Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/f110b177-91f0-3d3e-8955-10231347c49e.roa
File: f110b177-91f0-3d3e-8955-10231347c49e.roa (raw, json)
Hash identifier: 1BC3/JmFVoLImfWD4Gb1GsDVRCmha+QjqLcBCpiFBSc=
Subject key identifier: BA:50:00:51:DB:DB:D3:45:4C:7D:C3:86:36:31:30:08:87:51:23:BD
Certificate issuer: /CN=fe86722c-27ec-4059-a1ef-757cf5e15715
Certificate serial: 010D0C9F432858483885531AF9998AC2F0428A40
Authority key identifier: 9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/f110b177-91f0-3d3e-8955-10231347c49e.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 21976
IP address blocks: 130.156.4.0/24 maxlen: 24
130.156.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:53:1a:f9:99:8a:c2:f0:42:8a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe86722c-27ec-4059-a1ef-757cf5e15715
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=91da845f-d1b4-4f84-a5ac-fa382b092535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:50:57:21:05:d8:58:f6:9c:c5:05:93:9b:10:
65:14:50:6d:28:35:be:fc:09:f4:70:15:72:a7:bb:
77:7a:72:1e:10:f7:e3:88:12:e8:84:ef:12:ca:06:
73:ed:7b:c8:1e:b8:fc:6e:43:65:24:b3:ee:0a:74:
80:13:54:5d:d3:3a:55:df:cc:65:e6:c8:83:2a:17:
22:7e:86:06:a5:9b:16:55:7b:41:f0:dc:44:da:ea:
1a:c3:44:85:74:80:93:f0:53:47:df:21:d9:9c:18:
be:1f:c5:23:c0:1f:cf:36:49:fd:5b:0b:f2:07:67:
4e:ae:75:43:f7:55:a0:8c:37:58:75:f2:4a:be:6c:
fb:ba:3f:eb:93:40:ba:07:a7:be:ab:a6:c3:91:c0:
76:3f:07:29:db:84:c4:9f:9b:e8:52:7c:c5:bf:5e:
ee:75:b4:ec:74:e7:7f:49:f1:2e:e0:02:92:5a:06:
39:62:39:38:ce:c1:25:d2:b1:02:91:bc:98:02:79:
65:c3:df:54:cc:16:92:dc:bc:d4:a9:03:16:52:2b:
d2:25:8c:37:b1:dd:de:9e:d2:36:5c:a8:37:68:95:
64:1d:b9:a2:a9:fa:47:6c:a9:ed:f9:3b:04:bc:88:
cc:fb:e8:e7:db:11:c3:ed:46:51:e8:b6:86:b4:97:
66:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:50:00:51:DB:DB:D3:45:4C:7D:C3:86:36:31:30:08:87:51:23:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/f110b177-91f0-3d3e-8955-10231347c49e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl
X509v3 Authority Key Identifier:
keyid:9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
sbgp-ipAddrBlock: critical
IPv4:
130.156.4.0/24
130.156.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:2b:09:40:7d:6d:dc:35:a1:c3:49:0c:51:f7:e3:c9:e8:c8:
63:e8:11:13:84:be:cc:58:46:88:53:95:70:a6:c7:04:94:54:
ce:78:ed:61:14:68:34:a6:5c:7f:68:4a:0c:c7:d9:de:3b:d1:
55:b6:c6:05:e9:7d:14:34:a8:77:67:2e:0d:6f:7f:43:5c:dc:
21:44:00:db:b8:89:d1:f1:09:e8:b9:2e:45:06:49:c3:4e:d6:
25:1e:50:94:96:f6:b3:aa:9c:96:26:8d:15:d4:d8:84:12:de:
7d:e6:66:79:39:ae:32:99:00:bd:9b:f1:10:e4:dd:04:53:dc:
83:69:36:7c:d6:66:76:5a:f3:45:f0:3a:e9:de:ef:77:d2:fa:
aa:d8:2e:17:ae:37:09:cb:83:91:7a:84:a8:90:13:83:c7:cf:
45:fa:a3:f8:71:4a:65:b5:2b:d6:37:66:4f:77:c5:ea:91:a9:
85:6d:c0:44:e6:e5:f0:23:7d:d4:23:20:1b:f3:75:30:68:8d:
63:a1:c4:f5:d2:88:4d:5b:77:e5:74:b9:bb:03:1d:36:06:c3:
d7:be:d5:85:27:3b:36:5f:38:ca:b9:2a:5b:7a:f8:87:2e:aa:
bf:7d:f6:41:f3:d5:92:b8:8f:63:77:4d:ef:4e:1a:ce:6a:1b:
8b:ea:05:d5
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEg4hVMa+ZmKwvBCikAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmU4NjcyMmMtMjdlYy00MDU5LWExZWYtNzU3Y2Y1ZTE1
NzE1MB4XDTI0MTIxNjAyMDAzOVoXDTI1MDMxNjAxMDAzOVowLzEtMCsGA1UEAxMk
OTFkYTg0NWYtZDFiNC00Zjg0LWE1YWMtZmEzODJiMDkyNTM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlBXIQXYWPacxQWTmxBlFFBtKDW+/An0cBVy
p7t3enIeEPfjiBLohO8SygZz7XvIHrj8bkNlJLPuCnSAE1Rd0zpV38xl5siDKhci
foYGpZsWVXtB8NxE2uoaw0SFdICT8FNH3yHZnBi+H8UjwB/PNkn9WwvyB2dOrnVD
91WgjDdYdfJKvmz7uj/rk0C6B6e+q6bDkcB2Pwcp24TEn5voUnzFv17udbTsdOd/
SfEu4AKSWgY5Yjk4zsEl0rECkbyYAnllw99UzBaS3LzUqQMWUivSJYw3sd3entI2
XKg3aJVkHbmiqfpHbKnt+TsEvIjM++jn2xHD7UZR6LaGtJdmiwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFLpQAFHb29NFTH3DhjYxMAiHUSO9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mZTg2
NzIyYy0yN2VjLTQwNTktYTFlZi03NTdjZjVlMTU3MTUvZjExMGIxNzctOTFmMC0z
ZDNlLTg5NTUtMTAyMzEzNDdjNDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZmU4NjcyMmMtMjdlYy00MDU5LWEx
ZWYtNzU3Y2Y1ZTE1NzE1L2ZlODY3MjJjLTI3ZWMtNDA1OS1hMWVmLTc1N2NmNWUx
NTcxNS5jcmwwHwYDVR0jBBgwFoAUnK6jm4GtANWgU0O/JxPv/0fWuPcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mZTg2NzIyYy0yN2VjLTQwNTktYTFlZi03NTdj
ZjVlMTU3MTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAgpwEAwQA
gpwOMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAJorCUB9bdw1ocNJDFH348noyGPoEROEvsxYRohTlXCmxwSU
VM547WEUaDSmXH9oSgzH2d470VW2xgXpfRQ0qHdnLg1vf0Nc3CFEANu4idHxCei5
LkUGScNO1iUeUJSW9rOqnJYmjRXU2IQS3n3mZnk5rjKZAL2b8RDk3QRT3INpNnzW
ZnZa80XwOune73fS+qrYLheuNwnLg5F6hKiQE4PHz0X6o/hxSmW1K9Y3Zk93xeqR
qYVtwETm5fAjfdQjIBvzdTBojWOhxPXSiE1bd+V0ubsDHTYGw9e+1YUnOzZfOMq5
Klt6+Icuqr999kHz1ZK4j2N3Te9OGs5qG4vqBdU=
-----END CERTIFICATE-----
Generated at Thu May 15 15:51:58 2025 by rpki-client