Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8e361a8f-c2a7-30c1-872e-d892d5132b12.roa
File: 8e361a8f-c2a7-30c1-872e-d892d5132b12.roa (raw, json)
Hash identifier: WCgwntd8vWA2BlLJYRnAi9lvHDjIl/dwbejChIwSQDc=
Subject key identifier: B4:29:A2:59:01:54:75:13:1A:B6:E0:FB:4D:7A:83:83:37:FF:A4:5F
Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989
Certificate serial: 010D0C9F432858486265923C4774E9ABF0D0BE40
Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8e361a8f-c2a7-30c1-872e-d892d5132b12.roa
Signing time: Tue 31 Dec 2024 02:00:40 +0000
ROA not before: Tue 31 Dec 2024 02:00:40 +0000
ROA not after: Mon 31 Mar 2025 01:00:40 +0000
asID: 16509
IP address blocks: 198.169.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:62:65:92:3c:47:74:e9:ab:f0:d0:be:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989
Validity
Not Before: Dec 31 02:00:40 2024 GMT
Not After : Mar 31 01:00:40 2025 GMT
Subject: CN=2afddd16-d2ba-4be5-9ee2-1030fe7a6f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fb:d5:6d:a6:50:84:6e:9e:02:01:dc:2c:8c:
64:04:99:e6:d9:82:ab:ad:a3:63:6d:59:1f:6e:b4:
1e:e9:fe:a7:cf:5f:01:44:e9:6c:12:c2:61:4a:63:
3b:0f:f9:a9:6b:95:e5:1b:5d:34:c5:6a:76:6d:07:
72:c7:bd:0c:b9:c0:b3:49:18:87:20:06:61:d9:70:
9d:f8:3f:0a:81:0d:90:28:33:c8:f3:38:88:30:85:
5b:a9:f1:b0:e9:16:bf:5e:b9:1a:0d:6f:05:bb:a6:
84:2d:ed:5b:79:f0:55:e8:d0:cf:21:12:dd:37:11:
bd:69:7a:4d:dc:35:e1:5c:3a:92:8e:e6:d4:c7:81:
44:d5:bc:a6:fd:03:28:f5:0c:40:35:b4:81:fe:1e:
ae:10:81:a5:34:a1:f7:2c:60:30:6c:2e:9a:45:05:
29:67:32:2d:79:88:a1:f7:62:30:07:8e:05:42:95:
de:91:ef:e4:05:09:01:09:b4:f2:49:6f:92:a6:29:
61:4a:0f:4a:74:80:c5:f7:cd:de:e6:06:11:00:b0:
07:32:55:b3:36:c4:eb:25:74:22:bf:61:2e:25:f2:
86:49:65:8d:1e:76:c1:43:8d:6c:3c:34:ee:c9:90:
f8:e4:4d:3c:cc:1b:84:11:e8:14:ac:1d:62:9e:a4:
ab:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:29:A2:59:01:54:75:13:1A:B6:E0:FB:4D:7A:83:83:37:FF:A4:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8e361a8f-c2a7-30c1-872e-d892d5132b12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl
X509v3 Authority Key Identifier:
keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer
sbgp-ipAddrBlock: critical
IPv4:
198.169.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:79:a6:a9:fa:4f:88:af:3c:fb:0b:89:e4:54:89:62:a8:d3:
a3:d0:61:79:65:a7:df:a7:11:3e:74:0b:5c:98:52:6e:93:b5:
02:a2:3c:50:38:0f:b2:31:61:03:c2:02:6e:68:db:55:1f:c8:
01:a0:37:27:c3:f4:cf:df:95:4d:de:5a:56:47:cb:92:2e:fc:
f1:44:9a:1b:e9:79:d4:68:2c:ed:2d:f8:2f:88:78:b1:ab:b2:
ed:04:fa:c3:12:20:f0:90:6b:cc:1b:29:ef:19:52:2b:23:73:
d3:a4:b5:e7:4c:9a:b0:d3:4b:e8:30:55:dc:2a:3d:b4:b6:00:
85:15:0d:cb:b3:dc:d2:58:d0:99:10:82:60:a6:1b:68:ca:ce:
69:80:f8:e9:1a:30:ff:26:90:48:fb:f8:b9:ab:61:a1:b4:5f:
7d:de:0d:77:75:31:f0:bc:68:96:4c:cb:ba:ca:46:65:04:23:
f4:1b:4c:e3:02:85:f6:7e:b7:2d:99:db:6a:a3:82:7b:e3:72:
13:5b:55:15:c7:80:ab:2f:6b:86:2c:1e:0a:b5:d5:d2:41:66:
82:88:e1:9c:64:84:86:4b:fe:a7:11:85:73:08:83:56:8c:9c:
a8:08:de:18:c1:c1:cc:b8:9b:a1:c3:bf:51:e1:14:81:aa:a4:
7c:ad:c7:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhiZZI8R3Tpq/DQvkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmE4NTMwMmEtMTUwMi00MTE2LWI1NjAtNGMyZDIxNTVm
OTg5MB4XDTI0MTIzMTAyMDA0MFoXDTI1MDMzMTAxMDA0MFowLzEtMCsGA1UEAxMk
MmFmZGRkMTYtZDJiYS00YmU1LTllZTItMTAzMGZlN2E2ZjQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfvVbaZQhG6eAgHcLIxkBJnm2YKrraNjbVkf
brQe6f6nz18BROlsEsJhSmM7D/mpa5XlG100xWp2bQdyx70MucCzSRiHIAZh2XCd
+D8KgQ2QKDPI8ziIMIVbqfGw6Ra/XrkaDW8Fu6aELe1befBV6NDPIRLdNxG9aXpN
3DXhXDqSjubUx4FE1bym/QMo9QxANbSB/h6uEIGlNKH3LGAwbC6aRQUpZzIteYih
92IwB44FQpXeke/kBQkBCbTySW+SpilhSg9KdIDF983e5gYRALAHMlWzNsTrJXQi
v2EuJfKGSWWNHnbBQ41sPDTuyZD45E08zBuEEegUrB1inqSrXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLQpolkBVHUTGrbg+016g4M3/6RfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1
MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJkMjE1NWY5ODkvOGUzNjFhOGYtYzJhNy0z
MGMxLTg3MmUtZDg5MmQ1MTMyYjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmE4NTMwMmEtMTUwMi00MTE2LWI1
NjAtNGMyZDIxNTVmOTg5LzJhODUzMDJhLTE1MDItNDExNi1iNTYwLTRjMmQyMTU1
Zjk4OS5jcmwwHwYDVR0jBBgwFoAUWPHGtsyKAI0BxiFTG/ayayXzzxYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJk
MjE1NWY5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqkCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEJ5pqn6T4ivPPsLieRUiWKo06PQYXllp9+nET50C1yYUm6TtQKiPFA4
D7IxYQPCAm5o21UfyAGgNyfD9M/flU3eWlZHy5Iu/PFEmhvpedRoLO0t+C+IeLGr
su0E+sMSIPCQa8wbKe8ZUisjc9OktedMmrDTS+gwVdwqPbS2AIUVDcuz3NJY0JkQ
gmCmG2jKzmmA+OkaMP8mkEj7+LmrYaG0X33eDXd1MfC8aJZMy7rKRmUEI/QbTOMC
hfZ+ty2Z22qjgnvjchNbVRXHgKsva4YsHgq11dJBZoKI4ZxkhIZL/qcRhXMIg1aM
nKgI3hjBwcy4m6HDv1HhFIGqpHytxwo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:13 2025 by rpki-client