Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b10e56b6-546d-3be0-b675-d61e616393d8.roa
File: b10e56b6-546d-3be0-b675-d61e616393d8.roa (raw, json)
Hash identifier: DSLQxOog2yNKeZDHPnFZ8miqudm9/oIqSV1F1lnUnmU=
Subject key identifier: E5:04:ED:62:FE:67:C4:4B:17:BC:23:87:81:20:20:17:6F:8C:20:57
Certificate issuer: /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
Certificate serial: 010D0C9F432858483E1AB65AEA86E78DF256AA80
Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b10e56b6-546d-3be0-b675-d61e616393d8.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 11052
IP address blocks: 199.249.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:b6:5a:ea:86:e7:8d:f2:56:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=76e3c509-9ae0-4f87-ace2-9198c6a77a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:71:68:e8:e2:ea:2a:ed:86:11:40:5a:b8:5d:
4e:85:aa:6e:19:0a:f0:6a:98:8e:d6:7b:60:11:71:
1a:6c:1b:b2:90:39:14:26:8d:37:1d:4c:6c:c9:25:
f3:75:a2:85:f7:97:fd:87:08:46:a7:81:65:2c:8e:
48:65:fc:7e:5d:21:9e:28:f2:3b:37:37:72:31:71:
ef:cc:a0:23:08:ae:b3:6a:e8:11:db:db:5e:c4:7a:
06:1a:2d:71:4a:c7:b1:80:d7:6a:64:5a:14:8a:f5:
fe:98:9a:35:75:e5:e0:7a:87:a9:69:09:d7:12:4e:
03:c0:fc:e7:e9:0e:e1:49:c2:54:50:3e:d5:2b:b0:
21:ab:8e:53:70:6a:c0:74:d9:57:1b:59:c1:e8:32:
90:90:43:19:ef:f7:42:fe:1d:d6:d9:c2:b0:ac:35:
12:73:d6:af:2f:99:b6:a3:ae:79:bc:ea:5c:e7:b6:
22:73:47:93:04:d2:86:c8:d3:a5:f6:a6:c9:e9:c5:
73:5e:c4:44:f6:62:49:c7:49:e9:4e:07:61:5e:3b:
90:31:20:d2:63:99:b0:bd:1e:b9:68:fe:cc:ee:fc:
5d:5c:b5:1e:ac:ae:3d:78:48:8d:ee:bf:fb:d1:4e:
69:d4:5d:b1:89:9d:d7:fc:bf:44:e8:0f:99:87:d0:
aa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:04:ED:62:FE:67:C4:4B:17:BC:23:87:81:20:20:17:6F:8C:20:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b10e56b6-546d-3be0-b675-d61e616393d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl
X509v3 Authority Key Identifier:
keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
sbgp-ipAddrBlock: critical
IPv4:
199.249.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:d1:73:06:55:bb:6d:90:ca:7c:05:ff:ec:ae:26:a6:d7:fe:
2a:5f:8a:c5:4a:2e:5c:94:f6:7c:e4:09:b9:3b:31:af:c7:dd:
20:96:74:da:86:21:50:46:6f:35:c7:c1:65:4c:1c:87:e0:82:
a4:5a:61:7c:c8:72:cc:a9:73:9f:b3:89:82:8c:1e:c0:6a:4c:
f4:33:c8:45:d2:48:82:fa:b9:14:bc:41:a2:e5:a0:10:f1:95:
3d:f9:0a:75:d1:fc:0d:99:16:9e:18:9f:bb:17:1e:54:57:15:
90:a9:10:55:3a:95:48:f2:f1:a6:46:f0:33:b1:1f:72:fb:75:
88:44:c5:f0:7e:d5:9e:c1:24:c3:24:23:6f:7f:1c:7b:8b:2b:
86:4e:00:55:86:b3:47:a9:5e:07:cf:fb:00:71:6b:d0:2b:3f:
05:25:b7:e6:84:e4:25:0d:4f:fc:3c:61:1e:a2:28:90:52:e3:
82:4d:0e:f7:04:0a:ca:08:1a:84:73:7c:c9:5c:c7:73:7d:ba:
14:e9:ca:d7:c3:fd:f5:55:36:4e:45:2b:37:49:66:40:ce:f3:
4f:7a:c6:75:5e:8d:a4:1b:a5:08:3a:ac:29:1c:f4:6a:be:5c:
a1:96:53:48:79:62:ee:23:c3:3c:f0:02:3f:12:1f:cc:01:f7:
bf:3d:09:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+GrZa6obnjfJWqoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk4NTEyMmUtZjJmZi00MzQ5LThlN2ItZDYwNGVlMjU3
N2YxMB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk
NzZlM2M1MDktOWFlMC00Zjg3LWFjZTItOTE5OGM2YTc3YTE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3Fo6OLqKu2GEUBauF1OhapuGQrwapiO1ntg
EXEabBuykDkUJo03HUxsySXzdaKF95f9hwhGp4FlLI5IZfx+XSGeKPI7NzdyMXHv
zKAjCK6zaugR29texHoGGi1xSsexgNdqZFoUivX+mJo1deXgeoepaQnXEk4DwPzn
6Q7hScJUUD7VK7Ahq45TcGrAdNlXG1nB6DKQkEMZ7/dC/h3W2cKwrDUSc9avL5m2
o655vOpc57Yic0eTBNKGyNOl9qbJ6cVzXsRE9mJJx0npTgdhXjuQMSDSY5mwvR65
aP7M7vxdXLUerK49eEiN7r/70U5p1F2xiZ3X/L9E6A+Zh9CqrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOUE7WL+Z8RLF7wjh4EgIBdvjCBXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iOTg1
MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0ZWUyNTc3ZjEvYjEwZTU2YjYtNTQ2ZC0z
YmUwLWI2NzUtZDYxZTYxNjM5M2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjk4NTEyMmUtZjJmZi00MzQ5LThl
N2ItZDYwNGVlMjU3N2YxL2I5ODUxMjJlLWYyZmYtNDM0OS04ZTdiLWQ2MDRlZTI1
NzdmMS5jcmwwHwYDVR0jBBgwFoAUMkPnPPcbBd82CkZOMRZRS4dhJtswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iOTg1MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0
ZWUyNTc3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/nwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEXRcwZVu22QynwF/+yuJqbX/ipfisVKLlyU9nzkCbk7Ma/H3SCWdNqG
IVBGbzXHwWVMHIfggqRaYXzIcsypc5+ziYKMHsBqTPQzyEXSSIL6uRS8QaLloBDx
lT35CnXR/A2ZFp4Yn7sXHlRXFZCpEFU6lUjy8aZG8DOxH3L7dYhExfB+1Z7BJMMk
I29/HHuLK4ZOAFWGs0epXgfP+wBxa9ArPwUlt+aE5CUNT/w8YR6iKJBS44JNDvcE
CsoIGoRzfMlcx3N9uhTpytfD/fVVNk5FKzdJZkDO8096xnVejaQbpQg6rCkc9Gq+
XKGWU0h5Yu4jwzzwAj8SH8wB9789CUU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:43:18 2025 by rpki-client