Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/1281f76b-dae0-38e3-a6d6-c1d3ab3e31f5.roa
File: 1281f76b-dae0-38e3-a6d6-c1d3ab3e31f5.roa (raw, json)
Hash identifier: 65ZUjkbOjVsdzwY6T/l4uZuuJHf0P/PYmnbGtNsxVFg=
Subject key identifier: E2:F8:59:73:DD:1B:32:54:9E:3E:06:25:AC:25:28:32:A2:30:BF:5E
Certificate issuer: /CN=df298930-fdd9-473b-93ed-6736f8296931
Certificate serial: 010D0C9F432858487B85B52998F09DB1F216B970
Authority key identifier: E8:19:25:7A:88:CF:CD:31:EC:25:C8:20:0F:7A:92:FE:1A:E0:AF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/1281f76b-dae0-38e3-a6d6-c1d3ab3e31f5.roa
Signing time: Thu 09 Jan 2025 02:00:40 +0000
ROA not before: Thu 09 Jan 2025 02:00:40 +0000
ROA not after: Wed 09 Apr 2025 01:00:40 +0000
asID: 2055
IP address blocks: 199.190.250.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7b:85:b5:29:98:f0:9d:b1:f2:16:b9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df298930-fdd9-473b-93ed-6736f8296931
Validity
Not Before: Jan 9 02:00:40 2025 GMT
Not After : Apr 9 01:00:40 2025 GMT
Subject: CN=80384832-313f-4364-b63e-09979b8a9584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e5:2a:c7:0d:1a:14:18:21:06:fe:ac:55:12:
11:7b:c9:b6:93:ab:66:d1:fc:d4:b2:68:04:88:84:
e7:ad:eb:90:e4:8a:3b:be:61:e2:b4:ab:34:1c:f6:
91:0f:fd:02:dc:dd:3b:3f:13:0f:75:31:a5:3f:71:
b2:f8:36:29:73:15:09:6b:94:2b:46:65:10:e6:e1:
73:9a:56:39:5b:fe:21:cd:03:84:20:2b:f0:6a:75:
f1:b5:74:da:36:e7:bf:c2:e1:55:95:5a:ba:ef:3a:
ea:50:6f:72:c9:61:2c:2f:c9:58:5b:e1:86:c3:10:
f0:3a:64:88:af:5b:98:8d:da:c7:2d:43:e7:7a:40:
4d:ac:9e:de:bb:8d:07:16:bd:81:c1:d2:3a:e7:be:
31:ea:9d:96:0f:67:20:fd:6f:3e:fc:aa:11:ab:27:
1f:dd:be:17:40:78:e0:36:23:90:62:56:58:67:9e:
5e:53:8f:6d:5a:1a:f3:21:66:f1:44:25:57:51:16:
be:d3:dc:01:16:2f:48:fe:2b:16:a5:15:e5:dd:f3:
c8:e2:1c:c6:7d:c1:29:95:9b:aa:f5:26:31:e7:5f:
7a:4d:9a:bf:a6:66:2f:6c:a4:79:4f:c9:46:a8:d9:
e7:66:1f:1a:75:05:58:06:39:00:c0:9d:f7:84:84:
78:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F8:59:73:DD:1B:32:54:9E:3E:06:25:AC:25:28:32:A2:30:BF:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/1281f76b-dae0-38e3-a6d6-c1d3ab3e31f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/df298930-fdd9-473b-93ed-6736f8296931.crl
X509v3 Authority Key Identifier:
keyid:E8:19:25:7A:88:CF:CD:31:EC:25:C8:20:0F:7A:92:FE:1A:E0:AF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931.cer
sbgp-ipAddrBlock: critical
IPv4:
199.190.250.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:cd:14:1a:4d:57:7c:91:9f:b8:cb:b5:f1:ed:3e:7b:ae:87:
