Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/1f1498a6-2bec-3976-84a6-72c5baa00e10.roa
File: 1f1498a6-2bec-3976-84a6-72c5baa00e10.roa (raw, json)
Hash identifier: cqARd1gX3PVtWSqadDtZ+ff40TMwmFIg3hYbAmP4LJM=
Subject key identifier: BA:6C:52:AF:C4:7C:CE:82:2B:23:70:D6:3D:20:C2:6C:B5:34:30:EF
Certificate issuer: /CN=6f65c9e2-b250-402e-aa3e-eb6f9552d378
Certificate serial: 010D0C9F4328584878291D587957FD94721D15E0
Authority key identifier: 19:32:7F:F7:D4:07:EF:BC:E0:B8:AB:37:CC:34:96:F5:C7:84:B6:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/1f1498a6-2bec-3976-84a6-72c5baa00e10.roa
Signing time: Tue 07 Jan 2025 21:06:44 +0000
ROA not before: Tue 07 Jan 2025 21:06:44 +0000
ROA not after: Mon 07 Apr 2025 20:06:44 +0000
asID: 3855
IP address blocks: 199.96.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:78:29:1d:58:79:57:fd:94:72:1d:15:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f65c9e2-b250-402e-aa3e-eb6f9552d378
Validity
Not Before: Jan 7 21:06:44 2025 GMT
Not After : Apr 7 20:06:44 2025 GMT
Subject: CN=c34b3840-e59a-40ac-9afc-198ecb3a34b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:da:e7:d0:95:3c:e3:4e:bc:cc:bc:52:71:73:
07:eb:42:80:95:86:ae:97:df:73:93:73:7f:d3:f3:
a2:cf:7a:6b:06:a9:2f:cf:6c:08:46:eb:2e:38:d3:
a7:23:f8:11:4a:a3:e1:20:dd:84:1c:40:e3:67:58:
7c:c1:b3:6f:8c:14:47:b5:e1:4d:8b:8c:dc:91:ad:
26:f4:1a:08:79:4c:4d:e1:af:01:7c:0d:43:2c:ad:
60:8e:5b:70:55:6c:8b:d4:cc:d7:0e:58:a1:6d:8e:
2c:39:b8:27:7a:20:2c:99:6f:dc:fd:4c:4b:86:fe:
16:69:6e:ba:f1:e6:d4:08:16:fd:a1:18:85:ac:f6:
8d:e9:46:93:d3:65:90:c0:3b:77:f7:2f:b7:e4:0d:
48:60:aa:25:98:1c:a6:b8:8e:6c:27:72:ee:6f:30:
ae:c5:13:dc:3a:84:83:e4:01:96:ee:f0:b7:66:b4:
72:a4:4a:92:e9:83:b9:8e:ce:06:78:ee:e4:29:0d:
5c:e0:7b:54:a7:9e:e3:f0:c7:c6:3f:27:1c:07:7c:
87:83:66:c8:b8:fd:2c:55:c2:bf:79:46:d9:c4:17:
ef:23:67:c0:0a:7e:31:cb:4b:45:ab:2d:97:61:34:
b3:95:36:48:7c:32:b7:86:f8:b6:5d:a4:d7:0a:7a:
4c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6C:52:AF:C4:7C:CE:82:2B:23:70:D6:3D:20:C2:6C:B5:34:30:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/1f1498a6-2bec-3976-84a6-72c5baa00e10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/6f65c9e2-b250-402e-aa3e-eb6f9552d378.crl
X509v3 Authority Key Identifier:
keyid:19:32:7F:F7:D4:07:EF:BC:E0:B8:AB:37:CC:34:96:F5:C7:84:B6:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378.cer
sbgp-ipAddrBlock: critical
IPv4:
199.96.64.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:fc:c2:4d:12:c8:f4:02:b1:47:c7:a1:ef:8a:09:bf:d4:e0:
