Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/144db5ca-63fd-3501-9729-29848757d150.roa
File: 144db5ca-63fd-3501-9729-29848757d150.roa (raw, json)
Hash identifier: Qj/Zs+qz/KUWWAAJMi+hxXbwvVZEVczDUuZsaTK1Dh0=
Subject key identifier: 0D:64:A1:07:6E:C6:4A:A2:12:81:B1:BD:99:44:2E:80:84:D9:CE:F0
Certificate issuer: /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
Certificate serial: 010D0C9F4328584871C07B1E5FE67B8CEAA0A000
Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/144db5ca-63fd-3501-9729-29848757d150.roa
Signing time: Sun 05 Jan 2025 14:00:52 +0000
ROA not before: Sun 05 Jan 2025 14:00:52 +0000
ROA not after: Sat 05 Apr 2025 13:00:52 +0000
asID: 22612
IP address blocks: 198.54.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:71:c0:7b:1e:5f:e6:7b:8c:ea:a0:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
Validity
Not Before: Jan 5 14:00:52 2025 GMT
Not After : Apr 5 13:00:52 2025 GMT
Subject: CN=aedc6195-e97a-4ed1-a1b7-cd68300b30fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:17:3f:18:4b:75:31:96:e8:b8:d4:fb:35:a3:
75:34:54:7b:9f:75:d5:e0:0f:f8:06:ed:e4:e4:c9:
ed:14:d0:45:d8:3d:5a:f3:7f:e4:ae:a9:9c:d9:78:
bc:d1:a3:ae:ed:ec:98:f3:af:7f:a0:ad:81:94:c2:
a9:d4:3f:f7:6c:a1:6a:aa:51:c6:c4:9f:1a:c0:9b:
1e:00:02:19:e1:27:08:d2:78:30:9e:dd:a3:c1:e5:
1d:fe:0f:66:4f:5c:d0:5a:e0:26:09:83:6c:f3:32:
3d:f7:80:57:4d:f5:c2:86:dd:de:07:20:26:70:f6:
43:bb:4e:d6:0a:d2:fc:fc:39:84:d6:14:51:9a:1e:
67:99:8e:b0:e5:90:7f:17:9d:57:6d:4a:7b:9b:49:
72:3e:8e:05:ff:5f:b6:e1:d7:af:41:0a:25:d7:b8:
f2:2a:8c:f8:b6:98:1d:4f:a3:db:17:8b:eb:0e:48:
a4:c4:e9:ab:10:a6:1c:a2:3a:c3:aa:9d:db:1c:4e:
e5:72:27:17:e4:b5:94:48:77:94:a8:ab:5f:5c:ac:
5b:b9:e2:46:c4:4c:81:1a:ee:36:fe:9e:84:fa:4b:
25:d2:e5:cc:2c:09:61:4e:df:dc:63:58:3d:99:15:
c9:f3:79:08:a3:8d:a2:5b:d7:79:43:3f:7f:55:91:
03:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:64:A1:07:6E:C6:4A:A2:12:81:B1:BD:99:44:2E:80:84:D9:CE:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/144db5ca-63fd-3501-9729-29848757d150.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl
X509v3 Authority Key Identifier:
keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
sbgp-ipAddrBlock: critical
IPv4:
198.54.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:20:c7:3c:e1:67:9a:51:21:0a:68:79:c5:af:ba:c7:66:07:
55:a2:c3:b1:bf:ea:69:ab:df:7e:a7:e5:5a:3a:53:b7:e9:e0:
e0:b2:bc:33:ed:63:9a:a9:d4:f1:b6:99:f6:16:11:d5:cb:27:
