Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/d70902c7-9960-3f77-8eb5-6f69fcff1f6b.roa
File: d70902c7-9960-3f77-8eb5-6f69fcff1f6b.roa (raw, json)
Hash identifier: 90CLBmT1Li3gOnd9iqWkvfw806kAUAXvEBASaFFYpPg=
Subject key identifier: F7:23:18:60:EA:DB:36:40:3F:FF:8A:D9:A2:D8:11:DA:E7:EC:F3:29
Certificate issuer: /CN=791fee1c-1b1f-448c-8937-9a315eb8e9de
Certificate serial: 010D0C9F432858486D905524C60E3524277C1340
Authority key identifier: BA:4F:2B:6E:2B:E8:E9:DE:12:1A:E4:BF:63:30:7F:63:C3:A0:3B:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/d70902c7-9960-3f77-8eb5-6f69fcff1f6b.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 271
IP address blocks: 192.197.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:55:24:c6:0e:35:24:27:7c:13:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=791fee1c-1b1f-448c-8937-9a315eb8e9de
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=05121c4b-e32d-4227-9e8f-91c316b263dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ca:35:2f:c2:60:23:c8:21:64:86:4e:c9:58:
64:38:0f:a9:37:ed:e4:da:ae:8c:49:e6:56:c3:d1:
95:a3:89:89:7a:f0:61:3c:cc:ab:3a:e3:54:59:3f:
fd:13:79:43:19:9b:c5:26:7b:22:da:2a:54:7c:22:
e1:13:c8:83:f8:8e:3d:4e:ff:0c:34:89:f7:59:01:
66:28:4a:2b:6f:5a:e0:ac:ef:5d:7d:fa:73:b4:20:
1e:21:a3:8e:3c:4e:5c:cc:be:61:0f:bf:3e:79:84:
51:10:4e:37:6a:80:dc:5a:2a:0a:4b:a1:db:6b:22:
dc:aa:24:af:57:73:f6:5d:c6:cb:d4:dd:f6:f6:93:
6b:99:82:9d:dd:7c:5f:e6:b1:70:69:96:0f:cd:64:
f2:9a:82:80:26:99:87:96:62:73:d6:93:74:28:62:
50:da:62:2c:f1:3d:82:bc:9b:58:9c:53:12:f5:4e:
23:56:13:ab:52:01:40:e8:f8:e7:68:85:d4:e7:2d:
88:7a:cc:a8:bf:d6:ad:0c:d3:d1:db:a8:8e:eb:8f:
6d:ba:e0:ce:95:10:d7:54:08:17:e3:a7:c8:e7:22:
6d:7e:5c:6a:9e:a9:60:d2:a6:aa:a6:a7:76:d0:de:
b1:a1:ae:c3:39:2c:83:2e:40:bc:9b:ba:da:cd:6a:
c0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:23:18:60:EA:DB:36:40:3F:FF:8A:D9:A2:D8:11:DA:E7:EC:F3:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/d70902c7-9960-3f77-8eb5-6f69fcff1f6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/791fee1c-1b1f-448c-8937-9a315eb8e9de.crl
X509v3 Authority Key Identifier:
keyid:BA:4F:2B:6E:2B:E8:E9:DE:12:1A:E4:BF:63:30:7F:63:C3:A0:3B:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de.cer
sbgp-ipAddrBlock: critical
IPv4:
192.197.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:6f:5b:eb:63:3f:db:33:d1:bd:f4:98:1e:66:4c:74:b4:52:
40:f9:af:4f:d0:00:69:79:fc:7e:18:bb:15:26:52:e4:f0:ae:
