Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/e5f1f5f2-daa6-3375-82ed-c8378a1b9fe1.roa
File: e5f1f5f2-daa6-3375-82ed-c8378a1b9fe1.roa (raw, json)
Hash identifier: JgPgHH+RXvclWotx/1WNuL0IOLApCdOxiaelw+iDV/c=
Subject key identifier: B5:99:5E:1D:3D:82:71:1F:0E:3D:09:00:A6:DD:CB:45:8A:19:B8:EF
Certificate issuer: /CN=d76aaac1-b724-4de2-9c1a-70dce7a10e40
Certificate serial: 010D0C9F432858484EDAD0104BF59F5BBB85ACE8
Authority key identifier: 66:DF:53:F2:91:52:03:DD:E9:82:FF:2F:EE:46:DF:89:0B:31:62:05
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/e5f1f5f2-daa6-3375-82ed-c8378a1b9fe1.roa
Signing time: Tue 24 Dec 2024 02:00:38 +0000
ROA not before: Tue 24 Dec 2024 02:00:38 +0000
ROA not after: Mon 24 Mar 2025 01:00:38 +0000
asID: 399293
IP address blocks: 192.140.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4e:da:d0:10:4b:f5:9f:5b:bb:85:ac:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76aaac1-b724-4de2-9c1a-70dce7a10e40
Validity
Not Before: Dec 24 02:00:38 2024 GMT
Not After : Mar 24 01:00:38 2025 GMT
Subject: CN=caf8ae39-3955-4f4f-a051-8641dba479f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2a:eb:0b:e4:d0:df:1c:01:47:b3:5b:14:d4:
38:32:ac:e7:a7:b6:c1:1e:d4:ce:2b:d2:e8:c6:9a:
cf:c6:4c:46:5d:ec:82:0c:b4:63:0b:42:9a:e5:df:
9f:59:fb:a7:5b:33:9f:67:10:46:0e:da:d8:eb:82:
bd:88:57:e7:64:75:91:52:9f:6c:1f:9a:e5:2d:63:
7e:60:b3:dd:79:e1:21:fd:86:91:7e:e7:7d:d8:42:
6e:9c:d5:fa:bb:8d:d5:8c:d7:66:b0:3d:ec:55:a6:
ee:36:14:b2:e6:64:9c:f2:70:ea:dc:4e:0c:0c:d2:
a9:14:e7:c4:82:05:75:42:e0:3f:bf:0f:a1:28:ff:
f5:5a:d0:3f:30:68:85:b3:c8:9d:14:9c:d2:85:14:
ab:2d:20:9f:d2:0a:87:35:a3:02:57:4d:69:84:c2:
ec:60:dd:93:4f:e9:09:ab:e0:20:2c:3b:6a:a6:1e:
f2:7d:4d:9e:16:80:af:c3:4d:96:69:cf:89:f0:b8:
a9:69:46:6f:03:0f:94:8d:9d:6a:6d:81:08:70:18:
88:e0:51:f2:00:b2:69:8a:be:fd:15:47:2d:ea:f4:
88:67:11:f0:fb:f2:eb:a4:53:34:33:c2:1e:43:ce:
76:4d:b7:41:e2:d6:dd:fe:7b:b4:fd:df:28:28:97:
ca:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:99:5E:1D:3D:82:71:1F:0E:3D:09:00:A6:DD:CB:45:8A:19:B8:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/e5f1f5f2-daa6-3375-82ed-c8378a1b9fe1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/d76aaac1-b724-4de2-9c1a-70dce7a10e40.crl
X509v3 Authority Key Identifier:
keyid:66:DF:53:F2:91:52:03:DD:E9:82:FF:2F:EE:46:DF:89:0B:31:62:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40.cer
sbgp-ipAddrBlock: critical
IPv4:
192.140.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:55:0c:b5:ee:84:f5:43:69:80:eb:2d:7e:0c:04:79:00:9e:
