Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fcda63d6-4746-4a8d-9398-5f81cd3bc46e/6cf76152-779e-3ae1-beeb-3bb9792ba1ad.roa
File: 6cf76152-779e-3ae1-beeb-3bb9792ba1ad.roa (raw, json)
Hash identifier: iVp8mqbu9s4kcuJdRZX4mqGYT/85gDhQ5NsFa4uKVMY=
Subject key identifier: CC:F7:A2:9E:FB:3F:CE:22:AF:B3:6D:A1:41:E1:A6:6D:12:3E:92:FB
Certificate issuer: /CN=fcda63d6-4746-4a8d-9398-5f81cd3bc46e
Certificate serial: 010D0C9F43285848705AF6D0D68CEEAC448C7D80
Authority key identifier: EF:46:59:72:29:1A:89:CE:07:82:4C:54:37:08:B8:A6:36:F1:AC:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fcda63d6-4746-4a8d-9398-5f81cd3bc46e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fcda63d6-4746-4a8d-9398-5f81cd3bc46e/6cf76152-779e-3ae1-beeb-3bb9792ba1ad.roa
Signing time: Sun 05 Jan 2025 02:00:39 +0000
ROA not before: Sun 05 Jan 2025 02:00:39 +0000
ROA not after: Sat 05 Apr 2025 01:00:39 +0000
asID: 53356
IP address blocks: 140.235.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:70:5a:f6:d0:d6:8c:ee:ac:44:8c:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcda63d6-4746-4a8d-9398-5f81cd3bc46e
Validity
Not Before: Jan 5 02:00:39 2025 GMT
Not After : Apr 5 01:00:39 2025 GMT
Subject: CN=48649c81-70e9-4b17-9d30-6f1d5efcf4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fc:6b:0b:c6:82:53:e2:8b:c3:ab:0d:bd:8b:
e1:da:4f:c4:7c:19:2c:f0:ee:65:ef:60:2a:a8:0e:
ad:06:50:46:c6:18:26:38:8f:78:60:23:7d:80:0b:
02:3d:3a:2f:43:e0:a9:ca:f9:b1:5b:50:56:c4:a0:
4a:22:76:1b:e5:b4:b6:36:eb:5d:00:cc:f3:1d:bd:
93:d1:2f:09:89:61:35:b2:76:d4:1d:dc:d8:5d:ff:
12:dd:0b:6e:56:ac:ba:2f:39:4f:1e:15:f6:ba:34:
a0:c1:06:78:f3:bf:44:e8:76:58:48:82:9a:85:18:
dd:a2:c1:ab:01:02:67:e2:06:92:6f:78:5a:65:76:
f5:2d:d2:ab:8b:bd:cf:b0:bf:bf:3d:7d:af:ab:05:
22:28:f2:c4:01:e4:4a:f8:0c:8c:d5:d3:7d:2d:06:
6e:eb:d6:5d:18:ee:72:0a:c0:f5:18:22:f5:d9:0e:
86:ac:75:74:0f:63:c0:cb:f6:cf:9a:a4:e1:e8:18:
9a:29:23:d4:2c:32:f4:96:f6:26:52:d7:cc:ed:9f:
21:4e:70:0c:01:49:70:62:c8:5d:3e:17:73:c3:5e:
95:77:17:71:62:8e:ed:66:66:dc:a1:0c:ba:e5:1a:
2f:fd:ae:dd:cc:c5:7b:6f:c1:9c:27:96:42:51:41:
b7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F7:A2:9E:FB:3F:CE:22:AF:B3:6D:A1:41:E1:A6:6D:12:3E:92:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fcda63d6-4746-4a8d-9398-5f81cd3bc46e/6cf76152-779e-3ae1-beeb-3bb9792ba1ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fcda63d6-4746-4a8d-9398-5f81cd3bc46e/fcda63d6-4746-4a8d-9398-5f81cd3bc46e.crl
X509v3 Authority Key Identifier:
keyid:EF:46:59:72:29:1A:89:CE:07:82:4C:54:37:08:B8:A6:36:F1:AC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fcda63d6-4746-4a8d-9398-5f81cd3bc46e.cer
