Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/12c2970f-b3b1-37f2-a944-d1a93c648159.roa
File: 12c2970f-b3b1-37f2-a944-d1a93c648159.roa (raw, json)
Hash identifier: b9GScH6i9mCfQrVk0x+JNNW0M8prLAHguQbizMBN2jg=
Subject key identifier: E4:AE:D0:9D:C6:DE:4D:91:10:B6:E9:FB:BB:80:80:2B:7A:AC:1C:42
Certificate issuer: /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial: 010D0C9F432858488F107B796B2DBBB65F6C7100
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/12c2970f-b3b1-37f2-a944-d1a93c648159.roa
Signing time: Thu 16 Jan 2025 02:00:39 +0000
ROA not before: Thu 16 Jan 2025 02:00:39 +0000
ROA not after: Wed 16 Apr 2025 01:00:39 +0000
asID: 31991
IP address blocks: 129.19.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8f:10:7b:79:6b:2d:bb:b6:5f:6c:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Validity
Not Before: Jan 16 02:00:39 2025 GMT
Not After : Apr 16 01:00:39 2025 GMT
Subject: CN=ee87189a-8d2c-4c7d-a2f8-cb2b0fb00f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:b9:1e:f9:28:3e:b3:08:fa:10:c8:28:00:7c:
0c:24:c3:ed:60:fb:1c:08:e4:14:50:96:0f:57:29:
45:56:ea:aa:a9:b7:42:62:0a:8e:80:55:3e:8c:19:
bf:2f:2a:84:7e:1f:9a:b3:55:05:93:56:ad:ab:a4:
3b:ef:fd:95:df:05:8b:ce:1e:df:57:f6:6c:5a:86:
53:aa:81:0c:f1:8a:2e:dd:66:3c:e1:a9:6b:f7:59:
63:99:fb:57:43:1e:49:09:44:f4:44:d9:17:73:31:
42:27:f2:ad:8f:0e:2d:30:3f:48:73:96:ea:8b:5a:
90:83:4b:e3:81:c9:1c:89:90:be:32:3f:c8:bd:aa:
53:67:19:aa:95:f8:4c:dd:b4:40:e5:a7:29:ab:6d:
ac:b1:19:90:52:d1:4d:66:72:3e:58:ee:ba:f3:4d:
69:35:03:97:b1:12:30:34:44:46:23:b2:08:a4:f7:
f7:6c:13:b5:fa:01:90:61:e5:80:8c:0b:e7:44:1d:
bc:f6:d5:87:c6:8d:e4:9f:4e:eb:65:45:c2:fb:b5:
a7:af:dd:d6:57:d3:c2:9e:13:a7:88:5c:61:e5:31:
01:07:b7:6e:14:29:26:fd:01:72:a4:44:50:ad:0b:
40:a6:ce:85:0d:63:26:6e:95:7a:84:b1:14:59:98:
b7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AE:D0:9D:C6:DE:4D:91:10:B6:E9:FB:BB:80:80:2B:7A:AC:1C:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/12c2970f-b3b1-37f2-a944-d1a93c648159.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl
X509v3 Authority Key Identifier:
keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
sbgp-ipAddrBlock: critical
IPv4:
129.19.6.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:f4:86:39:4a:1b:f9:30:46:3f:1d:48:ec:9b:6e:d8:3c:5b:
77:c0:84:13:9e:ee:14:6d:ae:f4:3c:e3:11:e5:02:2d:8d:70:
90:56:60:00:71:d6:b1:80:5d:f5:a4:d8:d6:05:54:e5:fb:9b:
09:ae:05:8d:af:1b:6f:f3:33:3f:40:cf:3e:69:57:88:2b:41:
c4:be:04:da:4a:aa:1c:39:20:8e:c9:18:ca:c4:83:32:24:72:
58:3d:14:1f:bd:b0:18:7a:6b:2d:9c:98:a1:20:ec:47:cc:db:
1a:6b:8e:c6:c2:c6:0a:05:07:e4:a8:bd:ce:4e:8c:68:2c:88:
a2:e4:1a:e0:9e:9f:d6:24:74:a3:2b:64:1f:ef:70:38:08:67:
cc:e3:46:8e:8e:44:61:cd:4e:65:0e:51:1d:b1:13:b7:c1:df:
9f:ac:7f:12:2d:37:46:fd:b1:cf:36:c9:28:21:ae:65:54:f6:
6f:f5:61:76:45:0e:66:73:bb:43:14:90:13:bb:e8:5b:5a:85:
16:33:b6:74:00:a5:83:3a:2b:a3:87:2d:1e:0d:1f:3c:e2:18:
3c:e3:40:d1:7e:06:09:59:95:9a:41:20:13:98:4a:1b:76:e8:
8e:2e:93:e3:fe:de:80:c8:7d:1c:61:73:d7:27:c3:82:ca:52:
37:b8:d2:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiPEHt5ay27tl9scQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTFkMmUzNDgtZmZhOC00NTU1LTk5ZjctMzUyNjgzNGUy
ZmQ1MB4XDTI1MDExNjAyMDAzOVoXDTI1MDQxNjAxMDAzOVowLzEtMCsGA1UEAxMk
ZWU4NzE4OWEtOGQyYy00YzdkLWEyZjgtY2IyYjBmYjAwZjZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/bke+Sg+swj6EMgoAHwMJMPtYPscCOQUUJYP
VylFVuqqqbdCYgqOgFU+jBm/LyqEfh+as1UFk1atq6Q77/2V3wWLzh7fV/ZsWoZT
qoEM8You3WY84alr91ljmftXQx5JCUT0RNkXczFCJ/Ktjw4tMD9Ic5bqi1qQg0vj
gckciZC+Mj/IvapTZxmqlfhM3bRA5acpq22ssRmQUtFNZnI+WO66801pNQOXsRIw
NERGI7IIpPf3bBO1+gGQYeWAjAvnRB289tWHxo3kn07rZUXC+7Wnr93WV9PCnhOn
iFxh5TEBB7duFCkm/QFypERQrQtAps6FDWMmbpV6hLEUWZi31wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOSu0J3G3k2RELbp+7uAgCt6rBxCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQy
ZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2ODM0ZTJmZDUvMTJjMjk3MGYtYjNiMS0z
N2YyLWE5NDQtZDFhOTNjNjQ4MTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTFkMmUzNDgtZmZhOC00NTU1LTk5
ZjctMzUyNjgzNGUyZmQ1L2ExZDJlMzQ4LWZmYTgtNDU1NS05OWY3LTM1MjY4MzRl
MmZkNS5jcmwwHwYDVR0jBBgwFoAUAxRiD+UNHG34eAbYdwwR3sALb9owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQyZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2
ODM0ZTJmZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgRMGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJH0hjlKG/kwRj8dSOybbtg8W3fAhBOe7hRtrvQ84xHlAi2NcJBWYABx
1rGAXfWk2NYFVOX7mwmuBY2vG2/zMz9Azz5pV4grQcS+BNpKqhw5II7JGMrEgzIk
clg9FB+9sBh6ay2cmKEg7EfM2xprjsbCxgoFB+Sovc5OjGgsiKLkGuCen9YkdKMr
ZB/vcDgIZ8zjRo6ORGHNTmUOUR2xE7fB35+sfxItN0b9sc82ySghrmVU9m/1YXZF
DmZzu0MUkBO76FtahRYztnQApYM6K6OHLR4NHzziGDzjQNF+BglZlZpBIBOYSht2
6I4uk+P+3oDIfRxhc9cnw4LKUje40jg=
-----END CERTIFICATE-----
Generated at Mon May 5 04:39:01 2025 by rpki-client