Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/d97c6262-79f0-356e-8ec4-b007e9292f02.roa
File: d97c6262-79f0-356e-8ec4-b007e9292f02.roa (raw, json)
Hash identifier: OfLNLWKyVFtkAXWN5Jm4UbzdDJTr7ocMwINfmLvyduw=
Subject key identifier: 89:94:78:10:98:EE:E7:1E:84:85:47:7E:00:B0:91:D5:CA:7A:FF:54
Certificate issuer: /CN=f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46
Certificate serial: 010D0C9F432858483E1AB04A50FD3750C666F570
Authority key identifier: 0D:44:BD:AB:7C:21:FB:0B:72:23:7C:72:55:45:47:A7:E9:EF:40:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/d97c6262-79f0-356e-8ec4-b007e9292f02.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 14618
IP address blocks: 142.9.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:b0:4a:50:fd:37:50:c6:66:f5:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=0cc26d72-e57f-406e-9609-62628e958c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1e:85:df:6e:ca:f1:c8:e4:93:91:f5:f5:1d:
8f:f4:e2:b0:de:7e:d4:a5:56:53:b5:52:7b:4f:28:
b7:4f:07:3b:1e:24:06:c8:81:b6:6d:27:90:ad:e9:
27:2e:3a:bb:2c:03:9b:bc:16:f9:b6:38:fd:53:a7:
67:32:e0:c6:1c:81:33:70:ff:37:58:9f:5c:89:f3:
02:88:1b:69:75:1e:4e:f7:4d:1f:a2:91:71:4f:84:
4f:b9:f2:79:0e:b5:23:14:17:3d:dd:c2:fb:72:f4:
9d:99:ed:42:fd:8f:6a:56:bc:81:f4:c1:bb:d2:a3:
b8:6b:f1:c3:ae:03:70:c6:04:99:f1:db:7c:39:c2:
87:6b:82:06:95:34:f8:e3:53:ea:27:12:9d:33:bd:
4e:44:d7:f3:92:12:58:61:46:93:a4:2a:87:8f:4b:
96:e8:f4:ac:9b:03:d0:7c:fb:f0:4d:b4:94:7c:cf:
cf:a3:e1:5f:14:e6:7b:94:d4:91:fb:35:54:1e:31:
20:7d:d6:56:44:f5:a6:b5:48:86:13:ba:14:24:bb:
c7:ec:94:67:2d:83:33:b4:08:34:e5:e3:12:cc:c7:
2a:1e:9b:bb:2c:28:b8:c5:4d:8c:15:41:be:e4:ef:
d6:65:42:bd:30:ed:6e:67:06:c5:8a:67:a8:8a:e0:
34:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:94:78:10:98:EE:E7:1E:84:85:47:7E:00:B0:91:D5:CA:7A:FF:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/d97c6262-79f0-356e-8ec4-b007e9292f02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.crl
X509v3 Authority Key Identifier:
keyid:0D:44:BD:AB:7C:21:FB:0B:72:23:7C:72:55:45:47:A7:E9:EF:40:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f78c1a7d-1cdb-4e63-ba38-ac50d1a4dd46.cer
sbgp-ipAddrBlock: critical
IPv4:
142.9.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:e1:62:8e:e5:63:e0:02:22:75:2d:76:4d:ea:99:b8:af:4c:
2b:3e:c0:9b:61:64:ff:d5:84:e9:6c:d1:57:a6:38:3a:b7:19:
17:84:86:55:a9:71:f7:97:f6:78:17:b7:51:62:65:c7:6b:e6:
96:87:32:d4:a1:89:a9:58:26:4b:2e:47:57:de:9a:48:a3:80:
7b:09:97:72:69:84:77:b8:f4:7e:b8:b5:b4:ce:e1:4e:f6:cc:
19:52:bc:c4:46:99:e4:41:70:f6:59:e1:ae:8a:f8:3e:5c:4a:
6d:96:6b:02:e1:46:24:b5:e4:03:f9:68:5e:e1:a7:17:e8:da:
fd:22:e9:d5:ed:2c:2c:f6:e5:25:a9:c2:da:93:bc:b8:e8:c3:
d8:e5:f8:a8:63:09:d9:27:ad:93:8b:fc:00:ff:2e:aa:12:03:
07:ed:5c:46:e9:1e:09:8d:78:00:c9:08:86:24:c9:50:0c:9b:
0e:b7:8a:88:98:df:9a:5f:73:d3:3e:dc:1e:e3:6b:24:a4:8a:
86:54:20:00:bd:9a:42:f6:37:ac:eb:fd:8f:72:4b:08:c8:e8:
dd:06:90:82:3c:66:e3:bf:93:d0:21:6a:89:6d:58:87:4c:77:
96:4e:14:96:dc:48:98:7a:24:f2:2d:6b:09:34:0a:d7:05:a8:
dc:9e:cf:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+GrBKUP03UMZm9XAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjc4YzFhN2QtMWNkYi00ZTYzLWJhMzgtYWM1MGQxYTRk
ZDQ2MB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk
MGNjMjZkNzItZTU3Zi00MDZlLTk2MDktNjI2MjhlOTU4Yzk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB6F327K8cjkk5H19R2P9OKw3n7UpVZTtVJ7
Tyi3Twc7HiQGyIG2bSeQreknLjq7LAObvBb5tjj9U6dnMuDGHIEzcP83WJ9cifMC
iBtpdR5O900fopFxT4RPufJ5DrUjFBc93cL7cvSdme1C/Y9qVryB9MG70qO4a/HD
rgNwxgSZ8dt8OcKHa4IGlTT441PqJxKdM71ORNfzkhJYYUaTpCqHj0uW6PSsmwPQ
fPvwTbSUfM/Po+FfFOZ7lNSR+zVUHjEgfdZWRPWmtUiGE7oUJLvH7JRnLYMztAg0
5eMSzMcqHpu7LCi4xU2MFUG+5O/WZUK9MO1uZwbFimeoiuA06wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFImUeBCY7ucehIVHfgCwkdXKev9UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNzhj
MWE3ZC0xY2RiLTRlNjMtYmEzOC1hYzUwZDFhNGRkNDYvZDk3YzYyNjItNzlmMC0z
NTZlLThlYzQtYjAwN2U5MjkyZjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjc4YzFhN2QtMWNkYi00ZTYzLWJh
MzgtYWM1MGQxYTRkZDQ2L2Y3OGMxYTdkLTFjZGItNGU2My1iYTM4LWFjNTBkMWE0
ZGQ0Ni5jcmwwHwYDVR0jBBgwFoAUDUS9q3wh+wtyI3xyVUVHp+nvQKkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mNzhjMWE3ZC0xY2RiLTRlNjMtYmEzOC1hYzUw
ZDFhNGRkNDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjgn/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABPhYo7lY+ACInUtdk3qmbivTCs+wJthZP/VhOls0VemODq3GReEhlWp
cfeX9ngXt1FiZcdr5paHMtShialYJksuR1femkijgHsJl3JphHe49H64tbTO4U72
zBlSvMRGmeRBcPZZ4a6K+D5cSm2WawLhRiS15AP5aF7hpxfo2v0i6dXtLCz25SWp
wtqTvLjow9jl+KhjCdknrZOL/AD/LqoSAwftXEbpHgmNeADJCIYkyVAMmw63ioiY
35pfc9M+3B7jaySkioZUIAC9mkL2N6zr/Y9ySwjI6N0GkII8ZuO/k9AhaoltWIdM
d5ZOFJbcSJh6JPItawk0CtcFqNyez4A=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:30:01 2025 by rpki-client