Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ee3d27c0-f580-3da0-90ff-375cf50d9db0.roa
File: ee3d27c0-f580-3da0-90ff-375cf50d9db0.roa (raw, json)
Hash identifier: ioMfwXrQiCFPZpTqggJXy3py5PF5p8dKCNCcSsvqPtQ=
Subject key identifier: 96:82:D6:AA:D8:BE:FD:D4:32:4F:D9:D2:92:BF:9F:EF:BB:F5:88:D5
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F432858487CEB3A6B18FF46B7B4D6E300
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ee3d27c0-f580-3da0-90ff-375cf50d9db0.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 393249
IP address blocks: 142.231.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:3a:6b:18:ff:46:b7:b4:d6:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=9149d6c3-6457-4998-a37b-406e590aeb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:77:ca:4c:5d:8c:8c:84:01:5b:91:61:7d:bc:
1c:bc:35:14:48:a5:22:d6:2a:b7:68:52:e4:9a:d7:
8e:7b:76:0c:56:37:21:09:e3:44:84:b1:7a:98:fe:
7f:d1:9b:10:40:de:8a:59:66:f5:f1:7b:ef:2d:9a:
fb:8f:74:2b:31:98:db:09:08:aa:4e:0f:16:2a:71:
3b:38:b8:32:f2:5f:a0:70:19:2c:2e:24:ab:42:da:
31:7a:fc:33:2d:ea:67:fe:e5:39:b6:a9:97:e7:de:
49:27:37:7d:48:f5:b0:6b:4b:19:bf:88:e3:c8:62:
fe:f3:a6:0a:8b:cb:37:da:f9:fc:02:46:3e:bb:4c:
5b:23:e1:a3:be:91:1d:b0:5d:55:7a:67:f3:d6:29:
e0:a2:59:eb:71:bb:96:25:4f:27:b0:05:b8:f6:05:
c3:11:05:32:a5:cc:8a:62:b0:94:13:1f:cd:bd:e2:
c8:7c:d2:13:98:b9:7a:70:3a:62:50:a7:44:46:43:
77:b6:87:14:10:16:40:af:ce:52:94:04:6e:77:88:
09:8e:86:d1:39:75:75:97:be:65:1c:ea:b1:35:87:
5d:b5:0c:29:e3:3f:92:d9:66:2a:cc:02:9d:a1:91:
ae:55:24:b8:a1:25:12:6f:80:f0:53:ac:fe:c8:44:
e3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:82:D6:AA:D8:BE:FD:D4:32:4F:D9:D2:92:BF:9F:EF:BB:F5:88:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ee3d27c0-f580-3da0-90ff-375cf50d9db0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
142.231.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:39:dc:4a:99:85:9b:45:18:54:e4:60:c3:98:1f:22:31:18:
e3:79:1e:f2:21:a3:4b:52:d5:b4:8b:36:6c:e8:e7:58:a6:d0:
46:dd:b1:74:c1:96:4f:f8:b4:4b:e2:c6:b0:f7:a9:f7:da:25:
7e:53:2b:4e:8c:df:5d:de:8c:1a:bb:07:8a:b2:1c:c4:98:18:
17:9f:5e:f7:15:26:40:12:4f:c3:06:be:13:8f:ad:b9:78:80:
45:2a:02:8e:35:aa:3a:f2:be:f8:71:7f:0c:e6:1e:d3:7b:bc:
5e:9c:c4:a1:1b:1e:60:69:bb:73:f8:b7:a5:a8:c7:65:07:89:
75:c3:be:27:e0:84:17:ab:16:35:c0:69:ec:73:9c:6c:a6:81:
46:ab:2e:c1:4a:b0:75:20:23:f2:00:87:03:3c:7c:1d:57:cc:
3a:5e:b5:ef:61:ab:42:2f:89:65:b8:dc:2a:69:29:c5:4e:3c:
97:0d:e6:2f:be:8c:48:1c:40:f5:65:fc:9c:2e:30:4c:60:5d:
aa:46:bb:6c:3e:51:4a:e3:15:08:ef:63:bb:5f:df:3a:d9:11:
59:f4:b7:44:c8:0e:86:44:04:71:07:ce:05:65:31:3f:95:5e:
9e:58:3b:a8:e0:5d:6f:a9:d2:0f:5c:4b:ef:a4:85:ee:cd:65:
14:0d:62:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh86zprGP9Gt7TW4wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk
OTE0OWQ2YzMtNjQ1Ny00OTk4LWEzN2ItNDA2ZTU5MGFlYjM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunfKTF2MjIQBW5FhfbwcvDUUSKUi1iq3aFLk
mteOe3YMVjchCeNEhLF6mP5/0ZsQQN6KWWb18XvvLZr7j3QrMZjbCQiqTg8WKnE7
OLgy8l+gcBksLiSrQtoxevwzLepn/uU5tqmX595JJzd9SPWwa0sZv4jjyGL+86YK
i8s32vn8AkY+u0xbI+GjvpEdsF1Vemfz1ingolnrcbuWJU8nsAW49gXDEQUypcyK
YrCUEx/NveLIfNITmLl6cDpiUKdERkN3tocUEBZAr85SlARud4gJjobROXV1l75l
HOqxNYddtQwp4z+S2WYqzAKdoZGuVSS4oSUSb4DwU6z+yETjyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJaC1qrYvv3UMk/Z0pK/n++79YjVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvZWUzZDI3YzAtZjU4MC0z
ZGEwLTkwZmYtMzc1Y2Y1MGQ5ZGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjucUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG453EqZhZtFGFTkYMOYHyIxGON5HvIho0tS1bSLNmzo51im0EbdsXTB
lk/4tEvixrD3qffaJX5TK06M313ejBq7B4qyHMSYGBefXvcVJkAST8MGvhOPrbl4
gEUqAo41qjryvvhxfwzmHtN7vF6cxKEbHmBpu3P4t6Wox2UHiXXDvifghBerFjXA
aexznGymgUarLsFKsHUgI/IAhwM8fB1XzDpete9hq0IviWW43CppKcVOPJcN5i++
jEgcQPVl/JwuMExgXapGu2w+UUrjFQjvY7tf3zrZEVn0t0TIDoZEBHEHzgVlMT+V
Xp5YO6jgXW+p0g9cS++khe7NZRQNYq8=
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:02:36 2025 by rpki-client