Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/9917936b-e626-353f-a546-27306749c69e.roa
File: 9917936b-e626-353f-a546-27306749c69e.roa (raw, json)
Hash identifier: ZdvMO1YxI/cq8euLhSQSqjPonBCaTxRy7l5TtMc9CUo=
Subject key identifier: 23:5F:EF:82:4A:AF:E4:91:09:0D:20:77:13:64:1B:75:6A:EF:7D:FD
Certificate issuer: /CN=88ab2065-ec65-41b7-b24d-cd8d9c2c276e
Certificate serial: 010D0C9F43285848388553A532D6700A8EA82080
Authority key identifier: 05:D0:66:4D:05:91:BD:A5:12:9D:86:DF:FE:36:8C:36:01:B9:62:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/9917936b-e626-353f-a546-27306749c69e.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 16509
IP address blocks: 165.140.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:53:a5:32:d6:70:0a:8e:a8:20:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ab2065-ec65-41b7-b24d-cd8d9c2c276e
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=d37be4bf-1219-4c57-9e47-49ea61c46ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:75:a1:97:6e:57:0f:49:78:2c:11:61:a4:
ec:ca:e5:dd:91:03:61:aa:75:e8:a5:51:17:ea:35:
38:7b:9b:ab:db:4c:fa:76:61:91:76:98:bf:e4:00:
f3:90:80:6c:bf:7e:1d:19:ac:66:b0:81:dd:d7:d5:
f1:f8:6c:48:ea:07:16:11:10:8f:fd:19:fc:53:1e:
2d:48:b5:09:bd:c4:bd:ea:ee:07:71:85:33:e0:f5:
c1:c6:cb:38:0f:65:49:c1:83:02:bc:2f:66:79:5e:
3d:28:5c:fa:43:ba:67:a7:b3:e4:23:c9:4b:84:58:
96:95:a6:f2:44:9d:76:7d:3c:cf:ee:b5:e0:68:25:
3c:f7:34:b5:0a:e9:5c:98:d1:3f:0f:4f:98:b9:48:
45:00:5a:4f:ed:61:83:65:68:e6:20:4a:82:5e:d2:
cb:f7:71:84:51:e8:b6:46:eb:1d:88:58:8a:fe:12:
00:fb:41:ed:00:8a:78:5e:63:a7:5a:22:43:0e:1d:
e9:9d:27:b3:69:01:24:cf:61:2d:46:d1:0a:35:98:
56:d0:3c:f5:fe:c0:6a:39:89:46:5f:6b:b8:b1:3d:
0e:6f:2a:13:48:34:6a:f5:89:81:73:28:90:79:f9:
8d:bd:9e:72:9e:55:95:1d:f1:cb:b5:16:8b:0b:b4:
f8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5F:EF:82:4A:AF:E4:91:09:0D:20:77:13:64:1B:75:6A:EF:7D:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/9917936b-e626-353f-a546-27306749c69e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.crl
X509v3 Authority Key Identifier:
keyid:05:D0:66:4D:05:91:BD:A5:12:9D:86:DF:FE:36:8C:36:01:B9:62:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88ab2065-ec65-41b7-b24d-cd8d9c2c276e.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.132.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:34:02:4f:0a:b2:66:10:8f:a8:5b:9e:38:ed:c1:d2:77:8d:
86:e7:c5:35:a7:6a:3e:c4:41:80:74:be:4f:62:17:b3:2f:33:
9b:fc:7d:22:e8:a8:e8:91:73:a1:e2:aa:3e:fe:f3:c3:48:b6:
cc:07:e3:01:3a:54:12:2c:c2:0d:a5:49:f9:5d:90:af:37:2e:
9f:88:b1:88:ab:8a:f8:09:6b:ec:14:99:b2:8e:d8:a3:bb:b6:
54:9b:d3:44:0c:19:45:1f:1f:83:1f:8f:f7:98:d7:1e:ef:6f:
a2:b4:d2:c6:59:c7:bc:76:f0:ad:8c:1e:30:da:d1:0f:7a:68:
25:44:38:ff:02:e2:99:a1:8f:62:ea:32:d1:5f:db:64:68:b0:
81:e2:e8:61:43:7d:11:ef:ff:25:1b:f6:82:ba:77:8a:ba:3a:
5a:75:be:52:f8:45:ea:ac:b1:06:eb:e8:34:4a:84:6e:ce:48:
f8:1d:74:8d:bd:43:db:3e:cf:01:57:0a:1f:c1:35:d8:66:d0:
ea:52:19:7d:31:b7:18:a9:61:73:04:aa:e3:08:67:0d:b1:38:
f3:50:1f:f2:d2:26:88:75:5c:95:f8:24:8b:52:90:b9:5b:4c:
38:90:39:2d:f0:49:f2:87:d4:2f:cd:bd:2a:0a:e1:d4:6b:9b:
56:84:f1:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg4hVOlMtZwCo6oIIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODhhYjIwNjUtZWM2NS00MWI3LWIyNGQtY2Q4ZDljMmMy
NzZlMB4XDTI0MTIxNjAyMDAzOVoXDTI1MDMxNjAxMDAzOVowLzEtMCsGA1UEAxMk
ZDM3YmU0YmYtMTIxOS00YzU3LTllNDctNDllYTYxYzQ2ZmY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthB1oZduVw9JeCwRYaTsyuXdkQNhqnXopVEX
6jU4e5ur20z6dmGRdpi/5ADzkIBsv34dGaxmsIHd19Xx+GxI6gcWERCP/Rn8Ux4t
SLUJvcS96u4HcYUz4PXBxss4D2VJwYMCvC9meV49KFz6Q7pnp7PkI8lLhFiWlaby
RJ12fTzP7rXgaCU89zS1CulcmNE/D0+YuUhFAFpP7WGDZWjmIEqCXtLL93GEUei2
RusdiFiK/hIA+0HtAIp4XmOnWiJDDh3pnSezaQEkz2EtRtEKNZhW0Dz1/sBqOYlG
X2u4sT0ObyoTSDRq9YmBcyiQefmNvZ5ynlWVHfHLtRaLC7T4zwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCNf74JKr+SRCQ0gdxNkG3Vq7339MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGFi
MjA2NS1lYzY1LTQxYjctYjI0ZC1jZDhkOWMyYzI3NmUvOTkxNzkzNmItZTYyNi0z
NTNmLWE1NDYtMjczMDY3NDljNjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhhYjIwNjUtZWM2NS00MWI3LWIy
NGQtY2Q4ZDljMmMyNzZlLzg4YWIyMDY1LWVjNjUtNDFiNy1iMjRkLWNkOGQ5YzJj
Mjc2ZS5jcmwwHwYDVR0jBBgwFoAUBdBmTQWRvaUSnYbf/jaMNgG5Yh0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84OGFiMjA2NS1lYzY1LTQxYjctYjI0ZC1jZDhk
OWMyYzI3NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpYyEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGE0Ak8KsmYQj6hbnjjtwdJ3jYbnxTWnaj7EQYB0vk9iF7MvM5v8fSLo
qOiRc6Hiqj7+88NItswH4wE6VBIswg2lSfldkK83Lp+IsYirivgJa+wUmbKO2KO7
tlSb00QMGUUfH4Mfj/eY1x7vb6K00sZZx7x28K2MHjDa0Q96aCVEOP8C4pmhj2Lq
MtFf22RosIHi6GFDfRHv/yUb9oK6d4q6Olp1vlL4ReqssQbr6DRKhG7OSPgddI29
Q9s+zwFXCh/BNdhm0OpSGX0xtxipYXMEquMIZw2xOPNQH/LSJoh1XJX4JItSkLlb
TDiQOS3wSfKH1C/NvSoK4dRrm1aE8Tw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:14:03 2025 by rpki-client