Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/d1162b5c-5f5e-36e6-8d9d-416bbf3ff8f3.roa
File: d1162b5c-5f5e-36e6-8d9d-416bbf3ff8f3.roa (raw, json)
Hash identifier: e5cxcREkn3vM3KrzwyycpSkPv1seOtJv47cZdmGNqLk=
Subject key identifier: EF:63:69:E7:98:E2:1E:66:AF:CD:D6:EF:C8:ED:FE:9B:5B:03:BC:B2
Certificate issuer: /CN=a3e75940-8ff7-4128-ac13-6fa2836a9b2b
Certificate serial: 010D0C9F43285848345567C17C7513E6FBF06680
Authority key identifier: B6:77:D7:4B:52:36:09:D5:81:C5:95:07:00:B9:B2:2A:CA:27:BA:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/d1162b5c-5f5e-36e6-8d9d-416bbf3ff8f3.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 7922
IP address blocks: 139.64.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:67:c1:7c:75:13:e6:fb:f0:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e75940-8ff7-4128-ac13-6fa2836a9b2b
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=d8200860-c51a-4a74-bf49-e7f955ca3f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ee:b2:91:7a:c9:44:29:63:63:92:ef:6e:17:
a2:b8:20:11:2e:4b:35:b4:17:84:93:73:32:41:32:
92:a6:5c:c1:54:87:79:e7:29:56:0c:d0:96:65:37:
1e:c1:c0:62:84:db:e8:95:ea:6c:ed:9e:f8:df:5d:
d0:bf:69:82:67:c7:60:ca:14:db:9e:e1:d7:11:bf:
ce:d3:98:f2:c1:62:77:8f:72:a2:c6:31:2d:2d:db:
19:01:ee:74:de:55:6c:17:bc:ba:7a:76:75:11:ad:
b4:b0:67:d3:3b:2e:6a:d6:14:af:0a:f9:92:64:54:
17:da:6b:99:24:fe:81:70:a8:dd:40:d8:80:7e:d4:
8b:57:16:97:d4:e7:79:eb:19:1b:ab:e6:61:56:21:
7e:1b:99:24:d1:c8:88:42:f8:5c:28:5b:67:d7:7f:
85:9c:45:4a:3d:f6:6e:e2:f5:65:50:40:48:4a:d6:
09:d4:77:5c:a2:9c:8a:23:5f:0e:eb:1a:79:8b:55:
77:55:30:ca:41:17:ea:82:a6:90:2c:ed:a3:79:99:
ce:4b:0b:3d:85:57:27:4c:c3:4c:27:9d:eb:5f:db:
e1:3c:37:e7:84:4c:d7:19:58:b7:07:53:80:b5:e6:
82:23:e8:30:3c:72:a4:a1:bc:57:66:1a:5f:58:d5:
47:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:63:69:E7:98:E2:1E:66:AF:CD:D6:EF:C8:ED:FE:9B:5B:03:BC:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/d1162b5c-5f5e-36e6-8d9d-416bbf3ff8f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.crl
X509v3 Authority Key Identifier:
keyid:B6:77:D7:4B:52:36:09:D5:81:C5:95:07:00:B9:B2:2A:CA:27:BA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.cer
sbgp-ipAddrBlock: critical
IPv4:
139.64.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:af:ec:ac:2a:b0:f5:c9:04:90:d5:90:ac:44:ca:ea:af:ac:
8e:ba:69:74:a5:6b:24:bd:90:6c:7f:e6:89:cf:f3:3c:0e:ed:
b9:0e:90:ae:d2:3b:43:74:1b:57:a9:cc:2b:d5:a4:d9:1f:a5:
15:50:79:e6:bf:17:62:43:8b:ba:0f:b2:8f:43:f2:35:24:a8:
32:7d:df:65:4e:70:65:82:e9:6b:e5:13:3c:3a:ad:c4:c5:10:
2b:50:65:13:46:f2:76:be:a2:3b:6d:ab:6d:e9:5d:f7:35:6b:
f3:86:4a:53:1f:37:d6:e5:ba:0d:be:41:65:fa:40:65:de:87:
37:95:f1:b8:60:8d:de:de:a8:85:03:57:ee:8a:63:8a:73:ef:
de:2f:c3:1f:5f:5c:18:57:64:44:bd:ca:c7:97:84:47:b0:51:
54:38:48:d0:74:ae:b5:3b:9e:94:5c:fd:40:20:79:1d:d2:23:
a2:36:63:d9:ca:98:5e:b6:b3:7c:ca:2e:f7:c9:31:dd:ef:e1:
3a:10:35:d1:f4:94:71:16:4f:02:cd:17:5c:5c:ac:ff:24:a6:
de:28:b8:27:6f:63:59:54:fb:22:0f:2b:50:32:80:f8:f4:e7:
9f:dd:18:3e:ad:23:a5:c0:4f:43:b5:3d:8b:d4:66:9b:76:41:
b2:98:98:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg0VWfBfHUT5vvwZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTNlNzU5NDAtOGZmNy00MTI4LWFjMTMtNmZhMjgzNmE5
YjJiMB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk
ZDgyMDA4NjAtYzUxYS00YTc0LWJmNDktZTdmOTU1Y2EzZjVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAze6ykXrJRCljY5LvbheiuCARLks1tBeEk3My
QTKSplzBVId55ylWDNCWZTcewcBihNvoleps7Z74313Qv2mCZ8dgyhTbnuHXEb/O
05jywWJ3j3KixjEtLdsZAe503lVsF7y6enZ1Ea20sGfTOy5q1hSvCvmSZFQX2muZ
JP6BcKjdQNiAftSLVxaX1Od56xkbq+ZhViF+G5kk0ciIQvhcKFtn13+FnEVKPfZu
4vVlUEBIStYJ1HdcopyKI18O6xp5i1V3VTDKQRfqgqaQLO2jeZnOSws9hVcnTMNM
J53rX9vhPDfnhEzXGVi3B1OAteaCI+gwPHKkobxXZhpfWNVHsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO9jaeeY4h5mr83W78jt/ptbA7yyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hM2U3
NTk0MC04ZmY3LTQxMjgtYWMxMy02ZmEyODM2YTliMmIvZDExNjJiNWMtNWY1ZS0z
NmU2LThkOWQtNDE2YmJmM2ZmOGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTNlNzU5NDAtOGZmNy00MTI4LWFj
MTMtNmZhMjgzNmE5YjJiL2EzZTc1OTQwLThmZjctNDEyOC1hYzEzLTZmYTI4MzZh
OWIyYi5jcmwwHwYDVR0jBBgwFoAUtnfXS1I2CdWBxZUHALmyKsonuvgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9hM2U3NTk0MC04ZmY3LTQxMjgtYWMxMy02ZmEy
ODM2YTliMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi0DEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAECv7KwqsPXJBJDVkKxEyuqvrI66aXSlayS9kGx/5onP8zwO7bkOkK7S
O0N0G1epzCvVpNkfpRVQeea/F2JDi7oPso9D8jUkqDJ932VOcGWC6WvlEzw6rcTF
ECtQZRNG8na+ojttq23pXfc1a/OGSlMfN9blug2+QWX6QGXehzeV8bhgjd7eqIUD
V+6KY4pz794vwx9fXBhXZES9yseXhEewUVQ4SNB0rrU7npRc/UAgeR3SI6I2Y9nK
mF62s3zKLvfJMd3v4ToQNdH0lHEWTwLNF1xcrP8kpt4ouCdvY1lU+yIPK1AygPj0
55/dGD6tI6XAT0O1PYvUZpt2QbKYmBc=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:17:02 2025 by rpki-client