c8:3f:1c:d8:06:ab:ea:59:4f:23:08:94:90:31:79:24:ea:83:
62:4b:db:fb:0f:84:69:73:04:6a:4c:43:ae:be:22:64:bc:74:
2d:c4:e3:80:e2:f7:0c:5a:9d:fa:7d:d8:0c:7e:a5:59:62:d4:
ff:54:39:e2:db:de:44:5d:70:1e:7e:0a:3f:33:35:de:3a:1f:
75:b3:04:ce:fc:e6:5d:7a:df:ad:fb:9c:bc:01:2e:96:98:97:
a6:93:58:5c:a7:05:7d:18:af:3c:c6:a7:df:a7:dc:79:b1:d0:
c2:50:aa:4d:7d:75:4e:e3:b6:f4:93:a3:f3:74:e3:32:b3:b0:
9a:7a:f7:15:ea:41:1b:a9:15:3f:15:ca:1c:6e:a8:19:26:49:
f0:bc:f2:cf:42:a1:09:a5:7d:07:1c:08:b7:03:db:dd:21:36:
1c:76:dc:58:59:b6:6a:d2:01:60:46:7a:c7:c3:d3:77:39:10:
16:5f:61:63:30:f2:85:ab:ea:3a:84:41:b8:9f:53:25:e8:7c:
4b:cd:90:ca:2c:8d:2d:e9:91:44:a5:46:d9:40:e7:83:48:08:
b1:26:2d:07:f0:62:58:5d:a0:a1:1d:94:18:25:9b:ec:61:ad:
7e:69:b8:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh7hbUpmPCdsfIWuXAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGYyOTg5MzAtZmRkOS00NzNiLTkzZWQtNjczNmY4Mjk2
OTMxMB4XDTI1MDEwOTAyMDA0MFoXDTI1MDQwOTAxMDA0MFowLzEtMCsGA1UEAxMk
ODAzODQ4MzItMzEzZi00MzY0LWI2M2UtMDk5NzliOGE5NTg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuUqxw0aFBghBv6sVRIRe8m2k6tm0fzUsmgE
iITnreuQ5Io7vmHitKs0HPaRD/0C3N07PxMPdTGlP3Gy+DYpcxUJa5QrRmUQ5uFz
mlY5W/4hzQOEICvwanXxtXTaNue/wuFVlVq67zrqUG9yyWEsL8lYW+GGwxDwOmSI
r1uYjdrHLUPnekBNrJ7eu40HFr2BwdI6574x6p2WD2cg/W8+/KoRqycf3b4XQHjg
NiOQYlZYZ55eU49tWhrzIWbxRCVXURa+09wBFi9I/isWpRXl3fPI4hzGfcEplZuq
9SYx5196TZq/pmYvbKR5T8lGqNnnZh8adQVYBjkAwJ33hIR4wQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOL4WXPdGzJUnj4GJawlKDKiML9eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kZjI5
ODkzMC1mZGQ5LTQ3M2ItOTNlZC02NzM2ZjgyOTY5MzEvMTI4MWY3NmItZGFlMC0z
OGUzLWE2ZDYtYzFkM2FiM2UzMWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZGYyOTg5MzAtZmRkOS00NzNiLTkz
ZWQtNjczNmY4Mjk2OTMxL2RmMjk4OTMwLWZkZDktNDczYi05M2VkLTY3MzZmODI5
NjkzMS5jcmwwHwYDVR0jBBgwFoAU6BkleojPzTHsJcggD3qS/hrgr54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kZjI5ODkzMC1mZGQ5LTQ3M2ItOTNlZC02NzM2
ZjgyOTY5MzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx776MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFTNFBpNV3yRn7jLtfHtPnuuh8g/HNgGq+pZTyMIlJAxeSTqg2JL2/sP
hGlzBGpMQ66+ImS8dC3E44Di9wxanfp92Ax+pVli1P9UOeLb3kRdcB5+Cj8zNd46
H3WzBM785l163637nLwBLpaYl6aTWFynBX0YrzzGp9+n3Hmx0MJQqk19dU7jtvST
o/N04zKzsJp69xXqQRupFT8VyhxuqBkmSfC88s9CoQmlfQccCLcD290hNhx23FhZ
tmrSAWBGesfD03c5EBZfYWMw8oWr6jqEQbifUyXofEvNkMosjS3pkUSlRtlA54NI
CLEmLQfwYlhdoKEdlBglm+xhrX5puIU=
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:02 2025 by rpki-client