Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/25f3ecdb-5195-3517-b8b6-ef562092f4b7.roa
File: 25f3ecdb-5195-3517-b8b6-ef562092f4b7.roa (raw, json)
Hash identifier: UA18n0SeeAECAvAqxfVoLn801vOrQhwpibgmrX3neeI=
Subject key identifier: 40:A2:66:24:B1:C9:07:FF:15:8E:85:F1:45:9B:4B:38:75:ED:FC:CD
Certificate issuer: /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial: 010D0C9F4328584871C06B4E7E1E978654251C00
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/25f3ecdb-5195-3517-b8b6-ef562092f4b7.roa
Signing time: Sun 05 Jan 2025 14:00:52 +0000
ROA not before: Sun 05 Jan 2025 14:00:52 +0000
ROA not after: Sat 05 Apr 2025 13:00:52 +0000
asID: 701
IP address blocks: 198.37.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:71:c0:6b:4e:7e:1e:97:86:54:25:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Validity
Not Before: Jan 5 14:00:52 2025 GMT
Not After : Apr 5 13:00:52 2025 GMT
Subject: CN=d5a8bebc-1884-483b-b650-3f5e69c69bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f7:59:0b:94:7c:0d:f5:f5:58:3c:53:49:1b:
c8:e8:a3:74:4e:88:01:2e:a3:8d:19:01:b2:a2:7b:
88:92:01:73:18:99:3b:8e:0d:91:c6:1d:4a:3b:ee:
fe:a4:e3:65:b3:83:1e:4b:a6:ee:51:fb:ee:3e:57:
87:27:7e:e7:04:0f:65:86:69:c2:dc:4c:3e:76:62:
22:cb:e7:6b:e2:7e:a2:ad:01:f6:3b:b6:c4:1e:98:
3d:2a:3a:18:ce:06:11:c8:96:41:bd:21:fb:bd:cf:
fc:25:dc:11:a8:dd:1a:80:1e:99:1d:11:2e:3d:bc:
08:bb:0f:1b:78:11:0e:eb:bc:4b:bd:8e:b2:ac:6f:
15:07:81:66:b7:a4:b3:38:66:eb:f2:09:d6:e1:bc:
6c:57:9a:2d:1e:f5:78:3c:d9:26:aa:26:37:92:43:
ad:0b:59:34:fd:d8:f6:84:be:36:03:9a:3d:ec:f5:
d3:a7:f0:3b:fa:2d:1f:09:1a:dc:cb:01:39:27:f4:
70:89:75:72:26:09:3e:04:4a:6f:d9:64:75:b2:b3:
c1:eb:00:07:e9:a1:38:06:d7:5c:18:5f:65:6e:94:
7c:c7:23:8d:06:60:ed:b4:2a:5f:8e:9e:39:b6:c9:
55:10:5a:57:f4:20:c4:df:46:ea:d3:bd:25:24:33:
ca:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A2:66:24:B1:C9:07:FF:15:8E:85:F1:45:9B:4B:38:75:ED:FC:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/25f3ecdb-5195-3517-b8b6-ef562092f4b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl
X509v3 Authority Key Identifier:
keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
sbgp-ipAddrBlock: critical
IPv4:
198.37.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:b5:59:be:a0:6e:a4:ba:0c:40:61:2f:8c:74:8b:2f:43:1c:
cc:41:83:d6:02:49:3c:b3:8d:7f:cf:55:dc:42:37:31:7c:04:
70:e3:ca:4e:d1:0c:83:1b:ab:2d:e3:40:c7:1a:7b:3b:d9:13:
