Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/de28b314-abdf-3f3f-813f-4e0deac66bff.roa
File: de28b314-abdf-3f3f-813f-4e0deac66bff.roa (raw, json)
Hash identifier: 17W8CXm06fOSvWoDm/aXmrovpBpmwbKszo6tAQIkprU=
Subject key identifier: C4:54:29:5E:C3:83:05:35:99:8B:55:36:C3:49:33:DA:3C:AB:9A:3E
Certificate issuer: /CN=946cb195-9b9a-4836-9152-b97e9e831144
Certificate serial: 010D0C9F432858487325B0BB62D830A0B54A0C40
Authority key identifier: D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/de28b314-abdf-3f3f-813f-4e0deac66bff.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 396292
IP address blocks: 142.54.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:b0:bb:62:d8:30:a0:b5:4a:0c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946cb195-9b9a-4836-9152-b97e9e831144
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=359622e1-f078-4ba2-9c80-54d7faef1a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:54:32:3a:2b:65:99:f7:da:c0:32:af:db:f6:
5f:30:19:f4:c2:a3:ca:35:90:73:9a:f4:79:15:3d:
d4:ae:b9:36:f3:60:39:6c:7a:7e:a4:f0:a0:58:0f:
1b:68:5d:14:7a:da:b4:60:5b:d2:81:5c:42:92:79:
00:db:e3:12:dc:3e:34:d4:28:1d:7a:e0:76:7c:0b:
41:ab:4c:5d:69:0a:2b:6f:37:a0:f0:f7:d4:f7:b0:
bd:4e:a1:16:ff:2f:cb:df:c1:11:fc:0e:09:e2:2f:
09:a5:55:4d:0d:15:14:ea:0b:22:3d:28:3e:b9:4f:
e3:44:8e:74:02:71:79:81:b6:fc:78:33:48:56:42:
ba:c6:87:89:bd:0e:b5:7c:0e:52:1d:d7:0d:5d:d7:
b1:b0:6c:f2:e6:0b:a4:95:f1:73:1e:8a:ea:a1:41:
2d:38:4d:a2:82:09:8a:84:bf:26:16:23:30:ed:6e:
ab:d1:e2:52:31:0d:d3:93:b1:df:ea:38:fb:0b:c8:
75:27:80:08:58:51:31:d4:48:66:66:5e:d2:ec:63:
68:37:10:0b:ef:56:5b:5d:8b:63:46:df:16:3f:10:
07:6e:17:b1:de:78:15:66:b7:d1:52:6f:e6:85:a6:
42:01:5b:90:f7:bc:ce:a5:c9:d1:0b:f5:6f:15:0e:
5e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:54:29:5E:C3:83:05:35:99:8B:55:36:C3:49:33:DA:3C:AB:9A:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/de28b314-abdf-3f3f-813f-4e0deac66bff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.crl
X509v3 Authority Key Identifier:
keyid:D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer
sbgp-ipAddrBlock: critical
IPv4:
142.54.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:10:90:15:aa:7a:56:70:18:72:c4:7f:33:a0:a2:8d:10:73:
29:cd:ac:3b:f9:d8:63:b8:84:34:85:61:e5:52:eb:8c:43:c5:
c7:31:41:d3:44:1d:a9:5a:28:51:7a:c6:c8:ec:11:61:2b:cb:
da:f1:bb:3e:95:7d:c6:72:e4:1c:19:7f:64:c1:31:80:f3:92:
99:80:8f:ba:ff:7b:5c:c3:75:c6:cb:d1:4b:d0:7b:f0:ca:8b:
b9:ed:57:ed:f3:58:3a:ea:d4:ff:3b:4f:00:6d:b7:17:03:66:
66:fe:62:db:d0:9a:3b:1a:45:19:39:9d:00:b7:e6:05:ed:d6:
0e:58:98:5a:32:a1:e9:d9:27:a3:3a:3e:4e:ff:14:bd:f8:52:
c3:16:1b:1b:ef:c8:47:4f:07:d0:7d:5a:55:f5:f4:bb:f0:51:
27:d1:09:c5:c5:fb:c9:1f:d0:96:16:53:66:57:23:40:ba:da:
75:32:53:88:c7:5b:e4:ee:50:7c:f4:ef:1c:f3:9c:78:42:09:
13:b9:22:e1:e7:0f:da:f7:17:81:c8:d5:b2:2d:3b:d2:cd:0c:
0e:70:2f:98:45:eb:44:e7:b7:c4:32:d0:0c:76:96:4d:c4:14:
74:e6:89:df:5d:de:d8:c3:35:8c:bf:e3:48:26:89:b8:fe:82:
50:46:67:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhzJbC7YtgwoLVKDEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTQ2Y2IxOTUtOWI5YS00ODM2LTkxNTItYjk3ZTllODMx
MTQ0MB4XDTI1MDEwNjAyMDA0MFoXDTI1MDQwNjAxMDA0MFowLzEtMCsGA1UEAxMk
MzU5NjIyZTEtZjA3OC00YmEyLTljODAtNTRkN2ZhZWYxYTMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lQyOitlmffawDKv2/ZfMBn0wqPKNZBzmvR5
FT3Urrk282A5bHp+pPCgWA8baF0Uetq0YFvSgVxCknkA2+MS3D401CgdeuB2fAtB
q0xdaQorbzeg8PfU97C9TqEW/y/L38ER/A4J4i8JpVVNDRUU6gsiPSg+uU/jRI50
AnF5gbb8eDNIVkK6xoeJvQ61fA5SHdcNXdexsGzy5guklfFzHorqoUEtOE2iggmK
hL8mFiMw7W6r0eJSMQ3Tk7Hf6jj7C8h1J4AIWFEx1EhmZl7S7GNoNxAL71ZbXYtj
Rt8WPxAHbhex3ngVZrfRUm/mhaZCAVuQ97zOpcnRC/VvFQ5e7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMRUKV7DgwU1mYtVNsNJM9o8q5o+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85NDZj
YjE5NS05YjlhLTQ4MzYtOTE1Mi1iOTdlOWU4MzExNDQvZGUyOGIzMTQtYWJkZi0z
ZjNmLTgxM2YtNGUwZGVhYzY2YmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTQ2Y2IxOTUtOWI5YS00ODM2LTkx
NTItYjk3ZTllODMxMTQ0Lzk0NmNiMTk1LTliOWEtNDgzNi05MTUyLWI5N2U5ZTgz
MTE0NC5jcmwwHwYDVR0jBBgwFoAU1WDzXob02ndtuMXazfHRY5vlND0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85NDZjYjE5NS05YjlhLTQ4MzYtOTE1Mi1iOTdl
OWU4MzExNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjjYgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFsQkBWqelZwGHLEfzOgoo0QcynNrDv52GO4hDSFYeVS64xDxccxQdNE
HalaKFF6xsjsEWEry9rxuz6VfcZy5BwZf2TBMYDzkpmAj7r/e1zDdcbL0UvQe/DK
i7ntV+3zWDrq1P87TwBttxcDZmb+YtvQmjsaRRk5nQC35gXt1g5YmFoyoenZJ6M6
Pk7/FL34UsMWGxvvyEdPB9B9WlX19LvwUSfRCcXF+8kf0JYWU2ZXI0C62nUyU4jH
W+TuUHz07xzznHhCCRO5IuHnD9r3F4HI1bItO9LNDA5wL5hF60Tnt8Qy0Ax2lk3E
FHTmid9d3tjDNYy/40gmibj+glBGZ0U=
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:55 2025 by rpki-client