Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/ba5ee86f-ee01-3881-91fb-3459183d215d.roa
File: ba5ee86f-ee01-3881-91fb-3459183d215d.roa (raw, json)
Hash identifier: 1iE4UaUhlkFxDSEDvMCWx6QiPIVO/wgSse+1MWkRNd8=
Subject key identifier: 48:89:FD:73:7A:A6:31:70:86:3D:BC:01:1F:44:20:2F:6F:4A:75:14
Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c
Certificate serial: 010D0C9F43285848345569F42CECE8C51F43ED40
Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/ba5ee86f-ee01-3881-91fb-3459183d215d.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 32181
IP address blocks: 199.168.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:69:f4:2c:ec:e8:c5:1f:43:ed:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=05d78c24-6def-452a-8faa-8c396f0565af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:40:dc:64:e7:79:97:5a:b8:6c:3e:b0:9c:3c:
e3:4e:91:34:14:54:21:1b:d0:7c:aa:32:93:e6:29:
22:72:1f:85:ba:f7:88:48:a1:a4:e0:e3:98:fc:14:
87:3d:86:0f:30:80:b3:c0:f6:f2:58:8f:85:7e:a2:
9f:89:f9:73:49:b1:13:61:16:e7:a6:40:96:de:d2:
8c:ae:38:06:9f:9d:09:aa:a4:c5:54:58:9a:d7:fa:
91:46:86:ec:b4:af:e5:23:90:8d:69:f7:6a:3e:d2:
9b:bd:66:36:80:19:15:9e:42:06:bb:fc:cd:c3:cf:
9a:43:52:2e:8b:2c:e1:c3:a9:14:37:0f:fd:91:ca:
54:32:52:98:16:a0:02:19:b6:c3:1d:98:5c:9b:e6:
13:e6:da:56:83:86:27:da:11:7d:3b:9f:c3:67:7a:
7b:89:f8:9d:16:95:93:9d:13:42:35:69:10:42:ed:
b5:cf:91:fe:06:51:60:19:07:9c:72:24:91:eb:36:
3a:85:88:b5:27:c9:f6:30:aa:68:ce:86:45:9b:5f:
13:d5:c3:4d:40:4b:35:1d:d4:ca:47:5c:4b:a3:a3:
e7:bf:93:1a:6d:1f:ab:0d:13:00:f8:11:7e:d0:b3:
ad:08:cb:f9:a4:c4:1f:01:5c:7e:d6:b1:62:6c:76:
05:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:89:FD:73:7A:A6:31:70:86:3D:BC:01:1F:44:20:2F:6F:4A:75:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/ba5ee86f-ee01-3881-91fb-3459183d215d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl
X509v3 Authority Key Identifier:
keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer
sbgp-ipAddrBlock: critical
IPv4:
199.168.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:53:57:83:c6:6a:b8:d2:fa:b8:23:35:ca:03:55:ce:35:a2:
a0:10:f0:43:e4:11:05:ea:52:15:81:b1:fb:7e:1e:a5:66:a3:
e9:b7:61:09:1d:d1:47:9f:d4:24:89:8e:a5:df:6e:5d:8d:e5:
2e:28:84:96:b1:7a:16:a4:bb:ac:99:1d:40:2f:e4:30:21:2e:
02:89:e6:59:54:8c:ef:2c:40:b3:36:cf:67:64:8a:32:54:86:
74:ea:44:49:8c:b0:a5:b9:92:a9:53:4c:d2:f2:62:6b:bb:ae:
7d:c2:31:18:fb:43:0e:89:0c:6c:49:0a:1e:c1:87:75:68:ea:
8f:70:eb:2e:fd:03:61:a6:44:37:bb:aa:d3:2a:4a:de:2a:32:
d0:c7:3f:fa:94:20:b8:03:35:d8:70:08:bb:ca:ef:36:cc:b3:
50:6c:fb:a1:b9:23:61:b5:96:2e:24:63:c1:05:17:fd:aa:3a:
75:cd:66:36:05:91:09:f2:b9:2c:16:9d:76:d9:da:4b:d0:8e:
2b:99:07:f3:d5:b2:8f:63:34:a3:08:89:90:6c:4d:19:98:36:
63:1b:12:9a:ea:64:58:c2:3b:60:c6:d1:08:76:da:07:50:ca:
0b:32:ef:70:da:17:d4:b0:76:0a:8d:13:2d:a8:18:15:35:09:
20:cb:65:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg0VWn0LOzoxR9D7UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy
MTBjMB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk
MDVkNzhjMjQtNmRlZi00NTJhLThmYWEtOGMzOTZmMDU2NWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30DcZOd5l1q4bD6wnDzjTpE0FFQhG9B8qjKT
5ikich+FuveISKGk4OOY/BSHPYYPMICzwPbyWI+FfqKfiflzSbETYRbnpkCW3tKM
rjgGn50JqqTFVFia1/qRRobstK/lI5CNafdqPtKbvWY2gBkVnkIGu/zNw8+aQ1Iu
iyzhw6kUNw/9kcpUMlKYFqACGbbDHZhcm+YT5tpWg4Yn2hF9O5/DZ3p7ifidFpWT
nRNCNWkQQu21z5H+BlFgGQecciSR6zY6hYi1J8n2MKpozoZFm18T1cNNQEs1HdTK
R1xLo6Pnv5MabR+rDRMA+BF+0LOtCMv5pMQfAVx+1rFibHYFYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEiJ/XN6pjFwhj28AR9EIC9vSnUUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk
NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvYmE1ZWU4NmYtZWUwMS0z
ODgxLTkxZmItMzQ1OTE4M2QyMTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3
YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy
MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx
MWMxMjIxMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx6hwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADhTV4PGarjS+rgjNcoDVc41oqAQ8EPkEQXqUhWBsft+HqVmo+m3YQkd
0Uef1CSJjqXfbl2N5S4ohJaxehaku6yZHUAv5DAhLgKJ5llUjO8sQLM2z2dkijJU
hnTqREmMsKW5kqlTTNLyYmu7rn3CMRj7Qw6JDGxJCh7Bh3Vo6o9w6y79A2GmRDe7
qtMqSt4qMtDHP/qUILgDNdhwCLvK7zbMs1Bs+6G5I2G1li4kY8EFF/2qOnXNZjYF
kQnyuSwWnXbZ2kvQjiuZB/PVso9jNKMIiZBsTRmYNmMbEprqZFjCO2DG0Qh22gdQ
ygsy73DaF9SwdgqNEy2oGBU1CSDLZfI=
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:06:13 2025 by rpki-client