Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/120269e2-65e0-38b1-82ec-292383163359.roa
File: 120269e2-65e0-38b1-82ec-292383163359.roa (raw, json)
Hash identifier: kJTiCdDfxp3U+rrDuLZofrJxyUs94TvhNTzfxCwTz4I=
Subject key identifier: 34:B5:D6:18:52:0A:CB:1F:02:D5:0D:3F:02:C4:25:6F:E4:D7:4A:F6
Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial: 010D0C9F43285848E59BBEF19C7D10C296C9CDF0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/120269e2-65e0-38b1-82ec-292383163359.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 16509
IP address blocks: 139.180.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:be:f1:9c:7d:10:c2:96:c9:cd:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=5399276b-ef37-466d-90a8-c15af41f7876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2f:58:1b:b9:c9:4a:34:a6:a7:52:9b:b7:a9:
d2:ab:46:de:d8:a5:77:15:81:b3:20:2b:76:aa:35:
16:ea:1b:08:6d:3a:9d:c8:fa:fd:45:bb:91:50:fe:
76:ba:73:06:ff:be:e2:42:ca:b0:17:e6:ce:f3:09:
b6:1f:2e:12:4e:e4:47:1a:0e:2a:44:c5:c3:2d:88:
fa:cc:54:02:dc:56:22:48:7e:a0:01:f9:d3:0e:6b:
ac:e8:40:a0:43:b3:e5:ef:6a:8c:0b:62:be:fe:76:
61:1e:0c:cd:c8:c2:9e:6a:01:ef:6b:2a:c5:19:76:
9d:57:d0:ff:59:29:9a:b9:d0:b6:e8:4c:76:8c:f1:
9d:15:ae:96:98:ee:a4:af:b3:a6:3b:9d:f4:28:f7:
76:fd:d4:3b:ee:e8:2c:90:ef:22:e9:92:56:5a:64:
bc:2f:1c:db:00:c4:ff:33:1b:bc:39:85:a2:c3:5c:
75:c6:e1:b4:a5:7d:b3:73:09:98:25:41:1b:a4:ca:
20:20:c6:de:21:62:63:ab:1a:d6:ea:1b:b4:6c:1d:
24:d4:14:42:97:9e:54:3f:e3:86:6f:f1:36:3e:ae:
5f:3d:4d:d9:81:4a:35:c0:28:4e:1b:ac:9e:8a:4e:
fe:2b:d4:4f:cf:19:f9:1f:6e:72:4f:8a:16:30:1e:
6c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B5:D6:18:52:0A:CB:1F:02:D5:0D:3F:02:C4:25:6F:E4:D7:4A:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/120269e2-65e0-38b1-82ec-292383163359.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
X509v3 Authority Key Identifier:
keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
sbgp-ipAddrBlock: critical
IPv4:
139.180.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:58:36:a4:85:fc:94:2a:2c:fb:a5:99:39:5c:d5:3b:b7:45:
63:87:86:1b:7a:9d:fe:21:b6:2b:62:c0:7d:4d:79:2e:8c:1d:
61:10:8f:ca:aa:4e:0a:b4:0a:7f:4d:c8:5c:84:0e:1f:e1:4f:
62:c6:62:9d:f5:45:60:85:4b:52:76:17:4a:85:30:50:e6:dc:
43:6a:d6:1b:bd:d4:bc:2f:8e:77:aa:b7:cf:6c:b7:8e:c3:45:
da:da:45:62:1e:33:1e:fe:51:0a:64:14:69:5e:30:ea:20:ae:
6f:76:5a:2f:13:77:a6:40:89:52:49:72:b1:1a:a9:22:29:2b:
ec:a3:4a:c0:8d:6f:f9:78:51:a6:0e:03:45:4a:6c:ef:08:83:
41:30:70:76:63:31:bb:b6:78:24:9d:f8:50:b7:35:52:5f:2d:
11:d2:4a:0e:e1:78:c3:f1:c7:be:f6:0a:85:45:37:b2:19:d1:
b1:86:6c:4f:e6:4a:08:65:91:6a:f7:9d:af:8f:94:e4:28:56:
eb:bc:c6:42:83:c1:f2:9c:2c:df:d1:35:8a:ed:17:fc:c7:fc:
03:45:29:c5:2c:a6:91:82:5b:13:49:03:d6:3c:71:ef:82:6a:
e5:58:55:2d:73:24:8d:b2:5d:b2:0a:0f:1c:26:24:2e:7a:79:
15:1a:31:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm77xnH0QwpbJzfAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk
NTM5OTI3NmItZWYzNy00NjZkLTkwYTgtYzE1YWY0MWY3ODc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji9YG7nJSjSmp1Kbt6nSq0be2KV3FYGzICt2
qjUW6hsIbTqdyPr9RbuRUP52unMG/77iQsqwF+bO8wm2Hy4STuRHGg4qRMXDLYj6
zFQC3FYiSH6gAfnTDmus6ECgQ7Pl72qMC2K+/nZhHgzNyMKeagHvayrFGXadV9D/
WSmaudC26Ex2jPGdFa6WmO6kr7OmO530KPd2/dQ77ugskO8i6ZJWWmS8LxzbAMT/
Mxu8OYWiw1x1xuG0pX2zcwmYJUEbpMogIMbeIWJjqxrW6hu0bB0k1BRCl55UP+OG
b/E2Pq5fPU3ZgUo1wChOG6yeik7+K9RPzxn5H25yT4oWMB5siwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDS11hhSCssfAtUNPwLEJW/k10r2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvMTIwMjY5ZTItNjVlMC0z
OGIxLTgyZWMtMjkyMzgzMTYzMzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEi7TwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJVYNqSF/JQqLPulmTlc1Tu3RWOHhht6nf4htitiwH1NeS6MHWEQj8qq
Tgq0Cn9NyFyEDh/hT2LGYp31RWCFS1J2F0qFMFDm3ENq1hu91Lwvjneqt89st47D
RdraRWIeMx7+UQpkFGleMOogrm92Wi8Td6ZAiVJJcrEaqSIpK+yjSsCNb/l4UaYO
A0VKbO8Ig0EwcHZjMbu2eCSd+FC3NVJfLRHSSg7heMPxx772CoVFN7IZ0bGGbE/m
SghlkWr3na+PlOQoVuu8xkKDwfKcLN/RNYrtF/zH/ANFKcUsppGCWxNJA9Y8ce+C
auVYVS1zJI2yXbIKDxwmJC56eRUaMZA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:27 2025 by rpki-client