Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e6d863c2-4fff-33de-9e33-517b9be1466b.roa
File: e6d863c2-4fff-33de-9e33-517b9be1466b.roa (raw, json)
Hash identifier: ikmLuxeOCSHMSnLnHUu1zD47XhoMxrhcyD27ljZaNbU=
Subject key identifier: 09:98:A1:BB:CF:34:69:F7:61:AD:E8:DC:A5:83:9C:25:7B:1F:7C:BB
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F43285848143A8253440317E05FF59B90
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e6d863c2-4fff-33de-9e33-517b9be1466b.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 3477
IP address blocks: 140.172.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:82:53:44:03:17:e0:5f:f5:9b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=4bf86f11-749f-4c6a-909e-62c4a67a2e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4e:4f:8e:f5:76:29:cc:e8:60:61:fe:70:a1:
b3:af:a1:85:c5:ca:33:83:5d:ef:5f:7d:b5:60:83:
28:97:7a:26:3a:01:9f:77:da:c6:11:87:51:3c:eb:
b2:ac:27:62:b6:38:f2:72:35:67:52:9f:e3:c5:48:
16:7d:26:f7:3e:d6:7d:2d:56:5f:83:ed:fa:be:bf:
65:5a:6c:bd:bc:80:67:d7:33:df:c3:54:9c:a3:0e:
ea:06:a0:7e:d7:f7:80:da:38:73:7e:91:f8:d3:b5:
ff:2d:a2:67:25:59:d0:17:e0:74:9e:4d:10:cb:9c:
b1:26:12:f2:36:6d:c6:fb:31:c1:79:b9:aa:57:d2:
a4:ff:1b:9e:9f:09:19:8d:4e:77:d2:a0:77:c1:ad:
6c:b8:32:d8:d8:a5:ac:96:66:eb:b0:aa:b4:c9:3f:
d1:a1:70:e2:25:d3:7f:b5:2b:89:75:7b:f4:40:b9:
77:e8:c6:ef:82:42:f3:e9:08:f8:37:fc:47:7f:6c:
7a:34:b6:2b:47:9b:7b:9c:7a:0b:24:94:e4:61:e8:
79:66:d6:dc:cc:92:d9:ab:4f:42:be:81:af:3a:87:
7e:e5:e5:44:40:aa:60:bc:83:e6:42:fd:26:7d:fd:
df:b7:1d:08:f8:9d:b1:1b:50:b7:05:dd:83:f7:32:
00:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:98:A1:BB:CF:34:69:F7:61:AD:E8:DC:A5:83:9C:25:7B:1F:7C:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e6d863c2-4fff-33de-9e33-517b9be1466b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
140.172.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:76:f5:6f:23:0a:ec:d6:79:9d:3b:fd:f7:ad:95:0d:11:d3:
a1:6d:7d:f4:49:06:6b:c5:28:a1:9f:48:4b:41:3f:ed:30:cd:
5a:af:63:4b:e9:88:77:23:a0:9b:96:8b:ce:d3:f8:f7:93:98:
4a:de:b1:af:19:a8:4e:95:86:9f:f3:35:50:19:09:3d:21:64:
98:a8:6a:f9:8b:4e:ef:53:08:af:ca:5a:95:58:7e:44:8f:a2:
fd:65:ba:4c:18:4e:c9:8e:89:ea:2f:1f:03:00:96:f8:af:4d:
96:e7:db:6b:70:0c:26:4b:07:6d:4f:71:6c:8e:aa:0b:2f:ab:
b2:f2:33:e0:e7:c5:0a:ae:ea:b1:8b:bd:f2:7f:ee:97:05:41:
de:84:ae:da:31:00:da:6c:20:9e:78:f9:e2:d6:c6:ba:a7:4d:
08:57:3e:86:de:1a:c9:aa:36:42:c5:f5:92:49:c5:57:f8:d9:
fa:d7:81:fe:ac:56:43:8a:4c:b0:15:9e:26:91:a3:37:ce:8d:
8d:c3:60:d1:3e:4d:6f:0e:ca:17:65:23:05:b4:a0:df:f6:31:
72:9c:f5:97:32:94:13:0a:d7:52:58:62:60:8f:f0:1e:53:90:
3c:4a:25:8e:7c:44:25:28:91:be:13:f2:d6:c4:db:80:0e:43:
35:1b:72:bb
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEgUOoJTRAMX4F/1m5AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5
YzIwMB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
NGJmODZmMTEtNzQ5Zi00YzZhLTkwOWUtNjJjNGE2N2EyZTc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE5PjvV2KczoYGH+cKGzr6GFxcozg13vX321
YIMol3omOgGfd9rGEYdRPOuyrCditjjycjVnUp/jxUgWfSb3PtZ9LVZfg+36vr9l
Wmy9vIBn1zPfw1Scow7qBqB+1/eA2jhzfpH407X/LaJnJVnQF+B0nk0Qy5yxJhLy
Nm3G+zHBebmqV9Kk/xuenwkZjU530qB3wa1suDLY2KWslmbrsKq0yT/RoXDiJdN/
tSuJdXv0QLl36MbvgkLz6Qj4N/xHf2x6NLYrR5t7nHoLJJTkYeh5ZtbczJLZq09C
voGvOod+5eVEQKpgvIPmQv0mff3ftx0I+J2xG1C3Bd2D9zIAWwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAmYobvPNGn3Ya3o3KWDnCV7H3y7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx
MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvZTZkODYzYzItNGZmZi0z
M2RlLTllMzMtNTE3YjliZTE0NjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi
M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi
OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm
YmE0YjljMjAuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjKwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAanb1byMK7NZ5nTv9962VDRHToW199EkGa8UooZ9IS0E/7TDNWq9jS+mI
dyOgm5aLztP495OYSt6xrxmoTpWGn/M1UBkJPSFkmKhq+YtO71MIr8palVh+RI+i
/WW6TBhOyY6J6i8fAwCW+K9Nlufba3AMJksHbU9xbI6qCy+rsvIz4OfFCq7qsYu9
8n/ulwVB3oSu2jEA2mwgnnj54tbGuqdNCFc+ht4ayao2QsX1kknFV/jZ+teB/qxW
Q4pMsBWeJpGjN86NjcNg0T5Nbw7KF2UjBbSg3/Yxcpz1lzKUEwrXUlhiYI/wHlOQ
PEoljnxEJSiRvhPy1sTbgA5DNRtyuw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:17:05 2025 by rpki-client