Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/4a8f44c2-2408-33dc-84a6-dcc034360053.roa
File: 4a8f44c2-2408-33dc-84a6-dcc034360053.roa (raw, json)
Hash identifier: c4MImYzhp/K9FTKoz3+jK9kIaxG3K3IGTG0UVJe3RdQ=
Subject key identifier: CB:75:E5:AB:1D:FD:15:11:80:B2:36:9B:AE:DB:BA:ED:BA:DB:AF:25
Certificate issuer: /CN=c3927d26-c229-496a-8940-c88a834f5196
Certificate serial: 010D0C9F432858489340B1B0E019DA3C5EEA1580
Authority key identifier: DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/4a8f44c2-2408-33dc-84a6-dcc034360053.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 12119
IP address blocks: 209.128.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:b1:b0:e0:19:da:3c:5e:ea:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3927d26-c229-496a-8940-c88a834f5196
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=22dabd89-533c-4ef2-9db9-a8a74aa3fed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ea:91:44:b6:8a:2f:23:10:88:49:08:de:ae:
02:a3:00:28:71:e5:a9:3c:2b:8a:0b:5f:b4:2d:7c:
18:6b:14:c6:ae:f7:45:58:7f:6e:85:75:e3:cb:85:
e5:df:6c:f2:f2:de:dc:b9:fd:a1:15:35:73:9b:23:
38:a7:41:c4:e7:ea:3e:82:a3:29:6f:58:03:78:90:
5f:03:7d:28:05:c1:1d:d8:80:6d:16:f6:a1:76:77:
30:f7:ac:bf:7e:e4:e9:55:a1:72:4a:20:db:a7:bd:
2c:6b:54:a6:3a:e5:2b:55:c6:f5:85:9d:95:f8:4a:
3f:98:9a:85:80:a4:24:b6:f5:61:64:cb:53:15:c9:
32:a7:a1:32:c4:09:3b:fc:79:b1:94:cc:64:6e:12:
2f:33:87:9d:45:b9:13:b1:06:e0:67:20:13:92:29:
6c:b0:c5:7f:8b:b6:28:75:8a:83:4e:5b:2a:6d:6f:
e5:c3:7b:9a:8c:f2:cb:ff:17:83:b2:38:64:a1:e4:
d7:ff:5f:60:b1:de:cb:43:13:14:19:ab:8d:32:f5:
17:bc:14:c1:9b:ea:43:24:4a:9e:7a:95:f9:50:7d:
8a:44:32:01:cf:35:87:27:3a:b6:f0:84:69:3d:c8:
c8:cd:0b:7c:10:13:9c:b5:72:e7:5f:1b:cd:63:e4:
6c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:75:E5:AB:1D:FD:15:11:80:B2:36:9B:AE:DB:BA:ED:BA:DB:AF:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/4a8f44c2-2408-33dc-84a6-dcc034360053.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl
X509v3 Authority Key Identifier:
keyid:DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer
sbgp-ipAddrBlock: critical
IPv4:
209.128.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:6b:a7:b4:d4:b3:64:02:d5:d8:f7:2c:37:5c:07:de:fc:1f:
2b:b6:df:5f:ea:78:95:cb:57:ec:63:c1:44:a9:f3:52:c0:68:
d6:e0:06:b8:ea:d9:26:12:d7:c7:80:15:1a:20:82:45:dc:a8:
f5:47:ac:76:cc:13:1b:4a:fe:04:0f:70:a7:3b:b6:08:e7:ab:
c2:fc:6c:72:55:c1:8f:1c:8e:61:2d:e0:13:4e:fe:13:22:27:
91:32:7b:fc:1f:d3:7d:6f:e9:b7:48:0c:0d:38:c0:59:ec:4a:
2d:77:63:f5:a7:4e:18:16:ec:27:cd:c4:d3:ed:61:6e:31:e8:
4a:3e:f8:d8:e6:ac:e7:47:9f:97:be:2b:b0:f2:a4:7f:06:4f:
e9:e1:26:de:d6:15:3f:32:3a:17:53:ff:9b:e4:c6:ab:c4:b4:
f0:96:fe:a3:58:d4:49:45:76:29:69:46:3d:b1:e6:bb:b1:07:
d5:d4:08:5e:7e:98:53:1b:ca:27:44:e0:29:a4:36:ce:cf:aa:
56:47:c4:53:36:60:e6:55:1e:2b:a2:a7:de:b0:76:76:04:97:
7e:ba:78:2b:c9:ca:d4:69:4a:cd:15:18:1c:b6:6f:0d:32:48:
18:8c:be:4e:fc:d8:f7:de:7f:38:09:b6:6a:55:04:f5:01:87:
d6:c0:99:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQLGw4BnaPF7qFYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzM5MjdkMjYtYzIyOS00OTZhLTg5NDAtYzg4YTgzNGY1
MTk2MB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk
MjJkYWJkODktNTMzYy00ZWYyLTlkYjktYThhNzRhYTNmZWQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOqRRLaKLyMQiEkI3q4CowAoceWpPCuKC1+0
LXwYaxTGrvdFWH9uhXXjy4Xl32zy8t7cuf2hFTVzmyM4p0HE5+o+gqMpb1gDeJBf
A30oBcEd2IBtFvahdncw96y/fuTpVaFySiDbp70sa1SmOuUrVcb1hZ2V+Eo/mJqF
gKQktvVhZMtTFckyp6EyxAk7/HmxlMxkbhIvM4edRbkTsQbgZyATkilssMV/i7Yo
dYqDTlsqbW/lw3uajPLL/xeDsjhkoeTX/19gsd7LQxMUGauNMvUXvBTBm+pDJEqe
epX5UH2KRDIBzzWHJzq28IRpPcjIzQt8EBOctXLnXxvNY+RsowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMt15asd/RURgLI2m67buu26268lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMzky
N2QyNi1jMjI5LTQ5NmEtODk0MC1jODhhODM0ZjUxOTYvNGE4ZjQ0YzItMjQwOC0z
M2RjLTg0YTYtZGNjMDM0MzYwMDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzM5MjdkMjYtYzIyOS00OTZhLTg5
NDAtYzg4YTgzNGY1MTk2L2MzOTI3ZDI2LWMyMjktNDk2YS04OTQwLWM4OGE4MzRm
NTE5Ni5jcmwwHwYDVR0jBBgwFoAU3iC7Zcii3YxtAozJJDHZDGDF51owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jMzkyN2QyNi1jMjI5LTQ5NmEtODk0MC1jODhh
ODM0ZjUxOTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0YDAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHtrp7TUs2QC1dj3LDdcB978Hyu231/qeJXLV+xjwUSp81LAaNbgBrjq
2SYS18eAFRoggkXcqPVHrHbMExtK/gQPcKc7tgjnq8L8bHJVwY8cjmEt4BNO/hMi
J5Eye/wf031v6bdIDA04wFnsSi13Y/WnThgW7CfNxNPtYW4x6Eo++NjmrOdHn5e+
K7DypH8GT+nhJt7WFT8yOhdT/5vkxqvEtPCW/qNY1ElFdilpRj2x5ruxB9XUCF5+
mFMbyidE4CmkNs7PqlZHxFM2YOZVHiuip96wdnYEl366eCvJytRpSs0VGBy2bw0y
SBiMvk782PfefzgJtmpVBPUBh9bAmZ0=
-----END CERTIFICATE-----
Generated at Tue Apr 29 23:35:22 2025 by rpki-client