Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/194a2536-f5c7-30fa-a3f2-891677b761c0.roa
File: 194a2536-f5c7-30fa-a3f2-891677b761c0.roa (raw, json)
Hash identifier: RlOrH2mKTup/DQcTNPbnhgsdNuMnHKJ85sNGkFGixfI=
Subject key identifier: 59:87:25:3F:27:50:7D:03:AC:3C:64:67:B4:AE:62:BD:B5:04:5F:65
Certificate issuer: /CN=0e43d693-397f-4f90-96eb-2da9e8465ff5
Certificate serial: 010D0C9F432858485CD02D79D4234F5624E770C0
Authority key identifier: 37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/194a2536-f5c7-30fa-a3f2-891677b761c0.roa
Signing time: Sun 29 Dec 2024 02:00:39 +0000
ROA not before: Sun 29 Dec 2024 02:00:39 +0000
ROA not after: Sat 29 Mar 2025 01:00:39 +0000
asID: 401015
IP address blocks: 140.221.128.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5c:d0:2d:79:d4:23:4f:56:24:e7:70:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e43d693-397f-4f90-96eb-2da9e8465ff5
Validity
Not Before: Dec 29 02:00:39 2024 GMT
Not After : Mar 29 01:00:39 2025 GMT
Subject: CN=6155fb51-a97c-4714-b55b-77090145d91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:54:dc:27:a8:90:a3:39:0c:0e:71:ee:c3:59:
3d:c0:6d:0c:6a:ff:92:56:99:9d:bc:19:ee:86:2b:
4c:b1:1c:f2:7f:c1:a8:ea:b0:7e:a7:29:ed:1b:f5:
36:31:f8:ff:d9:b0:fc:d0:26:cf:4b:83:1f:d7:0b:
9f:03:7f:1b:8f:b0:7a:74:ea:6e:25:22:67:ca:35:
da:56:62:08:00:25:6b:da:4e:b4:08:03:16:b8:57:
7b:3c:4d:f0:18:5c:3d:06:3b:bc:30:07:15:fc:8f:
23:d6:38:e4:c6:42:1d:ee:5a:a4:3b:96:4c:b2:d6:
d1:10:21:2b:bc:ef:12:6c:32:a9:95:b8:f0:1c:35:
a3:95:75:22:98:cd:77:19:34:61:bf:68:4a:b8:fd:
f1:0a:de:07:f9:58:37:ba:fa:82:49:92:ea:f1:dc:
85:d4:dc:c1:93:36:54:17:c2:98:79:8b:05:05:8a:
df:ac:94:93:24:00:ac:52:ee:cc:96:3c:f4:2c:81:
d9:26:e8:d2:fd:78:c0:7b:1d:bd:aa:11:ab:43:93:
a4:3e:72:24:b9:ea:2d:e6:0a:ff:be:3d:57:25:92:
83:43:7d:64:76:f5:38:90:1e:2e:74:de:e8:41:3e:
a6:dd:8f:d5:04:77:72:e4:84:56:9b:47:3b:c7:48:
ea:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:87:25:3F:27:50:7D:03:AC:3C:64:67:B4:AE:62:BD:B5:04:5F:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/194a2536-f5c7-30fa-a3f2-891677b761c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl
X509v3 Authority Key Identifier:
keyid:37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer
sbgp-ipAddrBlock: critical
IPv4:
140.221.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:fd:c8:78:c5:5e:c7:ff:74:30:34:c1:93:6a:3d:ee:46:06:
de:ac:89:10:01:f3:e3:2c:f4:6c:e6:b3:9b:b0:5c:1f:04:9e:
50:a1:4e:5a:1c:6e:d4:ba:f0:3b:29:46:2c:be:ce:24:f9:dc:
0b:59:2a:08:91:4a:a0:ab:54:75:d3:15:2a:8f:19:07:02:10:
a3:72:40:23:2a:2e:f3:75:8e:25:90:25:f0:12:f9:f5:6e:56:
2e:78:3b:c8:58:e3:89:b9:98:fe:9f:08:95:52:d5:80:e3:ab:
87:33:0e:fe:e5:71:c0:27:59:cd:1e:30:b2:25:e2:14:5f:85:
9e:02:89:4d:83:47:33:7a:fd:2b:8e:cb:59:fe:ea:f7:44:f8:
31:c1:1d:fe:fd:3c:d9:dd:d1:c9:b2:11:75:21:b9:dc:2b:c9:
69:1c:79:b5:27:d8:7c:c5:ce:8c:74:5b:0f:10:76:dc:f7:b9:
73:3b:d0:34:65:b7:4c:18:9a:7c:2c:c1:be:09:52:83:da:94:
8a:a9:c5:16:a1:75:2a:2b:3e:65:a4:f4:38:e5:2f:48:b5:12:
bc:6e:c9:68:98:cb:f1:f2:ab:6e:ac:06:1e:61:3f:46:c7:3f:
c3:82:0f:81:aa:fe:9a:03:d2:16:89:0d:91:28:2c:71:a4:99:
0c:19:ae:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhc0C151CNPViTncMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGU0M2Q2OTMtMzk3Zi00ZjkwLTk2ZWItMmRhOWU4NDY1
ZmY1MB4XDTI0MTIyOTAyMDAzOVoXDTI1MDMyOTAxMDAzOVowLzEtMCsGA1UEAxMk
NjE1NWZiNTEtYTk3Yy00NzE0LWI1NWItNzcwOTAxNDVkOTFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVTcJ6iQozkMDnHuw1k9wG0Mav+SVpmdvBnu
hitMsRzyf8Go6rB+pyntG/U2Mfj/2bD80CbPS4Mf1wufA38bj7B6dOpuJSJnyjXa
VmIIACVr2k60CAMWuFd7PE3wGFw9Bju8MAcV/I8j1jjkxkId7lqkO5ZMstbRECEr
vO8SbDKplbjwHDWjlXUimM13GTRhv2hKuP3xCt4H+Vg3uvqCSZLq8dyF1NzBkzZU
F8KYeYsFBYrfrJSTJACsUu7Mljz0LIHZJujS/XjAex29qhGrQ5OkPnIkueot5gr/
vj1XJZKDQ31kdvU4kB4udN7oQT6m3Y/VBHdy5IRWm0c7x0jq8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFmHJT8nUH0DrDxkZ7SuYr21BF9lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTQz
ZDY5My0zOTdmLTRmOTAtOTZlYi0yZGE5ZTg0NjVmZjUvMTk0YTI1MzYtZjVjNy0z
MGZhLWEzZjItODkxNjc3Yjc2MWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGU0M2Q2OTMtMzk3Zi00ZjkwLTk2
ZWItMmRhOWU4NDY1ZmY1LzBlNDNkNjkzLTM5N2YtNGY5MC05NmViLTJkYTllODQ2
NWZmNS5jcmwwHwYDVR0jBBgwFoAUN04o9CXpjNBwif9JO2tz/WIVviYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTQzZDY5My0zOTdmLTRmOTAtOTZlYi0yZGE5
ZTg0NjVmZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjN2AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHT9yHjFXsf/dDA0wZNqPe5GBt6siRAB8+Ms9Gzms5uwXB8EnlChTloc
btS68DspRiy+ziT53AtZKgiRSqCrVHXTFSqPGQcCEKNyQCMqLvN1jiWQJfAS+fVu
Vi54O8hY44m5mP6fCJVS1YDjq4czDv7lccAnWc0eMLIl4hRfhZ4CiU2DRzN6/SuO
y1n+6vdE+DHBHf79PNnd0cmyEXUhudwryWkcebUn2HzFzox0Ww8Qdtz3uXM70DRl
t0wYmnwswb4JUoPalIqpxRahdSorPmWk9DjlL0i1ErxuyWiYy/Hyq26sBh5hP0bH
P8OCD4Gq/poD0haJDZEoLHGkmQwZrjc=
-----END CERTIFICATE-----
Generated at Wed May 7 08:13:38 2025 by rpki-client