Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/441ba8c3-51b4-353d-b914-e586c621a0f9.roa
File: 441ba8c3-51b4-353d-b914-e586c621a0f9.roa (raw, json)
Hash identifier: J251LYbRgeE9GDmwjpjeRDjMCWdKY0R2rvKNvUngDN8=
Subject key identifier: CA:79:6D:FB:0D:3E:0A:E6:96:FA:FE:C0:B7:4F:57:4E:CB:2C:7F:CC
Certificate issuer: /CN=c85989e4-dae0-4a06-83a1-0ce7104427a0
Certificate serial: 010D0C9F43285848100A835CD64347BEC67B0AC0
Authority key identifier: 99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/441ba8c3-51b4-353d-b914-e586c621a0f9.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 30148
IP address blocks: 192.161.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:83:5c:d6:43:47:be:c6:7b:0a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85989e4-dae0-4a06-83a1-0ce7104427a0
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=036cd7cc-8c4b-4239-b4a3-728a11996cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:09:ab:5b:66:13:c7:05:d1:a3:ea:af:c8:e1:
28:23:6e:a2:99:7b:52:05:e9:eb:67:98:7f:a6:c1:
62:9f:bb:04:ca:13:23:f4:8d:d0:41:5a:24:2c:bc:
08:e5:ad:5a:29:2a:da:b8:41:9d:d5:1c:b5:31:92:
60:7d:f9:d5:a6:67:89:c4:e5:ef:c1:df:f8:54:89:
1c:df:f2:fc:76:4d:93:f7:42:28:d9:53:d0:0d:14:
9e:e6:f6:d2:27:16:91:e0:95:1a:81:20:ae:d6:ff:
d7:14:b1:c0:0c:2b:a6:17:23:2e:73:aa:35:29:fc:
b5:50:ab:bf:cc:bd:e0:26:27:a8:83:68:bf:f8:b9:
be:0f:45:fb:fe:61:db:6f:00:95:c5:99:81:46:ed:
80:95:75:5b:13:72:af:b7:8d:3e:aa:2c:52:49:9e:
6b:71:03:54:7e:1d:bc:aa:ba:5d:d7:ea:e6:e2:7e:
dd:e7:5b:60:e1:cd:96:ca:94:c9:cb:11:29:7d:aa:
57:c2:de:b4:7e:2c:ab:c1:49:35:0f:3b:8c:34:bc:
76:0c:93:11:d5:38:f6:c8:85:56:23:1c:28:2d:23:
ac:1d:01:29:4e:51:e9:1a:7a:55:21:c8:f3:3a:8b:
bf:8e:4e:03:f8:21:c4:fd:6b:39:89:99:f0:67:66:
a4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:79:6D:FB:0D:3E:0A:E6:96:FA:FE:C0:B7:4F:57:4E:CB:2C:7F:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/441ba8c3-51b4-353d-b914-e586c621a0f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl
X509v3 Authority Key Identifier:
keyid:99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer
sbgp-ipAddrBlock: critical
IPv4:
192.161.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:00:1b:43:fd:d3:cc:83:7c:78:f2:fa:af:b6:0a:58:88:17:
3e:35:e4:ce:0c:93:26:e7:c9:22:24:72:cb:83:2b:a9:13:56:
c9:42:f6:e0:67:d3:ed:2a:1f:ab:fa:20:9b:b0:78:91:02:67:
de:6b:d1:94:ae:4d:2f:a5:9a:38:76:5e:21:35:83:bd:fe:aa:
9c:14:fe:98:ac:ba:de:0b:17:0e:fd:90:cd:14:95:b2:8e:94:
34:50:e7:08:66:70:48:67:32:a7:69:8a:86:fd:da:e9:b0:36:
07:30:b2:60:40:41:57:0e:bc:54:06:22:b7:b7:09:8d:b0:6b:
70:8a:44:92:89:b3:69:d8:9c:7d:cf:2b:98:6a:2b:a2:f3:54:
3c:9d:6b:1e:37:a0:8c:97:98:b6:7d:7f:d4:be:28:8e:21:0d:
8f:1c:e5:86:bd:4c:6f:ac:7e:a0:69:23:68:ca:b4:8a:ef:07:
ce:fa:2f:f5:af:fa:66:a8:e2:fb:6c:2b:d6:0c:1f:8e:99:1c:
81:30:4b:14:bc:9c:46:b2:82:8b:ec:2e:ba:cf:01:04:b9:b4:
c4:74:8f:d9:cc:fb:d9:07:84:d8:fa:dd:e6:c2:8e:6d:e5:25:
57:fb:2d:28:b2:04:98:a9:15:aa:fb:b2:92:f1:f5:86:47:66:
21:7a:62:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgQCoNc1kNHvsZ7CsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzg1OTg5ZTQtZGFlMC00YTA2LTgzYTEtMGNlNzEwNDQy
N2EwMB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk
MDM2Y2Q3Y2MtOGM0Yi00MjM5LWI0YTMtNzI4YTExOTk2Y2ZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgmrW2YTxwXRo+qvyOEoI26imXtSBenrZ5h/
psFin7sEyhMj9I3QQVokLLwI5a1aKSrauEGd1Ry1MZJgffnVpmeJxOXvwd/4VIkc
3/L8dk2T90Io2VPQDRSe5vbSJxaR4JUagSCu1v/XFLHADCumFyMuc6o1Kfy1UKu/
zL3gJieog2i/+Lm+D0X7/mHbbwCVxZmBRu2AlXVbE3Kvt40+qixSSZ5rcQNUfh28
qrpd1+rm4n7d51tg4c2WypTJyxEpfapXwt60fiyrwUk1DzuMNLx2DJMR1Tj2yIVW
IxwoLSOsHQEpTlHpGnpVIcjzOou/jk4D+CHE/Ws5iZnwZ2akZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMp5bfsNPgrmlvr+wLdPV07LLH/MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jODU5
ODllNC1kYWUwLTRhMDYtODNhMS0wY2U3MTA0NDI3YTAvNDQxYmE4YzMtNTFiNC0z
NTNkLWI5MTQtZTU4NmM2MjFhMGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzg1OTg5ZTQtZGFlMC00YTA2LTgz
YTEtMGNlNzEwNDQyN2EwL2M4NTk4OWU0LWRhZTAtNGEwNi04M2ExLTBjZTcxMDQ0
MjdhMC5jcmwwHwYDVR0jBBgwFoAUmTHFPg8NlLOYQPQPd1wZThW+8iEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9jODU5ODllNC1kYWUwLTRhMDYtODNhMS0wY2U3
MTA0NDI3YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKEAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKkAG0P908yDfHjy+q+2CliIFz415M4MkybnySIkcsuDK6kTVslC9uBn
0+0qH6v6IJuweJECZ95r0ZSuTS+lmjh2XiE1g73+qpwU/pisut4LFw79kM0UlbKO
lDRQ5whmcEhnMqdpiob92umwNgcwsmBAQVcOvFQGIre3CY2wa3CKRJKJs2nYnH3P
K5hqK6LzVDydax43oIyXmLZ9f9S+KI4hDY8c5Ya9TG+sfqBpI2jKtIrvB876L/Wv
+mao4vtsK9YMH46ZHIEwSxS8nEaygovsLrrPAQS5tMR0j9nM+9kHhNj63ebCjm3l
JVf7LSiyBJipFar7spLx9YZHZiF6YsE=
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:47:53 2025 by rpki-client