0e:16:53:d1:2b:3d:34:80:08:ce:8d:b8:40:6c:c1:0c:4d:5b:
ca:09:0c:6c:3b:2f:1d:53:0a:08:07:09:5d:b6:54:44:c2:fd:
3c:c1:8a:45:48:91:e4:17:4e:77:3b:df:cd:c4:8b:5a:c7:7c:
47:22:fe:3a:09:d5:28:ea:31:cf:f4:df:9d:77:19:99:b6:08:
09:55:88:1a:17:a6:95:a9:d6:c9:85:31:6f:90:59:46:1d:a1:
1b:8b:8b:91:86:08:6c:12:66:75:e3:b9:68:41:c6:af:3d:5d:
99:52:e9:80:0d:ed:6d:8f:a9:20:50:d5:7c:ce:3f:9d:a7:4b:
a0:53:d4:0f:af:8d:7e:b7:0a:59:17:30:f4:1c:66:49:6c:27:
e5:8c:79:d5:92:f4:06:b1:2e:d2:70:62:62:46:2c:ff:47:d7:
1c:16:7d:b7:f7:7a:d7:1c:4d:69:48:78:e7:85:25:09:b7:6f:
8c:47:26:c1:b4:e3:d1:f7:ac:c7:9f:10:4c:86:8c:02:1c:a7:
4c:b0:63:10:6e:fa:70:bc:58:82:12:31:5f:43:eb:37:93:84:
ff:d5:d7:f2:e3:ac:25:61:f0:70:54:91:0a:47:5e:70:a9:90:
e2:24:af:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh4KR1YeVf9lHIdFeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY2NWM5ZTItYjI1MC00MDJlLWFhM2UtZWI2Zjk1NTJk
Mzc4MB4XDTI1MDEwNzIxMDY0NFoXDTI1MDQwNzIwMDY0NFowLzEtMCsGA1UEAxMk
YzM0YjM4NDAtZTU5YS00MGFjLTlhZmMtMTk4ZWNiM2EzNGIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndrn0JU84068zLxScXMH60KAlYaul99zk3N/
0/Oiz3prBqkvz2wIRusuONOnI/gRSqPhIN2EHEDjZ1h8wbNvjBRHteFNi4zcka0m
9BoIeUxN4a8BfA1DLK1gjltwVWyL1MzXDlihbY4sObgneiAsmW/c/UxLhv4WaW66
8ebUCBb9oRiFrPaN6UaT02WQwDt39y+35A1IYKolmBymuI5sJ3LubzCuxRPcOoSD
5AGW7vC3ZrRypEqS6YO5js4GeO7kKQ1c4HtUp57j8MfGPyccB3yHg2bIuP0sVcK/
eUbZxBfvI2fACn4xy0tFqy2XYTSzlTZIfDK3hvi2XaTXCnpMpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLpsUq/EfM6CKyNw1j0gwmy1NDDvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82ZjY1
YzllMi1iMjUwLTQwMmUtYWEzZS1lYjZmOTU1MmQzNzgvMWYxNDk4YTYtMmJlYy0z
OTc2LTg0YTYtNzJjNWJhYTAwZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNmY2NWM5ZTItYjI1MC00MDJlLWFh
M2UtZWI2Zjk1NTJkMzc4LzZmNjVjOWUyLWIyNTAtNDAyZS1hYTNlLWViNmY5NTUy
ZDM3OC5jcmwwHwYDVR0jBBgwFoAUGTJ/99QH77zguKs3zDSW9ceEtoIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi82ZjY1YzllMi1iMjUwLTQwMmUtYWEzZS1lYjZm
OTU1MmQzNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2BAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGb8wk0SyPQCsUfHoe+KCb/U4A4WU9ErPTSACM6NuEBswQxNW8oJDGw7
Lx1TCggHCV22VETC/TzBikVIkeQXTnc7383Ei1rHfEci/joJ1SjqMc/03513GZm2
CAlViBoXppWp1smFMW+QWUYdoRuLi5GGCGwSZnXjuWhBxq89XZlS6YAN7W2PqSBQ
1XzOP52nS6BT1A+vjX63ClkXMPQcZklsJ+WMedWS9AaxLtJwYmJGLP9H1xwWfbf3
etccTWlIeOeFJQm3b4xHJsG049H3rMefEEyGjAIcp0ywYxBu+nC8WIISMV9D6zeT
hP/V1/LjrCVh8HBUkQpHXnCpkOIkr7s=
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:45:20 2025 by rpki-client