Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/2bdf5da3-7278-3180-9d5c-727f67919ebc.roa
File: 2bdf5da3-7278-3180-9d5c-727f67919ebc.roa (raw, json)
Hash identifier: wKCdzqsM1PqN/NuuvlCIn/9sRu0T9EycZZlVbV0QGzw=
Subject key identifier: 33:16:98:16:95:CE:30:E8:52:45:1F:CC:D8:DA:3F:12:CC:9A:FD:6B
Certificate issuer: /CN=328ebe8e-32d9-4873-ad53-1a5e421126d5
Certificate serial: 010D0C9F432858483F803992DE5C1B2E16068D40
Authority key identifier: 88:80:4B:02:44:DA:7E:76:D7:64:EE:31:28:48:B6:17:EF:DD:EE:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/2bdf5da3-7278-3180-9d5c-727f67919ebc.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 13631
IP address blocks: 198.22.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:39:92:de:5c:1b:2e:16:06:8d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=328ebe8e-32d9-4873-ad53-1a5e421126d5
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=17cd34c9-1c88-4c8f-a99a-d03f1b79c4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7e:ca:50:7c:97:fc:c8:2f:9e:ec:75:7f:8d:
e1:91:f3:fa:30:f6:78:f7:bf:6b:83:a6:ad:ae:77:
1e:b6:a0:75:bf:cb:27:81:8d:60:b2:04:e9:ed:5d:
6b:68:b2:ee:1b:1b:80:34:31:66:23:fb:fc:1e:f8:
1c:f6:23:d0:02:6c:80:d0:82:63:e0:73:a3:11:0c:
04:3f:aa:87:73:24:54:0c:1b:57:48:a9:07:95:d3:
66:3f:60:49:d4:90:a4:45:8e:f0:ee:9c:93:b1:cb:
19:04:1e:e9:2d:f4:10:b7:24:25:73:16:92:af:5c:
a3:ff:5b:6e:d2:03:3d:8d:82:b5:ba:ba:28:68:03:
db:2e:94:57:f9:e4:dc:cf:a6:a2:9e:d7:67:97:fe:
f9:7b:5b:cb:1d:08:c2:8f:66:c9:43:6c:5c:6a:a1:
29:69:b2:26:68:0d:51:8b:6f:77:b8:59:0b:89:4e:
3d:a3:f5:50:b8:09:28:7b:58:cf:f6:84:03:3e:8c:
40:1b:50:19:5e:a1:82:bd:c6:3b:09:71:16:62:4d:
26:40:02:a4:25:6e:06:ee:45:49:36:04:ba:8c:ce:
68:2a:3e:2c:4d:5a:a4:36:a6:66:ba:90:ae:eb:9c:
b7:db:b9:d3:9b:32:4b:46:29:36:25:7c:24:06:e3:
ac:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:16:98:16:95:CE:30:E8:52:45:1F:CC:D8:DA:3F:12:CC:9A:FD:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/2bdf5da3-7278-3180-9d5c-727f67919ebc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5/328ebe8e-32d9-4873-ad53-1a5e421126d5.crl
X509v3 Authority Key Identifier:
keyid:88:80:4B:02:44:DA:7E:76:D7:64:EE:31:28:48:B6:17:EF:DD:EE:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/328ebe8e-32d9-4873-ad53-1a5e421126d5.cer
sbgp-ipAddrBlock: critical
IPv4:
198.22.90.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:ff:f8:5e:8a:fb:d1:67:92:a2:32:b9:c4:8d:4f:bf:1e:a7:
9c:c6:e8:34:91:0d:8e:06:2f:d5:11:a7:c5:2d:12:ba:4c:54:
