Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/5cab67b5-147a-3e1a-9b15-b6a52b3e76de.roa
File: 5cab67b5-147a-3e1a-9b15-b6a52b3e76de.roa (raw, json)
Hash identifier: GENCL+q7dK5SUXiUFxntF7h20pDrIXTJfu1sDiFuems=
Subject key identifier: F7:EC:01:50:B5:5D:AA:53:47:89:32:65:A9:A3:0B:5E:25:04:CC:2C
Certificate issuer: /CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0
Certificate serial: 010D0C9F432858480EA50E0DEEB6C426BB9DFC40
Authority key identifier: BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/5cab67b5-147a-3e1a-9b15-b6a52b3e76de.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 14618
IP address blocks: 192.190.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:0e:0d:ee:b6:c4:26:bb:9d:fc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=d9ff1f1e-29e5-4720-af0f-197ef5fa12c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:91:4a:87:35:54:c0:49:f4:bd:c5:6b:29:d1:
64:35:a1:da:a6:82:ea:c9:19:2c:17:4f:c1:19:6a:
7b:1a:89:d1:ed:85:91:bc:4d:f2:d1:59:40:0a:29:
48:5c:3c:25:0b:ea:43:51:97:42:92:54:78:2b:35:
41:43:7c:09:c8:28:bc:9f:8e:2a:90:a9:6d:f2:71:
7e:13:fe:e2:b4:f3:f6:b8:ce:e9:20:45:18:8b:0c:
0f:9f:ba:fd:53:dd:be:a1:75:6e:fe:de:6a:6f:5b:
ee:25:25:5d:22:74:0e:b0:9e:f9:0e:bc:73:2e:8a:
28:c5:db:f4:a8:c4:1f:ef:a1:8d:15:32:2f:12:27:
21:4a:a7:d3:62:40:07:d8:3c:77:6c:3d:48:98:f4:
75:85:a1:1f:42:46:53:9d:d6:54:72:e5:34:f8:dc:
62:2e:6d:5f:46:e9:86:04:ba:c6:a3:59:0d:0d:71:
43:e6:db:34:2b:a0:6c:c0:c9:e2:c6:ec:ed:4e:d8:
aa:b2:15:44:15:8e:dc:ba:55:61:8f:1f:ee:67:e0:
85:25:a0:17:be:fc:c7:f7:95:b6:25:ae:fe:5e:3b:
49:73:d0:79:2a:c3:ab:8b:e4:d7:73:ad:1a:29:1a:
e6:3d:8c:3a:ad:31:57:af:4a:92:b5:2a:72:61:6d:
9b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EC:01:50:B5:5D:AA:53:47:89:32:65:A9:A3:0B:5E:25:04:CC:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/5cab67b5-147a-3e1a-9b15-b6a52b3e76de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl
X509v3 Authority Key Identifier:
keyid:BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer
sbgp-ipAddrBlock: critical
IPv4:
192.190.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:80:d0:4d:91:68:a6:db:89:4c:c2:b7:81:82:16:5c:89:34:
01:f9:6a:e2:c4:e4:34:32:d2:59:5d:2a:a3:2e:0c:46:52:05:
76:66:59:7c:df:ef:03:8b:95:b4:cf:9f:0d:aa:74:0e:33:28:
c6:c2:89:31:9e:77:7f:87:7c:b8:c3:ff:2b:31:b3:5a:ab:97:
3d:79:3e:53:1f:a9:5e:d7:79:f1:68:0a:db:e2:d4:50:76:c2:
f8:2f:b0:05:b8:c8:51:00:2c:c3:c0:0d:ba:a6:f0:14:03:ff:
a8:8d:45:28:46:b5:63:d5:fd:23:91:a5:1f:2d:a5:ea:d6:65:
2b:ed:12:c5:84:a7:df:e8:71:79:b5:d1:bc:f7:6b:5f:35:72:
d6:a6:52:fe:92:23:18:e8:42:d6:e7:ad:0f:f5:7a:98:b1:71:
5f:11:8b:f1:a0:07:eb:80:7c:2b:ff:0b:72:f8:95:e8:ec:fb:
5f:5d:64:f7:8a:6a:4b:86:38:12:6e:50:46:83:cc:8c:41:97:
44:9e:e0:6c:ab:83:06:bc:97:31:6a:d8:f6:49:8a:f5:77:de:
c9:f0:d1:6b:0d:65:41:7f:4f:84:4d:60:8e:6d:ba:ef:14:f7:
87:96:00:8d:11:1c:72:60:75:06:ab:34:e1:73:23:98:99:c3:
92:46:e2:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgOpQ4N7rbEJrud/EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmZjZGE4YTAtYTNjZC00MTY5LTk1MWUtYWI2ODM4ZDZk
N2YwMB4XDTI0MTIwMTAyMDAzOVoXDTI1MDMwMTAyMDAzOVowLzEtMCsGA1UEAxMk
ZDlmZjFmMWUtMjllNS00NzIwLWFmMGYtMTk3ZWY1ZmExMmM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJFKhzVUwEn0vcVrKdFkNaHapoLqyRksF0/B
GWp7GonR7YWRvE3y0VlACilIXDwlC+pDUZdCklR4KzVBQ3wJyCi8n44qkKlt8nF+
E/7itPP2uM7pIEUYiwwPn7r9U92+oXVu/t5qb1vuJSVdInQOsJ75DrxzLoooxdv0
qMQf76GNFTIvEichSqfTYkAH2Dx3bD1ImPR1haEfQkZTndZUcuU0+NxiLm1fRumG
BLrGo1kNDXFD5ts0K6BswMnixuztTtiqshVEFY7culVhjx/uZ+CFJaAXvvzH95W2
Ja7+XjtJc9B5KsOri+TXc60aKRrmPYw6rTFXr0qStSpyYW2bqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPfsAVC1XapTR4kyZamjC14lBMwsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZmNk
YThhMC1hM2NkLTQxNjktOTUxZS1hYjY4MzhkNmQ3ZjAvNWNhYjY3YjUtMTQ3YS0z
ZTFhLTliMTUtYjZhNTJiM2U3NmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmZjZGE4YTAtYTNjZC00MTY5LTk1
MWUtYWI2ODM4ZDZkN2YwL2ZmY2RhOGEwLWEzY2QtNDE2OS05NTFlLWFiNjgzOGQ2
ZDdmMC5jcmwwHwYDVR0jBBgwFoAUuunwIc1gU+J5R6d+X/PoDlObwL0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZmNkYThhMC1hM2NkLTQxNjktOTUxZS1hYjY4
MzhkNmQ3ZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL6YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIGA0E2RaKbbiUzCt4GCFlyJNAH5auLE5DQy0lldKqMuDEZSBXZmWXzf
7wOLlbTPnw2qdA4zKMbCiTGed3+HfLjD/ysxs1qrlz15PlMfqV7XefFoCtvi1FB2
wvgvsAW4yFEALMPADbqm8BQD/6iNRShGtWPV/SORpR8tperWZSvtEsWEp9/ocXm1
0bz3a181ctamUv6SIxjoQtbnrQ/1epixcV8Ri/GgB+uAfCv/C3L4lejs+19dZPeK
akuGOBJuUEaDzIxBl0Se4Gyrgwa8lzFq2PZJivV33snw0WsNZUF/T4RNYI5tuu8U
94eWAI0RHHJgdQarNOFzI5iZw5JG4p4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:14 2025 by rpki-client