Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/0bfbddc3-6a37-3b70-a002-19768779af3c.roa
File: 0bfbddc3-6a37-3b70-a002-19768779af3c.roa (raw, json)
Hash identifier: 1ZL9gI/k4+/ChPgdunDBp02DgVw4Q9seG3Nv7NyL/HM=
Subject key identifier: 8A:E6:A1:5A:EF:BC:EF:E5:CE:9A:21:B1:43:C8:9B:C2:77:2A:D8:CE
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325C537ADC1CEABF7FE3E40
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/0bfbddc3-6a37-3b70-a002-19768779af3c.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 140.248.242.128/26 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:c5:37:ad:c1:ce:ab:f7:fe:3e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=b75b622b-4ede-484b-ac26-8723d8206f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:99:75:69:b2:cd:da:c5:0a:0d:82:65:b5:75:
12:4d:3f:04:6b:59:17:44:79:86:1d:30:4d:5a:f0:
42:09:f1:7e:01:fe:90:45:0f:96:85:c9:4c:2f:2f:
fa:3b:6f:b8:39:b9:e9:74:d5:1c:5d:ce:51:96:12:
b6:bf:c5:f8:30:54:2d:58:c8:ca:d2:0e:f6:b2:e4:
f7:89:54:ad:64:67:30:f5:d8:e5:64:dc:ec:8d:8c:
04:1f:a6:95:f2:8b:f9:af:ec:a0:7b:80:b7:e4:ca:
7e:11:ed:81:c4:6d:a4:e1:92:f7:d3:1e:91:57:22:
e0:68:0d:72:2d:24:1c:5e:65:d2:e0:d1:ec:39:7e:
a2:2a:9d:05:9f:9c:2c:5b:ab:23:8a:f4:55:02:aa:
77:aa:92:26:b2:db:ee:c6:e7:b1:a7:a3:79:0a:4d:
89:be:0d:09:95:b1:c6:5f:15:bf:34:04:35:3f:44:
bf:da:f9:22:c9:25:46:bd:6b:db:73:b7:a2:5b:3b:
de:e9:85:d0:c7:91:bc:62:2e:b0:6c:cb:82:79:40:
e9:af:c6:1f:90:88:1e:1f:c8:46:70:53:78:ba:de:
ac:04:cf:23:7b:35:c5:7b:e8:b5:1a:24:76:bd:b3:
e1:68:17:bf:03:3d:59:20:e6:d9:82:d6:0d:4c:50:
2f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E6:A1:5A:EF:BC:EF:E5:CE:9A:21:B1:43:C8:9B:C2:77:2A:D8:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/0bfbddc3-6a37-3b70-a002-19768779af3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
140.248.242.128/26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:62:87:7b:8b:db:27:09:5a:b8:f7:84:00:af:5b:9c:5e:af:
5c:a7:54:fb:7f:83:bf:95:29:90:c6:7e:fc:79:86:a9:bc:e8:
24:16:fc:70:b9:e6:b1:bb:4e:66:bc:48:eb:d8:7c:66:05:4d:
6a:83:ad:0e:6d:9c:4a:1e:45:e5:1b:b9:45:d7:eb:05:ca:c6:
54:66:00:20:41:9c:03:19:8e:5f:d3:90:87:5b:6e:88:4d:70:
d2:79:45:62:a6:c8:f0:33:d4:ed:bc:27:1e:b3:05:fa:45:81:
c7:eb:6d:af:34:af:f2:91:0e:6a:87:65:52:c2:f9:e7:78:6a:
5d:0b:a1:47:6a:32:ab:81:60:03:eb:8c:3c:c1:04:9f:31:cd:
73:ea:ec:58:ea:7e:d3:17:08:de:b3:0a:7d:15:b1:f8:57:3c:
15:66:4b:63:3a:ac:0f:2d:62:f7:c4:d3:71:18:a5:4f:18:63:
aa:51:7f:c6:15:24:38:8a:db:ea:4d:87:ab:33:fa:98:fc:2a:
7c:e1:23:10:15:0d:d5:73:c3:aa:e6:ee:e7:6f:6a:b2:fe:d1:
21:71:28:2e:25:19:19:31:11:18:e1:26:a5:0a:25:cf:b2:c5:
3b:fe:5e:ba:3d:d0:0f:68:73:2a:c8:6e:f2:da:65:94:81:82:
38:c3:d2:c2
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhzJcU3rcHOq/f+PkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDEwNjAyMDA0MFoXDTI1MDQwNjAxMDA0MFowLzEtMCsGA1UEAxMk
Yjc1YjYyMmItNGVkZS00ODRiLWFjMjYtODcyM2Q4MjA2ZjBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpl1abLN2sUKDYJltXUSTT8Ea1kXRHmGHTBN
WvBCCfF+Af6QRQ+WhclMLy/6O2+4ObnpdNUcXc5RlhK2v8X4MFQtWMjK0g72suT3
iVStZGcw9djlZNzsjYwEH6aV8ov5r+yge4C35Mp+Ee2BxG2k4ZL30x6RVyLgaA1y
LSQcXmXS4NHsOX6iKp0Fn5wsW6sjivRVAqp3qpImstvuxuexp6N5Ck2Jvg0JlbHG
XxW/NAQ1P0S/2vkiySVGvWvbc7eiWzve6YXQx5G8Yi6wbMuCeUDpr8YfkIgeH8hG
cFN4ut6sBM8jezXFe+i1GiR2vbPhaBe/Az1ZIObZgtYNTFAvBQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIrmoVrvvO/lzpohsUPIm8J3KtjOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvMGJmYmRkYzMtNmEzNy0z
YjcwLWEwMDItMTk3Njg3NzlhZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGjPjygDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAtYod7i9snCVq494QAr1ucXq9cp1T7f4O/lSmQxn78eYapvOgkFvxw
ueaxu05mvEjr2HxmBU1qg60ObZxKHkXlG7lF1+sFysZUZgAgQZwDGY5f05CHW26I
TXDSeUVipsjwM9TtvCceswX6RYHH622vNK/ykQ5qh2VSwvnneGpdC6FHajKrgWAD
64w8wQSfMc1z6uxY6n7TFwjeswp9FbH4VzwVZktjOqwPLWL3xNNxGKVPGGOqUX/G
FSQ4itvqTYerM/qY/Cp84SMQFQ3Vc8Oq5u7nb2qy/tEhcSguJRkZMREY4SalCiXP
ssU7/l66PdAPaHMqyG7y2mWUgYI4w9LC
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:55:57 2025 by rpki-client