Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/bcf63ce9-7252-3eb7-86a9-be391198cc94.roa
File: bcf63ce9-7252-3eb7-86a9-be391198cc94.roa (raw, json)
Hash identifier: +JCWP2Er1DvTcB9EL3UGVNiFvfsQ0cU7Bayw2OUqQJo=
Subject key identifier: 95:25:B4:C2:CF:1B:68:03:66:E8:58:0C:69:18:44:31:AF:44:5E:1E
Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial: 010D0C9F4328584824FA86388617C40AB3887100
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/bcf63ce9-7252-3eb7-86a9-be391198cc94.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 396982
IP address blocks: 198.135.124.0/23 maxlen: 23
199.19.248.0/21 maxlen: 21
199.116.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:86:38:86:17:c4:0a:b3:88:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=1ced4e01-d845-4925-a89f-6825321240e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2b:5b:10:b5:72:3a:8a:20:0b:86:27:63:51:
b8:98:8b:89:ee:f1:b8:15:51:1e:25:37:d6:66:3b:
b8:b7:8c:4b:32:e3:09:d2:c1:34:3a:d5:84:61:16:
40:57:86:62:eb:ba:51:5b:53:52:e4:0c:f3:1f:70:
63:73:2e:3f:d6:9f:57:e7:70:12:47:c3:8c:17:82:
04:93:49:9d:49:93:bd:90:f9:a1:7d:ed:c2:72:16:
22:68:d2:cc:0d:7a:7a:38:c2:fa:06:d5:40:fe:51:
d4:cb:e0:95:aa:7c:11:53:91:80:b6:b6:8e:e9:31:
96:21:4a:5c:e4:ee:15:d6:c2:e0:1a:d5:9f:21:0f:
ca:b8:d4:3d:cf:6d:b6:9d:6b:f1:ba:5f:b1:53:07:
71:c6:aa:89:3c:04:e7:90:3c:7f:3b:01:44:46:e8:
8c:f4:13:ec:0b:0d:eb:d2:98:b6:2c:9f:a3:c8:69:
11:e3:5b:d0:2e:80:97:90:fb:da:49:fd:93:4a:f1:
ae:46:b5:81:02:cb:41:ad:ab:9c:1f:1b:74:7a:98:
c1:59:70:82:74:7a:6e:da:3a:08:4c:3f:60:c3:8d:
bf:7a:4e:7d:ce:d2:a0:4f:26:48:cd:07:7b:79:a9:
d9:31:80:6e:76:de:bf:98:2f:37:f3:d2:35:82:b9:
3e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:25:B4:C2:CF:1B:68:03:66:E8:58:0C:69:18:44:31:AF:44:5E:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/bcf63ce9-7252-3eb7-86a9-be391198cc94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
X509v3 Authority Key Identifier:
keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
sbgp-ipAddrBlock: critical
IPv4:
198.135.124.0/23
199.19.248.0/21
199.116.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:ba:36:cb:60:c5:86:80:6a:5d:02:f4:9f:73:04:63:15:2c:
4d:0d:0c:0b:97:54:01:4e:18:d9:3b:5c:e7:33:3d:73:d6:13:
76:44:b3:b9:a5:04:7a:41:c2:e1:92:4d:3d:f9:41:c4:ee:2b:
a6:39:d2:a9:14:92:65:f4:c8:e9:49:88:38:04:4a:59:a6:cd:
e5:e0:9e:5b:bf:6a:99:f6:de:e3:e7:ee:ad:b9:31:21:37:42:
9f:6d:b6:d0:9c:03:e6:15:42:8a:c9:2a:ed:e6:ed:0c:b1:e3:
08:d0:f0:34:65:c2:2b:72:41:67:b2:b5:1e:6c:98:b0:ae:34:
e9:b8:6f:6b:9b:fb:2d:44:02:e8:fe:64:36:3d:e0:c7:ff:bd:
e2:ee:16:9c:15:ec:7d:e4:13:08:74:1c:10:16:9e:42:73:df:
13:d4:67:3c:60:e0:15:46:89:2c:79:ed:39:64:4f:f8:64:25:
5f:d5:e7:a4:42:ae:98:c9:ca:0b:b1:55:c1:18:69:d1:04:92:
cf:b6:25:c6:b3:07:b6:b0:c9:72:c3:9b:1e:b2:3b:9a:b1:fb:
d6:71:81:ab:22:5c:a3:49:e9:cf:4f:a9:8c:f7:cd:50:e1:7f:
61:23:a7:41:5d:4c:bf:80:85:ef:01:24:fa:46:3e:f7:5e:84:
ad:c4:89:39
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEgk+oY4hhfECrOIcQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3
NzY5MB4XDTI0MTIwOTAyMDA0MFoXDTI1MDMwOTAyMDA0MFowLzEtMCsGA1UEAxMk
MWNlZDRlMDEtZDg0NS00OTI1LWE4OWYtNjgyNTMyMTI0MGU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCtbELVyOoogC4YnY1G4mIuJ7vG4FVEeJTfW
Zju4t4xLMuMJ0sE0OtWEYRZAV4Zi67pRW1NS5AzzH3Bjcy4/1p9X53ASR8OMF4IE
k0mdSZO9kPmhfe3CchYiaNLMDXp6OML6BtVA/lHUy+CVqnwRU5GAtraO6TGWIUpc
5O4V1sLgGtWfIQ/KuNQ9z222nWvxul+xUwdxxqqJPATnkDx/OwFERuiM9BPsCw3r
0pi2LJ+jyGkR41vQLoCXkPvaSf2TSvGuRrWBAstBraucHxt0epjBWXCCdHpu2joI
TD9gw42/ek59ztKgTyZIzQd7eanZMYBudt6/mC8389I1grk+1QIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFJUltMLPG2gDZuhYDGkYRDGvRF4eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1
YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvYmNmNjNjZTktNzI1Mi0z
ZWI3LTg2YTktYmUzOTExOThjYzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2
NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx
Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw
Y2ZkMTc3NjkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBxod8AwQD
xxP4AwQDx3SoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAHC6NstgxYaAal0C9J9zBGMVLE0NDAuXVAFOGNk7
XOczPXPWE3ZEs7mlBHpBwuGSTT35QcTuK6Y50qkUkmX0yOlJiDgESlmmzeXgnlu/
apn23uPn7q25MSE3Qp9tttCcA+YVQorJKu3m7Qyx4wjQ8DRlwityQWeytR5smLCu
NOm4b2ub+y1EAuj+ZDY94Mf/veLuFpwV7H3kEwh0HBAWnkJz3xPUZzxg4BVGiSx5
7TlkT/hkJV/V56RCrpjJyguxVcEYadEEks+2JcazB7awyXLDmx6yO5qx+9Zxgasi
XKNJ6c9PqYz3zVDhf2Ejp0FdTL+Ahe8BJPpGPvdehK3EiTk=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:32:08 2025 by rpki-client