Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5b09870e-a712-3eab-8443-890377b3a362.roa
File: 5b09870e-a712-3eab-8443-890377b3a362.roa (raw, json)
Hash identifier: 6+J1TNjdZW6TCuXJmAJjmha+ZkTA60v5EpOlu7Zp4wk=
Subject key identifier: C3:C2:12:40:1D:ED:B6:4B:2D:9E:D0:2D:73:70:E7:80:FA:24:FF:07
Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial: 010D0C9F432858486EF5B96A765411BD0E581F00
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5b09870e-a712-3eab-8443-890377b3a362.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 9009
IP address blocks: 198.145.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:b9:6a:76:54:11:bd:0e:58:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=473a8d8e-6343-4b0b-a652-b489068c0db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:81:bf:68:8b:f6:1b:24:5e:b2:3e:3c:b6:72:
18:5a:45:55:6e:35:71:b1:21:bb:bd:d3:d8:b9:9a:
ee:ec:d6:60:3b:80:60:f7:9f:00:ba:af:6b:26:c5:
32:90:dd:d5:58:83:4f:3c:08:75:44:75:ee:df:c2:
8d:be:29:f5:8d:58:4f:5c:3e:61:8a:35:33:e7:25:
97:40:1a:e7:a5:39:a9:43:f7:02:fc:86:fd:16:a3:
45:74:49:49:21:7f:e2:e9:27:56:2b:0d:1f:2d:95:
59:5a:23:11:4e:ee:ed:e4:06:88:20:a0:08:29:06:
20:68:7d:c4:67:4c:35:76:b4:a3:24:32:de:9b:5a:
1d:10:7c:d7:de:43:05:41:4e:df:e9:29:32:b8:b5:
e0:84:18:29:11:0c:f2:2d:ab:c5:3f:52:72:c8:36:
a3:6c:0a:b7:58:ba:7d:65:62:52:0d:a5:2e:a7:44:
52:04:3f:95:6e:6c:c7:11:3f:ec:60:1d:10:0e:9e:
02:37:fa:b6:42:ed:dc:fa:17:8a:ed:6f:ba:84:28:
ff:8f:1e:03:32:05:c3:da:90:18:29:95:22:50:8e:
91:86:1b:d7:d9:1f:72:e6:97:b0:1f:12:4b:3b:30:
80:ab:54:2b:78:f1:81:e4:b4:c6:d8:f2:92:ca:76:
c1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C2:12:40:1D:ED:B6:4B:2D:9E:D0:2D:73:70:E7:80:FA:24:FF:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5b09870e-a712-3eab-8443-890377b3a362.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
X509v3 Authority Key Identifier:
keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.145.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:c7:8b:ef:97:c5:58:05:3d:b1:39:9f:cb:b9:d0:fb:86:df:
ca:f1:50:67:7d:f7:19:80:bf:35:e9:3a:56:22:b5:38:15:40:
46:a8:29:e9:13:ce:05:38:fa:bb:56:bb:50:3d:12:c7:07:62:
92:b1:66:52:c3:20:22:f4:40:1a:69:6d:53:53:62:62:de:b9:
a3:5c:d3:42:aa:3a:ac:22:40:ca:d7:9c:34:f8:de:e2:9c:3a:
16:ef:0f:20:ae:6d:1f:cc:f7:af:40:09:1c:02:e8:1b:99:d6:
16:43:4b:9a:29:e0:1a:60:2d:62:4d:29:78:87:d2:06:42:f8:
58:13:2c:f8:27:77:80:44:d0:00:d5:ba:82:d7:c3:01:ed:0b:
0f:db:1e:d8:70:93:8f:6b:09:05:cd:c6:3e:c3:58:27:e9:84:
a8:bc:9c:c4:65:74:a6:13:bd:47:f6:b6:b6:33:80:48:db:16:
62:89:44:48:77:d5:8a:d9:b3:6c:4a:f7:91:d7:ca:f7:2a:34:
d6:69:97:d8:f5:2f:a6:c0:d1:e5:e4:58:cb:cf:19:66:ed:24:
f0:0a:03:10:20:77:10:b3:7a:93:74:b9:6d:6b:75:3f:89:27:
39:6a:38:ee:bc:88:e5:c1:0b:1f:5d:09:69:42:e2:9a:19:84:
c3:66:03:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhu9blqdlQRvQ5YHwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz
NjFiMB4XDTI1MDEwNDE0MDA1MVoXDTI1MDQwNDEzMDA1MVowLzEtMCsGA1UEAxMk
NDczYThkOGUtNjM0My00YjBiLWE2NTItYjQ4OTA2OGMwZGIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoG/aIv2GyResj48tnIYWkVVbjVxsSG7vdPY
uZru7NZgO4Bg958Auq9rJsUykN3VWINPPAh1RHXu38KNvin1jVhPXD5hijUz5yWX
QBrnpTmpQ/cC/Ib9FqNFdElJIX/i6SdWKw0fLZVZWiMRTu7t5AaIIKAIKQYgaH3E
Z0w1drSjJDLem1odEHzX3kMFQU7f6SkyuLXghBgpEQzyLavFP1JyyDajbAq3WLp9
ZWJSDaUup0RSBD+VbmzHET/sYB0QDp4CN/q2Qu3c+heK7W+6hCj/jx4DMgXD2pAY
KZUiUI6RhhvX2R9y5pewHxJLOzCAq1QrePGB5LTG2PKSynbBhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMPCEkAd7bZLLZ7QLXNw54D6JP8HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx
Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNWIwOTg3MGUtYTcxMi0z
ZWFiLTg0NDMtODkwMzc3YjNhMzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2
ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw
MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh
NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpGeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGjHi++XxVgFPbE5n8u50PuG38rxUGd99xmAvzXpOlYitTgVQEaoKekT
zgU4+rtWu1A9EscHYpKxZlLDICL0QBppbVNTYmLeuaNc00KqOqwiQMrXnDT43uKc
OhbvDyCubR/M969ACRwC6BuZ1hZDS5op4BpgLWJNKXiH0gZC+FgTLPgnd4BE0ADV
uoLXwwHtCw/bHthwk49rCQXNxj7DWCfphKi8nMRldKYTvUf2trYzgEjbFmKJREh3
1YrZs2xK95HXyvcqNNZpl9j1L6bA0eXkWMvPGWbtJPAKAxAgdxCzepN0uW1rdT+J
JzlqOO68iOXBCx9dCWlC4poZhMNmAw4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:16:41 2025 by rpki-client