Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a16ff806-dccf-3443-a63d-49553fa297b8.roa
File: a16ff806-dccf-3443-a63d-49553fa297b8.roa (raw, json)
Hash identifier: 2til7PpV7qDInSOSm21ijhvIcz6ewggg1VqIru4O+bI=
Subject key identifier: 76:B5:22:15:7B:93:76:FC:53:60:CE:ED:BC:06:B2:41:2C:B2:53:67
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325DB62E92177E0FC7EFEC0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a16ff806-dccf-3443-a63d-49553fa297b8.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 199.232.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:db:62:e9:21:77:e0:fc:7e:fe:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=c60c8de3-2286-4222-a48d-13cc8115b95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:59:97:bc:77:d1:d3:92:f9:8c:97:14:55:cd:
be:1c:14:b6:44:0b:dd:c9:1b:26:fd:42:ad:c6:5d:
aa:c1:3e:c7:36:b2:66:79:0b:0c:4c:2a:79:33:2a:
32:4e:02:38:9b:b5:f7:96:01:29:47:0c:70:8f:a4:
d8:45:bb:b3:c0:84:54:f3:0a:3c:67:f6:1c:e1:8d:
ae:ff:3d:16:53:83:19:c3:17:94:30:53:44:0b:cd:
e3:c8:1a:b7:4e:c7:b7:09:65:ff:e3:1d:a5:08:80:
8f:c7:90:72:3f:69:04:15:0d:e5:25:58:b8:43:50:
5a:87:68:52:6d:6d:d8:68:50:23:c6:5f:d6:cb:0f:
94:67:c3:c4:4a:cd:df:d0:40:c2:c7:02:b0:97:6b:
57:f7:90:c9:99:d3:e8:80:af:f5:ef:b5:af:61:72:
b3:7c:fe:9c:a2:92:cf:6a:63:bc:ca:13:4f:ee:83:
ff:09:b4:b6:7e:f4:8e:3b:e2:71:f5:81:ee:27:4f:
1b:23:3d:62:5b:0f:37:6d:ea:6c:34:c3:e0:96:f4:
41:fc:a4:b2:7e:66:ec:ff:95:71:41:56:c8:7d:79:
88:63:e3:14:fb:36:c4:57:8c:17:df:18:2f:01:fa:
9c:59:2d:82:d1:f8:30:f2:cb:aa:c9:7f:23:2f:ef:
da:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B5:22:15:7B:93:76:FC:53:60:CE:ED:BC:06:B2:41:2C:B2:53:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a16ff806-dccf-3443-a63d-49553fa297b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
199.232.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:4d:25:46:aa:6f:85:62:f8:c9:b5:6c:d5:f7:43:15:0b:87:
86:d4:7c:a1:1e:4b:10:1a:2d:4a:16:5c:ad:d7:96:35:ea:07:
73:da:e5:71:30:c8:5c:e5:b1:2c:a3:8c:3a:a0:62:b1:d0:62:
36:34:29:56:a4:a8:98:6f:66:9b:88:a4:3f:6b:90:0d:f1:5f:
8b:7f:70:69:9e:a1:96:3f:c1:49:b7:6d:f4:b7:e1:92:c1:0a:
76:fc:4a:ed:6b:25:9a:b4:78:0b:35:d6:ff:f4:f9:8d:d3:f4:
e4:f6:47:d3:ce:1c:92:33:30:a2:a2:8d:63:a8:ce:d1:24:3a:
cd:d7:a5:1d:b6:58:ee:bc:04:f3:aa:39:0a:77:2b:bd:fc:da:
47:85:db:97:dc:9c:82:6e:42:67:c4:d5:f8:ae:96:67:af:ea:
89:b2:fb:07:cd:19:61:b6:ea:39:f9:20:f1:f7:3d:c0:ae:72:
d4:ca:77:3e:20:4e:44:b2:ab:c8:2c:fa:fa:4e:2d:18:18:da:
e8:cd:96:5d:df:e3:f5:cf:2d:1b:b0:6c:51:02:1e:a7:4d:b4:
7e:1e:e2:93:32:51:98:87:38:62:02:77:02:82:04:f8:8f:06:
35:b2:3b:dd:e1:03:51:60:94:fa:f8:94:15:de:7e:82:1e:8c:
4b:6b:00:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhzJdti6SF34Px+/sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDEwNjAyMDA0MFoXDTI1MDQwNjAxMDA0MFowLzEtMCsGA1UEAxMk
YzYwYzhkZTMtMjI4Ni00MjIyLWE0OGQtMTNjYzgxMTViOTVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFmXvHfR05L5jJcUVc2+HBS2RAvdyRsm/UKt
xl2qwT7HNrJmeQsMTCp5MyoyTgI4m7X3lgEpRwxwj6TYRbuzwIRU8wo8Z/Yc4Y2u
/z0WU4MZwxeUMFNEC83jyBq3Tse3CWX/4x2lCICPx5ByP2kEFQ3lJVi4Q1Bah2hS
bW3YaFAjxl/Wyw+UZ8PESs3f0EDCxwKwl2tX95DJmdPogK/177WvYXKzfP6copLP
amO8yhNP7oP/CbS2fvSOO+Jx9YHuJ08bIz1iWw83bepsNMPglvRB/KSyfmbs/5Vx
QVbIfXmIY+MU+zbEV4wX3xgvAfqcWS2C0fgw8suqyX8jL+/alwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHa1IhV7k3b8U2DO7bwGskEsslNnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYTE2ZmY4MDYtZGNjZi0z
NDQzLWE2M2QtNDk1NTNmYTI5N2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx+hsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFhNJUaqb4Vi+Mm1bNX3QxULh4bUfKEeSxAaLUoWXK3XljXqB3Pa5XEw
yFzlsSyjjDqgYrHQYjY0KVakqJhvZpuIpD9rkA3xX4t/cGmeoZY/wUm3bfS34ZLB
Cnb8Su1rJZq0eAs11v/0+Y3T9OT2R9POHJIzMKKijWOoztEkOs3XpR22WO68BPOq
OQp3K7382keF25fcnIJuQmfE1fiulmev6omy+wfNGWG26jn5IPH3PcCuctTKdz4g
TkSyq8gs+vpOLRgY2ujNll3f4/XPLRuwbFECHqdNtH4e4pMyUZiHOGICdwKCBPiP
BjWyO93hA1FglPr4lBXefoIejEtrAI4=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:31:09 2025 by rpki-client