Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/68f886e6-3ee4-396a-852d-a801badb904f.roa
File: 68f886e6-3ee4-396a-852d-a801badb904f.roa (raw, json)
Hash identifier: lNHfhp1Hp92lQUSb62g8HmecDMgTRPC5pR8CcYVNbrA=
Subject key identifier: 11:33:B3:9B:33:4B:F2:C3:F7:CE:6B:9C:3E:B1:BA:83:8C:94:1B:20
Certificate issuer: /CN=324a8cbd-4953-435c-bace-07af1279e9bc
Certificate serial: 010D0C9F432858486960597B72A2B52119BD0EE0
Authority key identifier: B9:51:8D:60:2D:87:3E:B0:5F:09:28:22:A7:33:96:C6:4B:25:3E:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/68f886e6-3ee4-396a-852d-a801badb904f.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 398025
IP address blocks: 143.109.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:59:7b:72:a2:b5:21:19:bd:0e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324a8cbd-4953-435c-bace-07af1279e9bc
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=87aaa45c-2e3f-476d-90ae-45557c179f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f8:3d:0a:ba:e7:e2:a9:d8:ac:fa:5b:28:91:
e7:c8:17:7c:03:35:c9:df:ec:18:94:9f:9a:e2:33:
b5:83:5c:38:ae:73:e5:ef:2e:ce:22:02:0f:23:1c:
30:5f:34:bf:98:d7:05:c4:fa:d2:8f:a4:2c:59:1c:
a8:81:10:e7:16:58:d7:8d:d8:41:46:d1:a4:ed:3a:
1a:51:00:e5:0a:3a:43:4b:31:13:79:d3:af:d2:b0:
3e:fc:c7:a2:43:b0:20:d5:45:7c:87:ed:74:6f:20:
b4:5a:51:67:df:76:9f:3c:16:f6:4c:22:c2:6f:ab:
b8:bf:05:30:fc:f0:c3:f8:75:11:19:1e:e2:7e:1f:
9c:fa:59:58:ed:45:7b:c1:6d:bf:d5:72:5f:27:70:
0d:6d:ce:95:65:63:c1:80:f1:64:f8:ba:04:2d:d9:
da:f9:65:41:0a:14:12:76:11:be:a4:1d:3e:ad:2c:
10:d8:df:d5:b9:8b:cc:78:ea:f6:46:9f:b7:c0:6f:
7b:55:00:3d:c5:00:87:6e:09:3f:6b:ca:29:7b:f1:
e2:8f:e8:36:f9:8c:25:b7:13:b3:5f:0b:59:9b:ef:
1d:bf:5a:6a:8f:06:9e:40:b2:2c:7f:70:98:3f:37:
bb:a7:8a:b3:c6:84:ff:0a:64:8c:8b:9a:85:ea:48:
7c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:33:B3:9B:33:4B:F2:C3:F7:CE:6B:9C:3E:B1:BA:83:8C:94:1B:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/68f886e6-3ee4-396a-852d-a801badb904f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/324a8cbd-4953-435c-bace-07af1279e9bc.crl
X509v3 Authority Key Identifier:
keyid:B9:51:8D:60:2D:87:3E:B0:5F:09:28:22:A7:33:96:C6:4B:25:3E:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc.cer
sbgp-ipAddrBlock: critical
IPv4:
143.109.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:8f:bd:3f:5b:67:3f:b2:b7:59:03:83:27:3c:18:24:7b:09:
27:28:0a:ae:e9:39:5a:de:18:25:bb:01:3b:64:ae:83:b5:22:
95:6c:83:c7:53:4a:2c:e9:b6:7e:5b:43:13:93:cc:dd:b3:2d:
9f:c6:3d:c3:b1:3c:40:04:c5:44:22:e9:9b:76:9e:32:27:33:
9a:59:13:13:80:72:64:be:e9:7d:df:47:fb:61:17:b8:ff:73:
1e:63:d3:12:0c:84:da:c4:2a:b9:58:85:45:98:7f:26:e8:1b:
d1:7b:40:66:2d:d4:d2:0d:b4:13:85:1b:92:d5:c2:6b:79:16:
ea:e5:8e:2b:4f:42:b7:7f:58:4a:b4:69:98:ff:0f:6e:60:b6:
11:24:d7:8f:c5:b8:80:eb:95:09:e5:e7:ad:0e:13:d7:4a:f3:
49:5a:e9:01:72:53:17:7a:45:a6:82:d3:1e:61:37:fd:ef:16:
85:e7:d1:18:d7:97:7d:1c:95:65:e0:93:c7:95:d8:d4:c7:ad:
75:6a:22:4b:fd:3f:46:dc:b9:02:08:5f:30:c6:84:a2:2f:a2:
d3:c1:e0:66:7a:7f:f3:f2:42:99:5a:82:22:f5:ed:6a:5a:5f:
a1:1a:0e:73:d0:08:51:3b:7b:98:d6:fb:0e:1e:bd:15:1d:a5:
f7:e8:37:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhpYFl7cqK1IRm9DuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzI0YThjYmQtNDk1My00MzVjLWJhY2UtMDdhZjEyNzll
OWJjMB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk
ODdhYWE0NWMtMmUzZi00NzZkLTkwYWUtNDU1NTdjMTc5Zjg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufg9Crrn4qnYrPpbKJHnyBd8AzXJ3+wYlJ+a
4jO1g1w4rnPl7y7OIgIPIxwwXzS/mNcFxPrSj6QsWRyogRDnFljXjdhBRtGk7Toa
UQDlCjpDSzETedOv0rA+/MeiQ7Ag1UV8h+10byC0WlFn33afPBb2TCLCb6u4vwUw
/PDD+HURGR7ifh+c+llY7UV7wW2/1XJfJ3ANbc6VZWPBgPFk+LoELdna+WVBChQS
dhG+pB0+rSwQ2N/VuYvMeOr2Rp+3wG97VQA9xQCHbgk/a8ope/Hij+g2+YwltxOz
XwtZm+8dv1pqjwaeQLIsf3CYPze7p4qzxoT/CmSMi5qF6kh8KwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBEzs5szS/LD985rnD6xuoOMlBsgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zMjRh
OGNiZC00OTUzLTQzNWMtYmFjZS0wN2FmMTI3OWU5YmMvNjhmODg2ZTYtM2VlNC0z
OTZhLTg1MmQtYTgwMWJhZGI5MDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzI0YThjYmQtNDk1My00MzVjLWJh
Y2UtMDdhZjEyNzllOWJjLzMyNGE4Y2JkLTQ5NTMtNDM1Yy1iYWNlLTA3YWYxMjc5
ZTliYy5jcmwwHwYDVR0jBBgwFoAUuVGNYC2HPrBfCSgipzOWxkslPtAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zMjRhOGNiZC00OTUzLTQzNWMtYmFjZS0wN2Fm
MTI3OWU5YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFj20AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEaPvT9bZz+yt1kDgyc8GCR7CScoCq7pOVreGCW7ATtkroO1IpVsg8dT
Sizptn5bQxOTzN2zLZ/GPcOxPEAExUQi6Zt2njInM5pZExOAcmS+6X3fR/thF7j/
cx5j0xIMhNrEKrlYhUWYfyboG9F7QGYt1NINtBOFG5LVwmt5FurljitPQrd/WEq0
aZj/D25gthEk14/FuIDrlQnl560OE9dK80la6QFyUxd6RaaC0x5hN/3vFoXn0RjX
l30clWXgk8eV2NTHrXVqIkv9P0bcuQIIXzDGhKIvotPB4GZ6f/PyQplagiL17Wpa
X6EaDnPQCFE7e5jW+w4evRUdpffoN2I=
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:52:57 2025 by rpki-client