4f:58:46:ee:34:81:ea:8f:1c:59:78:6c:29:51:73:56:b0:24:
e4:0b:da:0a:be:c8:11:c2:f1:0d:3d:0d:e8:3e:ce:b2:85:f1:
8b:47:62:e1:33:df:23:3f:39:48:1e:bd:22:98:67:b6:d5:d5:
af:34:11:16:49:bb:e0:5f:9c:84:54:79:c4:22:80:36:8d:dc:
be:05:68:1d:4b:38:a2:f2:bc:a7:74:86:13:b8:e2:b3:85:bc:
51:88:8c:e0:b0:78:64:84:0e:73:71:43:3a:6d:2b:96:3f:7d:
66:29:12:2c:c3:72:2c:d7:b9:81:b3:eb:20:4e:d5:5b:b0:00:
3e:50:a2:d4:b0:c9:e2:dc:fc:88:36:04:91:6f:55:48:78:22:
d4:d5:5b:38:93:e8:bf:41:66:19:cb:ab:d7:e4:b6:a1:64:0e:
00:62:fd:99:8e:3a:0d:5a:e8:b1:99:c2:80:4f:fc:9a:ac:8a:
62:3f:6b:98:09:99:e5:b4:54:69:87:b6:16:d4:9f:5c:f9:8d:
b7:64:a2:42:a5:b2:74:a1:15:79:dc:20:85:23:01:39:53:39:
4f:1e:05:fe:a3:3f:6b:91:e0:fd:a5:80:89:1e:24:1a:58:5f:
14:7f:37:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhO2tAQS/WfW7uFrOgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDc2YWFhYzEtYjcyNC00ZGUyLTljMWEtNzBkY2U3YTEw
ZTQwMB4XDTI0MTIyNDAyMDAzOFoXDTI1MDMyNDAxMDAzOFowLzEtMCsGA1UEAxMk
Y2FmOGFlMzktMzk1NS00ZjRmLWEwNTEtODY0MWRiYTQ3OWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhirrC+TQ3xwBR7NbFNQ4Mqznp7bBHtTOK9Lo
xprPxkxGXeyCDLRjC0Ka5d+fWfunWzOfZxBGDtrY64K9iFfnZHWRUp9sH5rlLWN+
YLPdeeEh/YaRfud92EJunNX6u43VjNdmsD3sVabuNhSy5mSc8nDq3E4MDNKpFOfE
ggV1QuA/vw+hKP/1WtA/MGiFs8idFJzShRSrLSCf0gqHNaMCV01phMLsYN2TT+kJ
q+AgLDtqph7yfU2eFoCvw02Wac+J8LipaUZvAw+UjZ1qbYEIcBiI4FHyALJpir79
FUct6vSIZxHw+/LrpFM0M8IeQ852TbdB4tbd/nu0/d8oKJfKiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLWZXh09gnEfDj0JAKbdy0WKGbjvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kNzZh
YWFjMS1iNzI0LTRkZTItOWMxYS03MGRjZTdhMTBlNDAvZTVmMWY1ZjItZGFhNi0z
Mzc1LTgyZWQtYzgzNzhhMWI5ZmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDc2YWFhYzEtYjcyNC00ZGUyLTlj
MWEtNzBkY2U3YTEwZTQwL2Q3NmFhYWMxLWI3MjQtNGRlMi05YzFhLTcwZGNlN2Ex
MGU0MC5jcmwwHwYDVR0jBBgwFoAUZt9T8pFSA93pgv8v7kbfiQsxYgUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kNzZhYWFjMS1iNzI0LTRkZTItOWMxYS03MGRj
ZTdhMTBlNDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIwEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABhVDLXuhPVDaYDrLX4MBHkAnk9YRu40geqPHFl4bClRc1awJOQL2gq+
yBHC8Q09Deg+zrKF8YtHYuEz3yM/OUgevSKYZ7bV1a80ERZJu+BfnIRUecQigDaN
3L4FaB1LOKLyvKd0hhO44rOFvFGIjOCweGSEDnNxQzptK5Y/fWYpEizDcizXuYGz
6yBO1VuwAD5QotSwyeLc/Ig2BJFvVUh4ItTVWziT6L9BZhnLq9fktqFkDgBi/ZmO
Og1a6LGZwoBP/JqsimI/a5gJmeW0VGmHthbUn1z5jbdkokKlsnShFXncIIUjATlT
OU8eBf6jP2uR4P2lgIkeJBpYXxR/Nzo=
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:50 2025 by rpki-client