Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/84c6b55b-d903-33e7-a64f-292b8c3f765b.roa
File: 84c6b55b-d903-33e7-a64f-292b8c3f765b.roa (raw, json)
Hash identifier: ZC4P05Re2bF0UE2yPyiFjNpcWYAZ5p/LcvHA4ETwM9I=
Subject key identifier: DD:05:EF:E7:9F:EF:68:3E:3F:D8:26:3A:4C:AD:5E:A4:E9:27:F6:F6
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F432858487CEB3A3F284E3F3684143AC0
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/84c6b55b-d903-33e7-a64f-292b8c3f765b.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 393249
IP address blocks: 128.189.96.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:3a:3f:28:4e:3f:36:84:14:3a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=7340c7d5-3dc9-419d-b8b7-6f1623418523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d9:76:17:48:f1:f1:f5:c5:25:ad:90:d5:92:
b7:8b:f5:23:6c:2c:fd:da:ef:d9:f3:18:7a:f5:fc:
70:50:9b:f4:e4:9c:4d:0e:77:a3:66:18:51:4f:c9:
b5:9d:42:87:99:af:f1:53:57:5c:8e:62:47:ad:ad:
f2:f3:4d:86:70:87:1c:45:97:bb:eb:8e:ed:c1:45:
48:cf:01:16:8f:d2:f3:22:f6:1b:65:40:92:39:6f:
4e:e3:54:f6:ab:33:51:f8:0e:10:f8:d3:02:f8:b9:
fc:e8:7d:82:3c:d9:98:59:89:bf:23:26:33:85:73:
9f:c3:b9:24:a4:8f:a3:d6:31:4b:62:e2:33:75:69:
95:e8:0e:49:31:54:41:79:fb:b8:17:cb:3a:c1:91:
9f:b9:9f:47:61:2d:ae:cd:69:78:5e:7b:11:85:1a:
e0:7c:c8:61:0f:7d:f0:91:f8:a5:86:56:4c:cf:d8:
ec:79:ac:35:eb:c5:e9:a0:d9:c9:bc:cd:db:cc:88:
51:cd:50:6e:33:5b:e9:ad:3c:16:bd:b6:eb:cc:42:
6d:1b:a3:9d:d5:cc:d8:98:94:55:6d:02:5d:8c:cc:
cc:9b:88:28:a4:2d:6e:5d:07:b6:fe:a5:13:b1:70:
e3:65:3e:50:c4:0c:5b:c8:1f:a2:52:20:f2:d1:59:
02:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:05:EF:E7:9F:EF:68:3E:3F:D8:26:3A:4C:AD:5E:A4:E9:27:F6:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/84c6b55b-d903-33e7-a64f-292b8c3f765b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
128.189.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:87:70:19:b0:3c:87:80:70:ff:c4:31:19:23:51:e7:88:ee:
51:8d:9d:2b:06:d4:0e:a2:6d:15:91:fe:00:09:d8:b5:11:29:
79:52:52:c6:68:85:06:25:14:71:13:87:26:bb:be:0c:c1:e7:
a1:70:e9:93:65:23:7d:bb:1e:e6:a3:4f:a1:00:83:87:de:75:
ad:3e:1a:b7:fd:a6:09:aa:cf:60:44:22:d9:1b:47:02:17:a7:
bb:1e:e4:61:64:41:0f:b6:cc:81:8d:63:4c:e1:d2:e1:1e:9b:
93:79:f2:86:5d:de:bb:a0:36:8f:9b:78:43:ca:d1:59:33:ed:
1c:78:9e:ef:95:7d:6b:0d:0a:df:56:7b:46:fa:93:42:2a:be:
31:6a:8a:b2:76:34:4d:7b:1d:c8:5d:f0:3a:c7:23:85:2c:94:
7b:da:fd:eb:6b:85:ba:88:73:7f:30:ed:ff:bd:e4:a3:bc:73:
ca:60:71:17:8b:a6:a9:0d:fe:a6:b9:b5:1a:90:b2:0b:3b:1d:
38:08:d5:8c:b3:d3:06:7f:19:5e:d3:15:5d:b9:37:9b:5e:15:
bf:e5:37:9a:04:08:e4:b5:97:ef:af:4d:8c:75:cf:09:d6:06:
27:cd:62:5e:10:76:6a:c2:5f:a7:90:51:a4:40:19:85:15:45:
f7:9a:9f:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh86zo/KE4/NoQUOsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk
NzM0MGM3ZDUtM2RjOS00MTlkLWI4YjctNmYxNjIzNDE4NTIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdl2F0jx8fXFJa2Q1ZK3i/UjbCz92u/Z8xh6
9fxwUJv05JxNDnejZhhRT8m1nUKHma/xU1dcjmJHra3y802GcIccRZe7647twUVI
zwEWj9LzIvYbZUCSOW9O41T2qzNR+A4Q+NMC+Ln86H2CPNmYWYm/IyYzhXOfw7kk
pI+j1jFLYuIzdWmV6A5JMVRBefu4F8s6wZGfuZ9HYS2uzWl4XnsRhRrgfMhhD33w
kfilhlZMz9jseaw168XpoNnJvM3bzIhRzVBuM1vprTwWvbbrzEJtG6Od1czYmJRV
bQJdjMzMm4gopC1uXQe2/qUTsXDjZT5QxAxbyB+iUiDy0VkCPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN0F7+ef72g+P9gmOkytXqTpJ/b2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvODRjNmI1NWItZDkwMy0z
M2U3LWE2NGYtMjkyYjhjM2Y3NjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgL1gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKSHcBmwPIeAcP/EMRkjUeeI7lGNnSsG1A6ibRWR/gAJ2LURKXlSUsZo
hQYlFHEThya7vgzB56Fw6ZNlI327HuajT6EAg4feda0+Grf9pgmqz2BEItkbRwIX
p7se5GFkQQ+2zIGNY0zh0uEem5N58oZd3rugNo+beEPK0Vkz7Rx4nu+VfWsNCt9W
e0b6k0IqvjFqirJ2NE17Hchd8DrHI4UslHva/etrhbqIc38w7f+95KO8c8pgcReL
pqkN/qa5tRqQsgs7HTgI1Yyz0wZ/GV7TFV25N5teFb/lN5oECOS1l++vTYx1zwnW
BifNYl4QdmrCX6eQUaRAGYUVRfeanwI=
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:01:19 2025 by rpki-client