Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/3cf51d5d-e027-3e49-b292-1bd45824cd7c.roa
File: 3cf51d5d-e027-3e49-b292-1bd45824cd7c.roa (raw, json)
Hash identifier: NSI7rsEjh94GSzWz+gQuZqbpB1dXNOjeeouINqeuJU0=
Subject key identifier: 6E:B6:8B:4D:FB:0C:1F:88:94:1C:31:C6:8B:39:73:39:31:D0:EE:8C
Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial: 010D0C9F432858481DFFDCB021CDCD58EBD53900
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/3cf51d5d-e027-3e49-b292-1bd45824cd7c.roa
Signing time: Fri 06 Dec 2024 14:00:51 +0000
ROA not before: Fri 06 Dec 2024 14:00:51 +0000
ROA not after: Thu 06 Mar 2025 14:00:51 +0000
asID: 2559
IP address blocks: 198.241.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1d:ff:dc:b0:21:cd:cd:58:eb:d5:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Validity
Not Before: Dec 6 14:00:51 2024 GMT
Not After : Mar 6 14:00:51 2025 GMT
Subject: CN=00e72a32-ce36-46f8-b5c6-1251d55e74f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c1:24:37:56:ed:c7:90:58:c3:59:a1:af:c7:
3a:18:aa:cd:a2:22:b1:90:ff:df:94:19:93:a3:e6:
9a:f1:5c:95:4f:e7:93:db:86:85:0e:04:a3:23:02:
8b:55:e5:67:cf:77:90:01:bc:96:ac:cb:f3:75:69:
14:86:32:8a:4b:24:cb:9d:db:7a:29:2b:80:8b:57:
cc:c5:4b:7b:cb:a7:f0:fd:cb:10:94:29:c9:21:0f:
bf:1b:44:f5:3b:13:3e:79:5d:8c:cb:1b:ae:21:a7:
6b:63:4d:8a:45:31:c0:fd:14:29:42:31:a6:d3:4d:
bd:c0:d5:37:25:48:0d:f3:e6:91:ee:96:83:ad:62:
dc:c3:8f:e7:27:91:12:51:ba:26:6e:8b:d7:3d:3c:
7e:fe:cf:55:46:19:ef:76:10:2d:4a:dd:6b:a5:71:
c9:25:7e:3a:e2:6c:cf:6d:65:58:55:8d:db:8b:01:
94:8b:89:ad:88:82:d1:ff:ed:5e:38:7f:a2:7d:8e:
35:05:37:7d:55:17:10:d2:e2:c8:f6:39:53:f0:4a:
19:a0:12:cd:5d:0e:b2:35:e0:dc:8e:90:a8:57:64:
7f:a6:04:a9:f7:73:da:21:8d:18:83:16:76:34:f1:
61:3c:c5:b8:c2:dd:03:a7:2b:b9:b6:0d:92:d6:b4:
ad:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B6:8B:4D:FB:0C:1F:88:94:1C:31:C6:8B:39:73:39:31:D0:EE:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/3cf51d5d-e027-3e49-b292-1bd45824cd7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
X509v3 Authority Key Identifier:
keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
sbgp-ipAddrBlock: critical
IPv4:
198.241.150.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:7c:13:86:43:e4:d7:5f:bb:81:75:a6:f2:02:5d:b8:37:64:
a8:07:a2:a0:51:1c:0b:f8:57:7b:59:b0:64:a0:5e:a3:13:1f:
07:da:78:f3:39:14:cd:4d:6a:ed:ff:cd:55:c0:b0:02:34:b1:
75:a0:c3:01:d3:b8:08:6f:a1:21:59:7d:f4:83:e5:3c:6d:6b:
6a:0c:df:56:70:95:73:00:ba:4c:52:3e:f5:03:d7:d0:98:a9:
e4:71:49:10:b8:9f:51:fd:fc:34:25:a4:99:6d:9f:f5:32:52:
2c:a2:bf:dc:00:71:58:d4:d5:20:30:1d:fe:08:1c:30:af:99:
2c:f4:2f:db:81:d1:ca:28:f2:50:5f:00:64:21:e3:8c:e1:09:
eb:39:0a:84:fc:34:29:ea:1b:5f:fa:7e:4a:11:44:92:23:53:
7a:0f:fe:11:11:b7:f1:6e:88:59:4a:df:87:65:35:f2:ea:dd:
23:10:a3:e8:55:e5:84:ef:7a:44:f8:87:7a:d3:9a:6c:58:93:
ff:03:d9:55:dc:96:8d:3c:bd:d6:9d:e1:fa:56:a7:ff:f2:97:
b3:cb:c1:fb:51:57:ac:44:ef:bd:f8:3a:01:5e:eb:c4:34:c9:
8b:f4:42:86:6f:c7:e4:66:45:c3:5a:90:55:6c:34:11:28:e0:
53:b2:a4:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgd/9ywIc3NWOvVOQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx
ODQyMB4XDTI0MTIwNjE0MDA1MVoXDTI1MDMwNjE0MDA1MVowLzEtMCsGA1UEAxMk
MDBlNzJhMzItY2UzNi00NmY4LWI1YzYtMTI1MWQ1NWU3NGYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMEkN1btx5BYw1mhr8c6GKrNoiKxkP/flBmT
o+aa8VyVT+eT24aFDgSjIwKLVeVnz3eQAbyWrMvzdWkUhjKKSyTLndt6KSuAi1fM
xUt7y6fw/csQlCnJIQ+/G0T1OxM+eV2MyxuuIadrY02KRTHA/RQpQjGm0029wNU3
JUgN8+aR7paDrWLcw4/nJ5ESUbombovXPTx+/s9VRhnvdhAtSt1rpXHJJX464mzP
bWVYVY3biwGUi4mtiILR/+1eOH+ifY41BTd9VRcQ0uLI9jlT8EoZoBLNXQ6yNeDc
jpCoV2R/pgSp93PaIY0YgxZ2NPFhPMW4wt0Dpyu5tg2S1rStpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG62i037DB+IlBwxxos5czkx0O6MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2
NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvM2NmNTFkNWQtZTAyNy0z
ZTQ5LWIyOTItMWJkNDU4MjRjZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1
ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1
MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl
NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvGWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE58E4ZD5Ndfu4F1pvICXbg3ZKgHoqBRHAv4V3tZsGSgXqMTHwfaePM5
FM1Nau3/zVXAsAI0sXWgwwHTuAhvoSFZffSD5Txta2oM31ZwlXMAukxSPvUD19CY
qeRxSRC4n1H9/DQlpJltn/UyUiyiv9wAcVjU1SAwHf4IHDCvmSz0L9uB0coo8lBf
AGQh44zhCes5CoT8NCnqG1/6fkoRRJIjU3oP/hERt/FuiFlK34dlNfLq3SMQo+hV
5YTvekT4h3rTmmxYk/8D2VXclo08vdad4fpWp//yl7PLwftRV6xE7734OgFe68Q0
yYv0QoZvx+RmRcNakFVsNBEo4FOypJ8=
-----END CERTIFICATE-----
Generated at Sun Apr 27 19:03:57 2025 by rpki-client