Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/29247b77-b19f-3449-9456-b1d4b5bac0ae.roa
File: 29247b77-b19f-3449-9456-b1d4b5bac0ae.roa (raw, json)
Hash identifier: dKVKY3U0qG9jaion8IYib3t1qu5LEKNsXPUG4F17yE4=
Subject key identifier: 41:3D:49:0F:DA:97:96:AD:9E:53:40:59:08:FB:27:FD:E7:F8:04:F2
Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial: 010D0C9F43285848504038312C99DB99E697F960
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/29247b77-b19f-3449-9456-b1d4b5bac0ae.roa
Signing time: Tue 24 Dec 2024 14:00:53 +0000
ROA not before: Tue 24 Dec 2024 14:00:53 +0000
ROA not after: Mon 24 Mar 2025 13:00:53 +0000
asID: 25605
IP address blocks: 198.41.8.0/22 maxlen: 22
198.41.8.0/23 maxlen: 23
198.41.8.0/24 maxlen: 24
198.41.9.0/24 maxlen: 24
198.41.10.0/23 maxlen: 23
198.41.10.0/24 maxlen: 24
198.41.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:50:40:38:31:2c:99:db:99:e6:97:f9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Validity
Not Before: Dec 24 14:00:53 2024 GMT
Not After : Mar 24 13:00:53 2025 GMT
Subject: CN=f6b51f97-0e0b-4880-aea1-a73ce8201126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ee:1f:68:91:a7:f5:7a:1b:64:12:43:a6:2a:
a6:7e:a7:d5:67:a6:af:c4:c3:38:0e:7f:b1:de:2c:
1f:82:2b:61:18:ed:c2:b2:84:88:92:7b:c3:0c:8f:
49:b9:4c:35:dd:e4:b6:da:64:f8:23:37:4f:af:d0:
d4:27:92:7a:a4:c9:4f:78:2e:5b:c4:e6:8a:50:66:
79:31:26:58:b6:af:2c:7c:ec:3d:cd:5e:84:bc:90:
20:10:96:d4:27:77:63:b4:fa:ba:13:2e:e5:4f:87:
a6:d4:07:bf:5f:66:7e:b7:58:c4:03:b9:f6:66:0a:
78:9e:a8:db:e9:19:e2:51:5f:c0:8d:54:29:2e:d0:
2a:0c:25:fd:a6:72:21:4e:90:72:62:f1:9b:31:c4:
b0:22:cf:08:35:6b:87:79:8e:74:df:57:4d:09:dc:
eb:59:46:ed:c8:0c:b6:a0:ed:ab:3e:5a:a3:dc:3d:
ef:6f:9c:a5:20:d9:af:94:4b:f5:e9:86:11:76:96:
ca:a2:cb:82:27:fb:35:ff:97:89:5b:21:dd:97:21:
23:e6:7f:9b:45:24:82:79:0a:ec:c5:64:61:b5:80:
85:e6:bb:f8:6e:d3:f9:22:c7:49:32:06:43:08:5e:
40:93:10:45:08:7c:dc:88:35:f5:fe:f4:bf:71:26:
1f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3D:49:0F:DA:97:96:AD:9E:53:40:59:08:FB:27:FD:E7:F8:04:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/29247b77-b19f-3449-9456-b1d4b5bac0ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
X509v3 Authority Key Identifier:
keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:f6:63:f6:c4:52:f8:c6:f2:b5:73:fd:37:18:0e:0d:14:fa:
60:89:6c:cc:40:97:91:af:78:3c:70:9b:6c:ad:18:66:01:13:
d8:93:3f:a6:41:e9:9f:b1:2c:63:81:ba:fc:2c:4e:bc:67:07:
a2:55:8a:7b:37:5c:50:21:0c:c5:49:0a:b3:38:7d:0c:67:d5:
80:fc:38:57:0b:b9:05:de:6a:23:29:fb:a4:ec:06:9b:07:0c:
0e:96:8e:73:7f:56:a2:0d:30:28:9e:1d:35:69:83:46:06:9f:
f4:04:d1:57:cc:37:de:22:55:b9:79:15:61:35:6e:76:74:55:
f9:f1:2a:7a:cc:86:48:8b:96:31:99:da:11:bc:93:6d:3f:c1:
df:7b:d2:44:ff:1c:23:15:fc:ed:47:7c:ff:42:8b:a0:f3:fd:
4a:ae:82:8e:f9:67:1d:f4:ea:02:8b:1c:20:30:1b:c7:ff:e8:
79:8f:71:bb:13:21:14:0e:b9:88:ef:87:7b:06:ed:e2:e6:e8:
45:fb:66:b4:c7:c8:04:d0:b3:ac:b7:7b:c8:31:1f:72:f1:a6:
f7:fd:9a:f6:50:52:03:a7:98:81:ab:47:b1:c8:5a:fe:55:8c:
fb:15:66:3c:63:57:97:73:14:ae:94:51:e5:51:06:c1:b5:70:
59:49:27:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhQQDgxLJnbmeaX+WAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk
ZWZjMB4XDTI0MTIyNDE0MDA1M1oXDTI1MDMyNDEzMDA1M1owLzEtMCsGA1UEAxMk
ZjZiNTFmOTctMGUwYi00ODgwLWFlYTEtYTczY2U4MjAxMTI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+4faJGn9XobZBJDpiqmfqfVZ6avxMM4Dn+x
3iwfgithGO3CsoSIknvDDI9JuUw13eS22mT4IzdPr9DUJ5J6pMlPeC5bxOaKUGZ5
MSZYtq8sfOw9zV6EvJAgEJbUJ3djtPq6Ey7lT4em1Ae/X2Z+t1jEA7n2Zgp4nqjb
6RniUV/AjVQpLtAqDCX9pnIhTpByYvGbMcSwIs8INWuHeY5031dNCdzrWUbtyAy2
oO2rPlqj3D3vb5ylINmvlEv16YYRdpbKosuCJ/s1/5eJWyHdlyEj5n+bRSSCeQrs
xWRhtYCF5rv4btP5IsdJMgZDCF5AkxBFCHzciDX1/vS/cSYfbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEE9SQ/al5atnlNAWQj7J/3n+ATyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj
YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvMjkyNDdiNzctYjE5Zi0z
NDQ5LTk0NTYtYjFkNGI1YmFjMGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm
MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi
ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw
NjJiYmRlZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxikIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALz2Y/bEUvjG8rVz/TcYDg0U+mCJbMxAl5GveDxwm2ytGGYBE9iTP6ZB
6Z+xLGOBuvwsTrxnB6JVins3XFAhDMVJCrM4fQxn1YD8OFcLuQXeaiMp+6TsBpsH
DA6WjnN/VqINMCieHTVpg0YGn/QE0VfMN94iVbl5FWE1bnZ0VfnxKnrMhkiLljGZ
2hG8k20/wd970kT/HCMV/O1HfP9Ci6Dz/Uqugo75Zx306gKLHCAwG8f/6HmPcbsT
IRQOuYjvh3sG7eLm6EX7ZrTHyATQs6y3e8gxH3Lxpvf9mvZQUgOnmIGrR7HIWv5V
jPsVZjxjV5dzFK6UUeVRBsG1cFlJJxc=
-----END CERTIFICATE-----
Generated at Thu May 1 17:47:19 2025 by rpki-client