Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960/8d529a3d-d8c4-36a2-adda-3b87ee94eb48.roa
File: 8d529a3d-d8c4-36a2-adda-3b87ee94eb48.roa (raw, json)
Hash identifier: nY5psLm14lJLOBt4j3B1+ZrXolbPfQYkHNHAX2aMkZ0=
Subject key identifier: CE:4B:2D:F4:BC:93:5F:EB:CC:9C:8F:1D:E1:22:CA:7B:92:A9:5A:BF
Certificate issuer: /CN=4d86c782-c9fe-4446-9e6e-7812e6590960
Certificate serial: 010D0C9F432858480EA514F871C08F7F37A73280
Authority key identifier: E1:63:39:90:FC:7E:AA:1E:34:7C:53:0F:F3:56:4C:2F:1B:91:07:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960/8d529a3d-d8c4-36a2-adda-3b87ee94eb48.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 62989
IP address blocks: 144.80.0.0/16 maxlen: 24
192.150.225.0/24 maxlen: 24
192.153.123.0/24 maxlen: 24
192.231.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:14:f8:71:c0:8f:7f:37:a7:32:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d86c782-c9fe-4446-9e6e-7812e6590960
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=a0666cd1-3693-43d8-8155-d57b8d64aee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5c:d7:e9:05:07:85:e3:61:c7:74:83:3c:bb:
15:80:a0:3e:1a:c4:39:a7:c4:70:b3:45:29:1f:f1:
6e:71:5a:c3:c6:8c:0f:2f:db:a2:91:a7:ea:ab:b3:
c7:09:95:ab:82:7b:7f:61:b5:3a:b5:bf:f5:72:31:
7e:d1:07:d8:19:e4:63:25:02:6f:39:09:34:f4:b6:
70:83:76:d0:bc:c2:f6:4d:73:3e:b7:ff:9a:6e:3f:
7e:ff:42:ca:15:d1:ff:ad:b8:6e:48:43:6e:ee:24:
a0:67:82:d5:06:c4:a5:68:90:9e:8e:5c:54:26:31:
72:03:1c:4a:c9:07:3a:6c:37:18:e4:2e:c1:fe:58:
fe:03:af:6a:5e:63:d3:2a:3f:94:59:ab:81:95:9b:
b2:f3:9b:70:a4:05:f5:45:ef:e5:97:e7:93:63:a9:
72:bb:a4:2c:a5:ba:18:10:3f:32:83:54:db:b4:f9:
06:c3:71:2c:fb:95:49:f7:6b:7c:80:61:55:58:bb:
bd:56:af:7e:c3:65:9f:4e:0b:74:e8:34:c6:b2:1b:
08:83:90:fa:31:0e:5c:66:60:59:65:82:3f:2f:b8:
c1:c8:8f:55:53:a1:2c:f4:15:69:83:8e:2f:2f:4e:
79:2e:c0:66:2b:68:60:e1:66:33:95:52:d7:d4:b1:
5b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4B:2D:F4:BC:93:5F:EB:CC:9C:8F:1D:E1:22:CA:7B:92:A9:5A:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960/8d529a3d-d8c4-36a2-adda-3b87ee94eb48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960/4d86c782-c9fe-4446-9e6e-7812e6590960.crl
X509v3 Authority Key Identifier:
keyid:E1:63:39:90:FC:7E:AA:1E:34:7C:53:0F:F3:56:4C:2F:1B:91:07:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960.cer
sbgp-ipAddrBlock: critical
IPv4:
144.80.0.0/16
192.150.225.0/24
192.153.123.0/24
192.231.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:61:7d:c4:3d:51:28:96:b8:13:1f:e1:6e:3b:63:98:c0:2a:
f8:55:23:19:fa:71:35:d3:0d:3a:c4:1e:09:0a:9f:5e:67:12:
84:b6:38:73:2f:2d:34:d7:f6:f6:1d:ed:df:93:31:84:68:f0:
6b:89:7f:ea:df:42:38:bf:d0:34:00:e6:84:fd:0f:fe:32:dd:
a6:32:e6:c2:28:ea:2f:ec:05:11:0a:9c:fa:8f:25:9f:6d:01:
38:a5:68:95:48:b8:57:64:80:73:7c:e2:31:ed:1e:ca:22:36:
5f:da:0f:ed:a5:34:3a:5a:11:d8:d1:ff:9f:e7:cc:fb:52:fc:
bd:5b:63:22:51:a6:47:07:e9:96:a3:b1:64:b7:12:44:eb:8d:
e1:4a:1f:69:4d:f8:bc:fa:05:63:4b:84:3d:e4:96:ee:68:16:
f4:b7:fb:fd:f7:a4:c7:68:cb:77:95:e1:3d:f2:1e:a1:52:46:
4f:ea:44:45:4e:dc:43:d6:09:ee:32:4e:65:09:4e:d6:a7:66:
1c:77:8b:b3:94:1f:d6:f2:d9:ec:40:48:44:5a:79:85:cb:8b:
07:24:73:41:70:c3:83:70:5d:8d:9e:f2:80:1a:47:96:57:e2:
7f:14:8d:4d:3b:78:b1:c5:9b:a0:53:36:de:0f:1c:ec:4e:b4:
d7:43:ff:9f
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEgOpRT4ccCPfzenMoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGQ4NmM3ODItYzlmZS00NDQ2LTllNmUtNzgxMmU2NTkw
OTYwMB4XDTI0MTIwMTAyMDAzOVoXDTI1MDMwMTAyMDAzOVowLzEtMCsGA1UEAxMk
YTA2NjZjZDEtMzY5My00M2Q4LTgxNTUtZDU3YjhkNjRhZWU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVzX6QUHheNhx3SDPLsVgKA+GsQ5p8Rws0Up
H/FucVrDxowPL9uikafqq7PHCZWrgnt/YbU6tb/1cjF+0QfYGeRjJQJvOQk09LZw
g3bQvML2TXM+t/+abj9+/0LKFdH/rbhuSENu7iSgZ4LVBsSlaJCejlxUJjFyAxxK
yQc6bDcY5C7B/lj+A69qXmPTKj+UWauBlZuy85twpAX1Re/ll+eTY6lyu6QspboY
ED8yg1TbtPkGw3Es+5VJ92t8gGFVWLu9Vq9+w2WfTgt06DTGshsIg5D6MQ5cZmBZ
ZYI/L7jByI9VU6Es9BVpg44vL055LsBmK2hg4WYzlVLX1LFbIwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFM5LLfS8k1/rzJyPHeEiynuSqVq/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80ZDg2
Yzc4Mi1jOWZlLTQ0NDYtOWU2ZS03ODEyZTY1OTA5NjAvOGQ1MjlhM2QtZDhjNC0z
NmEyLWFkZGEtM2I4N2VlOTRlYjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGQ4NmM3ODItYzlmZS00NDQ2LTll
NmUtNzgxMmU2NTkwOTYwLzRkODZjNzgyLWM5ZmUtNDQ0Ni05ZTZlLTc4MTJlNjU5
MDk2MC5jcmwwHwYDVR0jBBgwFoAU4WM5kPx+qh40fFMP81ZMLxuRB0gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80ZDg2Yzc4Mi1jOWZlLTQ0NDYtOWU2ZS03ODEy
ZTY1OTA5NjAuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIAATAXAwMAkFADBADA
luEDBADAmXsDBADA59wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARWF9xD1RKJa4Ex/hbjtjmMAq+FUjGfpx
NdMNOsQeCQqfXmcShLY4cy8tNNf29h3t35MxhGjwa4l/6t9COL/QNADmhP0P/jLd
pjLmwijqL+wFEQqc+o8ln20BOKVolUi4V2SAc3ziMe0eyiI2X9oP7aU0OloR2NH/
n+fM+1L8vVtjIlGmRwfplqOxZLcSROuN4UofaU34vPoFY0uEPeSW7mgW9Lf7/fek
x2jLd5XhPfIeoVJGT+pERU7cQ9YJ7jJOZQlO1qdmHHeLs5Qf1vLZ7EBIRFp5hcuL
ByRzQXDDg3BdjZ7ygBpHllfifxSNTTt4scWboFM23g8c7E6010P/nw==
-----END CERTIFICATE-----
Generated at Mon May 12 13:46:47 2025 by rpki-client