Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/bba2412c-5b1f-38bc-9d1e-06b7736d1372.roa
File: bba2412c-5b1f-38bc-9d1e-06b7736d1372.roa (raw, json)
Hash identifier: a0ZitvNgJsmeeuSeC98Wk8xYArVYsVVilyYcgoPUc7E=
Subject key identifier: 2D:C1:DE:F4:CD:60:79:2F:4E:C6:EA:C6:F3:AE:EC:20:62:27:DD:BD
Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial: 010D0C9F43285848064508B2D5ED4A32E427BA00
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/bba2412c-5b1f-38bc-9d1e-06b7736d1372.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 7018
IP address blocks: 199.48.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:45:08:b2:d5:ed:4a:32:e4:27:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=1d3bcb1f-7a2d-4cf7-a248-945cf4215f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:cb:f6:94:64:2b:e7:50:c3:2e:0e:f6:17:
ac:c9:3b:d2:26:03:05:08:e8:f8:95:47:c3:e4:09:
b3:ef:0f:9f:97:fb:23:42:e1:34:6e:e9:be:f9:7e:
a4:e7:fa:e1:cd:84:b3:ad:ca:a8:19:0b:8b:d7:55:
42:89:2f:f2:f8:e6:99:5d:de:58:1f:bf:4b:7f:15:
b7:b3:e9:e6:70:51:0c:74:aa:77:2c:db:73:0d:bd:
b2:54:82:3a:53:04:ef:be:f4:89:f5:19:84:0c:b3:
d6:f7:26:03:78:24:b2:13:1b:e9:cf:3b:25:1e:f6:
9f:7c:07:d5:ac:af:7d:10:99:64:3c:97:5a:1b:ac:
88:0d:30:72:54:0e:0c:89:82:d6:96:e4:40:19:3c:
0c:68:a4:71:14:2a:66:cb:13:d3:5f:08:85:f1:81:
52:9d:99:90:46:aa:da:0b:4a:28:4b:27:79:9c:26:
88:a4:d3:80:59:c1:5f:f5:c8:b5:a9:8d:f1:29:99:
c8:e4:c5:2b:d9:a9:cf:16:b9:da:3c:25:54:3a:ba:
dd:5f:a5:e4:8b:b5:fa:72:9e:7e:61:11:6e:0b:07:
3d:54:b9:75:98:72:f0:4a:57:99:1b:89:86:2f:88:
42:dd:df:72:ba:96:6f:71:31:b3:ad:2c:2b:83:8d:
06:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C1:DE:F4:CD:60:79:2F:4E:C6:EA:C6:F3:AE:EC:20:62:27:DD:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/bba2412c-5b1f-38bc-9d1e-06b7736d1372.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
X509v3 Authority Key Identifier:
keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
sbgp-ipAddrBlock: critical
IPv4:
199.48.180.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:f8:c8:4d:d1:c7:f4:9b:74:d7:e4:18:ad:2e:45:92:0a:ba:
da:e5:ac:4a:cc:e3:e2:b5:69:6a:ad:c3:42:66:bf:ec:ad:8d:
2c:fc:25:64:23:a3:b9:53:c8:a6:b0:54:67:22:99:45:69:6c:
4a:60:8f:b3:ab:f1:f4:5e:84:9f:39:b4:9e:68:a6:28:35:90:
f5:73:da:ad:bd:b8:05:81:ba:aa:49:04:22:49:91:d8:d7:f4:
66:09:99:86:89:5f:0a:be:42:48:b4:5b:e6:9d:8e:44:be:7f:
ae:c7:38:8d:8d:e6:c3:08:5e:fe:53:d5:12:0f:41:d5:f9:e9:
09:db:89:69:24:9f:7e:9c:6e:fa:ce:e6:be:bd:65:86:b2:5a:
b9:a1:e0:ba:95:bf:62:d6:ce:6f:0e:9d:ff:94:13:05:5c:4e:
f8:8a:82:28:bc:8a:69:80:5a:67:94:78:a5:1f:3a:c9:cc:7d:
71:c3:da:b2:31:24:10:44:ec:44:6d:d7:ad:0b:45:74:cf:88:
4b:8d:2d:f8:04:05:53:04:a7:81:94:8d:bc:5a:ba:b8:33:24:
73:a4:15:55:e9:ae:65:c2:ea:6c:2c:40:f6:7a:df:a4:a0:58:
2d:7e:7f:bf:68:b1:05:16:ab:8c:ab:d1:ac:d9:2f:15:56:5c:
20:2a:5b:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgGRQiy1e1KMuQnugAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0
NDk0MB4XDTI0MTEyODAyMDAzOFoXDTI1MDIyNjAyMDAzOFowLzEtMCsGA1UEAxMk
MWQzYmNiMWYtN2EyZC00Y2Y3LWEyNDgtOTQ1Y2Y0MjE1ZjExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGnL9pRkK+dQwy4O9hesyTvSJgMFCOj4lUfD
5Amz7w+fl/sjQuE0bum++X6k5/rhzYSzrcqoGQuL11VCiS/y+OaZXd5YH79LfxW3
s+nmcFEMdKp3LNtzDb2yVII6UwTvvvSJ9RmEDLPW9yYDeCSyExvpzzslHvaffAfV
rK99EJlkPJdaG6yIDTByVA4MiYLWluRAGTwMaKRxFCpmyxPTXwiF8YFSnZmQRqra
C0ooSyd5nCaIpNOAWcFf9ci1qY3xKZnI5MUr2anPFrnaPCVUOrrdX6Xki7X6cp5+
YRFuCwc9VLl1mHLwSleZG4mGL4hC3d9yupZvcTGzrSwrg40GSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC3B3vTNYHkvTsbqxvOu7CBiJ929MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1
NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvYmJhMjQxMmMtNWIxZi0z
OGJjLTlkMWUtMDZiNzczNmQxMzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx
YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk
NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk
ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzC0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADP4yE3Rx/SbdNfkGK0uRZIKutrlrErM4+K1aWqtw0Jmv+ytjSz8JWQj
o7lTyKawVGcimUVpbEpgj7Or8fRehJ85tJ5opig1kPVz2q29uAWBuqpJBCJJkdjX
9GYJmYaJXwq+Qki0W+adjkS+f67HOI2N5sMIXv5T1RIPQdX56QnbiWkkn36cbvrO
5r69ZYayWrmh4LqVv2LWzm8Onf+UEwVcTviKgii8immAWmeUeKUfOsnMfXHD2rIx
JBBE7ERt160LRXTPiEuNLfgEBVMEp4GUjbxaurgzJHOkFVXprmXC6mwsQPZ636Sg
WC1+f79osQUWq4yr0azZLxVWXCAqW5g=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:13:28 2025 by rpki-client