93:5b:4f:24:d1:39:de:52:3f:78:99:87:e7:3b:2e:a0:23:58:
a5:7e:e2:87:3b:d5:52:74:97:0e:0b:52:7a:92:68:84:93:11:
71:f9:4c:0c:4d:58:b5:e4:26:85:c6:ea:e4:8f:41:41:64:c7:
d2:f9:0f:60:45:f0:53:45:0a:4f:45:1e:c4:94:ce:c5:5d:98:
47:f2:46:fe:f2:0e:ca:0f:d5:2f:da:c5:f6:ac:3d:67:92:20:
f8:f4:1b:45:ff:a7:2b:e7:fb:53:c8:f5:0a:2d:50:17:78:e4:
80:c9:e0:c8:90:b7:6b:9b:8a:a2:d0:fd:cc:4c:21:89:5c:11:
f5:c4:cd:fb:1a:58:7c:7f:34:db:17:39:35:12:34:e9:0d:58:
7a:9d:b0:a1:96:aa:c5:49:e0:fc:d7:22:46:6a:ee:85:94:14:
50:d4:00:a5:c8:a2:62:34:e9:d8:ea:ef:54:8e:80:0a:cd:66:
dd:3a:a3:1d:10:1e:6c:96:16:30:e6:70:bd:eb:49:74:f4:ba:
1b:8c:49:4d:55:27:7b:46:95:91:52:46:b2:e3:9c:80:e1:e6:
4a:19:5c:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtkFUkxg41JCd8E0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzkxZmVlMWMtMWIxZi00NDhjLTg5MzctOWEzMTVlYjhl
OWRlMB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk
MDUxMjFjNGItZTMyZC00MjI3LTllOGYtOTFjMzE2YjI2M2RkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMo1L8JgI8ghZIZOyVhkOA+pN+3k2q6MSeZW
w9GVo4mJevBhPMyrOuNUWT/9E3lDGZvFJnsi2ipUfCLhE8iD+I49Tv8MNIn3WQFm
KEorb1rgrO9dffpztCAeIaOOPE5czL5hD78+eYRREE43aoDcWioKS6HbayLcqiSv
V3P2XcbL1N329pNrmYKd3Xxf5rFwaZYPzWTymoKAJpmHlmJz1pN0KGJQ2mIs8T2C
vJtYnFMS9U4jVhOrUgFA6PjnaIXU5y2Iesyov9atDNPR26iO649tuuDOlRDXVAgX
46fI5yJtflxqnqlg0qaqpqd20N6xoa7DOSyDLkC8m7razWrA5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPcjGGDq2zZAP/+K2aLYEdrn7PMpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83OTFm
ZWUxYy0xYjFmLTQ0OGMtODkzNy05YTMxNWViOGU5ZGUvZDcwOTAyYzctOTk2MC0z
Zjc3LThlYjUtNmY2OWZjZmYxZjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzkxZmVlMWMtMWIxZi00NDhjLTg5
MzctOWEzMTVlYjhlOWRlLzc5MWZlZTFjLTFiMWYtNDQ4Yy04OTM3LTlhMzE1ZWI4
ZTlkZS5jcmwwHwYDVR0jBBgwFoAUuk8rbivo6d4SGuS/YzB/Y8OgO9IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83OTFmZWUxYy0xYjFmLTQ0OGMtODkzNy05YTMx
NWViOGU5ZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMXhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHVvW+tjP9sz0b30mB5mTHS0UkD5r0/QAGl5/H4YuxUmUuTwrpNbTyTR
Od5SP3iZh+c7LqAjWKV+4oc71VJ0lw4LUnqSaISTEXH5TAxNWLXkJoXG6uSPQUFk
x9L5D2BF8FNFCk9FHsSUzsVdmEfyRv7yDsoP1S/axfasPWeSIPj0G0X/pyvn+1PI
9QotUBd45IDJ4MiQt2ubiqLQ/cxMIYlcEfXEzfsaWHx/NNsXOTUSNOkNWHqdsKGW
qsVJ4PzXIkZq7oWUFFDUAKXIomI06djq71SOgArNZt06ox0QHmyWFjDmcL3rSXT0
uhuMSU1VJ3tGlZFSRrLjnIDh5koZXNw=
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:12:20 2025 by rpki-client