Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/6656f8b9-6a2a-3721-b635-8ceda21f6394.roa
File: 6656f8b9-6a2a-3721-b635-8ceda21f6394.roa (raw, json)
Hash identifier: 1evGn8LOghkN0RDSup7lKuTmmvTzsSyLemja6sFifk8=
Subject key identifier: EC:DF:01:25:E5:60:37:E8:38:CA:64:80:14:BE:28:1E:50:19:91:D0
Certificate issuer: /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
Certificate serial: 010D0C9F4328584871C07B0AD497324D4503A180
Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/6656f8b9-6a2a-3721-b635-8ceda21f6394.roa
Signing time: Sun 05 Jan 2025 14:00:52 +0000
ROA not before: Sun 05 Jan 2025 14:00:52 +0000
ROA not after: Sat 05 Apr 2025 13:00:52 +0000
asID: 22612
IP address blocks: 192.64.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:71:c0:7b:0a:d4:97:32:4d:45:03:a1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
Validity
Not Before: Jan 5 14:00:52 2025 GMT
Not After : Apr 5 13:00:52 2025 GMT
Subject: CN=0661a30e-bbba-4928-a561-d5e179bc2c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b5:39:20:15:17:d4:af:aa:e1:ef:93:c9:1b:
e0:36:65:a9:a6:14:08:fa:f8:bc:0c:8f:df:19:d3:
12:fa:8a:67:d0:82:63:e1:2b:53:df:a8:2f:aa:c9:
fd:b9:28:74:c5:fb:99:c6:e1:06:c1:f4:e3:2b:cc:
ab:3d:4a:f3:6d:21:47:05:7a:d0:42:14:66:0e:dc:
0e:1d:37:94:1f:ef:e7:7c:67:ec:53:db:d6:df:ef:
96:80:76:5a:6c:9c:8a:04:5b:e1:0f:a0:e8:42:0d:
29:dc:3d:67:53:e0:32:23:d1:a4:2d:12:77:ba:da:
e9:5c:c0:bd:fd:e1:49:be:dd:d3:00:2d:ec:a2:44:
68:ba:86:6a:26:c1:49:a2:17:ab:c7:27:ee:ff:8f:
85:57:f7:d8:4d:a0:6d:21:d7:35:77:15:eb:fc:0e:
ab:17:10:be:32:21:97:9b:b4:91:51:e8:4a:c8:5d:
1b:7c:7a:4a:53:3f:38:51:32:24:23:f9:e9:37:03:
80:a3:c1:1e:c2:f9:06:d3:6e:59:64:4c:92:a3:00:
3b:5a:c7:6b:88:2d:f6:49:61:48:af:4f:a4:cd:cc:
ec:9e:a2:70:54:43:f7:14:b5:ae:56:64:f3:27:8e:
c6:60:d1:1a:7d:28:94:49:7e:65:7f:e6:f0:c0:08:
e9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DF:01:25:E5:60:37:E8:38:CA:64:80:14:BE:28:1E:50:19:91:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/6656f8b9-6a2a-3721-b635-8ceda21f6394.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl
X509v3 Authority Key Identifier:
keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
sbgp-ipAddrBlock: critical
IPv4:
192.64.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:bb:90:4c:e5:6b:ee:1e:03:e5:a0:14:d6:99:2a:f8:f5:f1:
c2:a0:5a:b9:a8:9f:35:fe:4c:f3:01:e7:e4:aa:eb:11:fe:08:
63:91:ff:f7:e6:b0:3f:15:13:7a:c8:5b:59:bd:39:a6:54:64:
