Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4280c96f-e83c-3483-a3d8-84f727a16bb3.roa
File: 4280c96f-e83c-3483-a3d8-84f727a16bb3.roa (raw, json)
Hash identifier: RoYATCjjWfQbeDkOMlpiNVCuexN7jVzvAKeqGtKHMKY=
Subject key identifier: BD:E6:AD:DF:00:1D:44:36:35:13:BC:21:C6:36:8F:97:69:E5:61:8B
Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial: 010D0C9F43285847FDE4DD4AAC47506621987D40
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4280c96f-e83c-3483-a3d8-84f727a16bb3.roa
Signing time: Mon 25 Nov 2024 02:00:28 +0000
ROA not before: Mon 25 Nov 2024 02:00:28 +0000
ROA not after: Sun 23 Feb 2025 02:00:28 +0000
asID: 2559
IP address blocks: 198.241.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fd:e4:dd:4a:ac:47:50:66:21:98:7d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Validity
Not Before: Nov 25 02:00:28 2024 GMT
Not After : Feb 23 02:00:28 2025 GMT
Subject: CN=24b258cc-92a8-43c8-8434-a85b2c4188da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5f:51:ec:fc:6e:7b:5e:c0:c2:80:9d:67:9d:
05:ce:ae:5e:93:c3:53:f7:91:c7:26:5e:80:43:7f:
9c:c4:61:da:b1:8b:0d:40:1a:8b:36:24:2d:9f:7e:
6d:49:02:84:e7:d7:12:33:ca:79:5d:4a:f7:fe:fd:
33:e1:57:f4:f4:b3:90:d5:84:ce:cd:b3:3f:91:5c:
10:3d:54:0c:c3:54:f3:f1:77:c4:82:ae:78:06:24:
b4:06:f6:21:cf:8a:67:6c:af:f5:07:48:52:20:f8:
db:a8:50:9c:82:40:86:f5:37:bf:c1:45:5e:07:dd:
79:78:72:1b:5c:ae:83:01:71:e7:0b:09:1c:0a:74:
18:79:63:52:f4:3d:6d:e5:27:0c:ac:64:fe:61:d8:
97:db:d0:52:c1:74:c3:85:c0:56:0f:b1:a7:59:c6:
58:63:b2:65:cb:f3:93:55:a5:59:48:de:b7:8a:db:
99:35:d4:6f:af:2d:04:d1:f4:fe:7f:13:07:aa:35:
a2:1b:b5:77:8c:21:e7:b1:32:82:82:fb:67:ca:f4:
eb:f6:22:5c:95:e8:ca:9b:88:d1:96:42:a7:8a:cf:
ff:c2:11:e1:9b:4c:cb:03:f2:4f:67:7d:b3:be:62:
e6:cf:ad:1b:f9:26:dd:a6:74:e4:01:49:2f:c2:47:
f5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E6:AD:DF:00:1D:44:36:35:13:BC:21:C6:36:8F:97:69:E5:61:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4280c96f-e83c-3483-a3d8-84f727a16bb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
X509v3 Authority Key Identifier:
keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
sbgp-ipAddrBlock: critical
IPv4:
198.241.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:c7:bb:a3:ed:6d:60:04:ea:24:ba:b3:53:b9:21:68:25:47:
b8:bd:dc:76:2d:8b:10:8b:88:02:f8:6f:08:d8:73:81:0e:71:
90:e0:04:61:fa:f1:f9:08:1d:bb:14:9b:70:07:98:b6:8c:c2:
30:ec:b3:32:a1:77:8f:04:d3:1e:22:4d:29:94:66:ef:15:f2:
60:fa:5c:a1:fb:67:b6:a4:0d:16:84:23:93:81:78:37:cc:d1:
eb:e2:44:4c:8f:77:be:90:7b:1f:b0:da:13:f7:de:c0:01:80:
a6:b1:35:7e:aa:0d:5e:92:0d:82:25:cd:47:fe:2f:a8:92:27:
fc:35:7a:f3:31:4c:7f:b5:9b:6f:f7:90:56:be:04:ba:a8:93:
5a:cd:4f:58:a6:81:6c:ef:bc:27:5c:39:8f:f4:d2:07:9b:db:
8e:3e:10:28:f7:c9:53:52:d7:4d:5c:29:6b:a9:a0:c8:30:20:
0e:15:3f:a5:39:61:37:43:00:d1:d1:b0:bc:fd:87:6d:ea:e2:
68:c0:66:93:8a:eb:b5:fd:47:e4:79:17:9d:63:f5:f7:e8:aa:
f6:27:74:16:35:9b:d1:37:3c:06:6c:92:05:23:1d:d6:d4:c0:
f0:e7:18:b8:c8:e9:ef:fd:bd:10:4b:33:da:40:f9:bd:13:31:
a1:02:5a:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf95N1KrEdQZiGYfUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx
ODQyMB4XDTI0MTEyNTAyMDAyOFoXDTI1MDIyMzAyMDAyOFowLzEtMCsGA1UEAxMk
MjRiMjU4Y2MtOTJhOC00M2M4LTg0MzQtYTg1YjJjNDE4OGRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApF9R7Pxue17AwoCdZ50Fzq5ek8NT95HHJl6A
Q3+cxGHasYsNQBqLNiQtn35tSQKE59cSM8p5XUr3/v0z4Vf09LOQ1YTOzbM/kVwQ
PVQMw1Tz8XfEgq54BiS0BvYhz4pnbK/1B0hSIPjbqFCcgkCG9Te/wUVeB915eHIb
XK6DAXHnCwkcCnQYeWNS9D1t5ScMrGT+YdiX29BSwXTDhcBWD7GnWcZYY7Jly/OT
VaVZSN63ituZNdRvry0E0fT+fxMHqjWiG7V3jCHnsTKCgvtnyvTr9iJclejKm4jR
lkKnis//whHhm0zLA/JPZ32zvmLmz60b+SbdpnTkAUkvwkf1rQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL3mrd8AHUQ2NRO8IcY2j5dp5WGLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2
NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvNDI4MGM5NmYtZTgzYy0z
NDgzLWEzZDgtODRmNzI3YTE2YmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1
ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1
MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl
NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvHwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABDHu6PtbWAE6iS6s1O5IWglR7i93HYtixCLiAL4bwjYc4EOcZDgBGH6
8fkIHbsUm3AHmLaMwjDsszKhd48E0x4iTSmUZu8V8mD6XKH7Z7akDRaEI5OBeDfM
0eviREyPd76Qex+w2hP33sABgKaxNX6qDV6SDYIlzUf+L6iSJ/w1evMxTH+1m2/3
kFa+BLqok1rNT1imgWzvvCdcOY/00geb244+ECj3yVNS101cKWupoMgwIA4VP6U5
YTdDANHRsLz9h23q4mjAZpOK67X9R+R5F51j9ffoqvYndBY1m9E3PAZskgUjHdbU
wPDnGLjI6e/9vRBLM9pA+b0TMaECWgw=
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:36 2025 by rpki-client