Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/4debc5bf-2b62-36fa-a8ab-b5b9deca5ac3.roa
File: 4debc5bf-2b62-36fa-a8ab-b5b9deca5ac3.roa (raw, json)
Hash identifier: WJPNs4iDlvpyXOTKee9+wbZBFOrtDVRtz1S+fxxeJ40=
Subject key identifier: C4:82:51:0C:10:70:70:CE:AC:5B:77:64:81:47:75:64:6A:6C:51:90
Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial: 010D0C9F432858489075F43680EA3D62B09C8640
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/4debc5bf-2b62-36fa-a8ab-b5b9deca5ac3.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 9009
IP address blocks: 198.145.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:75:f4:36:80:ea:3d:62:b0:9c:86:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=c06a1cf8-7261-4898-8f2e-d57f16b468f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:33:48:7d:63:35:a9:d6:5d:f7:df:6f:46:f8:
5c:4d:e6:95:2a:86:f5:8f:b0:2e:04:38:8a:c6:a0:
e1:24:eb:f4:6f:f6:b9:8b:90:e3:95:8c:f3:b8:93:
2c:7a:1e:2d:93:4d:e2:7e:c8:f4:e8:d8:9a:60:42:
de:cb:d5:9c:b4:3f:23:28:07:74:32:12:a0:2a:fe:
6b:3d:d7:7a:47:b5:18:b0:64:71:2e:55:17:14:64:
63:46:8b:8a:c5:c9:9a:fd:6f:0b:fd:59:6d:9d:cc:
15:a7:6c:f6:e3:3a:4e:b2:12:1b:83:79:39:82:8d:
9d:1f:cc:5e:61:a8:67:e6:d5:84:10:c8:9a:73:f6:
fb:b4:7f:8b:fd:07:54:75:02:dc:a6:c1:b4:58:bf:
b7:9f:8c:5a:e8:37:a3:31:b8:ea:a1:1f:f0:c2:af:
3d:d2:e5:25:4e:2c:a9:f6:f0:a1:a6:d8:5b:e5:7d:
c4:28:d4:89:c6:ed:f8:66:44:fd:ef:25:b9:76:1a:
2b:f7:53:6e:3d:6a:3b:ac:13:d3:c1:a6:7f:28:19:
8f:5f:e9:27:9b:14:a0:94:40:86:86:ab:50:12:bf:
9c:07:3e:95:af:e0:b3:63:09:51:ac:2c:99:f5:ab:
ea:92:9c:2e:b3:87:6f:59:3e:7a:a6:69:dc:c8:1e:
fe:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:82:51:0C:10:70:70:CE:AC:5B:77:64:81:47:75:64:6A:6C:51:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/4debc5bf-2b62-36fa-a8ab-b5b9deca5ac3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
X509v3 Authority Key Identifier:
keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.145.229.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:96:c7:17:7c:1c:c9:7b:b8:93:7e:c9:fc:2a:03:d6:5f:fa:
56:5a:17:33:25:c4:f4:0e:d3:48:38:8f:c1:5f:db:8a:67:a4:
a7:1d:09:4d:27:03:7f:fc:f1:cb:ea:71:f7:1c:dc:e9:9b:33:
db:0d:e5:32:42:ad:02:94:df:c6:0c:89:0b:cf:e4:b3:0b:28:
49:a8:7a:39:cd:02:1b:fa:35:8e:87:e2:2f:bc:3e:19:30:4b:
60:b8:41:3b:14:1f:b1:03:91:20:a2:06:ad:3e:92:9c:d1:3f:
3a:2c:9f:31:b4:c2:39:0b:40:ce:c9:6b:00:fa:2a:3d:81:46:
c3:02:f2:64:bd:eb:75:d4:0b:da:d6:b1:0a:76:0c:41:39:71:
b9:b8:b7:8f:62:c4:0d:0a:65:21:37:5d:e7:ec:2b:e3:4b:0a:
14:b4:34:f1:cd:5e:54:8c:37:26:c8:6b:0b:da:93:fc:2d:aa:
14:5a:48:18:c9:22:cb:e5:9b:8f:49:5e:7d:a9:c7:12:87:28:
e4:86:61:36:d5:d7:89:a9:f1:0f:f1:54:19:b6:c9:20:18:74:
f6:c4:69:11:ad:28:27:9e:24:29:0c:dd:90:0b:39:cf:3e:f4:
28:71:12:5e:c6:73:aa:7a:fc:ca:65:28:f6:c4:76:de:7d:3b:
08:65:31:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdfQ2gOo9YrCchkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz
NjFiMB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk
YzA2YTFjZjgtNzI2MS00ODk4LThmMmUtZDU3ZjE2YjQ2OGY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszNIfWM1qdZd999vRvhcTeaVKob1j7AuBDiK
xqDhJOv0b/a5i5DjlYzzuJMseh4tk03ifsj06NiaYELey9WctD8jKAd0MhKgKv5r
Pdd6R7UYsGRxLlUXFGRjRouKxcma/W8L/VltncwVp2z24zpOshIbg3k5go2dH8xe
Yahn5tWEEMiac/b7tH+L/QdUdQLcpsG0WL+3n4xa6DejMbjqoR/wwq890uUlTiyp
9vChpthb5X3EKNSJxu34ZkT97yW5dhor91NuPWo7rBPTwaZ/KBmPX+knmxSglECG
hqtQEr+cBz6Vr+CzYwlRrCyZ9avqkpwus4dvWT56pmncyB7+5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMSCUQwQcHDOrFt3ZIFHdWRqbFGQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx
Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNGRlYmM1YmYtMmI2Mi0z
NmZhLWE4YWItYjViOWRlY2E1YWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2
ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw
MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh
NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpHlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGSWxxd8HMl7uJN+yfwqA9Zf+lZaFzMlxPQO00g4j8Ff24pnpKcdCU0n
A3/88cvqcfcc3OmbM9sN5TJCrQKU38YMiQvP5LMLKEmoejnNAhv6NY6H4i+8Phkw
S2C4QTsUH7EDkSCiBq0+kpzRPzosnzG0wjkLQM7JawD6Kj2BRsMC8mS963XUC9rW
sQp2DEE5cbm4t49ixA0KZSE3XefsK+NLChS0NPHNXlSMNybIawvak/wtqhRaSBjJ
Isvlm49JXn2pxxKHKOSGYTbV14mp8Q/xVBm2ySAYdPbEaRGtKCeeJCkM3ZALOc8+
9ChxEl7Gc6p6/MplKPbEdt59OwhlMRs=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:17:05 2025 by rpki-client