Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/e5576dbf-19f1-39d5-beda-ee97433a2673.roa
File: e5576dbf-19f1-39d5-beda-ee97433a2673.roa (raw, json)
Hash identifier: 4dWMk2HqxiabRK+wEYXSxWE5fFcN4OaB7neulkJcv/8=
Subject key identifier: 4C:D4:A9:AA:BF:F1:F1:BC:20:76:80:B8:3F:37:2C:A0:11:B9:66:E4
Certificate issuer: /CN=b9b0013b-aa8f-41bf-a6f9-0b1c072f5940
Certificate serial: 010D0C9F43285848100A7AD5485976FEB1814F00
Authority key identifier: F7:2C:38:70:02:34:F6:5A:9B:E7:A2:B7:5D:4B:B1:E9:44:1C:74:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/e5576dbf-19f1-39d5-beda-ee97433a2673.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 19747
IP address blocks: 199.195.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:7a:d5:48:59:76:fe:b1:81:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b0013b-aa8f-41bf-a6f9-0b1c072f5940
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=1a7d4229-47f7-4d59-98f9-96e2cd5522c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ba:46:96:aa:79:0b:61:7c:25:9d:4b:74:e8:
47:f6:7b:8d:d0:cd:0f:8a:8d:8b:9c:61:ae:f3:cd:
11:df:a8:65:79:95:2d:ad:ea:4b:67:bb:ef:d2:45:
79:a8:cf:fc:2f:44:c6:af:83:74:d6:ea:69:d9:43:
b4:b1:8d:05:12:ee:32:38:8b:c5:1a:0d:e9:dd:e1:
e1:5e:4d:ca:f2:50:19:2f:0a:36:b6:4c:ba:ca:b0:
81:3f:fc:1d:5d:5c:93:67:5d:32:86:c3:61:3a:cf:
86:21:5f:6d:52:5b:48:c1:51:a1:e7:97:87:c4:8f:
c0:8a:39:90:68:68:e3:ff:77:68:75:98:ad:10:60:
ce:50:a2:e9:bb:9b:1c:76:7f:10:3f:ae:c8:43:33:
25:30:d3:fd:6f:e1:90:6f:42:23:df:49:73:08:83:
b0:14:c3:bf:e0:70:dd:5b:c6:94:f2:33:d9:0a:6d:
9f:e7:51:c6:84:05:58:63:ff:48:ca:01:79:7e:21:
c4:4f:72:72:a6:3d:c8:0f:65:49:35:a3:5d:01:b0:
d2:16:42:c7:e8:a8:49:33:26:9f:79:9c:c0:9e:7e:
60:1d:48:17:3d:07:30:2f:49:fa:c9:8a:8b:40:d5:
ba:b8:e3:dc:c5:4e:b5:a2:de:79:ea:23:a7:58:d9:
c7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D4:A9:AA:BF:F1:F1:BC:20:76:80:B8:3F:37:2C:A0:11:B9:66:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/e5576dbf-19f1-39d5-beda-ee97433a2673.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.crl
X509v3 Authority Key Identifier:
keyid:F7:2C:38:70:02:34:F6:5A:9B:E7:A2:B7:5D:4B:B1:E9:44:1C:74:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.cer
sbgp-ipAddrBlock: critical
IPv4:
199.195.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c6:d8:a0:3c:0d:35:6d:4e:47:1b:ec:ef:be:f3:0b:a0:0b:e7:
16:c3:18:a5:9c:ba:67:49:e8:7c:8f:7b:a3:24:78:28:d6:af:
4e:cd:ae:32:7d:ee:7b:44:37:f7:15:bf:c0:a2:d6:e0:5a:f5:
37:5a:bc:29:dd:3c:ee:1d:c9:27:ef:50:74:31:f1:65:b5:f6:
f0:83:9d:7d:54:62:7f:89:76:3f:89:f0:68:ba:05:99:07:5b:
f0:a8:7b:8c:3f:95:f4:42:5e:0a:15:78:5b:6d:c4:6d:18:30:
0d:07:13:17:e9:94:dc:8b:55:ba:d1:28:82:da:6f:20:46:c5:
2a:d2:e9:c3:6d:4e:a3:6e:b5:0a:68:ce:5f:4f:1c:7e:30:9a:
7b:17:7b:58:12:5b:f9:a3:d9:b1:f3:93:75:82:16:3a:47:89:
4f:a1:95:f5:20:e1:96:35:86:d4:1a:e1:bf:58:44:fa:30:26:
a2:17:7c:d1:a9:af:38:f2:8c:a7:61:fc:f9:9d:f4:8e:21:e1:
e5:0c:35:c2:97:0d:0a:b0:10:06:1f:c4:5a:0a:df:8c:e6:e0:
1b:69:5a:4c:5f:ba:cf:7f:a3:40:7b:da:44:81:1d:df:d8:4e:
78:27:3e:d9:80:86:d8:d9:92:07:41:f3:88:3e:6f:ed:99:8f:
4f:c9:a9:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgQCnrVSFl2/rGBTwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjliMDAxM2ItYWE4Zi00MWJmLWE2ZjktMGIxYzA3MmY1
OTQwMB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk
MWE3ZDQyMjktNDdmNy00ZDU5LTk4ZjktOTZlMmNkNTUyMmM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprpGlqp5C2F8JZ1LdOhH9nuN0M0Pio2LnGGu
880R36hleZUtrepLZ7vv0kV5qM/8L0TGr4N01upp2UO0sY0FEu4yOIvFGg3p3eHh
Xk3K8lAZLwo2tky6yrCBP/wdXVyTZ10yhsNhOs+GIV9tUltIwVGh55eHxI/AijmQ
aGjj/3dodZitEGDOUKLpu5scdn8QP67IQzMlMNP9b+GQb0Ij30lzCIOwFMO/4HDd
W8aU8jPZCm2f51HGhAVYY/9IygF5fiHET3Jypj3ID2VJNaNdAbDSFkLH6KhJMyaf
eZzAnn5gHUgXPQcwL0n6yYqLQNW6uOPcxU61ot556iOnWNnH+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEzUqaq/8fG8IHaAuD83LKARuWbkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOWIw
MDEzYi1hYThmLTQxYmYtYTZmOS0wYjFjMDcyZjU5NDAvZTU1NzZkYmYtMTlmMS0z
OWQ1LWJlZGEtZWU5NzQzM2EyNjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjliMDAxM2ItYWE4Zi00MWJmLWE2
ZjktMGIxYzA3MmY1OTQwL2I5YjAwMTNiLWFhOGYtNDFiZi1hNmY5LTBiMWMwNzJm
NTk0MC5jcmwwHwYDVR0jBBgwFoAU9yw4cAI09lqb56K3XUux6UQcdBUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOWIwMDEzYi1hYThmLTQxYmYtYTZmOS0wYjFj
MDcyZjU5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8PYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMbYoDwNNW1ORxvs777zC6AL5xbDGKWcumdJ6HyPe6MkeCjWr07NrjJ9
7ntEN/cVv8Ci1uBa9TdavCndPO4dySfvUHQx8WW19vCDnX1UYn+Jdj+J8Gi6BZkH
W/Coe4w/lfRCXgoVeFttxG0YMA0HExfplNyLVbrRKILabyBGxSrS6cNtTqNutQpo
zl9PHH4wmnsXe1gSW/mj2bHzk3WCFjpHiU+hlfUg4ZY1htQa4b9YRPowJqIXfNGp
rzjyjKdh/Pmd9I4h4eUMNcKXDQqwEAYfxFoK34zm4BtpWkxfus9/o0B72kSBHd/Y
TngnPtmAhtjZkgdB84g+b+2Zj0/JqSQ=
-----END CERTIFICATE-----
Generated at Tue Apr 29 23:31:45 2025 by rpki-client