Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/fb3cec3c-e3f8-30b4-ad6e-5eceda10994a.roa
File: fb3cec3c-e3f8-30b4-ad6e-5eceda10994a.roa (raw, json)
Hash identifier: vCJrb4giceYb+EMa3bgS8KdFD8uIKv5FxFEgsMMrqTo=
Subject key identifier: 0F:A2:60:FF:BD:89:3E:62:07:3A:F0:7C:85:5F:B9:B3:B6:52:A2:16
Certificate issuer: /CN=71e68809-5436-4288-ad80-0df35fa0b945
Certificate serial: 010D0C9F432858482EC00EE02F69A92202E1E060
Authority key identifier: 10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/fb3cec3c-e3f8-30b4-ad6e-5eceda10994a.roa
Signing time: Thu 12 Dec 2024 14:00:51 +0000
ROA not before: Thu 12 Dec 2024 14:00:51 +0000
ROA not after: Wed 12 Mar 2025 13:00:51 +0000
asID: 16509
IP address blocks: 192.28.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2e:c0:0e:e0:2f:69:a9:22:02:e1:e0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e68809-5436-4288-ad80-0df35fa0b945
Validity
Not Before: Dec 12 14:00:51 2024 GMT
Not After : Mar 12 13:00:51 2025 GMT
Subject: CN=725b88b5-cba4-4c47-a461-417519a06ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dc:28:f7:b1:b7:bc:cb:ae:ca:26:e5:ab:6a:
d9:d3:90:4a:e6:8b:5b:2c:80:0a:e2:81:83:3b:d8:
69:ac:73:98:95:f6:00:b6:2a:0b:83:c1:28:df:ef:
d0:a7:6c:12:67:1d:0d:05:df:38:8c:b4:26:a3:70:
86:f3:1d:8a:b8:0f:6d:92:a9:ca:af:cf:32:a6:f6:
8e:b3:17:b0:5d:a4:7c:2a:c4:0b:f0:f0:b6:a6:01:
42:9a:d6:b8:80:b0:c2:3c:c8:a4:d2:29:81:89:03:
d3:61:8b:4d:4b:4e:db:de:4a:6c:73:bf:53:f9:3f:
7c:34:f0:86:49:9e:77:1c:5e:75:5b:4b:78:08:4d:
17:81:df:d7:22:01:25:c0:45:24:4d:be:a6:61:41:
e6:c6:55:9d:2f:a2:fe:3f:a3:2e:70:2b:42:08:b9:
1e:6b:9a:3b:05:4a:58:7c:45:b3:e5:af:8e:c3:85:
8d:03:49:d9:c4:a4:cf:4f:9e:97:86:90:d6:f7:48:
ac:01:2d:3f:2f:5d:cf:a9:55:92:e9:09:b7:64:0b:
aa:02:6a:eb:2a:a6:ab:d5:f2:a9:d6:63:16:9a:5a:
ec:08:a7:62:57:e6:e8:c8:22:76:28:d8:55:5a:c6:
d5:51:07:53:a7:1f:bf:3c:08:ca:e8:7f:fb:8a:fc:
da:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A2:60:FF:BD:89:3E:62:07:3A:F0:7C:85:5F:B9:B3:B6:52:A2:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/fb3cec3c-e3f8-30b4-ad6e-5eceda10994a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl
X509v3 Authority Key Identifier:
keyid:10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer
sbgp-ipAddrBlock: critical
IPv4:
192.28.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:21:a5:91:0e:d7:03:e2:de:07:1a:24:36:b7:ed:4f:9e:18:
78:09:ff:32:a6:92:58:cf:23:19:d9:ff:a1:46:8d:60:17:d8:
