Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/ad644e07-d08c-3cd4-9561-0b393653ed46.roa
File: ad644e07-d08c-3cd4-9561-0b393653ed46.roa (raw, json)
Hash identifier: Au7a/toTbOJWn2nrSM43NIlRKor0z6OCnlFJt+3QeLM=
Subject key identifier: C4:18:93:53:EA:DD:08:B1:7D:2F:7A:81:5F:EA:1A:30:35:8E:AF:21
Certificate issuer: /CN=f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f
Certificate serial: 010D0C9F4328584832F02813D6AF0656862D1480
Authority key identifier: A0:0B:C0:59:A2:CE:5C:2B:20:7A:E2:90:8B:CA:DA:4E:04:82:F5:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/ad644e07-d08c-3cd4-9561-0b393653ed46.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 60171
IP address blocks: 139.64.228.0/22 maxlen: 24
2605:ba40::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:28:13:d6:af:06:56:86:2d:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=f3ffdf33-07d7-419d-9dd3-313298d955c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9f:27:c7:22:8a:38:d0:fa:4e:6d:20:39:db:
eb:5b:71:a5:ff:06:86:58:63:c1:34:5c:27:fc:ad:
c9:9d:10:1d:9a:3a:8b:10:18:83:8f:e0:eb:df:a9:
b4:0f:b5:46:a3:e3:ce:94:d8:dc:c5:2f:4f:34:1a:
21:b3:a0:5e:fb:76:76:5a:33:02:1a:6f:00:cf:7f:
05:c9:cb:5a:54:89:fd:81:19:cc:16:ef:77:93:31:
4d:01:a8:e2:60:78:73:72:47:c9:ce:d3:0c:53:20:
3f:e0:ec:c4:9b:1c:0a:9c:84:db:d5:4b:71:db:81:
29:e9:ed:8a:9d:18:b2:a8:44:37:cc:a0:91:82:33:
a5:c4:80:79:5d:ba:4d:c8:39:af:55:ce:46:4a:0c:
ba:42:ac:01:df:77:2b:06:96:2d:23:86:9f:b3:cd:
17:e6:3c:ae:f2:c2:44:57:87:cb:36:6e:8b:b6:04:
b8:a8:4a:a2:f4:87:fa:f5:5d:3f:db:ae:a3:70:0a:
72:5a:18:3c:b1:04:38:3b:85:ee:a5:ed:d5:e1:9c:
75:09:52:97:fb:8b:57:9b:85:e0:4e:f9:2d:ee:b0:
54:d3:05:6f:83:c8:20:d8:ce:11:74:29:2a:02:37:
3f:fc:6c:a3:e9:d9:ba:3f:78:8c:8d:52:6f:77:89:
98:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:18:93:53:EA:DD:08:B1:7D:2F:7A:81:5F:EA:1A:30:35:8E:AF:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/ad644e07-d08c-3cd4-9561-0b393653ed46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.crl
X509v3 Authority Key Identifier:
keyid:A0:0B:C0:59:A2:CE:5C:2B:20:7A:E2:90:8B:CA:DA:4E:04:82:F5:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.cer
sbgp-ipAddrBlock: critical
IPv4:
139.64.228.0/22
IPv6:
2605:ba40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:6a:0c:35:a9:c7:c9:6f:33:0c:9e:87:09:d1:a5:b6:d9:fd:
d3:41:00:bc:df:a2:09:c5:9b:e4:83:4c:29:7d:cf:54:da:53:
a1:d9:af:f0:18:ac:13:75:10:e3:bf:b7:f2:36:89:81:b9:bf:
fe:e9:9c:62:ed:31:36:5f:56:fd:21:2a:db:a7:e7:a6:99:03:
49:6a:2f:20:41:c0:2c:6e:8a:79:2f:2b:62:97:fe:ad:e1:ca:
d3:69:60:12:ee:88:26:ed:1c:96:5a:93:36:c5:a4:50:b1:17:
36:89:76:24:1d:4d:10:20:9b:44:fd:a3:ff:bc:fc:c3:d3:d7:
0b:fd:f8:91:86:99:69:48:5e:13:78:0f:db:fc:74:df:0c:da:
b9:bb:4f:49:28:0a:9a:98:95:a9:5b:1d:37:94:db:5e:b2:f4:
e9:37:3f:b1:de:43:3b:36:e3:25:ca:ba:67:f7:f2:33:ec:1e:
fe:71:ab:37:d3:cf:e8:07:38:e8:51:5e:7d:5e:27:e5:c0:83:
24:56:30:c6:ab:9a:8d:20:41:db:7b:69:65:c3:ec:78:38:d0:
a4:25:ad:56:81:6c:f7:e2:0c:6f:45:f2:ee:4b:a3:ed:65:2b:
ee:ee:b1:35:21:c8:1c:9e:a2:ac:e1:ca:75:20:0d:64:00:6f:
72:6c:09:7d
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEgy8CgT1q8GVoYtFIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjNiZjZhYTItN2I3Zi00NmI0LWJkZjItZGQ0ZDA3NWUy
NjZmMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
ZjNmZmRmMzMtMDdkNy00MTlkLTlkZDMtMzEzMjk4ZDk1NWMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv58nxyKKOND6Tm0gOdvrW3Gl/waGWGPBNFwn
/K3JnRAdmjqLEBiDj+Dr36m0D7VGo+POlNjcxS9PNBohs6Be+3Z2WjMCGm8Az38F
yctaVIn9gRnMFu93kzFNAajiYHhzckfJztMMUyA/4OzEmxwKnITb1Utx24Ep6e2K
nRiyqEQ3zKCRgjOlxIB5XbpNyDmvVc5GSgy6QqwB33crBpYtI4afs80X5jyu8sJE
V4fLNm6LtgS4qEqi9If69V0/266jcApyWhg8sQQ4O4Xupe3V4Zx1CVKX+4tXm4Xg
Tvkt7rBU0wVvg8gg2M4RdCkqAjc//Gyj6dm6P3iMjVJvd4mY3wIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFMQYk1Pq3QixfS96gV/qGjA1jq8hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jm
NmFhMi03YjdmLTQ2YjQtYmRmMi1kZDRkMDc1ZTI2NmYvYWQ2NDRlMDctZDA4Yy0z
Y2Q0LTk1NjEtMGIzOTM2NTNlZDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiZjZhYTItN2I3Zi00NmI0LWJk
ZjItZGQ0ZDA3NWUyNjZmL2YzYmY2YWEyLTdiN2YtNDZiNC1iZGYyLWRkNGQwNzVl
MjY2Zi5jcmwwHwYDVR0jBBgwFoAUoAvAWaLOXCsgeuKQi8raTgSC9UkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JmNmFhMi03YjdmLTQ2YjQtYmRmMi1kZDRk
MDc1ZTI2NmYuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCi0DkMA0E
AgACMAcDBQAmBbpAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBADNqDDWpx8lvMwyehwnRpbbZ/dNBALzfognF
m+SDTCl9z1TaU6HZr/AYrBN1EOO/t/I2iYG5v/7pnGLtMTZfVv0hKtun56aZA0lq
LyBBwCxuinkvK2KX/q3hytNpYBLuiCbtHJZakzbFpFCxFzaJdiQdTRAgm0T9o/+8
/MPT1wv9+JGGmWlIXhN4D9v8dN8M2rm7T0koCpqYlalbHTeU216y9Ok3P7HeQzs2
4yXKumf38jPsHv5xqzfTz+gHOOhRXn1eJ+XAgyRWMMarmo0gQdt7aWXD7Hg40KQl
rVaBbPfiDG9F8u5Lo+1lK+7usTUhyByeoqzhynUgDWQAb3JsCX0=
-----END CERTIFICATE-----
Generated at Sat Apr 26 11:15:12 2025 by rpki-client