Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/dff3557c-8510-362d-8886-ae8601c1c582.roa
File: dff3557c-8510-362d-8886-ae8601c1c582.roa (raw, json)
Hash identifier: J4Vq7o7ZH3QZH9HyQzCtHvYqZRb5AYDH9iXgSfOKKvQ=
Subject key identifier: 85:55:56:67:AF:DA:30:04:7E:0A:EE:28:F2:D8:81:56:0E:62:4D:2C
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584830253C8918088F6F5EF3EE60
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/dff3557c-8510-362d-8886-ae8601c1c582.roa
Signing time: Fri 13 Dec 2024 02:00:39 +0000
ROA not before: Fri 13 Dec 2024 02:00:39 +0000
ROA not after: Thu 13 Mar 2025 01:00:39 +0000
asID: 54113
IP address blocks: 131.125.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:25:3c:89:18:08:8f:6f:5e:f3:ee:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Dec 13 02:00:39 2024 GMT
Not After : Mar 13 01:00:39 2025 GMT
Subject: CN=0ff47e2a-bea5-4963-b477-1b22caf80a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:73:a2:56:1f:bd:5b:35:53:eb:97:b1:38:db:
99:20:f2:b8:79:56:6c:a4:7a:48:13:42:37:06:4b:
2d:ec:57:f0:f4:ed:55:8b:07:f9:7f:fa:64:09:0e:
9a:9f:30:68:ec:c4:dd:7e:7c:1e:24:cd:8b:5c:2c:
7d:83:fc:3f:4b:b2:a9:dd:ab:8d:98:ac:68:eb:58:
2b:39:e4:d4:98:90:a7:1a:2f:ab:9e:5e:44:6d:35:
5e:49:39:30:2c:a7:8f:be:57:9a:a6:e5:47:04:f7:
b9:d2:6a:ca:a1:b6:d5:a0:39:dd:d0:f8:20:67:08:
48:13:d1:39:97:c5:09:e3:12:0a:3b:3f:59:1f:65:
64:90:71:44:c7:5e:86:af:cc:f0:1d:88:47:43:34:
3f:01:4e:ce:ce:ec:fe:b0:f9:9c:f4:12:a8:60:44:
73:95:ad:e9:b5:80:07:30:2c:d8:f1:cf:4c:54:9d:
46:a7:a3:c1:fa:e5:68:d2:99:29:fd:ba:4f:c5:bd:
50:9a:e2:78:61:3e:07:f2:1c:96:52:96:25:45:d1:
1f:25:53:ff:52:6e:f0:00:79:33:d8:3a:4d:c1:5e:
d1:8b:78:ae:87:79:52:77:97:c5:23:d2:d8:ea:c9:
72:3f:9d:98:d8:16:a6:ab:55:3c:f6:63:84:ef:6b:
1a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:55:56:67:AF:DA:30:04:7E:0A:EE:28:F2:D8:81:56:0E:62:4D:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/dff3557c-8510-362d-8886-ae8601c1c582.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
131.125.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:18:70:d7:1b:09:41:7d:fe:54:9c:14:88:12:56:ef:e0:8e:
8e:d1:54:f9:dd:df:05:7b:e5:68:63:bf:4c:5c:66:a9:18:c0:
84:e0:08:78:a1:57:0a:62:70:3c:7c:7c:2f:ec:c4:f7:5e:a5:
82:87:de:3f:7f:1e:fc:12:06:6b:82:13:60:f7:a3:f3:44:8d:
2f:26:fb:fe:4c:6f:50:6e:25:3b:6c:08:fd:b1:e2:f2:bf:33:
1e:6b:4d:93:6c:27:c1:05:c0:3c:92:b5:1c:6b:e8:95:7c:d8:
1d:38:01:a1:f1:e6:d8:35:f7:48:7e:8e:0d:2a:7f:0d:ef:e5:
52:74:a2:1c:94:e6:d9:56:27:dd:ab:43:82:18:af:43:af:0c:
bb:df:8a:84:76:ab:85:df:21:e8:58:67:ed:05:74:89:b7:42:
f2:22:f3:15:4e:e8:2d:69:f7:53:45:60:d4:9a:28:67:d5:2f:
54:6b:38:ed:d2:2a:3c:30:63:73:1e:3f:55:9d:02:2b:92:cf:
ce:4a:31:29:58:86:21:54:6e:81:4a:47:88:bd:68:2d:0c:30:
c1:26:bd:1d:ad:6f:fd:f5:4f:42:66:19:9f:e3:92:20:76:b5:
f5:ec:ee:af:f9:95:1a:ef:05:8a:62:67:7e:95:45:c6:ec:8b:
3e:79:32:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgwJTyJGAiPb17z7mAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MTIxMzAyMDAzOVoXDTI1MDMxMzAxMDAzOVowLzEtMCsGA1UEAxMk
MGZmNDdlMmEtYmVhNS00OTYzLWI0NzctMWIyMmNhZjgwYThmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXOiVh+9WzVT65exONuZIPK4eVZspHpIE0I3
Bkst7Ffw9O1Viwf5f/pkCQ6anzBo7MTdfnweJM2LXCx9g/w/S7Kp3auNmKxo61gr
OeTUmJCnGi+rnl5EbTVeSTkwLKePvleapuVHBPe50mrKobbVoDnd0PggZwhIE9E5
l8UJ4xIKOz9ZH2VkkHFEx16Gr8zwHYhHQzQ/AU7Ozuz+sPmc9BKoYERzla3ptYAH
MCzY8c9MVJ1Gp6PB+uVo0pkp/bpPxb1QmuJ4YT4H8hyWUpYlRdEfJVP/Um7wAHkz
2DpNwV7Ri3iuh3lSd5fFI9LY6slyP52Y2Bamq1U89mOE72saHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIVVVmev2jAEfgruKPLYgVYOYk0sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZGZmMzU1N2MtODUxMC0z
NjJkLTg4ODYtYWU4NjAxYzFjNTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31hMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAQYcNcbCUF9/lScFIgSVu/gjo7RVPnd3wV75Whjv0xcZqkYwITgCHih
VwpicDx8fC/sxPdepYKH3j9/HvwSBmuCE2D3o/NEjS8m+/5Mb1BuJTtsCP2x4vK/
Mx5rTZNsJ8EFwDyStRxr6JV82B04AaHx5tg190h+jg0qfw3v5VJ0ohyU5tlWJ92r
Q4IYr0OvDLvfioR2q4XfIehYZ+0FdIm3QvIi8xVO6C1p91NFYNSaKGfVL1RrOO3S
KjwwY3MeP1WdAiuSz85KMSlYhiFUboFKR4i9aC0MMMEmvR2tb/31T0JmGZ/jkiB2
tfXs7q/5lRrvBYpiZ36VRcbsiz55Mm8=
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:50:06 2025 by rpki-client