15:a6:4e:16:ad:ea:3b:46:f1:ea:cb:60:11:78:e1:0f:1e:96:
35:45:19:6e:56:27:93:2c:bc:93:7f:fb:4c:d3:ba:d7:50:ff:
77:f2:9d:38:cc:a5:97:e4:65:5c:a3:d0:a6:91:f0:9c:e8:bc:
ac:a4:ad:20:78:87:da:20:51:b9:1b:7c:c9:fc:89:f2:5a:08:
6a:ed:d4:40:b9:b2:f4:b0:29:57:0d:41:8d:97:1b:7f:7b:06:
44:11:b3:c6:b2:5b:50:91:da:f0:f6:65:dc:49:59:92:4d:e0:
47:0b:82:11:eb:1d:05:c1:c1:45:ee:8a:9b:6b:09:18:62:37:
12:98:6d:aa:d3:a6:74:76:aa:2a:de:0a:b4:07:7b:db:5a:36:
d1:48:b0:cc:b0:f7:ea:3f:a8:4e:90:c9:08:30:01:45:b7:50:
50:84:4f:f8:6d:60:c6:1c:84:b3:55:57:b2:ca:b3:31:a6:22:
22:6e:06:aa:25:cb:a1:7d:75:5a:64:f4:88:fd:85:eb:b3:ae:
50:e3:09:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhxwGtOfh6XhlQlHAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJkZmJjMjAtYjQ4ZC00YWQzLTlhZGEtYWFhMWE4ODU3
MGRjMB4XDTI1MDEwNTE0MDA1MloXDTI1MDQwNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZDVhOGJlYmMtMTg4NC00ODNiLWI2NTAtM2Y1ZTY5YzY5YmIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfdZC5R8DfX1WDxTSRvI6KN0TogBLqONGQGy
onuIkgFzGJk7jg2Rxh1KO+7+pONls4MeS6buUfvuPleHJ37nBA9lhmnC3Ew+dmIi
y+dr4n6irQH2O7bEHpg9KjoYzgYRyJZBvSH7vc/8JdwRqN0agB6ZHREuPbwIuw8b
eBEO67xLvY6yrG8VB4Fmt6SzOGbr8gnW4bxsV5otHvV4PNkmqiY3kkOtC1k0/dj2
hL42A5o97PXTp/A7+i0fCRrcywE5J/RwiXVyJgk+BEpv2WR1srPB6wAH6aE4Btdc
GF9lbpR8xyONBmDttCpfjp45tslVEFpX9CDE30bq070lJDPKXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFECiZiSxyQf/FY6F8UWbSzh17fzNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMmRm
YmMyMC1iNDhkLTRhZDMtOWFkYS1hYWExYTg4NTcwZGMvMjVmM2VjZGItNTE5NS0z
NTE3LWI4YjYtZWY1NjIwOTJmNGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjJkZmJjMjAtYjQ4ZC00YWQzLTlh
ZGEtYWFhMWE4ODU3MGRjLzIyZGZiYzIwLWI0OGQtNGFkMy05YWRhLWFhYTFhODg1
NzBkYy5jcmwwHwYDVR0jBBgwFoAU1CRpq+RlUcheIrjvsqe6UvFiZYAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMmRmYmMyMC1iNDhkLTRhZDMtOWFkYS1hYWEx
YTg4NTcwZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiU5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACu1Wb6gbqS6DEBhL4x0iy9DHMxBg9YCSTyzjX/PVdxCNzF8BHDjyk7R
DIMbqy3jQMcaezvZExWmThat6jtG8erLYBF44Q8eljVFGW5WJ5MsvJN/+0zTutdQ
/3fynTjMpZfkZVyj0KaR8JzovKykrSB4h9ogUbkbfMn8ifJaCGrt1EC5svSwKVcN
QY2XG397BkQRs8ayW1CR2vD2ZdxJWZJN4EcLghHrHQXBwUXuiptrCRhiNxKYbarT
pnR2qireCrQHe9taNtFIsMyw9+o/qE6QyQgwAUW3UFCET/htYMYchLNVV7LKszGm
IiJuBqoly6F9dVpk9Ij9heuzrlDjCWU=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:55:26 2025 by rpki-client