39:c1:45:c6:ee:f5:fc:05:ff:c7:20:63:3d:c2:e7:d4:97:bc:
7e:b0:c6:8b:d2:06:d8:a4:ac:11:e6:ea:f3:df:38:b5:d7:fc:
68:0b:3a:54:34:03:94:6b:74:35:18:31:44:e3:b4:ca:49:06:
81:52:21:bf:92:88:74:86:a0:de:c8:ca:33:67:c7:a7:f9:c9:
9c:3a:9f:b5:b3:ed:b2:00:b8:d9:f9:46:77:96:a7:2c:c1:64:
8c:6f:68:f8:de:b7:7b:6c:b7:bd:2d:84:50:9a:45:cb:73:31:
c1:18:3e:08:43:4e:b3:86:69:6c:97:4a:a3:72:d9:de:62:5f:
ce:40:94:17:d3:da:12:48:63:71:b9:af:b7:f5:c1:5e:1a:71:
07:40:aa:8c:61:dd:4e:3a:61:ec:42:57:1c:7c:56:2c:bc:4a:
94:98:8e:7e:cb:0f:bb:70:ac:4a:98:a2:b9:bb:19:8e:c5:80:
e9:f3:e7:74:25:11:e3:bc:62:18:ba:a5:81:bd:63:5e:03:4b:
c2:d3:85:9c:62:cf:36:8c:ac:2f:c5:11:0e:15:c1:6b:44:57:
67:66:9c:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg/gDmS3lwbLhYGjUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzI4ZWJlOGUtMzJkOS00ODczLWFkNTMtMWE1ZTQyMTEy
NmQ1MB4XDTI0MTIxODE0MDA1MloXDTI1MDMxODEzMDA1MlowLzEtMCsGA1UEAxMk
MTdjZDM0YzktMWM4OC00YzhmLWE5OWEtZDAzZjFiNzljNGU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5X7KUHyX/Mgvnux1f43hkfP6MPZ4979rg6at
rncetqB1v8sngY1gsgTp7V1raLLuGxuANDFmI/v8Hvgc9iPQAmyA0IJj4HOjEQwE
P6qHcyRUDBtXSKkHldNmP2BJ1JCkRY7w7pyTscsZBB7pLfQQtyQlcxaSr1yj/1tu
0gM9jYK1urooaAPbLpRX+eTcz6aintdnl/75e1vLHQjCj2bJQ2xcaqEpabImaA1R
i293uFkLiU49o/VQuAkoe1jP9oQDPoxAG1AZXqGCvcY7CXEWYk0mQAKkJW4G7kVJ
NgS6jM5oKj4sTVqkNqZmupCu65y327nTmzJLRik2JXwkBuOsPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDMWmBaVzjDoUkUfzNjaPxLMmv1rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zMjhl
YmU4ZS0zMmQ5LTQ4NzMtYWQ1My0xYTVlNDIxMTI2ZDUvMmJkZjVkYTMtNzI3OC0z
MTgwLTlkNWMtNzI3ZjY3OTE5ZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzI4ZWJlOGUtMzJkOS00ODczLWFk
NTMtMWE1ZTQyMTEyNmQ1LzMyOGViZThlLTMyZDktNDg3My1hZDUzLTFhNWU0MjEx
MjZkNS5jcmwwHwYDVR0jBBgwFoAUiIBLAkTafnbXZO4xKEi2F+/d7g0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zMjhlYmU4ZS0zMmQ5LTQ4NzMtYWQ1My0xYTVl
NDIxMTI2ZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhZaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAT/+F6K+9FnkqIyucSNT78ep5zG6DSRDY4GL9URp8UtErpMVDnBRcbu
9fwF/8cgYz3C59SXvH6wxovSBtikrBHm6vPfOLXX/GgLOlQ0A5RrdDUYMUTjtMpJ
BoFSIb+SiHSGoN7IyjNnx6f5yZw6n7Wz7bIAuNn5RneWpyzBZIxvaPjet3tst70t
hFCaRctzMcEYPghDTrOGaWyXSqNy2d5iX85AlBfT2hJIY3G5r7f1wV4acQdAqoxh
3U46YexCVxx8Viy8SpSYjn7LD7twrEqYorm7GY7FgOnz53QlEeO8Yhi6pYG9Y14D
S8LThZxizzaMrC/FEQ4VwWtEV2dmnFQ=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:46:23 2025 by rpki-client