:d5:ef:ae:16:b6:84:51:b9:35:39:0a:5d:01:0a:
20:bc:bf:38:1d:cd:0b:e3:f8:92:4d:ed:30:52:b9:
bf:9f:f8:06:0f:f9:0e:58:87:c0:38:d9:13:f5:06:
77:36:c1:43:78:02:06:9f:53:83:b8:4b:5e:0b:ff:
a4:f0:de:ee:1a:4b:29:91:38:61:ea:9a:d8:05:51:
0f:93:02:76:bb:ee:af:5f:e7:5c:bd:71:58:83:a1:
f4:a8:d9:38:f8:8f:61:f3:3b:1f:f0:61:0f:52:3f:
0d:88:57:d7:78:3e:28:fc:ef:cd:81:2c:89:0b:13:
c5:02:1c:28:b1:94:73:46:c5:a7:5c:2a:57:06:4d:
a9:37:ea:28:a1:f5:08:2c:22:cc:42:c8:68:60:ab:
e0:88:23:63:69:91:06:98:ff:1f:9b:c5:bc:d4:0c:
2e:0c:2c:09:24:16:ed:97:c4:98:2f:b0:44:74:30:
73:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1C:1B:94:2F:76:D1:87:84:8B:9B:C9:8F:3D:47:A8:C4:6D:69:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/5c92f33f-ed63-3965-921b-f63d669ebe20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
X509v3 Authority Key Identifier:
keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
sbgp-ipAddrBlock: critical
IPv4:
199.193.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:7f:1e:b2:1e:f1:b9:fc:ec:70:1d:11:e1:e4:4b:e8:13:42:
35:a9:51:12:71:8b:7e:0c:ee:1d:59:f3:05:0d:60:f3:f3:f1:
4c:22:33:e9:0a:da:52:0c:79:dc:61:e2:20:3a:b4:73:10:1e:
ff:be:17:85:d1:72:89:ad:6e:70:ee:78:7e:17:e5:e1:7f:c1:
e3:75:77:5a:7d:51:71:14:65:c7:5b:2b:40:ff:5c:a0:fe:27:
a2:92:86:45:0c:e9:22:c2:05:08:27:07:9d:c6:d9:5b:21:37:
8d:c7:bb:5a:7d:8a:75:d1:b4:fb:fc:19:1e:76:e3:65:df:8c:
10:a6:d1:09:fa:1c:06:78:30:dd:7b:78:12:5b:0e:f3:26:a3:
21:12:af:c1:73:26:76:1c:a0:9a:bf:b5:c3:68:a3:4d:21:67:
e5:78:61:95:bb:0a:4f:1c:36:d0:f5:9a:a5:14:61:83:db:c6:
de:2c:81:18:99:12:73:9a:fd:71:12:d7:46:e9:c8:ef:77:44:
40:94:e9:af:58:b7:79:13:be:84:06:0e:f9:81:4d:4d:4d:a1:
e0:36:97:82:47:a9:70:86:f5:17:32:36:67:d1:b4:f8:9b:76:
02:cb:3a:b4:07:7b:b3:b5:32:e7:c9:db:da:3b:f3:47:5d:de:
63:2b:57:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgfZTOW/jktO6S01wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI0MTIwNzAyMDAzOVoXDTI1MDMwNzAyMDAzOVowLzEtMCsGA1UEAxMk
NTE0MzhlMzktN2IyMi00YmE4LWI5MjgtYWFkN2M1ZTkxNTQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Ex5GBfjb1TpnujHc0GUn27u+N8EffDCnpt1
r5gM9JLejWouV/kro90yY8I7/zWhkTk7cXv3b031G/rgoZpKbjR+KOmyPT0CpGXq
1e+uFraEUbk1OQpdAQogvL84Hc0L4/iSTe0wUrm/n/gGD/kOWIfAONkT9QZ3NsFD
eAIGn1ODuEteC/+k8N7uGkspkThh6prYBVEPkwJ2u+6vX+dcvXFYg6H0qNk4+I9h
8zsf8GEPUj8NiFfXeD4o/O/NgSyJCxPFAhwosZRzRsWnXCpXBk2pN+ooofUILCLM
QshoYKvgiCNjaZEGmP8fm8W81AwuDCwJJBbtl8SYL7BEdDBznwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCEcG5QvdtGHhIubyY89R6jEbWl+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvNWM5MmYzM2YtZWQ2My0z
OTY1LTkyMWItZjYzZDY2OWViZTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8HuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFJ/HrIe8bn87HAdEeHkS+gTQjWpURJxi34M7h1Z8wUNYPPz8UwiM+kK
2lIMedxh4iA6tHMQHv++F4XRcomtbnDueH4X5eF/weN1d1p9UXEUZcdbK0D/XKD+
J6KShkUM6SLCBQgnB53G2VshN43Hu1p9inXRtPv8GR5242XfjBCm0Qn6HAZ4MN17
eBJbDvMmoyESr8FzJnYcoJq/tcNoo00hZ+V4YZW7Ck8cNtD1mqUUYYPbxt4sgRiZ
EnOa/XES10bpyO93RECU6a9Yt3kTvoQGDvmBTU1NoeA2l4JHqXCG9RcyNmfRtPib
dgLLOrQHe7O1MufJ29o780dd3mMrV94=
-----END CERTIFICATE-----
Generated at Wed Apr 30 08:21:00 2025 by rpki-client