Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/41be34f9-5533-3cb4-84f1-c0c0e3485ecc.roa
File: 41be34f9-5533-3cb4-84f1-c0c0e3485ecc.roa (raw, json)
Hash identifier: 24rmC9/X2PAjjqdo/LLlhob0npyuhYdxRPMFn12YDuY=
Subject key identifier: 57:CD:EC:97:78:B0:B7:1B:55:36:21:6C:EB:6C:A9:B5:B3:7D:0B:C1
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325CEF5DC5A0E2BCFB7CA40
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/41be34f9-5533-3cb4-84f1-c0c0e3485ecc.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 140.248.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:ce:f5:dc:5a:0e:2b:cf:b7:ca:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=a9bb73a1-f78b-4527-b984-def44e6a9bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a2:5a:71:ce:dc:13:d4:6d:e5:b7:c9:f4:90:
f4:36:9e:26:46:76:48:cd:e4:c3:da:54:cc:83:11:
29:dc:8f:a4:e0:4c:5a:95:ed:ad:4b:47:a9:1a:aa:
3c:3b:b7:dd:4a:3e:63:a8:f9:b2:49:01:4d:b3:83:
dc:63:a1:6d:09:69:5f:8e:17:2b:b7:93:36:fd:f4:
a1:f4:1c:25:b6:4c:d3:07:77:20:e0:4e:a5:fc:9c:
16:56:e1:c2:74:6c:56:ad:6e:42:21:dd:5b:42:32:
70:42:b4:8f:2b:1a:1c:e4:70:54:cd:da:f5:51:5a:
21:e3:0b:78:cf:48:40:8d:68:ba:76:2a:e1:be:5a:
7b:5b:a7:a1:fd:67:f0:a8:09:f2:a4:8c:07:f8:13:
6f:92:62:6b:33:55:be:f6:72:a5:61:d6:3a:e1:05:
a6:aa:ef:a6:81:a0:87:e5:7c:9a:af:76:64:77:7c:
bd:b6:6a:18:df:35:15:22:c9:9a:9b:af:6e:2f:75:
e4:2f:ee:46:aa:5d:1b:6f:d0:21:15:4a:13:1a:9a:
ef:6f:43:08:49:63:d5:ca:43:27:06:97:f9:69:f6:
5b:50:53:07:91:a9:90:19:de:d1:27:90:f3:04:19:
c2:e3:3e:b5:ee:b4:24:63:54:f6:bd:63:78:91:4f:
91:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CD:EC:97:78:B0:B7:1B:55:36:21:6C:EB:6C:A9:B5:B3:7D:0B:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/41be34f9-5533-3cb4-84f1-c0c0e3485ecc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
140.248.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:9d:43:f8:3a:cd:06:86:80:1b:85:fe:4f:53:f9:c0:72:a5:
91:46:0d:2e:39:d4:77:3d:c7:03:1c:67:4d:72:c8:8c:e1:db:
0d:25:99:52:ba:21:e4:75:78:75:0f:4c:62:09:a3:5e:f3:73:
45:77:63:ac:b2:37:fe:57:a5:72:eb:8b:27:37:15:c2:d4:36:
a0:ed:ad:9f:b4:33:57:e9:af:42:4c:f5:20:ec:25:c4:eb:d4:
f8:d8:fa:1c:21:e4:3f:b8:e2:14:76:9f:7a:1b:6c:5c:b1:3c:
21:50:58:28:ec:57:f9:ee:17:9a:e0:41:c1:82:ef:1e:aa:f8:
dc:45:3e:98:f1:d1:1b:f6:33:be:09:f8:09:73:5a:d9:e2:66:
94:9e:1d:2d:53:df:69:ad:06:38:5e:58:92:45:20:e0:8f:5f:
32:af:df:51:73:9a:ff:78:30:1b:ae:d7:db:62:6b:61:a1:ff:
5f:15:0b:99:f5:12:04:de:ca:80:9e:92:89:09:09:25:53:3b:
7f:d4:c9:8b:81:62:2c:b7:7f:89:f8:52:4a:63:28:33:c5:e4:
c9:fc:ba:3f:33:84:6d:4e:cc:43:0c:39:13:21:61:b8:3c:7d:
ef:8d:4e:64:fd:2a:d0:eb:68:d7:9b:4b:57:0d:40:11:c4:46:
c7:4a:a9:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhzJc713FoOK8+3ykAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDEwNjAyMDA0MFoXDTI1MDQwNjAxMDA0MFowLzEtMCsGA1UEAxMk
YTliYjczYTEtZjc4Yi00NTI3LWI5ODQtZGVmNDRlNmE5YmRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKJacc7cE9Rt5bfJ9JD0Np4mRnZIzeTD2lTM
gxEp3I+k4Exale2tS0epGqo8O7fdSj5jqPmySQFNs4PcY6FtCWlfjhcrt5M2/fSh
9BwltkzTB3cg4E6l/JwWVuHCdGxWrW5CId1bQjJwQrSPKxoc5HBUzdr1UVoh4wt4
z0hAjWi6dirhvlp7W6eh/WfwqAnypIwH+BNvkmJrM1W+9nKlYdY64QWmqu+mgaCH
5Xyar3Zkd3y9tmoY3zUVIsmam69uL3XkL+5Gql0bb9AhFUoTGprvb0MISWPVykMn
Bpf5afZbUFMHkamQGd7RJ5DzBBnC4z617rQkY1T2vWN4kU+RCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFfN7Jd4sLcbVTYhbOtsqbWzfQvBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNDFiZTM0ZjktNTUzMy0z
Y2I0LTg0ZjEtYzBjMGUzNDg1ZWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPhYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIqdQ/g6zQaGgBuF/k9T+cBypZFGDS451Hc9xwMcZ01yyIzh2w0lmVK6
IeR1eHUPTGIJo17zc0V3Y6yyN/5XpXLriyc3FcLUNqDtrZ+0M1fpr0JM9SDsJcTr
1PjY+hwh5D+44hR2n3obbFyxPCFQWCjsV/nuF5rgQcGC7x6q+NxFPpjx0Rv2M74J
+AlzWtniZpSeHS1T32mtBjheWJJFIOCPXzKv31Fzmv94MBuu19tia2Gh/18VC5n1
EgTeyoCekokJCSVTO3/UyYuBYiy3f4n4UkpjKDPF5Mn8uj8zhG1OzEMMORMhYbg8
fe+NTmT9KtDraNebS1cNQBHERsdKqdo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:58:28 2025 by rpki-client