Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/c3480d3d-afba-380c-a139-2236cb2ad8dc.roa
File: c3480d3d-afba-380c-a139-2236cb2ad8dc.roa (raw, json)
Hash identifier: gxIsxUZm7yJYFxbf7ar8tXewGsn9S0TZE+ypXzR8hmk=
Subject key identifier: FD:BD:B8:02:0C:67:62:05:19:F6:62:0C:E8:79:9E:39:BF:2F:78:D4
Certificate issuer: /CN=1b022ab9-d430-450e-a80d-1a7148a7dbbc
Certificate serial: 010D0C9F43285848100A7EAF5D991398748A0D00
Authority key identifier: A3:C3:38:88:82:20:9C:99:F7:EB:37:EB:E0:57:4E:52:76:87:A8:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/c3480d3d-afba-380c-a139-2236cb2ad8dc.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 396982
IP address blocks: 199.47.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:7e:af:5d:99:13:98:74:8a:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b022ab9-d430-450e-a80d-1a7148a7dbbc
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=91c27737-89dd-4164-9ceb-22175fc74ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:e6:cd:2d:e8:d8:d8:9f:36:2d:62:dc:a0:
d4:ff:4a:05:de:b4:c1:2a:eb:89:88:03:a8:08:82:
73:72:e4:e5:b1:6a:5a:87:f4:ee:c0:8f:9b:4e:12:
56:43:ec:28:27:f0:fa:e7:60:60:63:e9:57:0d:a2:
e4:d5:49:f4:87:c2:e7:d3:86:11:86:02:d2:e5:13:
b3:10:14:4a:c0:36:be:53:d0:2e:4a:87:0b:c7:19:
76:de:38:66:02:fd:cc:57:25:56:49:73:99:1e:f6:
e0:44:ac:6f:a6:21:37:75:00:cf:de:be:ee:58:c1:
14:26:c6:38:f9:52:a6:3c:1f:72:70:c6:e1:b5:62:
3c:3e:79:16:f4:f1:02:cd:cc:a2:f1:1d:d3:ff:d3:
87:c6:82:b1:90:f1:00:eb:68:09:c1:cb:44:96:2b:
7b:9c:88:be:16:f5:bb:b0:5e:ef:de:a8:f9:7a:2a:
cd:6f:c0:dd:46:8d:35:d0:8d:09:24:7c:f7:49:34:
4c:6e:ab:51:2f:3f:34:da:c3:9d:e4:57:38:8f:a2:
b1:4a:0c:0f:84:da:32:c7:c6:0a:6c:49:13:53:ec:
bc:d4:81:e6:10:08:35:0f:98:12:a4:ad:08:fe:58:
19:e7:c1:ad:27:2f:85:84:14:2e:83:d8:22:3e:6b:
a1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BD:B8:02:0C:67:62:05:19:F6:62:0C:E8:79:9E:39:BF:2F:78:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/c3480d3d-afba-380c-a139-2236cb2ad8dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/1b022ab9-d430-450e-a80d-1a7148a7dbbc.crl
X509v3 Authority Key Identifier:
keyid:A3:C3:38:88:82:20:9C:99:F7:EB:37:EB:E0:57:4E:52:76:87:A8:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc.cer
sbgp-ipAddrBlock: critical
IPv4:
199.47.187.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:3e:68:65:01:f4:97:fe:bf:a2:10:54:f0:e2:ab:c6:ff:1e:
f2:9a:6f:5d:70:08:e5:6c:29:31:39:64:a2:0d:1d:b9:41:4c:
61:ef:28:30:a1:b0:e2:b4:a7:b3:70:6c:9a:00:03:05:52:47:
e1:45:a5:14:39:8e:f4:26:9a:ed:58:ee:cf:34:f5:18:c2:97:
e5:78:f6:b1:2c:a4:1b:e2:5f:b8:f2:1d:ce:98:be:cf:3b:29:
16:7c:79:b3:53:dd:a4:05:68:b3:2a:43:73:bb:96:09:b8:13:
4a:44:8d:d5:81:6c:11:c5:c3:6c:98:2f:9e:8d:39:19:8f:3b:
27:be:85:1d:8d:5d:03:35:0a:2a:c8:a9:dc:27:cc:64:3f:1b:
d3:93:8a:cb:b4:fa:a8:0f:32:5d:67:33:d0:3b:79:e7:df:32:
c4:0b:74:0d:77:6a:3c:84:ef:fe:10:43:c5:c0:d0:4c:8a:6f:
3f:05:3d:1d:0d:ef:32:7c:f8:fd:bb:90:0b:4b:c9:62:8d:ae:
fb:ce:29:be:5f:e3:82:ac:34:11:3b:e5:97:6c:57:38:f4:88:
dd:7a:68:a3:d0:dc:28:fe:7c:01:75:70:7f:fc:4d:6e:f7:10:
fc:6f:e3:3b:f2:77:f5:dd:3f:d7:ba:e0:f4:18:64:f2:7c:72:
6b:fc:5a:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgQCn6vXZkTmHSKDQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWIwMjJhYjktZDQzMC00NTBlLWE4MGQtMWE3MTQ4YTdk
YmJjMB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk
OTFjMjc3MzctODlkZC00MTY0LTljZWItMjIxNzVmYzc0YWIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk/mzS3o2NifNi1i3KDU/0oF3rTBKuuJiAOo
CIJzcuTlsWpah/TuwI+bThJWQ+woJ/D652BgY+lXDaLk1Un0h8Ln04YRhgLS5ROz
EBRKwDa+U9AuSocLxxl23jhmAv3MVyVWSXOZHvbgRKxvpiE3dQDP3r7uWMEUJsY4
+VKmPB9ycMbhtWI8PnkW9PECzcyi8R3T/9OHxoKxkPEA62gJwctElit7nIi+FvW7
sF7v3qj5eirNb8DdRo010I0JJHz3STRMbqtRLz802sOd5Fc4j6KxSgwPhNoyx8YK
bEkTU+y81IHmEAg1D5gSpK0I/lgZ58GtJy+FhBQug9giPmuhVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP29uAIMZ2IFGfZiDOh5njm/L3jUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYjAy
MmFiOS1kNDMwLTQ1MGUtYTgwZC0xYTcxNDhhN2RiYmMvYzM0ODBkM2QtYWZiYS0z
ODBjLWExMzktMjIzNmNiMmFkOGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWIwMjJhYjktZDQzMC00NTBlLWE4
MGQtMWE3MTQ4YTdkYmJjLzFiMDIyYWI5LWQ0MzAtNDUwZS1hODBkLTFhNzE0OGE3
ZGJiYy5jcmwwHwYDVR0jBBgwFoAUo8M4iIIgnJn36zfr4FdOUnaHqBUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xYjAyMmFiOS1kNDMwLTQ1MGUtYTgwZC0xYTcx
NDhhN2RiYmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy+7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIY+aGUB9Jf+v6IQVPDiq8b/HvKab11wCOVsKTE5ZKINHblBTGHvKDCh
sOK0p7NwbJoAAwVSR+FFpRQ5jvQmmu1Y7s809RjCl+V49rEspBviX7jyHc6Yvs87
KRZ8ebNT3aQFaLMqQ3O7lgm4E0pEjdWBbBHFw2yYL56NORmPOye+hR2NXQM1CirI
qdwnzGQ/G9OTisu0+qgPMl1nM9A7eeffMsQLdA13ajyE7/4QQ8XA0EyKbz8FPR0N
7zJ8+P27kAtLyWKNrvvOKb5f44KsNBE75ZdsVzj0iN16aKPQ3Cj+fAF1cH/8TW73
EPxv4zvyd/XdP9e64PQYZPJ8cmv8WvU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:14:23 2025 by rpki-client