Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/14101aa2-6fde-3978-964f-46e75495d447.roa
File: 14101aa2-6fde-3978-964f-46e75495d447.roa (raw, json)
Hash identifier: LJeuazh966SvyAghTZYKYJVSKx7UsfMdtlrfq7YpYCM=
Subject key identifier: F9:30:D4:33:92:E3:D6:94:95:94:6F:E3:79:39:50:09:08:29:B7:6E
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584830253BECF81B693FE69619C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/14101aa2-6fde-3978-964f-46e75495d447.roa
Signing time: Fri 13 Dec 2024 02:00:39 +0000
ROA not before: Fri 13 Dec 2024 02:00:39 +0000
ROA not after: Thu 13 Mar 2025 01:00:39 +0000
asID: 54113
IP address blocks: 131.125.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:25:3b:ec:f8:1b:69:3f:e6:96:19:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Dec 13 02:00:39 2024 GMT
Not After : Mar 13 01:00:39 2025 GMT
Subject: CN=713c3a8f-7a45-4b22-a86d-665952a08ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:90:20:2a:b0:4a:fb:80:cb:43:ad:39:ba:73:
ab:fb:01:be:0f:69:be:04:1f:86:41:b6:d1:a2:78:
bc:f4:62:dd:2d:77:3d:82:85:42:13:b2:3f:cb:35:
d4:99:83:e4:69:40:36:43:2e:5f:66:77:61:fd:4d:
79:2c:03:21:b8:f3:78:c3:1e:47:98:3a:97:96:da:
fc:bf:fa:34:08:c1:6f:d6:13:34:f9:35:64:c3:70:
14:26:ca:7b:b9:96:32:d9:02:91:20:d1:cc:c9:23:
41:89:5f:ea:25:78:a1:bd:bd:15:cb:3b:71:50:ca:
71:8d:08:5b:a3:3b:3d:f7:c0:bd:1f:ac:e5:e2:a8:
18:f2:d5:1b:67:3e:28:7c:0a:dc:75:1c:bd:9a:e9:
2e:a3:f0:ea:ff:14:79:ed:4a:f1:87:fa:b3:06:80:
2f:f2:db:d1:06:71:9e:ce:d3:f9:8b:8c:aa:ec:9d:
dc:09:fe:43:85:e7:e6:4d:b4:fd:ec:e9:7c:4e:a6:
f8:95:59:6b:62:19:05:3a:0c:46:ea:fa:69:d7:c3:
4d:62:d6:ae:c4:54:d3:37:5b:c7:70:c3:fa:19:84:
e2:36:91:9c:eb:43:c4:28:b7:6b:b0:49:4f:aa:fb:
05:f9:8f:b8:6d:1d:8a:e7:ea:30:e0:f1:4b:c5:dc:
cb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:30:D4:33:92:E3:D6:94:95:94:6F:E3:79:39:50:09:08:29:B7:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/14101aa2-6fde-3978-964f-46e75495d447.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
131.125.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:5b:c2:f1:63:ff:21:cf:9b:ff:69:96:92:1d:ec:93:c1:0e:
55:5a:0a:19:cf:15:6a:4e:56:7e:10:e2:db:dc:ec:5c:2d:38:
c0:21:47:47:aa:98:d1:cf:97:85:e5:d1:65:c2:2c:62:1a:18:
cd:9d:d5:2a:6d:d3:08:f7:08:a1:7e:4e:9f:41:d9:74:9b:e3:
35:8d:f9:1e:f9:ab:d7:fc:92:ec:22:0e:f5:f5:ca:ad:19:b9:
1e:96:c1:de:37:3c:8f:13:79:18:61:c1:c2:36:bd:b0:fc:4c:
a3:39:1c:20:e9:c5:0a:b6:e3:c4:63:79:4f:86:1e:73:ac:d1:
59:8a:86:b0:f6:e0:17:93:d1:65:c2:d1:70:81:ab:b8:5f:7e:
a5:d6:41:29:9b:c0:2b:09:8a:2a:9f:17:d1:91:fb:ba:40:2a:
3a:2b:e8:0c:55:dd:53:49:9b:b7:51:c2:ff:87:59:34:54:1a:
40:8b:4b:07:a4:42:ad:ae:bb:3e:57:d1:c1:67:10:23:12:5f:
b4:e9:3d:da:f1:7b:5b:63:9f:32:1b:e4:21:57:1b:e7:1c:ea:
ed:ea:c0:8a:b9:ae:a1:98:36:ab:81:58:ab:75:4f:a4:ec:96:
aa:30:da:be:e2:db:14:b3:67:28:f5:62:7e:5b:64:fa:d1:2d:
9c:25:2e:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgwJTvs+BtpP+aWGcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MTIxMzAyMDAzOVoXDTI1MDMxMzAxMDAzOVowLzEtMCsGA1UEAxMk
NzEzYzNhOGYtN2E0NS00YjIyLWE4NmQtNjY1OTUyYTA4ZmZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJAgKrBK+4DLQ605unOr+wG+D2m+BB+GQbbR
oni89GLdLXc9goVCE7I/yzXUmYPkaUA2Qy5fZndh/U15LAMhuPN4wx5HmDqXltr8
v/o0CMFv1hM0+TVkw3AUJsp7uZYy2QKRINHMySNBiV/qJXihvb0VyztxUMpxjQhb
ozs998C9H6zl4qgY8tUbZz4ofArcdRy9mukuo/Dq/xR57Urxh/qzBoAv8tvRBnGe
ztP5i4yq7J3cCf5DhefmTbT97Ol8Tqb4lVlrYhkFOgxG6vpp18NNYtauxFTTN1vH
cMP6GYTiNpGc60PEKLdrsElPqvsF+Y+4bR2K5+ow4PFLxdzLwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPkw1DOS49aUlZRv43k5UAkIKbduMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMTQxMDFhYTItNmZkZS0z
OTc4LTk2NGYtNDZlNzU0OTVkNDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg315MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD1bwvFj/yHPm/9plpId7JPBDlVaChnPFWpOVn4Q4tvc7FwtOMAhR0eq
mNHPl4Xl0WXCLGIaGM2d1Spt0wj3CKF+Tp9B2XSb4zWN+R75q9f8kuwiDvX1yq0Z
uR6Wwd43PI8TeRhhwcI2vbD8TKM5HCDpxQq248RjeU+GHnOs0VmKhrD24BeT0WXC
0XCBq7hffqXWQSmbwCsJiiqfF9GR+7pAKjor6AxV3VNJm7dRwv+HWTRUGkCLSwek
Qq2uuz5X0cFnECMSX7TpPdrxe1tjnzIb5CFXG+cc6u3qwIq5rqGYNquBWKt1T6Ts
lqow2r7i2xSzZyj1Yn5bZPrRLZwlLg0=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:13:38 2025 by rpki-client