Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/e40a1bbd-37d3-31fa-95b3-00ce3dd57913.roa
File: e40a1bbd-37d3-31fa-95b3-00ce3dd57913.roa (raw, json)
Hash identifier: NmAvJXtlgL9sLVV7EDBu/NDNaJS6DflszvcRZgVEptI=
Subject key identifier: E6:61:42:9B:48:54:C7:ED:CC:AB:8F:80:7E:82:E3:0E:CF:29:12:58
Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial: 010D0C9F43285847FDE4DD709BCF8E943BC0C410
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/e40a1bbd-37d3-31fa-95b3-00ce3dd57913.roa
Signing time: Mon 25 Nov 2024 02:00:28 +0000
ROA not before: Mon 25 Nov 2024 02:00:28 +0000
ROA not after: Sun 23 Feb 2025 02:00:28 +0000
asID: 2559
IP address blocks: 198.241.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fd:e4:dd:70:9b:cf:8e:94:3b:c0:c4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Validity
Not Before: Nov 25 02:00:28 2024 GMT
Not After : Feb 23 02:00:28 2025 GMT
Subject: CN=bfca887d-48d7-4875-8e74-238ffbcdfa94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:85:c6:6a:d8:21:24:fc:0c:e4:4c:69:8e:e0:
74:77:01:3b:6c:9b:56:b0:d8:a4:d7:b9:56:e3:a3:
e5:18:97:5b:18:21:61:c1:d2:38:84:3c:b1:75:00:
23:41:ff:e8:93:0d:67:fc:f0:d1:95:3a:7a:16:aa:
57:8c:da:f6:de:6f:5d:60:ff:df:fd:2d:62:0e:09:
67:f7:c0:18:c8:56:8d:83:40:22:20:92:20:61:9c:
98:b3:92:01:a6:57:a8:63:11:e7:e4:c6:06:24:8e:
6f:94:55:e7:4e:93:ce:66:9c:79:1b:af:ab:0f:f0:
4e:62:9b:0f:d7:5f:f6:3f:3c:70:30:9c:ce:42:f4:
50:79:11:02:11:61:66:77:a7:b9:55:95:9c:4d:06:
a1:02:a1:a2:dd:e5:96:b0:51:90:50:84:e5:66:8f:
58:cf:c7:3c:24:ea:aa:61:ba:88:49:79:cc:b6:5b:
76:8e:9b:a9:1d:49:e7:d7:c4:20:73:a0:68:39:71:
74:41:10:82:92:cb:a0:04:cb:19:79:af:bc:8a:88:
25:2a:24:99:d6:d0:c9:25:f5:79:7e:da:71:77:fd:
44:ae:02:bf:dc:1b:7e:b9:d9:84:04:98:fc:c7:20:
90:47:c7:3f:1e:80:f3:a4:fd:8c:f4:5a:25:0f:52:
dd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:61:42:9B:48:54:C7:ED:CC:AB:8F:80:7E:82:E3:0E:CF:29:12:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/e40a1bbd-37d3-31fa-95b3-00ce3dd57913.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
X509v3 Authority Key Identifier:
keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
sbgp-ipAddrBlock: critical
IPv4:
198.241.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:c9:be:27:cb:2d:77:c2:e9:fc:0f:4c:b5:a6:7c:2c:f9:0b:
fa:7c:8c:51:f5:89:a5:77:36:18:f7:4b:6a:b7:dc:10:e7:a6:
c8:6b:48:13:c0:a3:c9:87:8a:03:1a:d6:73:73:99:c4:d8:96:
34:81:31:5d:5f:10:b7:7e:dd:8a:02:0c:e0:64:d3:7c:57:2b:
9a:a4:1a:15:c7:c4:b0:6a:a9:81:6f:d1:db:69:ad:5f:55:07:
d0:e6:1c:98:f4:3a:b9:83:86:f7:0e:71:1a:a0:21:e2:0d:f5:
2f:11:04:1d:40:f1:cc:70:f4:b0:a4:b0:fa:af:12:b1:de:bf:
1c:35:fa:4e:83:ff:08:82:73:26:35:08:63:9c:56:fe:9b:9f:
5c:cc:c7:13:1a:3b:81:6f:c2:fd:46:87:19:75:dd:66:b2:0e:
df:86:cf:94:2b:b3:64:a4:6d:b8:30:32:e2:e2:fe:ea:20:b2:
a8:d5:95:9b:60:cb:a9:64:b3:72:7b:0c:3f:10:58:d7:ff:ac:
a8:51:17:ad:45:58:7e:2c:56:5d:11:9d:bf:ec:17:c1:d1:34:
98:ea:d2:53:07:aa:db:e9:dd:38:cf:f8:c6:3e:7f:31:a7:22:
58:d6:66:50:75:b6:c7:e8:34:a8:5f:f7:aa:b9:4f:45:a6:59:
ee:a5:56:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf95N1wm8+OlDvAxBAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx
ODQyMB4XDTI0MTEyNTAyMDAyOFoXDTI1MDIyMzAyMDAyOFowLzEtMCsGA1UEAxMk
YmZjYTg4N2QtNDhkNy00ODc1LThlNzQtMjM4ZmZiY2RmYTk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IXGatghJPwM5ExpjuB0dwE7bJtWsNik17lW
46PlGJdbGCFhwdI4hDyxdQAjQf/okw1n/PDRlTp6FqpXjNr23m9dYP/f/S1iDgln
98AYyFaNg0AiIJIgYZyYs5IBpleoYxHn5MYGJI5vlFXnTpPOZpx5G6+rD/BOYpsP
11/2PzxwMJzOQvRQeRECEWFmd6e5VZWcTQahAqGi3eWWsFGQUITlZo9Yz8c8JOqq
YbqISXnMtlt2jpupHUnn18Qgc6BoOXF0QRCCksugBMsZea+8ioglKiSZ1tDJJfV5
ftpxd/1ErgK/3Bt+udmEBJj8xyCQR8c/HoDzpP2M9FolD1Ld5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOZhQptIVMftzKuPgH6C4w7PKRJYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2
NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvZTQwYTFiYmQtMzdkMy0z
MWZhLTk1YjMtMDBjZTNkZDU3OTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1
ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1
MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl
NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvGsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHHJvifLLXfC6fwPTLWmfCz5C/p8jFH1iaV3Nhj3S2q33BDnpshrSBPA
o8mHigMa1nNzmcTYljSBMV1fELd+3YoCDOBk03xXK5qkGhXHxLBqqYFv0dtprV9V
B9DmHJj0OrmDhvcOcRqgIeIN9S8RBB1A8cxw9LCksPqvErHevxw1+k6D/wiCcyY1
CGOcVv6bn1zMxxMaO4Fvwv1Ghxl13WayDt+Gz5Qrs2SkbbgwMuLi/uogsqjVlZtg
y6lks3J7DD8QWNf/rKhRF61FWH4sVl0Rnb/sF8HRNJjq0lMHqtvp3TjP+MY+fzGn
IljWZlB1tsfoNKhf96q5T0WmWe6lVtg=
-----END CERTIFICATE-----
Generated at Sun Apr 27 19:04:34 2025 by rpki-client