Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/ececea5e-eaf4-3a0d-8741-3e25f4b7028c.roa
File: ececea5e-eaf4-3a0d-8741-3e25f4b7028c.roa (raw, json)
Hash identifier: 28SshXlyGC6c7b3B+APjv2sIm5aZosxjOMyNCnHO8t4=
Subject key identifier: FE:0F:75:00:ED:BA:E9:71:BC:66:2D:55:CB:3F:06:45:FE:A2:26:24
Certificate issuer: /CN=552c5335-022a-4a1d-911d-4612dc6e86d7
Certificate serial: 010D0C9F4328584824FA83C0FC848F5766936300
Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/ececea5e-eaf4-3a0d-8741-3e25f4b7028c.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 394625
IP address blocks: 199.38.240.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:83:c0:fc:84:8f:57:66:93:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=7303eb3f-03d0-498b-8583-bc16a10e98a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ac:bd:6e:cc:a8:9d:f5:71:a5:5a:f6:d4:37:
92:ac:12:fd:b0:7b:fd:dd:9b:83:5f:ba:83:27:e7:
1f:d9:3b:85:7b:3c:02:d2:3f:08:22:3a:da:d5:a5:
9f:21:0d:a8:7a:1b:d5:29:2b:96:c9:80:55:c1:c3:
6a:dd:92:eb:cc:35:9d:b4:89:4b:df:27:b0:2a:6c:
fc:2b:76:e7:7a:b5:e5:1c:ff:a2:fc:f9:fd:ab:f6:
c6:82:c5:91:a0:e1:4b:79:96:1e:f5:da:e7:18:aa:
16:42:08:c9:a9:e2:27:61:0c:06:86:90:50:a4:ac:
e9:06:35:00:14:be:9c:22:12:ea:3a:e5:74:18:1d:
cf:a7:67:64:3c:70:2f:3c:c8:fd:c4:4a:8f:b5:bf:
43:0e:d1:6a:37:d6:a8:47:da:a1:c6:90:0c:49:19:
8c:1a:e0:ea:70:37:d4:43:5e:b2:2e:f5:fb:10:97:
26:10:33:0d:87:0b:3b:cd:ca:a3:45:37:ac:e1:91:
42:14:65:4e:d4:a8:d3:9b:88:0f:fc:74:f8:a7:55:
46:32:e8:50:c9:19:fe:e1:ea:98:7c:73:d3:28:69:
16:be:65:c0:c8:9a:f2:2e:3f:6c:00:18:b0:c7:f0:
44:98:67:67:45:15:07:6f:24:ff:d6:5e:4c:d1:44:
5b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0F:75:00:ED:BA:E9:71:BC:66:2D:55:CB:3F:06:45:FE:A2:26:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/ececea5e-eaf4-3a0d-8741-3e25f4b7028c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl
X509v3 Authority Key Identifier:
keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
sbgp-ipAddrBlock: critical
IPv4:
199.38.240.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:11:05:00:3f:1b:53:d8:db:b5:09:6e:74:50:e1:c2:93:b1:
3b:4b:81:b8:a9:4d:4c:2f:44:63:a5:65:18:b6:96:e3:9c:83:
98:01:a2:e0:ce:ed:e1:04:db:62:34:cd:a8:4c:3c:2f:9c:9e:
3c:36:63:f4:17:76:c3:3e:8f:4d:70:b9:c9:00:2b:0b:86:bf:
82:c9:de:ea:5a:5a:bb:fb:02:e8:6d:b8:b4:84:b0:98:6a:5a:
09:03:98:9c:95:16:ec:5d:8a:c3:ce:14:df:da:0a:12:e3:6d:
15:55:4f:61:72:be:d4:59:7c:03:8f:aa:31:4e:7e:5f:13:0a:
ba:e9:e5:26:38:ee:4d:92:4b:de:f7:d1:dc:8f:32:e7:d5:80:
56:c4:20:cc:e1:88:47:3f:fa:7b:48:46:2b:db:57:3b:07:47:
c3:82:01:c0:13:ef:18:b3:fe:98:b6:9d:ae:91:5a:d1:e8:f3:
c8:4e:50:28:48:1c:7e:98:26:a7:41:a9:5d:f3:6b:bb:e2:a3:
15:25:c9:63:e9:a2:76:94:91:f6:de:15:5c:43:be:63:11:12:
b2:e7:f8:78:97:5c:63:10:09:f3:4e:4c:d6:e8:01:24:9b:38:
62:1a:a5:ff:8b:ec:af:af:f7:99:93:ab:b8:f0:78:7b:fe:c6:
d5:47:bd:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgk+oPA/ISPV2aTYwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTUyYzUzMzUtMDIyYS00YTFkLTkxMWQtNDYxMmRjNmU4
NmQ3MB4XDTI0MTIwOTAyMDA0MFoXDTI1MDMwOTAyMDA0MFowLzEtMCsGA1UEAxMk
NzMwM2ViM2YtMDNkMC00OThiLTg1ODMtYmMxNmExMGU5OGEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKy9bsyonfVxpVr21DeSrBL9sHv93ZuDX7qD
J+cf2TuFezwC0j8IIjra1aWfIQ2oehvVKSuWyYBVwcNq3ZLrzDWdtIlL3yewKmz8
K3bnerXlHP+i/Pn9q/bGgsWRoOFLeZYe9drnGKoWQgjJqeInYQwGhpBQpKzpBjUA
FL6cIhLqOuV0GB3Pp2dkPHAvPMj9xEqPtb9DDtFqN9aoR9qhxpAMSRmMGuDqcDfU
Q16yLvX7EJcmEDMNhws7zcqjRTes4ZFCFGVO1KjTm4gP/HT4p1VGMuhQyRn+4eqY
fHPTKGkWvmXAyJryLj9sABiwx/BEmGdnRRUHbyT/1l5M0URb8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP4PdQDtuulxvGYtVcs/BkX+oiYkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJj
NTMzNS0wMjJhLTRhMWQtOTExZC00NjEyZGM2ZTg2ZDcvZWNlY2VhNWUtZWFmNC0z
YTBkLTg3NDEtM2UyNWY0YjcwMjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTUyYzUzMzUtMDIyYS00YTFkLTkx
MWQtNDYxMmRjNmU4NmQ3LzU1MmM1MzM1LTAyMmEtNGExZC05MTFkLTQ2MTJkYzZl
ODZkNy5jcmwwHwYDVR0jBBgwFoAUjAwiI9ovy4eQJBPUvKf3GVyiWtwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJjNTMzNS0wMjJhLTRhMWQtOTExZC00NjEy
ZGM2ZTg2ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxybwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFkRBQA/G1PY27UJbnRQ4cKTsTtLgbipTUwvRGOlZRi2luOcg5gBouDO
7eEE22I0zahMPC+cnjw2Y/QXdsM+j01wuckAKwuGv4LJ3upaWrv7AuhtuLSEsJhq
WgkDmJyVFuxdisPOFN/aChLjbRVVT2FyvtRZfAOPqjFOfl8TCrrp5SY47k2SS973
0dyPMufVgFbEIMzhiEc/+ntIRivbVzsHR8OCAcAT7xiz/pi2na6RWtHo88hOUChI
HH6YJqdBqV3za7vioxUlyWPponaUkfbeFVxDvmMRErLn+HiXXGMQCfNOTNboASSb
OGIapf+L7K+v95mTq7jweHv+xtVHvWI=
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:14 2025 by rpki-client