Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/2ed55df2-5261-3406-ba62-c0b9b1e1c065.roa
File: 2ed55df2-5261-3406-ba62-c0b9b1e1c065.roa (raw, json)
Hash identifier: 42lPP73rpO8tjwk9jqXBMCVTWFSm3CaPp1cRKk2rmYs=
Subject key identifier: 83:0E:88:EF:7D:95:D5:4D:6B:6C:6B:95:84:EC:47:0C:18:72:08:CC
Certificate issuer: /CN=433ef7a7-1e53-4401-9dec-0da336641458
Certificate serial: 010D0C9F4328584812D538162F5ED43F6FC73C00
Authority key identifier: 15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/2ed55df2-5261-3406-ba62-c0b9b1e1c065.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 65104
IP address blocks: 192.197.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:38:16:2f:5e:d4:3f:6f:c7:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=433ef7a7-1e53-4401-9dec-0da336641458
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=917bb0bb-f4a7-4dc2-b901-14979e90ca4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:94:ed:98:fb:f3:ce:0e:87:26:e6:eb:23:59:
d6:34:1d:92:37:22:f3:d8:95:5b:fd:83:1b:ce:17:
f9:fc:0a:2f:54:92:27:f2:52:6b:93:f2:60:fa:9b:
b9:f6:8f:ee:87:55:21:67:4d:ee:30:06:3d:41:50:
cb:01:5c:89:d6:70:be:64:e2:8e:f6:b8:d5:bb:74:
23:a3:b7:6f:20:5a:ac:5e:6c:a0:2f:eb:67:31:28:
56:4c:7b:dd:fa:8b:07:3f:f2:a5:aa:0f:de:10:da:
72:08:c4:a2:eb:fa:1a:62:de:f9:85:59:af:d5:db:
82:9d:84:bc:47:3b:14:c5:52:84:99:92:78:3c:17:
20:50:0d:7f:57:07:47:59:03:79:1c:57:55:f5:0c:
3a:71:29:e2:58:96:37:95:24:fe:93:86:58:fd:d1:
26:1b:22:6b:95:32:ca:e7:e9:63:0f:4d:bb:d3:0c:
7f:1b:d6:6d:d3:eb:c0:36:f0:67:2f:ee:a9:11:18:
d6:09:a5:d7:cd:84:0d:30:46:16:3d:d9:d4:b0:dc:
ef:64:43:1d:b4:66:03:1c:87:e2:4e:8f:aa:a5:fc:
e2:71:28:23:31:2f:55:c6:51:b3:49:dd:1f:f9:6b:
81:58:42:b2:aa:d2:dd:48:68:e9:48:a5:7c:09:9a:
26:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0E:88:EF:7D:95:D5:4D:6B:6C:6B:95:84:EC:47:0C:18:72:08:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/2ed55df2-5261-3406-ba62-c0b9b1e1c065.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl
X509v3 Authority Key Identifier:
keyid:15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer
sbgp-ipAddrBlock: critical
IPv4:
192.197.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:7e:69:a4:d9:1f:c4:88:03:b8:3b:7d:e7:e2:26:dd:1d:b6:
70:ed:aa:c6:2a:4e:b8:08:ef:b2:77:25:7c:b0:37:0f:ae:98:
2f:39:c3:38:75:95:ae:94:22:af:8b:74:80:56:97:c3:0d:5f:
0b:6f:da:04:ba:23:a5:31:b9:83:27:df:4e:83:c1:0c:a7:01:
da:04:63:ef:7f:41:9c:f2:96:f8:57:66:7c:20:93:4e:f6:d7:
2c:d0:66:6d:cf:15:1c:80:4a:f5:54:3b:bc:93:9f:2c:b5:5d:
4d:46:d5:ae:42:7a:fa:07:fa:62:37:29:b3:5c:e8:26:00:f7:
17:bc:56:65:89:7b:0d:0c:2c:71:31:14:10:9a:6b:ed:70:3a:
74:66:46:9e:28:e4:4c:5e:57:75:42:96:ef:d1:bc:18:39:ac:
f6:89:94:c4:18:6d:36:18:3c:c6:c7:71:12:6a:94:d1:27:2b:
ed:c3:71:70:d3:8b:6b:88:80:4f:a3:51:22:da:01:f3:93:f1:
23:74:f0:ef:48:9b:c6:57:fe:a6:ca:b1:58:df:4f:c3:5e:63:
d4:f4:c4:42:0f:9b:24:33:da:e9:92:a0:e8:67:3c:21:62:02:
0d:2e:0a:74:7a:78:8f:50:4d:23:89:3c:b5:b9:6f:95:09:a4:
db:46:2b:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgS1TgWL17UP2/HPAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDMzZWY3YTctMWU1My00NDAxLTlkZWMtMGRhMzM2NjQx
NDU4MB4XDTI0MTIwMjE0MDA1MVoXDTI1MDMwMjE0MDA1MVowLzEtMCsGA1UEAxMk
OTE3YmIwYmItZjRhNy00ZGMyLWI5MDEtMTQ5NzllOTBjYTRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpTtmPvzzg6HJubrI1nWNB2SNyLz2JVb/YMb
zhf5/AovVJIn8lJrk/Jg+pu59o/uh1UhZ03uMAY9QVDLAVyJ1nC+ZOKO9rjVu3Qj
o7dvIFqsXmygL+tnMShWTHvd+osHP/Klqg/eENpyCMSi6/oaYt75hVmv1duCnYS8
RzsUxVKEmZJ4PBcgUA1/VwdHWQN5HFdV9Qw6cSniWJY3lST+k4ZY/dEmGyJrlTLK
5+ljD0270wx/G9Zt0+vANvBnL+6pERjWCaXXzYQNMEYWPdnUsNzvZEMdtGYDHIfi
To+qpfzicSgjMS9VxlGzSd0f+WuBWEKyqtLdSGjpSKV8CZomQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIMOiO99ldVNa2xrlYTsRwwYcgjMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80MzNl
ZjdhNy0xZTUzLTQ0MDEtOWRlYy0wZGEzMzY2NDE0NTgvMmVkNTVkZjItNTI2MS0z
NDA2LWJhNjItYzBiOWIxZTFjMDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDMzZWY3YTctMWU1My00NDAxLTlk
ZWMtMGRhMzM2NjQxNDU4LzQzM2VmN2E3LTFlNTMtNDQwMS05ZGVjLTBkYTMzNjY0
MTQ1OC5jcmwwHwYDVR0jBBgwFoAUFTCIyvk9B4N8aQIO08npMxuWMBgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS80MzNlZjdhNy0xZTUzLTQ0MDEtOWRlYy0wZGEz
MzY2NDE0NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMU8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHp+aaTZH8SIA7g7fefiJt0dtnDtqsYqTrgI77J3JXywNw+umC85wzh1
la6UIq+LdIBWl8MNXwtv2gS6I6UxuYMn306DwQynAdoEY+9/QZzylvhXZnwgk072
1yzQZm3PFRyASvVUO7yTnyy1XU1G1a5CevoH+mI3KbNc6CYA9xe8VmWJew0MLHEx
FBCaa+1wOnRmRp4o5ExeV3VClu/RvBg5rPaJlMQYbTYYPMbHcRJqlNEnK+3DcXDT
i2uIgE+jUSLaAfOT8SN08O9Im8ZX/qbKsVjfT8NeY9T0xEIPmyQz2umSoOhnPCFi
Ag0uCnR6eI9QTSOJPLW5b5UJpNtGKyA=
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:57:24 2025 by rpki-client