Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/a8f2dc8b-d9f7-3b3d-8d6b-fa9e6e78319f.roa
File: a8f2dc8b-d9f7-3b3d-8d6b-fa9e6e78319f.roa (raw, json)
Hash identifier: nG76jr2kSXwx/GT28nuosTCQjuCqxJdRniTl93ExShA=
Subject key identifier: A8:54:87:A4:10:60:CE:FE:21:99:0F:5A:5F:D8:B0:20:87:EC:A1:C7
Certificate issuer: /CN=e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6
Certificate serial: 010D0C9F43285848A830AD1E58BD7105C62EAA80
Authority key identifier: 16:5B:E6:6E:A9:0A:32:DE:82:B4:13:55:3F:BB:38:BE:04:F7:67:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/a8f2dc8b-d9f7-3b3d-8d6b-fa9e6e78319f.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 16509
IP address blocks: 135.109.196.0/24 maxlen: 24
135.109.197.0/24 maxlen: 24
135.109.198.0/24 maxlen: 24
135.109.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:ad:1e:58:bd:71:05:c6:2e:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=f8955cc5-e951-4440-8ac3-6addcbda12e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ed:b4:db:9c:29:d8:41:be:ab:68:82:24:ad:
b9:81:be:47:6b:d2:bf:5a:fe:5a:6d:57:91:a1:f6:
e5:8d:3e:75:30:62:27:7d:9e:ee:1a:03:f8:96:db:
15:08:bc:6e:b3:87:3d:4f:be:dc:e8:f9:c9:28:60:
29:db:41:f6:81:c2:a8:ea:1d:b0:34:a3:2e:b1:9c:
fe:8c:5e:76:db:89:65:d4:bd:89:85:63:5c:4a:6c:
b6:d4:e1:4c:99:79:3d:4d:bf:30:19:2f:e8:c8:90:
fe:b4:b2:32:e6:e1:57:eb:3f:41:5a:ad:ae:ec:d3:
ad:8f:92:2b:0b:96:c4:f3:bc:98:20:ad:97:b1:41:
04:7b:9d:e5:03:73:67:6c:ae:b0:6d:0f:b4:45:7b:
9c:f2:b3:5e:be:9a:53:67:ea:94:67:dc:3b:c3:3c:
8c:c0:91:db:3b:48:a0:e5:cd:d6:ed:fb:fa:e1:b6:
4f:d9:0f:14:4c:da:ab:f7:03:f0:f2:3c:45:59:8e:
9e:3d:4b:7b:f5:d0:c5:e7:5a:ab:c4:87:64:ba:36:
8f:6c:d5:3a:70:a5:a9:21:cb:6b:62:ef:c2:99:9f:
c1:9f:6e:49:12:0c:86:71:a7:eb:57:66:94:eb:72:
65:89:f9:c6:8d:f2:1e:a8:66:b0:12:28:34:3b:ca:
58:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:54:87:A4:10:60:CE:FE:21:99:0F:5A:5F:D8:B0:20:87:EC:A1:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/a8f2dc8b-d9f7-3b3d-8d6b-fa9e6e78319f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.crl
X509v3 Authority Key Identifier:
keyid:16:5B:E6:6E:A9:0A:32:DE:82:B4:13:55:3F:BB:38:BE:04:F7:67:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.cer
sbgp-ipAddrBlock: critical
IPv4:
135.109.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:2f:96:39:52:be:8e:ef:6e:95:a4:11:b7:72:dd:64:58:a7:
63:a6:fd:82:bd:ec:71:1b:06:8e:fc:63:fe:c5:c2:62:f5:c9:
ae:40:ba:c3:5e:1f:25:0f:af:0e:aa:46:26:a4:9f:42:1d:36:
06:21:5c:23:dc:e1:bf:bd:7c:4f:6c:22:aa:63:a5:9a:96:4e:
bd:d3:39:a1:b3:a4:a1:33:00:93:20:5e:b9:5f:32:c9:cf:ae:
6c:94:7e:48:6e:f7:37:48:b6:bc:0e:27:37:f7:bc:8b:15:a8:
1d:1c:91:fc:0c:44:14:db:9b:6f:c9:e9:0b:fa:79:bb:7e:64:
80:4a:be:e5:0e:24:0d:da:05:e5:66:ce:5e:c4:da:85:2d:b5:
1a:43:bb:2d:38:e0:52:44:34:d9:9a:02:40:2e:cd:d5:8b:ba:
e5:87:ed:85:52:d4:b8:3a:00:28:c4:6f:9d:56:42:b8:99:b0:
7d:e1:04:d2:1a:f3:68:cf:6c:97:74:ff:81:21:3f:ce:01:b9:
20:2e:1f:e1:e5:ba:b3:26:fd:55:9d:76:f6:62:c3:bf:da:71:
41:94:12:ee:d5:16:f6:ed:27:db:13:4b:93:37:e5:aa:e0:47:
a7:48:eb:b5:a0:55:33:3d:b2:a5:3d:c0:4c:d5:2b:c6:6c:05:
6d:10:11:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMK0eWL1xBcYuqoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTMzYzc0MzMtNmQ1ZC00ZjdjLWIyZWYtOThjY2IxZDEw
OGQ2MB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk
Zjg5NTVjYzUtZTk1MS00NDQwLThhYzMtNmFkZGNiZGExMmU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgO2025wp2EG+q2iCJK25gb5Ha9K/Wv5abVeR
ofbljT51MGInfZ7uGgP4ltsVCLxus4c9T77c6PnJKGAp20H2gcKo6h2wNKMusZz+
jF5224ll1L2JhWNcSmy21OFMmXk9Tb8wGS/oyJD+tLIy5uFX6z9BWq2u7NOtj5Ir
C5bE87yYIK2XsUEEe53lA3NnbK6wbQ+0RXuc8rNevppTZ+qUZ9w7wzyMwJHbO0ig
5c3W7fv64bZP2Q8UTNqr9wPw8jxFWY6ePUt79dDF51qrxIdkujaPbNU6cKWpIctr
Yu/CmZ/Bn25JEgyGcafrV2aU63JlifnGjfIeqGawEig0O8pYywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKhUh6QQYM7+IZkPWl/YsCCH7KHHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMzNj
NzQzMy02ZDVkLTRmN2MtYjJlZi05OGNjYjFkMTA4ZDYvYThmMmRjOGItZDlmNy0z
YjNkLThkNmItZmE5ZTZlNzgzMTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTMzYzc0MzMtNmQ1ZC00ZjdjLWIy
ZWYtOThjY2IxZDEwOGQ2L2UzM2M3NDMzLTZkNWQtNGY3Yy1iMmVmLTk4Y2NiMWQx
MDhkNi5jcmwwHwYDVR0jBBgwFoAUFlvmbqkKMt6CtBNVP7s4vgT3Z9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMzNjNzQzMy02ZDVkLTRmN2MtYjJlZi05OGNj
YjFkMTA4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCh23EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFMvljlSvo7vbpWkEbdy3WRYp2Om/YK97HEbBo78Y/7FwmL1ya5AusNe
HyUPrw6qRiakn0IdNgYhXCPc4b+9fE9sIqpjpZqWTr3TOaGzpKEzAJMgXrlfMsnP
rmyUfkhu9zdItrwOJzf3vIsVqB0ckfwMRBTbm2/J6Qv6ebt+ZIBKvuUOJA3aBeVm
zl7E2oUttRpDuy044FJENNmaAkAuzdWLuuWH7YVS1Lg6ACjEb51WQriZsH3hBNIa
82jPbJd0/4EhP84BuSAuH+HlurMm/VWddvZiw7/acUGUEu7VFvbtJ9sTS5M35arg
R6dI67WgVTM9sqU9wEzVK8ZsBW0QERs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:16 2025 by rpki-client