45:fa:b6:d0:50:1d:9c:50:20:d1:92:ae:ad:1e:ec:5b:de:93:
d9:be:8e:22:38:88:10:fd:bd:25:67:9c:8a:65:ef:c7:d8:aa:
c4:f6:d9:22:7e:8d:1b:be:fe:f8:b9:32:99:8d:16:8b:fd:30:
90:5f:a3:0f:54:1f:2e:d3:d1:05:e5:09:db:9f:3e:b5:0c:d8:
ea:27:10:36:a5:36:54:06:f5:37:29:ac:a6:4d:b9:70:3d:a0:
6b:fd:43:9b:d4:2c:1e:60:0a:e3:27:6f:5d:56:7b:7f:57:fe:
27:52:f3:9f:15:0c:7b:ac:1c:e8:e5:22:49:0f:14:90:16:54:
c3:83:fa:dc:e5:3d:c6:58:3f:91:39:19:1c:63:c0:ac:c5:98:
f2:b1:c6:2f:a3:0b:32:8a:96:a0:c0:6c:0b:b1:a8:99:09:8c:
98:c7:ad:20:b4:5a:79:44:13:b9:15:1f:29:2b:9b:21:f3:96:
5f:b6:da:0b:4f:17:0d:75:46:90:9f:5e:dc:62:6a:a4:6c:53:
91:41:c7:00:c2:77:18:9c:f6:b7:3b:60:b3:31:ff:3c:65:6f:
4a:f1:2b:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEguwA7gL2mpIgLh4GAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzFlNjg4MDktNTQzNi00Mjg4LWFkODAtMGRmMzVmYTBi
OTQ1MB4XDTI0MTIxMjE0MDA1MVoXDTI1MDMxMjEzMDA1MVowLzEtMCsGA1UEAxMk
NzI1Yjg4YjUtY2JhNC00YzQ3LWE0NjEtNDE3NTE5YTA2Y2ViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9wo97G3vMuuyiblq2rZ05BK5otbLIAK4oGD
O9hprHOYlfYAtioLg8Eo3+/Qp2wSZx0NBd84jLQmo3CG8x2KuA9tkqnKr88ypvaO
sxewXaR8KsQL8PC2pgFCmta4gLDCPMik0imBiQPTYYtNS07b3kpsc79T+T98NPCG
SZ53HF51W0t4CE0Xgd/XIgElwEUkTb6mYUHmxlWdL6L+P6MucCtCCLkea5o7BUpY
fEWz5a+Ow4WNA0nZxKTPT56XhpDW90isAS0/L13PqVWS6Qm3ZAuqAmrrKqar1fKp
1mMWmlrsCKdiV+boyCJ2KNhVWsbVUQdTpx+/PAjK6H/7ivzaIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA+iYP+9iT5iBzrwfIVfubO2UqIWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2
ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYzNWZhMGI5NDUvZmIzY2VjM2MtZTNmOC0z
MGI0LWFkNmUtNWVjZWRhMTA5OTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzFlNjg4MDktNTQzNi00Mjg4LWFk
ODAtMGRmMzVmYTBiOTQ1LzcxZTY4ODA5LTU0MzYtNDI4OC1hZDgwLTBkZjM1ZmEw
Yjk0NS5jcmwwHwYDVR0jBBgwFoAUEFAAX4YwKrkehfZQ9nLTMqW7VE4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYz
NWZhMGI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwBwQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEIhpZEO1wPi3gcaJDa37U+eGHgJ/zKmkljPIxnZ/6FGjWAX2EX6ttBQ
HZxQINGSrq0e7Fvek9m+jiI4iBD9vSVnnIpl78fYqsT22SJ+jRu+/vi5MpmNFov9
MJBfow9UHy7T0QXlCdufPrUM2OonEDalNlQG9TcprKZNuXA9oGv9Q5vULB5gCuMn
b11We39X/idS858VDHusHOjlIkkPFJAWVMOD+tzlPcZYP5E5GRxjwKzFmPKxxi+j
CzKKlqDAbAuxqJkJjJjHrSC0WnlEE7kVHykrmyHzll+22gtPFw11RpCfXtxiaqRs
U5FBxwDCdxic9rc7YLMx/zxlb0rxK4Q=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:48 2025 by rpki-client