Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/2b25c4ea-3c39-374d-a823-2d9361d79fe6.roa
File: 2b25c4ea-3c39-374d-a823-2d9361d79fe6.roa (raw, json)
Hash identifier: 2CUvE+ktdIAP6fbaShv7lWdDhJQvd9zrNz2JtS2ilok=
Subject key identifier: 9E:D9:C6:19:91:4B:06:E8:06:F8:66:F4:DF:7D:B1:A9:11:44:AA:66
Certificate issuer: /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d
Certificate serial: 010D0C9F432858480BDA711D80D6243FFCE84B00
Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/2b25c4ea-3c39-374d-a823-2d9361d79fe6.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 20473
IP address blocks: 136.228.0.0/19 maxlen: 32
139.60.200.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:71:1d:80:d6:24:3f:fc:e8:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=30e9202d-a0e6-4f6b-85ec-cd250b2b615e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fb:dd:89:0c:b2:58:25:03:dc:25:d0:2a:c8:
ec:b0:64:be:b6:44:f2:9f:3d:ff:5d:a1:cd:27:8d:
52:9d:09:92:17:f0:eb:42:07:70:f7:d5:3a:b9:9d:
ef:31:c8:71:1c:8d:cf:3f:ce:c6:e9:03:ff:6e:63:
87:de:9e:2b:51:20:44:01:cc:44:18:ff:bc:04:e2:
5c:ae:7c:de:75:c3:b5:bc:28:df:52:7f:2d:e4:b4:
f6:b5:67:dc:04:d8:83:20:7d:52:72:dd:7b:ea:2a:
67:fa:42:46:4a:73:4c:97:8b:5b:77:02:0b:72:51:
df:85:67:63:8f:ec:f9:c2:c2:e7:de:b3:0f:bf:06:
4c:1c:a0:b8:b0:02:70:6c:a9:8b:b3:f4:86:f4:6e:
0a:55:c7:fd:df:2f:61:53:51:27:fd:23:a2:73:45:
9a:0b:1d:95:c6:24:df:08:b0:1d:2a:0f:ac:3f:e4:
6f:bf:76:bc:93:06:18:83:fe:4b:e9:e9:32:ca:22:
64:d9:fc:5c:34:2c:ae:eb:4c:91:41:7a:18:2f:32:
a7:54:14:3c:84:55:e9:55:a4:5d:c4:7a:de:8c:85:
7c:dc:9b:c8:76:d9:8e:7c:e1:12:4c:aa:70:40:95:
0f:40:39:72:0e:49:ea:1f:a4:b7:77:91:b9:13:cf:
c4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D9:C6:19:91:4B:06:E8:06:F8:66:F4:DF:7D:B1:A9:11:44:AA:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/2b25c4ea-3c39-374d-a823-2d9361d79fe6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl
X509v3 Authority Key Identifier:
keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
sbgp-ipAddrBlock: critical
IPv4:
136.228.0.0/19
139.60.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:69:3d:c9:a1:f4:35:67:0f:74:29:57:23:3e:ac:ca:79:e1:
dc:4f:58:c1:73:06:c3:74:a7:3f:f4:35:f2:7d:c7:ec:33:47:
d2:88:bf:0b:53:ee:3a:b2:90:0a:3c:ec:e1:d1:e0:5d:7e:94:
43:3c:d7:aa:39:5e:0b:c0:f8:9f:f9:04:70:fb:40:7c:30:a8:
34:82:6e:c3:9c:91:83:0b:26:f6:e1:4f:64:91:9c:c9:9d:0c:
12:45:fc:89:a2:06:18:a9:71:e3:22:ac:88:87:48:bb:e2:a5:
85:41:6a:a7:68:ee:64:51:ac:68:3c:64:9b:7c:e3:c8:6c:56:
26:cd:c9:56:ca:88:86:94:74:42:aa:e6:0f:c0:14:3e:b3:60:
45:d0:8d:5e:a0:ad:0c:16:88:d3:9a:2f:76:20:b6:71:bc:40:
2a:38:7a:53:62:0b:82:3b:96:bf:bf:17:e6:69:37:78:4f:ac:
27:35:a8:cf:67:c4:7c:15:78:d5:ee:2f:a5:9f:e5:fd:3d:1e:
e1:54:72:11:ca:12:5d:b6:15:4c:0c:72:99:fa:56:da:5e:40:
28:ad:2e:80:33:2d:80:05:d2:b5:12:8f:17:55:87:08:a8:78:
16:dc:79:09:68:8c:63:5c:d0:e6:4b:7f:45:e4:6a:30:c3:9a:
57:58:26:01
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEgL2nEdgNYkP/zoSwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDAyYTUyZTUtMmI3MS00MTI0LWJkMjktNjBlOTBlNTlm
NDdkMB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk
MzBlOTIwMmQtYTBlNi00ZjZiLTg1ZWMtY2QyNTBiMmI2MTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fvdiQyyWCUD3CXQKsjssGS+tkTynz3/XaHN
J41SnQmSF/DrQgdw99U6uZ3vMchxHI3PP87G6QP/bmOH3p4rUSBEAcxEGP+8BOJc
rnzedcO1vCjfUn8t5LT2tWfcBNiDIH1Sct176ipn+kJGSnNMl4tbdwILclHfhWdj
j+z5wsLn3rMPvwZMHKC4sAJwbKmLs/SG9G4KVcf93y9hU1En/SOic0WaCx2VxiTf
CLAdKg+sP+Rvv3a8kwYYg/5L6ekyyiJk2fxcNCyu60yRQXoYLzKnVBQ8hFXpVaRd
xHrejIV83JvIdtmOfOESTKpwQJUPQDlyDknqH6S3d5G5E8/EHwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFJ7ZxhmRSwboBvhm9N99sakRRKpmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJh
NTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5MGU1OWY0N2QvMmIyNWM0ZWEtM2MzOS0z
NzRkLWE4MjMtMmQ5MzYxZDc5ZmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDAyYTUyZTUtMmI3MS00MTI0LWJk
MjktNjBlOTBlNTlmNDdkL2QwMmE1MmU1LTJiNzEtNDEyNC1iZDI5LTYwZTkwZTU5
ZjQ3ZC5jcmwwHwYDVR0jBBgwFoAUauWbwwPnU/AIdM3iI5bDJH4557EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJhNTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5
MGU1OWY0N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFiOQAAwQD
izzIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAAxpPcmh9DVnD3QpVyM+rMp54dxPWMFzBsN0pz/0NfJ9x+wz
R9KIvwtT7jqykAo87OHR4F1+lEM816o5XgvA+J/5BHD7QHwwqDSCbsOckYMLJvbh
T2SRnMmdDBJF/ImiBhipceMirIiHSLvipYVBaqdo7mRRrGg8ZJt848hsVibNyVbK
iIaUdEKq5g/AFD6zYEXQjV6grQwWiNOaL3YgtnG8QCo4elNiC4I7lr+/F+ZpN3hP
rCc1qM9nxHwVeNXuL6Wf5f09HuFUchHKEl22FUwMcpn6VtpeQCitLoAzLYAF0rUS
jxdVhwioeBbceQlojGNc0OZLf0XkajDDmldYJgE=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:25:00 2025 by rpki-client