Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/299cd2db-655a-3cdd-9cad-92d013df4297.roa
File: 299cd2db-655a-3cdd-9cad-92d013df4297.roa (raw, json)
Hash identifier: 7atOVD3ggAbLxBRlFkyzeNKkBDzdlCUVa1Bnq3o6OMc=
Subject key identifier: 2B:3E:68:03:03:C1:76:8F:D3:EF:06:15:BD:C6:84:6D:95:0E:57:73
Certificate issuer: /CN=a062a219-9ee8-48a3-897a-8410b6da94a1
Certificate serial: 010D0C9F432858486695B57B20D7F9416030C080
Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/299cd2db-655a-3cdd-9cad-92d013df4297.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 803
IP address blocks: 96.125.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:b5:7b:20:d7:f9:41:60:30:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=fe70f0f2-47ac-4208-9337-82cf64bd9599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:03:4f:8e:f9:50:f9:0c:ce:9a:54:cf:3d:45:
eb:a9:af:ac:63:c7:ea:08:8c:d6:c6:91:24:ff:24:
3b:89:1f:a3:87:88:5d:72:02:f5:70:26:e6:55:78:
19:73:0a:84:7f:f1:31:79:3f:43:71:a8:ea:b7:ab:
ec:ae:d6:50:e4:fe:24:94:24:72:d8:2c:b0:1b:f9:
65:bc:c5:64:65:42:4c:7d:8d:49:b7:8d:6f:f9:92:
4b:05:e6:43:43:c4:5c:5d:7f:9b:ec:dc:b3:90:19:
20:05:89:18:56:42:ed:91:f6:22:e1:56:97:11:6d:
0c:eb:da:44:3d:24:f1:be:56:e5:75:7d:f7:be:5d:
a2:f6:67:ed:38:de:e2:2b:58:c2:2e:f8:da:b8:d7:
1f:12:bd:92:97:d5:d3:bc:f9:af:81:0e:6a:6b:12:
ed:66:3e:ca:15:09:a3:a4:1e:24:e0:fd:f8:74:5d:
c2:77:ed:9b:07:10:1a:d1:35:d2:fc:f3:1e:73:8f:
ec:8d:81:d8:08:88:1e:e7:80:86:c9:19:11:f1:45:
74:a4:80:3d:37:67:ce:ff:0c:7d:a1:b7:77:8a:f6:
9d:a4:70:8e:22:1e:62:b7:cc:b4:33:11:a0:9c:9c:
34:0f:70:52:aa:7b:d0:4a:eb:e6:f8:58:c0:e5:bd:
a0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3E:68:03:03:C1:76:8F:D3:EF:06:15:BD:C6:84:6D:95:0E:57:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/299cd2db-655a-3cdd-9cad-92d013df4297.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl
X509v3 Authority Key Identifier:
keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
sbgp-ipAddrBlock: critical
IPv4:
96.125.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:85:9b:d3:4a:17:14:c9:6b:8a:12:b9:c3:2f:ac:33:88:c9:
e1:09:17:83:31:73:ec:48:95:c4:86:a0:e5:74:96:aa:a6:1d:
97:61:dc:e3:54:12:ec:86:fa:54:b8:a8:0d:9a:04:cd:68:84:
d8:37:08:6e:33:39:43:ec:0d:82:f8:cc:7a:c8:82:35:05:54:
e7:32:f9:ee:24:72:74:93:09:6e:54:32:e8:3b:af:e5:81:24:
2c:40:1a:cb:98:03:b3:41:e1:e0:8a:ab:c5:42:4e:a6:b9:0b:
a7:64:69:e5:6c:73:91:ca:13:83:83:c6:b8:28:ef:63:2d:bf:
5c:4c:3d:35:ef:08:f9:6c:32:e0:21:cb:06:48:0e:bb:3e:ac:
dd:49:84:4b:b5:28:ff:f2:4a:e6:f3:b3:b1:33:76:55:18:4d:
56:a1:5a:98:bb:a2:51:cb:c4:84:f1:49:ba:37:1f:56:c4:83:
44:64:87:63:7f:67:11:a0:43:e8:4b:9f:e6:8e:f2:44:83:f5:
53:8c:61:5e:2a:c4:2c:c3:05:9e:c6:c6:e2:ad:75:0a:48:0c:
c0:a5:3f:7c:48:d8:aa:e4:39:3a:a1:7e:41:dc:a3:f3:4b:d2:
a3:d1:bb:50:42:0f:d2:32:92:41:26:25:b9:7a:86:eb:13:78:
8e:c7:f8:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhmlbV7INf5QWAwwIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTA2MmEyMTktOWVlOC00OGEzLTg5N2EtODQxMGI2ZGE5
NGExMB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk
ZmU3MGYwZjItNDdhYy00MjA4LTkzMzctODJjZjY0YmQ5NTk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqANPjvlQ+QzOmlTPPUXrqa+sY8fqCIzWxpEk
/yQ7iR+jh4hdcgL1cCbmVXgZcwqEf/ExeT9Dcajqt6vsrtZQ5P4klCRy2CywG/ll
vMVkZUJMfY1Jt41v+ZJLBeZDQ8RcXX+b7NyzkBkgBYkYVkLtkfYi4VaXEW0M69pE
PSTxvlbldX33vl2i9mftON7iK1jCLvjauNcfEr2Sl9XTvPmvgQ5qaxLtZj7KFQmj
pB4k4P34dF3Cd+2bBxAa0TXS/PMec4/sjYHYCIge54CGyRkR8UV0pIA9N2fO/wx9
obd3ivadpHCOIh5it8y0MxGgnJw0D3BSqnvQSuvm+FjA5b2ghQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCs+aAMDwXaP0+8GFb3GhG2VDldzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDYy
YTIxOS05ZWU4LTQ4YTMtODk3YS04NDEwYjZkYTk0YTEvMjk5Y2QyZGItNjU1YS0z
Y2RkLTljYWQtOTJkMDEzZGY0Mjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTA2MmEyMTktOWVlOC00OGEzLTg5
N2EtODQxMGI2ZGE5NGExL2EwNjJhMjE5LTllZTgtNDhhMy04OTdhLTg0MTBiNmRh
OTRhMS5jcmwwHwYDVR0jBBgwFoAUFCgnZgWdJKC08ogP76ns4OluhhgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hMDYyYTIxOS05ZWU4LTQ4YTMtODk3YS04NDEw
YjZkYTk0YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYH3wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJOFm9NKFxTJa4oSucMvrDOIyeEJF4Mxc+xIlcSGoOV0lqqmHZdh3ONU
EuyG+lS4qA2aBM1ohNg3CG4zOUPsDYL4zHrIgjUFVOcy+e4kcnSTCW5UMug7r+WB
JCxAGsuYA7NB4eCKq8VCTqa5C6dkaeVsc5HKE4ODxrgo72Mtv1xMPTXvCPlsMuAh
ywZIDrs+rN1JhEu1KP/ySubzs7EzdlUYTVahWpi7olHLxITxSbo3H1bEg0Rkh2N/
ZxGgQ+hLn+aO8kSD9VOMYV4qxCzDBZ7GxuKtdQpIDMClP3xI2KrkOTqhfkHco/NL
0qPRu1BCD9IykkEmJbl6husTeI7H+Jg=
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:21:40 2025 by rpki-client