Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/2941f0b6-c6f5-39a0-b5a9-770ac31eb307.roa
File: 2941f0b6-c6f5-39a0-b5a9-770ac31eb307.roa (raw, json)
Hash identifier: NAxi4vcV1voZyJ5jkIARQ0lNGzJxBSueJ+CwEMkFpJg=
Subject key identifier: 90:E3:99:93:F7:87:E8:5D:40:FD:3A:DF:F9:DB:34:CE:2F:52:7E:1A
Certificate issuer: /CN=66c993bd-0997-43a9-a584-9bfe93e5b3cb
Certificate serial: 010D0C9F432858488AE0A76AFC8D9715A367ECF0
Authority key identifier: AE:30:E3:D1:B5:03:1B:9B:69:42:B9:6B:A1:10:C7:AC:07:9A:0B:88
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/2941f0b6-c6f5-39a0-b5a9-770ac31eb307.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 17378
IP address blocks: 134.172.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:a7:6a:fc:8d:97:15:a3:67:ec:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66c993bd-0997-43a9-a584-9bfe93e5b3cb
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=80a3a349-b3f1-446e-b4b8-e6da50541a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8e:6f:29:86:a6:19:3a:55:63:42:b5:62:b6:
b8:9a:53:4f:1d:54:7c:97:66:1a:a7:a8:41:e8:06:
ea:70:d6:d9:ee:cb:ac:fe:e6:b1:fb:eb:a8:87:0e:
34:1a:ec:88:28:99:1e:1b:28:37:eb:16:fa:1e:15:
64:78:1b:a8:9e:24:74:f2:c6:46:3d:69:66:e8:ff:
39:2d:21:b9:36:44:cc:78:10:98:fb:d2:27:13:6a:
79:b3:87:bb:40:f1:58:49:84:d6:a9:ec:bd:ff:db:
b4:72:95:6e:bd:87:06:2b:81:a1:1a:65:86:2f:b2:
1c:a9:6e:b5:1c:37:1e:e6:5b:e8:1d:e8:1a:bd:16:
7a:5a:49:60:71:a6:60:e1:76:3f:0e:8b:12:0d:ad:
7c:a9:c9:5d:36:fe:1d:46:3d:e1:ed:5b:ad:d3:4d:
2d:fe:d8:15:f8:cd:8e:59:2c:a6:e3:04:e0:11:ec:
f4:2b:3e:50:6d:67:76:dc:8d:1f:f2:74:82:f9:20:
a5:2a:d8:bc:fe:97:ce:04:3a:a0:a4:54:e4:e5:f9:
3e:6e:6c:d0:67:84:04:9c:05:68:44:33:fa:90:21:
40:74:03:af:57:83:be:68:69:a6:6c:db:27:5d:93:
99:1f:aa:b6:6d:23:49:33:a6:c6:e0:c3:d6:49:67:
40:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E3:99:93:F7:87:E8:5D:40:FD:3A:DF:F9:DB:34:CE:2F:52:7E:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/2941f0b6-c6f5-39a0-b5a9-770ac31eb307.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/66c993bd-0997-43a9-a584-9bfe93e5b3cb.crl
X509v3 Authority Key Identifier:
keyid:AE:30:E3:D1:B5:03:1B:9B:69:42:B9:6B:A1:10:C7:AC:07:9A:0B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb.cer
sbgp-ipAddrBlock: critical
IPv4:
134.172.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:79:4c:e4:9b:12:b3:ac:bd:8d:72:ab:30:92:26:d9:a7:23:
46:78:5e:3b:29:72:04:3b:e8:d8:6d:40:d9:70:05:c3:09:96:
90:06:c8:fa:08:fb:5a:38:9b:1d:87:b5:e3:d7:ad:fb:f9:be:
91:16:7f:32:43:89:d1:6e:73:d1:88:72:44:e5:10:32:77:5c:
90:f4:1f:d2:ff:29:e1:94:7d:46:3f:94:3b:bc:a9:e8:dd:f0:
e3:4b:0f:f1:9b:fd:51:fd:f5:5c:7a:94:85:36:c7:3f:fb:a2:
0f:82:63:9e:14:10:84:cf:78:e5:e1:0d:0b:93:40:75:d5:db:
80:0c:f9:e5:a5:9d:22:36:c3:a8:4f:9f:6f:24:db:e6:27:14:
9a:a0:24:ed:79:e9:f8:ae:33:a7:a7:e7:b4:91:bf:0c:e3:f4:
11:99:43:ab:04:14:a4:6f:12:8f:6e:43:7d:c6:ba:2e:82:2f:
e4:59:5c:ba:d2:16:ab:af:f1:8f:5f:41:36:7e:51:a8:7a:18:
1a:0c:44:fe:29:08:77:24:8f:7a:ee:b3:5c:5a:cb:50:44:31:
1e:1f:63:e9:09:a4:99:30:0b:bc:c1:ea:d5:2b:70:2c:8b:c5:
82:43:57:4c:02:77:25:02:da:0f:42:25:51:61:28:06:48:24:
a7:c0:89:8f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEiK4Kdq/I2XFaNn7PAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZjOTkzYmQtMDk5Ny00M2E5LWE1ODQtOWJmZTkzZTVi
M2NiMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk
ODBhM2EzNDktYjNmMS00NDZlLWI0YjgtZTZkYTUwNTQxYTgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI5vKYamGTpVY0K1Yra4mlNPHVR8l2Yap6hB
6AbqcNbZ7sus/uax++uohw40GuyIKJkeGyg36xb6HhVkeBuoniR08sZGPWlm6P85
LSG5NkTMeBCY+9InE2p5s4e7QPFYSYTWqey9/9u0cpVuvYcGK4GhGmWGL7IcqW61
HDce5lvoHegavRZ6WklgcaZg4XY/DosSDa18qcldNv4dRj3h7Vut000t/tgV+M2O
WSym4wTgEez0Kz5QbWd23I0f8nSC+SClKti8/pfOBDqgpFTk5fk+bmzQZ4QEnAVo
RDP6kCFAdAOvV4O+aGmmbNsnXZOZH6q2bSNJM6bG4MPWSWdAEQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJDjmZP3h+hdQP063/nbNM4vUn4aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NmM5
OTNiZC0wOTk3LTQzYTktYTU4NC05YmZlOTNlNWIzY2IvMjk0MWYwYjYtYzZmNS0z
OWEwLWI1YTktNzcwYWMzMWViMzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjZjOTkzYmQtMDk5Ny00M2E5LWE1
ODQtOWJmZTkzZTViM2NiLzY2Yzk5M2JkLTA5OTctNDNhOS1hNTg0LTliZmU5M2U1
YjNjYi5jcmwwHwYDVR0jBBgwFoAUrjDj0bUDG5tpQrlroRDHrAeaC4gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NmM5OTNiZC0wOTk3LTQzYTktYTU4NC05YmZl
OTNlNWIzY2IuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhqwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAQHlM5JsSs6y9jXKrMJIm2acjRnheOylyBDvo2G1A2XAFwwmWkAbI+gj7
WjibHYe149et+/m+kRZ/MkOJ0W5z0YhyROUQMndckPQf0v8p4ZR9Rj+UO7yp6N3w
40sP8Zv9Uf31XHqUhTbHP/uiD4JjnhQQhM945eENC5NAddXbgAz55aWdIjbDqE+f
byTb5icUmqAk7Xnp+K4zp6fntJG/DOP0EZlDqwQUpG8Sj25Dfca6LoIv5FlcutIW
q6/xj19BNn5RqHoYGgxE/ikIdySPeu6zXFrLUEQxHh9j6QmkmTALvMHq1StwLIvF
gkNXTAJ3JQLaD0IlUWEoBkgkp8CJjw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:43:37 2025 by rpki-client