Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c042cbc-5a9d-3121-a6c6-bdf3167f6dd7.roa
File: 6c042cbc-5a9d-3121-a6c6-bdf3167f6dd7.roa (raw, json)
Hash identifier: GNRD3phlKQm/QGT6pTMBuDp1K/2s54P5XsEazqLe+Xs=
Subject key identifier: DF:65:32:FC:19:48:54:29:97:11:E3:85:F9:2A:0E:AE:C2:F9:50:60
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487CEB32813B4DF410119D85E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c042cbc-5a9d-3121-a6c6-bdf3167f6dd7.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 63949
IP address blocks: 143.42.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:32:81:3b:4d:f4:10:11:9d:85:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=72d4c958-9e78-421b-b408-0cb45bd7e57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6e:94:f5:66:93:8a:57:c5:29:9c:ff:be:7f:
40:6d:cc:97:7e:57:b8:60:95:68:a6:84:05:25:fa:
f6:eb:7c:84:ea:25:3e:81:71:56:f9:f3:f3:ab:f6:
30:40:e6:59:a5:86:0e:b5:bb:32:7e:b7:23:a3:e5:
e5:93:2e:3a:63:45:c0:65:79:ca:40:5c:47:f5:fe:
94:d0:05:0f:13:4d:a6:d7:47:21:ec:2c:e4:67:20:
6a:13:9e:ff:1f:56:4c:87:7c:2d:5f:81:5b:20:ac:
fe:17:98:2f:5e:27:2b:e0:10:b4:65:5d:ca:70:bb:
e9:27:ce:0a:50:dc:de:da:76:46:c1:32:08:44:cc:
23:d7:8a:dd:7c:fa:e9:6c:c3:40:be:fe:a9:d2:61:
8d:8e:8b:3c:2d:49:ee:52:8b:88:50:42:b3:e3:0b:
a2:5d:4a:f3:00:74:19:19:c6:26:e9:58:a1:13:a9:
18:a2:2d:51:b6:49:20:1f:ff:32:52:3f:7f:00:49:
0c:9b:57:70:4b:8d:35:ba:e2:68:5e:e6:ec:e9:cd:
ee:d5:57:c2:9e:ef:0a:d0:32:2c:1f:5f:44:05:41:
cf:1f:22:d4:72:83:22:85:59:0d:59:4e:b0:0e:39:
2f:37:cd:d2:03:f0:bb:28:4d:72:0c:c1:f5:32:51:
08:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:65:32:FC:19:48:54:29:97:11:E3:85:F9:2A:0E:AE:C2:F9:50:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c042cbc-5a9d-3121-a6c6-bdf3167f6dd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
143.42.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:27:7b:6d:24:81:1f:7f:8a:0c:95:66:89:c8:dd:09:25:2e:
83:17:8f:04:cd:ae:d5:cd:f9:bf:09:d3:9b:3f:5f:75:4f:9a:
e2:4e:82:81:d5:d4:b4:ac:18:8f:b6:4b:ad:8f:d4:72:0c:bc:
93:b0:f7:c1:37:ad:3c:60:3f:5d:8b:02:3d:48:52:67:a9:ec:
11:ee:3c:23:e0:a6:33:42:04:62:59:26:ec:0e:4c:7c:bd:af:
42:72:db:17:41:1c:6b:a5:69:15:d8:4a:60:46:b8:15:30:ac:
f8:cd:ab:22:7f:d4:d7:ab:03:4d:d3:d1:ae:4c:cb:0f:a3:ce:
81:8c:73:99:67:0f:00:6b:88:79:a9:10:3c:96:c1:59:0b:4a:
24:4f:20:97:d0:5a:8c:a6:f1:a1:2f:01:ce:3b:90:52:67:2a:
73:ce:8c:4f:8b:30:67:57:ea:a6:a3:46:e8:61:7c:9c:bc:db:
85:30:b1:97:dc:32:ba:98:e0:51:d6:e0:26:6d:00:58:4f:db:
fb:75:28:ba:7c:e4:af:0a:be:02:08:9e:13:31:81:51:27:78:
44:d4:bc:34:92:7f:e7:4f:4d:09:6a:f9:72:ed:a1:ae:83:b2:
f0:32:a2:1c:f1:af:6d:dc:4f:2e:55:54:76:5d:0a:43:bd:7b:
99:10:d4:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh86zKBO030EBGdheAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk
NzJkNGM5NTgtOWU3OC00MjFiLWI0MDgtMGNiNDViZDdlNTdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz26U9WaTilfFKZz/vn9AbcyXfle4YJVopoQF
Jfr263yE6iU+gXFW+fPzq/YwQOZZpYYOtbsyfrcjo+Xlky46Y0XAZXnKQFxH9f6U
0AUPE02m10ch7CzkZyBqE57/H1ZMh3wtX4FbIKz+F5gvXicr4BC0ZV3KcLvpJ84K
UNze2nZGwTIIRMwj14rdfPrpbMNAvv6p0mGNjos8LUnuUouIUEKz4wuiXUrzAHQZ
GcYm6VihE6kYoi1RtkkgH/8yUj9/AEkMm1dwS401uuJoXubs6c3u1VfCnu8K0DIs
H19EBUHPHyLUcoMihVkNWU6wDjkvN83SA/C7KE1yDMH1MlEIiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN9lMvwZSFQplxHjhfkqDq7C+VBgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmMwNDJjYmMtNWE5ZC0z
MTIxLWE2YzYtYmRmMzE2N2Y2ZGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjypAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC4ne20kgR9/igyVZonI3QklLoMXjwTNrtXN+b8J05s/X3VPmuJOgoHV
1LSsGI+2S62P1HIMvJOw98E3rTxgP12LAj1IUmep7BHuPCPgpjNCBGJZJuwOTHy9
r0Jy2xdBHGulaRXYSmBGuBUwrPjNqyJ/1NerA03T0a5Myw+jzoGMc5lnDwBriHmp
EDyWwVkLSiRPIJfQWoym8aEvAc47kFJnKnPOjE+LMGdX6qajRuhhfJy824UwsZfc
MrqY4FHW4CZtAFhP2/t1KLp85K8KvgIInhMxgVEneETUvDSSf+dPTQlq+XLtoa6D
svAyohzxr23cTy5VVHZdCkO9e5kQ1Hc=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:53:23 2025 by rpki-client