be:7c:07:40:d5:4d:5d:33:93:af:13:73:aa:90:28:a8:dc:e9:
a1:08:8f:22:13:22:39:cd:e7:02:c8:ef:86:b7:7f:63:93:c9:
3a:12:78:a2:4a:c3:21:b5:fa:53:18:16:61:a7:2c:9e:ec:b8:
a7:9f:9f:d2:2c:86:b5:74:b9:ae:ed:0c:4d:58:91:62:8f:84:
6e:cf:90:dd:55:91:60:76:8a:5e:3f:1a:78:43:2a:9a:18:7a:
e6:fc:89:71:2e:ef:7c:d1:a4:c4:cc:73:41:a1:be:56:dd:c9:
f9:d3:c5:ea:c7:9c:6a:c3:60:88:f2:33:21:36:4d:97:c9:d4:
e0:91:95:85:ce:f7:83:ab:8b:0a:09:f4:31:4f:a3:3a:60:ea:
b3:f3:e9:df:c1:bc:78:6d:ac:b0:39:cc:a4:61:31:6a:d6:35:
98:e9:08:ea:f0:80:b0:24:57:b5:f6:b0:51:35:c5:84:18:a1:
b2:0d:f6:66:9a:b5:b8:7e:87:3e:a2:73:cb:51:60:3a:58:3d:
49:e0:d9:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhxwHsK1JcyTUUDoYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTNlMzBkODUtNDQ3NC00M2FiLTk1ZTUtOGQ1ZDUzNTYw
YjZlMB4XDTI1MDEwNTE0MDA1MloXDTI1MDQwNTEzMDA1MlowLzEtMCsGA1UEAxMk
MDY2MWEzMGUtYmJiYS00OTI4LWE1NjEtZDVlMTc5YmMyYzVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLU5IBUX1K+q4e+TyRvgNmWpphQI+vi8DI/f
GdMS+opn0IJj4StT36gvqsn9uSh0xfuZxuEGwfTjK8yrPUrzbSFHBXrQQhRmDtwO
HTeUH+/nfGfsU9vW3++WgHZabJyKBFvhD6DoQg0p3D1nU+AyI9GkLRJ3utrpXMC9
/eFJvt3TAC3sokRouoZqJsFJoherxyfu/4+FV/fYTaBtIdc1dxXr/A6rFxC+MiGX
m7SRUehKyF0bfHpKUz84UTIkI/npNwOAo8EewvkG025ZZEySowA7WsdriC32SWFI
r0+kzczsnqJwVEP3FLWuVmTzJ47GYNEafSiUSX5lf+bwwAjpvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOzfASXlYDfoOMpkgBS+KB5QGZHQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81M2Uz
MGQ4NS00NDc0LTQzYWItOTVlNS04ZDVkNTM1NjBiNmUvNjY1NmY4YjktNmEyYS0z
NzIxLWI2MzUtOGNlZGEyMWY2Mzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTNlMzBkODUtNDQ3NC00M2FiLTk1
ZTUtOGQ1ZDUzNTYwYjZlLzUzZTMwZDg1LTQ0NzQtNDNhYi05NWU1LThkNWQ1MzU2
MGI2ZS5jcmwwHwYDVR0jBBgwFoAU560e7n/zMygIqI/CZ68Dq4bocGIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81M2UzMGQ4NS00NDc0LTQzYWItOTVlNS04ZDVk
NTM1NjBiNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwEBwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABe7kEzla+4eA+WgFNaZKvj18cKgWrmonzX+TPMB5+Sq6xH+CGOR//fm
sD8VE3rIW1m9OaZUZL58B0DVTV0zk68Tc6qQKKjc6aEIjyITIjnN5wLI74a3f2OT
yToSeKJKwyG1+lMYFmGnLJ7suKefn9IshrV0ua7tDE1YkWKPhG7PkN1VkWB2il4/
GnhDKpoYeub8iXEu73zRpMTMc0GhvlbdyfnTxerHnGrDYIjyMyE2TZfJ1OCRlYXO
94OriwoJ9DFPozpg6rPz6d/BvHhtrLA5zKRhMWrWNZjpCOrwgLAkV7X2sFE1xYQY
obIN9maatbh+hz6ic8tRYDpYPUng2S8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:50:13 2025 by rpki-client