Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/eea340db-fec7-34e5-87e8-6c5238c7fcbe.roa
File: eea340db-fec7-34e5-87e8-6c5238c7fcbe.roa (raw, json)
Hash identifier: Sq2AppE6egKI/PSrltveRr85RqZ7dnGo5oTMNjoO/A4=
Subject key identifier: FC:C2:7E:7B:F1:47:92:67:22:A3:B3:4C:13:6C:A5:FD:0F:2B:14:1A
Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial: 010D0C9F432858482BEBFADF2568E6B895E963C0
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/eea340db-fec7-34e5-87e8-6c5238c7fcbe.roa
Signing time: Wed 11 Dec 2024 13:42:07 +0000
ROA not before: Wed 11 Dec 2024 13:42:07 +0000
ROA not after: Tue 11 Mar 2025 12:42:07 +0000
asID: 29802
IP address blocks: 158.62.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:eb:fa:df:25:68:e6:b8:95:e9:63:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Validity
Not Before: Dec 11 13:42:07 2024 GMT
Not After : Mar 11 12:42:07 2025 GMT
Subject: CN=ba4fb2fb-4418-403b-ab77-8fdb67dc9658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:dd:5c:f6:28:78:76:d3:da:56:a0:ea:fe:f6:
f0:e0:36:64:3a:d5:90:b2:41:94:a4:15:da:6f:c7:
f3:c0:18:93:8a:ec:5d:3a:7b:dd:a7:2d:61:fb:b1:
df:94:57:d8:a1:45:f4:77:d6:da:e7:47:9d:ee:db:
19:e7:28:33:89:01:45:16:10:3e:93:1e:b4:ee:89:
60:68:e7:67:fe:33:70:d4:0b:3d:c9:59:f2:45:19:
09:a0:b6:1c:77:b0:52:0a:5e:12:9e:c0:ce:fb:e5:
45:10:2c:eb:c2:c6:d8:a6:9e:2d:04:07:80:fa:19:
40:9d:34:cf:69:73:4f:39:85:41:51:9b:40:0f:c5:
bb:29:2e:4d:e1:09:5d:11:fd:92:6d:d2:f6:cd:7d:
29:20:f4:d1:3c:9d:89:51:ce:54:2f:1f:04:84:6e:
85:9c:ab:74:0b:99:0e:42:ac:a0:70:a9:4f:da:d2:
fb:c9:c3:a7:e3:c3:93:43:6e:c3:f3:7d:60:20:56:
6e:4b:17:b4:d4:31:df:9d:25:53:0f:56:93:ea:db:
c4:7c:a2:c2:c1:9a:c4:0f:5e:0c:82:0a:1e:6d:c1:
df:ed:b7:35:03:97:5e:4f:99:2a:c5:fc:73:cb:fb:
f0:91:ed:cd:be:72:ba:8b:0a:21:78:e7:43:59:1b:
fa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C2:7E:7B:F1:47:92:67:22:A3:B3:4C:13:6C:A5:FD:0F:2B:14:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/eea340db-fec7-34e5-87e8-6c5238c7fcbe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
X509v3 Authority Key Identifier:
keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
sbgp-ipAddrBlock: critical
IPv4:
158.62.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:37:8e:4b:e6:87:12:b7:d8:15:24:45:9b:1e:22:f9:30:75:
e2:b7:bc:d2:9b:2c:77:85:33:1e:83:7e:8e:b4:aa:cc:45:eb:
45:14:ed:d9:6b:b7:49:6e:9f:97:fe:09:c5:9f:7e:4b:a6:55:
e4:d7:d9:54:6a:40:b7:96:ad:c2:05:e8:d1:84:2f:c2:63:f3:
8a:ec:f5:38:af:cd:86:e9:ed:97:50:94:da:b9:0e:80:97:ff:
40:85:30:95:24:22:b6:a6:72:71:1b:f1:78:cf:a2:cf:cd:e0:
5b:6c:f6:71:e7:45:5c:14:5f:53:9e:39:99:9a:ec:4b:7e:d4:
3c:a5:69:4c:65:81:a4:92:7b:c3:fe:12:59:be:6b:90:a4:5a:
11:e6:64:a3:08:77:c3:3a:46:13:b8:a7:ab:d9:9c:96:21:74:
24:c6:15:a8:eb:c7:c7:0e:e6:bf:f8:ba:85:b2:c9:7e:01:34:
11:8d:c2:18:00:62:83:01:90:05:6c:b5:e4:85:4d:b4:9a:5e:
fa:24:4e:e2:a2:a5:47:41:14:66:37:ea:99:b0:8e:ed:a8:d9:
ea:17:fc:cc:c7:71:9b:96:56:fb:1a:49:33:b9:ef:6b:0b:49:
d1:76:57:aa:73:42:90:78:6e:3d:db:1b:0f:f2:05:b9:96:d6:
41:c8:7c:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgr6/rfJWjmuJXpY8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3
N2ExMB4XDTI0MTIxMTEzNDIwN1oXDTI1MDMxMTEyNDIwN1owLzEtMCsGA1UEAxMk
YmE0ZmIyZmItNDQxOC00MDNiLWFiNzctOGZkYjY3ZGM5NjU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt1c9ih4dtPaVqDq/vbw4DZkOtWQskGUpBXa
b8fzwBiTiuxdOnvdpy1h+7HflFfYoUX0d9ba50ed7tsZ5ygziQFFFhA+kx607olg
aOdn/jNw1As9yVnyRRkJoLYcd7BSCl4SnsDO++VFECzrwsbYpp4tBAeA+hlAnTTP
aXNPOYVBUZtAD8W7KS5N4QldEf2SbdL2zX0pIPTRPJ2JUc5ULx8EhG6FnKt0C5kO
QqygcKlP2tL7ycOn48OTQ27D831gIFZuSxe01DHfnSVTD1aT6tvEfKLCwZrED14M
ggoebcHf7bc1A5deT5kqxfxzy/vwke3NvnK6iwoheOdDWRv6rQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPzCfnvxR5JnIqOzTBNspf0PKxQaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5
NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvZWVhMzQwZGItZmVjNy0z
NGU1LTg3ZTgtNmM1MjM4YzdmY2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl
NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi
NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx
ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnj7HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHc3jkvmhxK32BUkRZseIvkwdeK3vNKbLHeFMx6Dfo60qsxF60UU7dlr
t0lun5f+CcWffkumVeTX2VRqQLeWrcIF6NGEL8Jj84rs9TivzYbp7ZdQlNq5DoCX
/0CFMJUkIramcnEb8XjPos/N4Fts9nHnRVwUX1OeOZma7Et+1DylaUxlgaSSe8P+
Elm+a5CkWhHmZKMId8M6RhO4p6vZnJYhdCTGFajrx8cO5r/4uoWyyX4BNBGNwhgA
YoMBkAVsteSFTbSaXvokTuKipUdBFGY36pmwju2o2eoX/MzHcZuWVvsaSTO572sL
SdF2V6pzQpB4bj3bGw/yBbmW1kHIfDQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:16:41 2025 by rpki-client