Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/c8cd6d1e-fca4-3a08-a296-4c6b62dd2f05.roa
File: c8cd6d1e-fca4-3a08-a296-4c6b62dd2f05.roa (raw, json)
Hash identifier: 6wAdYZ9Q6y9Ly8UmAHRUEAG1repq2JhRtWHlfBODGYY=
Subject key identifier: 09:E4:81:4B:18:A9:A1:2A:08:80:E7:8D:11:7E:E9:7D:61:75:54:FC
Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Certificate serial: 010D0C9F43285848090FB70FB5A6A2A1E2452A80
Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/c8cd6d1e-fca4-3a08-a296-4c6b62dd2f05.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 22742
IP address blocks: 199.241.244.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:b7:0f:b5:a6:a2:a1:e2:45:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=43639037-31d3-496d-ba7a-2a9754694f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:23:cf:78:9c:89:89:36:0b:5d:d0:f2:b6:e1:
8e:6d:ed:cf:7f:4d:04:f7:fb:32:73:49:27:64:f7:
c3:09:05:14:15:43:c9:99:f8:92:5e:b8:9e:fd:8d:
cc:8c:7b:68:e5:fe:b8:9a:2a:dc:46:16:18:48:9d:
ac:6b:98:f0:0c:12:90:26:d3:18:0e:b3:ce:e8:28:
52:24:e7:aa:df:5e:30:fc:23:42:00:ae:e0:47:b8:
2f:8a:1b:d7:25:55:62:c0:ab:d8:74:45:94:5d:5c:
b8:2b:9a:ed:e9:ad:7a:94:a1:f0:30:11:9e:21:03:
47:9f:5a:de:08:e8:dd:1a:4b:05:b7:e1:19:79:fb:
9c:eb:a0:5d:3c:60:b2:59:61:b2:93:c1:60:af:6b:
55:18:28:60:a3:f4:fb:ce:c3:76:fc:d3:3e:35:f9:
ae:07:34:4f:2a:9f:01:a7:e0:6e:dc:a2:a6:cb:8b:
b5:ee:b3:eb:5b:30:b8:35:76:8f:91:9a:24:63:fc:
3a:2b:a2:db:d5:83:82:e3:ab:fc:86:18:8e:35:6f:
b2:be:e4:21:96:a4:29:c6:5a:d6:b2:a4:16:38:7e:
45:de:d6:18:3f:2a:54:ea:06:4c:ff:b9:e9:4c:35:
28:fa:41:14:95:c6:89:ce:96:2b:3c:05:94:43:35:
fa:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E4:81:4B:18:A9:A1:2A:08:80:E7:8D:11:7E:E9:7D:61:75:54:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/c8cd6d1e-fca4-3a08-a296-4c6b62dd2f05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl
X509v3 Authority Key Identifier:
keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
sbgp-ipAddrBlock: critical
IPv4:
199.241.244.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:e2:2d:22:18:a9:75:55:c8:7a:64:59:f6:57:19:ea:e0:f9:
f9:77:4e:c5:e8:a4:63:eb:8e:70:c2:42:dd:66:da:90:9e:f3:
80:20:dc:b8:1c:38:24:3d:62:9a:96:aa:51:d5:bc:f9:a1:07:
1e:60:a7:20:d2:a5:b9:2b:10:6b:27:48:e7:34:83:41:a9:1c:
e4:8d:2d:d2:ff:dc:29:ca:95:34:3b:2f:36:7d:08:d4:19:86:
34:92:7d:c9:cd:e3:42:84:02:29:42:e5:82:b3:6a:29:41:88:
22:34:91:96:5b:ba:80:c1:3b:6c:5a:8f:31:4b:c9:c5:72:dd:
6b:6b:a2:57:a8:ce:08:fa:dd:ab:95:05:b4:0c:3a:64:d6:96:
37:cd:fd:f4:cb:12:e9:a6:db:f4:61:8d:be:59:66:ea:51:0d:
30:43:a4:ff:df:81:46:b7:78:47:20:78:22:be:aa:ff:a1:17:
5a:77:82:6f:65:83:f8:3a:f9:3b:2f:4e:bc:a2:17:bc:61:f7:
0e:f7:c0:70:88:55:a8:57:59:59:5f:26:d6:de:64:5c:92:8e:
a9:2e:a8:6e:d6:dc:3b:d0:0b:3d:10:c0:f1:6e:7c:85:3b:4f:
37:cf:3b:20:59:51:35:1a:ec:ba:51:07:31:9d:71:49:2b:24:
2b:ca:76:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgJD7cPtaaioeJFKoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl
MmI0MB4XDTI0MTEyOTAyMDAzOVoXDTI1MDIyNzAyMDAzOVowLzEtMCsGA1UEAxMk
NDM2MzkwMzctMzFkMy00OTZkLWJhN2EtMmE5NzU0Njk0Zjc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyPPeJyJiTYLXdDytuGObe3Pf00E9/syc0kn
ZPfDCQUUFUPJmfiSXrie/Y3MjHto5f64mircRhYYSJ2sa5jwDBKQJtMYDrPO6ChS
JOeq314w/CNCAK7gR7gvihvXJVViwKvYdEWUXVy4K5rt6a16lKHwMBGeIQNHn1re
COjdGksFt+EZefuc66BdPGCyWWGyk8Fgr2tVGChgo/T7zsN2/NM+NfmuBzRPKp8B
p+Bu3KKmy4u17rPrWzC4NXaPkZokY/w6K6Lb1YOC46v8hhiONW+yvuQhlqQpxlrW
sqQWOH5F3tYYPypU6gZM/7npTDUo+kEUlcaJzpYrPAWUQzX69QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAnkgUsYqaEqCIDnjRF+6X1hdVT8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi
YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvYzhjZDZkMWUtZmNhNC0z
YTA4LWEyOTYtNGM2YjYyZGQyZjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy
YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw
ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk
ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx/H0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAriLSIYqXVVyHpkWfZXGerg+fl3TsXopGPrjnDCQt1m2pCe84Ag3Lgc
OCQ9YpqWqlHVvPmhBx5gpyDSpbkrEGsnSOc0g0GpHOSNLdL/3CnKlTQ7LzZ9CNQZ
hjSSfcnN40KEAilC5YKzailBiCI0kZZbuoDBO2xajzFLycVy3Wtroleozgj63auV
BbQMOmTWljfN/fTLEumm2/Rhjb5ZZupRDTBDpP/fgUa3eEcgeCK+qv+hF1p3gm9l
g/g6+TsvTryiF7xh9w73wHCIVahXWVlfJtbeZFySjqkuqG7W3DvQCz0QwPFufIU7
TzfPOyBZUTUa7LpRBzGdcUkrJCvKdho=
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:20 2025 by rpki-client