f0:45:b7:9d:83:b8:92:45:5f:67:6d:6f:df:7b:02:ea:f0:1b:
cb:33:82:ba:9b:37:9e:ad:bc:47:a6:b6:a5:ee:a0:b4:69:38:
5e:03:77:eb:bf:be:c6:72:03:8c:15:97:4d:34:b2:28:02:4b:
98:cb:ac:71:84:18:e8:22:a0:36:c7:95:36:9e:1e:d5:0c:76:
38:a5:ea:d5:86:fa:19:7b:a5:8e:47:7c:e9:31:60:cb:f5:94:
17:07:06:61:69:67:2c:01:7c:00:ce:6b:76:06:48:2d:e4:e6:
99:0b:51:5d:f7:16:b4:4f:e6:3d:d9:4f:df:d2:88:a2:7c:b3:
b4:48:dc:ac:a9:48:91:b7:bb:c3:ea:25:dc:d1:17:a3:c7:74:
03:20:31:ba:e9:d2:06:48:18:51:19:56:fa:c9:fe:b0:10:15:
0e:ab:4b:03:24:63:d3:eb:a9:d6:8d:e6:9a:5f:e2:45:25:9c:
bb:57:69:04:a9:60:eb:81:ef:92:de:61:3a:2c:97:ed:38:25:
d2:e4:c2:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhxwHseX+Z7jOqgoAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTNlMzBkODUtNDQ3NC00M2FiLTk1ZTUtOGQ1ZDUzNTYw
YjZlMB4XDTI1MDEwNTE0MDA1MloXDTI1MDQwNTEzMDA1MlowLzEtMCsGA1UEAxMk
YWVkYzYxOTUtZTk3YS00ZWQxLWExYjctY2Q2ODMwMGIzMGZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxc/GEt1MZbouNT7NaN1NFR7n3XV4A/4Bu3k
5MntFNBF2D1a83/krqmc2Xi80aOu7eyY869/oK2BlMKp1D/3bKFqqlHGxJ8awJse
AAIZ4ScI0ngwnt2jweUd/g9mT1zQWuAmCYNs8zI994BXTfXCht3eByAmcPZDu07W
CtL8/DmE1hRRmh5nmY6w5ZB/F51XbUp7m0lyPo4F/1+24devQQol17jyKoz4tpgd
T6PbF4vrDkikxOmrEKYcojrDqp3bHE7lcicX5LWUSHeUqKtfXKxbueJGxEyBGu42
/p6E+ksl0uXMLAlhTt/cY1g9mRXJ83kIo42iW9d5Qz9/VZED/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA1koQduxkqiEoGxvZlELoCE2c7wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81M2Uz
MGQ4NS00NDc0LTQzYWItOTVlNS04ZDVkNTM1NjBiNmUvMTQ0ZGI1Y2EtNjNmZC0z
NTAxLTk3MjktMjk4NDg3NTdkMTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTNlMzBkODUtNDQ3NC00M2FiLTk1
ZTUtOGQ1ZDUzNTYwYjZlLzUzZTMwZDg1LTQ0NzQtNDNhYi05NWU1LThkNWQ1MzU2
MGI2ZS5jcmwwHwYDVR0jBBgwFoAU560e7n/zMygIqI/CZ68Dq4bocGIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81M2UzMGQ4NS00NDc0LTQzYWItOTVlNS04ZDVk
NTM1NjBiNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExjZwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALEgxzzhZ5pRIQpoecWvusdmB1Wiw7G/6mmr336n5Vo6U7fp4OCyvDPt
Y5qp1PG2mfYWEdXLJ/BFt52DuJJFX2dtb997AurwG8szgrqbN56tvEemtqXuoLRp
OF4Dd+u/vsZyA4wVl000sigCS5jLrHGEGOgioDbHlTaeHtUMdjil6tWG+hl7pY5H
fOkxYMv1lBcHBmFpZywBfADOa3YGSC3k5pkLUV33FrRP5j3ZT9/SiKJ8s7RI3Kyp
SJG3u8PqJdzRF6PHdAMgMbrp0gZIGFEZVvrJ/rAQFQ6rSwMkY9PrqdaN5ppf4kUl
nLtXaQSpYOuB75LeYTosl+04JdLkwt8=
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:42:08 2025 by rpki-client