sbgp-ipAddrBlock: critical
IPv4:
140.235.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:3f:d1:52:c7:99:47:b3:2b:50:5f:fb:99:92:72:f3:b0:25:
4b:aa:5d:3e:a6:e1:29:7b:10:8f:fc:c1:bc:8b:90:02:4a:6f:
fe:61:7d:53:71:2a:d8:82:7f:3d:90:66:db:b7:6a:33:ca:1e:
53:bd:37:f5:10:df:57:68:59:ea:37:33:20:c3:d4:c7:be:78:
0a:a3:24:a3:15:e3:06:ec:5d:99:93:86:aa:9a:c0:b3:44:56:
0d:74:f6:93:30:cc:87:0f:73:9b:7f:b8:8a:66:28:f7:fd:75:
8c:13:21:e4:a4:29:5c:e7:b4:d6:cb:fd:59:f7:2b:bd:99:6b:
1d:85:24:e8:5f:2a:6b:ce:73:47:03:b1:17:bc:11:ce:78:12:
23:6f:e2:47:47:2f:54:80:b9:49:fa:6c:05:ef:51:06:dc:3a:
08:83:51:d9:df:8e:47:89:e8:7c:33:b6:3f:cc:36:b4:e9:41:
6d:f6:28:14:b5:41:aa:bc:40:0b:cc:1c:69:08:ac:91:39:b7:
97:ec:79:e4:3f:11:05:e8:c6:8d:7c:67:6b:04:a2:71:08:79:
72:1f:f1:64:92:b0:58:78:d6:4b:f7:a3:b3:a9:f2:5b:82:fb:
36:d4:3b:66:a3:af:54:4b:c5:73:90:f2:ce:50:dc:0e:03:76:
f9:9e:5a:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhwWvbQ1ozurESMfYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmNkYTYzZDYtNDc0Ni00YThkLTkzOTgtNWY4MWNkM2Jj
NDZlMB4XDTI1MDEwNTAyMDAzOVoXDTI1MDQwNTAxMDAzOVowLzEtMCsGA1UEAxMk
NDg2NDljODEtNzBlOS00YjE3LTlkMzAtNmYxZDVlZmNmNGQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfxrC8aCU+KLw6sNvYvh2k/EfBks8O5l72Aq
qA6tBlBGxhgmOI94YCN9gAsCPTovQ+CpyvmxW1BWxKBKInYb5bS2NutdAMzzHb2T
0S8JiWE1snbUHdzYXf8S3QtuVqy6LzlPHhX2ujSgwQZ4879E6HZYSIKahRjdosGr
AQJn4gaSb3haZXb1LdKri73PsL+/PX2vqwUiKPLEAeRK+AyM1dN9LQZu69ZdGO5y
CsD1GCL12Q6GrHV0D2PAy/bPmqTh6BiaKSPULDL0lvYmUtfM7Z8hTnAMAUlwYshd
Phdzw16VdxdxYo7tZmbcoQy65Rov/a7dzMV7b8GcJ5ZCUUG33QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMz3op77P84ir7NtoUHhpm0SPpL7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mY2Rh
NjNkNi00NzQ2LTRhOGQtOTM5OC01ZjgxY2QzYmM0NmUvNmNmNzYxNTItNzc5ZS0z
YWUxLWJlZWItM2JiOTc5MmJhMWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmNkYTYzZDYtNDc0Ni00YThkLTkz
OTgtNWY4MWNkM2JjNDZlL2ZjZGE2M2Q2LTQ3NDYtNGE4ZC05Mzk4LTVmODFjZDNi
YzQ2ZS5jcmwwHwYDVR0jBBgwFoAU70ZZcikaic4HgkxUNwi4pjbxrH0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mY2RhNjNkNi00NzQ2LTRhOGQtOTM5OC01Zjgx
Y2QzYmM0NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOuQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABo/0VLHmUezK1Bf+5mScvOwJUuqXT6m4Sl7EI/8wbyLkAJKb/5hfVNx
KtiCfz2QZtu3ajPKHlO9N/UQ31doWeo3MyDD1Me+eAqjJKMV4wbsXZmThqqawLNE
Vg109pMwzIcPc5t/uIpmKPf9dYwTIeSkKVzntNbL/Vn3K72Zax2FJOhfKmvOc0cD
sRe8Ec54EiNv4kdHL1SAuUn6bAXvUQbcOgiDUdnfjkeJ6Hwztj/MNrTpQW32KBS1
Qaq8QAvMHGkIrJE5t5fseeQ/EQXoxo18Z2sEonEIeXIf8WSSsFh41kv3o7Op8luC
+zbUO2ajr1RLxXOQ8s5Q3A4DdvmeWo0=
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:19:33 2025 by rpki-client