Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/0cb79e6c-3262-3901-86f5-ea84b86a7928.roa
File: 0cb79e6c-3262-3901-86f5-ea84b86a7928.roa (raw, json)
Hash identifier: DwzaLpiGh14qNihwPMfXVTd5EIS+lS0/0U9lL5Eg9p0=
Subject key identifier: 47:43:90:FD:F4:75:F7:B2:65:A6:93:8C:17:D8:65:91:23:E0:EF:92
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325C4BC1911BF81E336EE00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/0cb79e6c-3262-3901-86f5-ea84b86a7928.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 140.248.221.0/26 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:c4:bc:19:11:bf:81:e3:36:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=76d65be5-e075-48c9-b719-70d699d526ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:f4:da:ff:b7:93:52:63:6a:e5:da:8c:f3:
96:d0:52:e5:05:84:79:8a:81:e0:86:19:a2:00:0d:
e2:e1:41:b2:53:9d:5f:2b:7c:13:30:26:21:1f:61:
fc:7f:a8:73:e1:68:77:be:b4:bf:6b:0c:22:2d:84:
fc:0b:e0:54:a9:e8:4c:a5:16:ff:1c:95:ca:2f:d3:
bd:38:8a:aa:47:35:f9:c8:20:d1:43:48:72:b9:d1:
8c:4c:ec:85:31:08:62:68:ea:e0:d3:21:e9:e4:10:
8e:36:e6:88:6a:f6:2f:cd:dd:b6:67:5d:30:53:0a:
f9:be:f6:8a:2c:ce:87:77:0b:0b:94:78:fc:3d:21:
38:d7:70:f8:b8:a7:b7:56:85:66:ea:2a:69:2c:37:
44:56:42:8f:aa:bd:df:a6:6f:86:43:2c:2a:52:ae:
6f:bf:e3:67:2b:64:d5:4b:ed:c2:e1:ba:e0:f0:64:
ee:1b:e0:47:50:3a:7f:8a:fc:f7:3c:c8:a7:40:fb:
1f:01:68:00:86:42:c0:25:3a:89:a4:d5:52:0b:75:
f9:8b:3b:b1:1a:45:b4:68:11:94:0a:ed:76:1c:21:
a6:55:68:24:fe:45:93:77:b4:61:ee:3c:1a:ba:3f:
6a:f7:df:ad:3a:79:35:3f:03:6f:74:fc:af:a7:0f:
ed:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:43:90:FD:F4:75:F7:B2:65:A6:93:8C:17:D8:65:91:23:E0:EF:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/0cb79e6c-3262-3901-86f5-ea84b86a7928.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
140.248.221.0/26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:b9:78:bd:11:19:9e:ee:4f:09:4d:98:b3:89:4b:31:eb:97:
ed:71:db:40:cd:0b:81:53:90:67:76:31:c8:e3:ed:6f:49:3e:
05:8d:a9:04:aa:c1:9f:ba:93:9d:ef:77:c9:26:77:d2:0d:75:
c1:c2:d7:c1:b5:be:ed:2b:12:36:66:45:fd:66:08:c8:4e:b1:
70:de:79:50:ca:4b:58:63:66:ed:95:0b:4f:59:84:c6:1b:ca:
31:72:c3:b6:19:9f:92:63:b6:8a:50:d9:aa:45:32:b8:37:af:
98:ff:d7:c9:c0:5f:1f:45:6a:ae:5b:51:57:51:5a:7c:92:2b:
5d:b2:8c:d0:47:07:17:e9:58:cb:2a:23:d7:a6:53:3c:4f:83:
68:46:38:b7:6b:84:8e:4f:97:a0:0a:c6:67:27:40:b5:05:64:
43:4e:6a:7f:fa:f2:87:9f:64:47:32:86:ee:fd:3f:32:33:56:
eb:05:70:9b:c8:30:84:d9:62:63:a9:0d:5c:87:3c:d1:9f:c6:
79:22:5b:33:57:06:33:e5:9d:ed:02:19:8f:5f:16:2b:3c:d3:
fa:3c:8b:26:8b:bd:14:90:c6:ab:9f:1a:56:24:c0:a7:cd:2b:
85:25:df:b1:fb:96:90:cc:7e:b0:be:9f:aa:af:73:ea:a0:8f:
f7:98:af:8e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhzJcS8GRG/geM27gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDEwNjAyMDA0MFoXDTI1MDQwNjAxMDA0MFowLzEtMCsGA1UEAxMk
NzZkNjViZTUtZTA3NS00OGM5LWI3MTktNzBkNjk5ZDUyNmFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8r02v+3k1JjauXajPOW0FLlBYR5ioHghhmi
AA3i4UGyU51fK3wTMCYhH2H8f6hz4Wh3vrS/awwiLYT8C+BUqehMpRb/HJXKL9O9
OIqqRzX5yCDRQ0hyudGMTOyFMQhiaOrg0yHp5BCONuaIavYvzd22Z10wUwr5vvaK
LM6HdwsLlHj8PSE413D4uKe3VoVm6ippLDdEVkKPqr3fpm+GQywqUq5vv+NnK2TV
S+3C4brg8GTuG+BHUDp/ivz3PMinQPsfAWgAhkLAJTqJpNVSC3X5izuxGkW0aBGU
Cu12HCGmVWgk/kWTd7Rh7jwauj9q99+tOnk1PwNvdPyvpw/tPQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEdDkP30dfeyZaaTjBfYZZEj4O+SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvMGNiNzllNmMtMzI2Mi0z
OTAxLTg2ZjUtZWE4NGI4NmE3OTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGjPjdADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC1uXi9ERme7k8JTZiziUsx65ftcdtAzQuBU5BndjHI4+1vST4FjakE
qsGfupOd73fJJnfSDXXBwtfBtb7tKxI2ZkX9ZgjITrFw3nlQyktYY2btlQtPWYTG
G8oxcsO2GZ+SY7aKUNmqRTK4N6+Y/9fJwF8fRWquW1FXUVp8kitdsozQRwcX6VjL
KiPXplM8T4NoRji3a4SOT5egCsZnJ0C1BWRDTmp/+vKHn2RHMobu/T8yM1brBXCb
yDCE2WJjqQ1chzzRn8Z5IlszVwYz5Z3tAhmPXxYrPNP6PIsmi70UkMarnxpWJMCn
zSuFJd+x+5aQzH6wvp+qr3PqoI/3mK+O
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:08:39 2025 by rpki-client