Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a4f7b679-d229-389d-aefc-7051497b88db.roa
File: a4f7b679-d229-389d-aefc-7051497b88db.roa (raw, json)
Hash identifier: OV2K0n0pSyDF3yX0J4pzFFkWFuEaOeBhCVrSSk5PYZQ=
Subject key identifier: CD:57:7F:11:FD:05:36:29:39:AB:EA:4C:39:AA:03:B5:DD:87:C2:3A
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F432858487CEB373543A24277EB81B900
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a4f7b679-d229-389d-aefc-7051497b88db.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 4476
IP address blocks: 142.231.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:37:35:43:a2:42:77:eb:81:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=2fe689d2-9093-4541-a621-5492dab5e77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:82:df:61:9c:b9:d2:ec:86:a7:c0:be:2a:
61:5d:16:48:31:fe:85:51:26:37:c6:6b:d8:24:a7:
28:af:ea:30:f3:6b:f8:43:9d:bb:21:cd:5f:b4:b3:
2d:8e:31:0b:c7:26:0b:5d:e8:ca:ad:87:b3:77:d3:
98:16:71:16:38:20:26:7e:28:f2:e1:d5:78:21:04:
c1:1c:ee:3a:66:bb:ad:02:08:da:7a:a4:3b:08:1e:
60:cb:22:21:b6:25:47:d6:40:c3:c8:79:63:af:9b:
91:7f:6f:c2:e1:9c:a1:5e:e8:ac:5f:39:b9:c2:79:
7b:ed:57:ac:20:72:d2:19:b1:b8:f9:59:a9:43:e8:
e5:b7:a4:10:ce:2a:ee:bf:e2:68:f5:65:aa:61:68:
20:86:5e:c5:03:82:61:1b:8c:6d:1d:b9:81:e4:ee:
17:32:be:46:89:d4:2c:1d:36:fc:f5:a5:00:5f:9f:
bf:82:f4:94:dd:0a:73:0f:81:cd:a2:96:15:e0:33:
49:ea:84:c9:6a:4f:fe:4c:d4:11:39:66:c2:2b:9c:
63:da:11:29:1a:b9:ea:f5:f6:c0:5b:31:39:ec:98:
ac:8c:4a:6c:12:c1:57:f4:98:7f:37:e6:18:ec:a2:
07:a1:fd:48:34:72:5c:a0:4b:dd:84:5d:91:ac:4a:
4b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:57:7F:11:FD:05:36:29:39:AB:EA:4C:39:AA:03:B5:DD:87:C2:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/a4f7b679-d229-389d-aefc-7051497b88db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
142.231.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c5:b8:14:cb:ec:2f:23:3b:02:bf:67:71:23:8f:f7:1c:1e:55:
55:82:6b:b1:d2:8a:bf:63:9b:8d:38:0c:12:8d:2a:0b:40:2f:
2d:14:e1:a2:90:f5:93:97:d3:47:d9:02:bd:5f:2b:cc:e8:a3:
cb:f4:d4:23:c7:a3:74:0d:34:a2:97:32:d1:1c:9a:1c:76:57:
41:f0:e8:e7:17:20:d5:59:f1:97:08:84:a5:3f:26:91:2d:18:
b4:ed:7b:79:0d:f4:f8:76:31:dc:22:5b:a6:29:d9:b1:21:02:
ba:a9:4c:40:64:a2:b7:35:15:ce:30:91:c3:dd:91:2d:07:cf:
73:db:ad:70:b5:ba:fd:5d:0a:fe:5e:18:d4:73:cd:7a:6e:1d:
49:d8:61:6b:f5:ec:b8:1c:c3:8d:38:08:1d:1c:67:30:47:f3:
b2:85:8f:a9:44:1c:dc:1e:85:29:92:1c:fe:f1:34:2a:a3:8a:
91:71:a1:12:b4:3d:6f:3b:08:67:f6:bc:73:3f:33:b5:54:66:
82:4c:38:37:da:fa:58:1a:fa:40:3c:d8:fa:79:55:dd:3d:c4:
8c:7a:8c:5e:a3:71:d9:7c:66:ec:fa:1c:97:b8:f9:ff:60:20:
05:63:e8:e8:37:af:19:04:d3:1b:5e:54:ae:68:15:f2:f9:a2:
3f:98:f7:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh86zc1Q6JCd+uBuQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk
MmZlNjg5ZDItOTA5My00NTQxLWE2MjEtNTQ5MmRhYjVlNzdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiCC32GcudLshqfAviphXRZIMf6FUSY3xmvY
JKcor+ow82v4Q527Ic1ftLMtjjELxyYLXejKrYezd9OYFnEWOCAmfijy4dV4IQTB
HO46ZrutAgjaeqQ7CB5gyyIhtiVH1kDDyHljr5uRf2/C4ZyhXuisXzm5wnl77Ves
IHLSGbG4+VmpQ+jlt6QQziruv+Jo9WWqYWgghl7FA4JhG4xtHbmB5O4XMr5GidQs
HTb89aUAX5+/gvSU3QpzD4HNopYV4DNJ6oTJak/+TNQROWbCK5xj2hEpGrnq9fbA
WzE57JisjEpsEsFX9Jh/N+YY7KIHof1INHJcoEvdhF2RrEpLIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM1XfxH9BTYpOavqTDmqA7Xdh8I6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvYTRmN2I2NzktZDIyOS0z
ODlkLWFlZmMtNzA1MTQ5N2I4OGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjucDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMW4FMvsLyM7Ar9ncSOP9xweVVWCa7HSir9jm404DBKNKgtALy0U4aKQ
9ZOX00fZAr1fK8zoo8v01CPHo3QNNKKXMtEcmhx2V0Hw6OcXINVZ8ZcIhKU/JpEt
GLTte3kN9Ph2MdwiW6Yp2bEhArqpTEBkorc1Fc4wkcPdkS0Hz3PbrXC1uv1dCv5e
GNRzzXpuHUnYYWv17Lgcw404CB0cZzBH87KFj6lEHNwehSmSHP7xNCqjipFxoRK0
PW87CGf2vHM/M7VUZoJMODfa+lga+kA82Pp5Vd09xIx6jF6jcdl8Zuz6HJe4+f9g
IAVj6Og3rxkE0xteVK5oFfL5oj+Y91A=
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:14:23 2025 by rpki-client