Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/7d6e5ef2-e4ce-3c9b-9dbd-fd9418e385e3.roa
File: 7d6e5ef2-e4ce-3c9b-9dbd-fd9418e385e3.roa (raw, json)
Hash identifier: vApGHyH6zyXiXUtwhNoplmjCY1c4H1AJu+bEyiYZSaY=
Subject key identifier: DF:60:FA:B3:61:9C:45:EA:10:CE:B1:63:5E:7C:25:39:25:54:1D:84
Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial: 010D0C9F432858490B4C1EC9CFE56A7D89309400
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/7d6e5ef2-e4ce-3c9b-9dbd-fd9418e385e3.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 14061
IP address blocks: 152.42.128.0/17 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:1e:c9:cf:e5:6a:7d:89:30:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=43b4f0c6-a379-4870-b4fa-776e6388fed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9c:59:49:a0:0c:39:60:c6:11:39:e0:1f:23:
b0:57:f9:3c:bc:1a:b6:e5:91:28:b9:cd:98:c9:12:
12:4f:5a:0b:81:e6:b5:a2:a0:ef:f0:f5:5e:5c:15:
d7:25:71:16:2e:93:0e:d6:3e:5b:7a:e2:1c:6b:7e:
dd:85:1e:bd:80:89:90:c9:94:b5:82:b5:8a:d7:99:
b7:be:d8:0e:c9:b3:28:d0:0c:32:b1:bf:72:e9:65:
cf:7e:6a:db:ae:5b:ea:da:cf:cc:b3:73:7c:71:21:
64:bb:4e:ae:6e:32:84:39:f3:8d:97:32:2a:fc:45:
60:c4:f8:21:ab:74:99:7f:82:c2:0b:34:96:1a:1e:
0f:8a:ae:94:3e:c6:99:12:d9:2c:86:e5:94:34:22:
53:ab:f1:8c:e8:58:ad:8b:ab:76:2d:df:87:b3:86:
01:d1:65:99:10:6a:e6:7c:e4:e5:36:1c:15:21:f7:
4e:5e:83:73:ac:7f:20:52:de:cb:0e:68:29:ed:8d:
d4:24:57:46:50:56:89:f8:38:5f:59:b0:4a:ab:ec:
8a:65:a6:4e:d3:cd:2e:a9:eb:02:fa:e8:8a:5b:db:
75:8f:29:f1:73:8f:94:0a:b2:5d:87:83:b7:e4:fd:
a6:c9:50:78:f4:ff:ca:f4:c7:37:8e:65:30:9a:bf:
16:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:60:FA:B3:61:9C:45:EA:10:CE:B1:63:5E:7C:25:39:25:54:1D:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/7d6e5ef2-e4ce-3c9b-9dbd-fd9418e385e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
X509v3 Authority Key Identifier:
keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
sbgp-ipAddrBlock: critical
IPv4:
152.42.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:74:6e:8e:b9:c2:77:8f:f3:c6:98:10:9b:68:12:c3:19:c0:
fb:8f:a0:ab:d6:7d:bf:96:41:b9:20:82:23:ed:8d:51:c0:51:
72:e4:ae:97:9a:62:27:f9:3e:f2:49:21:4e:61:9c:fd:e7:a1:
4b:ea:d1:6e:13:fc:d0:6a:a7:77:04:19:7a:ac:1a:57:6f:c7:
80:69:87:06:e5:cc:3e:7a:52:9c:34:4c:74:a0:83:3a:30:24:
f6:90:9e:7a:c1:39:b9:e7:a7:08:07:ab:dc:ac:0f:8e:5a:3f:
1e:45:ba:2d:cf:cd:13:19:eb:2f:70:ad:46:45:84:d8:1a:09:
ef:9a:b2:91:a9:ee:d0:a2:23:de:3a:b1:58:07:c1:cd:92:eb:
51:4f:5c:e4:bd:d0:d5:5c:e0:b3:c3:cf:2b:71:00:5c:b1:94:
86:eb:e9:cd:b7:9d:ff:63:c7:e0:1a:9a:56:b3:d2:c2:3a:16:
1f:30:42:59:10:28:f3:5a:02:6c:e1:be:c4:eb:9a:ed:1b:97:
f6:5a:01:5f:a1:85:b7:bf:1e:ce:d4:8e:03:f2:20:dd:4d:ef:
94:67:c6:76:54:02:f3:cb:f3:f1:92:9a:82:fc:03:44:80:12:
2b:87:33:dc:bd:29:fd:9a:e1:d5:98:2e:76:41:af:ec:07:84:
7b:71:2d:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTB7Jz+VqfYkwlAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy
Njk4MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk
NDNiNGYwYzYtYTM3OS00ODcwLWI0ZmEtNzc2ZTYzODhmZWQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZxZSaAMOWDGETngHyOwV/k8vBq25ZEouc2Y
yRIST1oLgea1oqDv8PVeXBXXJXEWLpMO1j5beuIca37dhR69gImQyZS1grWK15m3
vtgOybMo0Awysb9y6WXPfmrbrlvq2s/Ms3N8cSFku06ubjKEOfONlzIq/EVgxPgh
q3SZf4LCCzSWGh4Piq6UPsaZEtkshuWUNCJTq/GM6Fiti6t2Ld+Hs4YB0WWZEGrm
fOTlNhwVIfdOXoNzrH8gUt7LDmgp7Y3UJFdGUFaJ+DhfWbBKq+yKZaZO080uqesC
+uiKW9t1jynxc4+UCrJdh4O35P2myVB49P/K9Mc3jmUwmr8WzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN9g+rNhnEXqEM6xY158JTklVB2EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4
ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvN2Q2ZTVlZjItZTRjZS0z
YzliLTlkYmQtZmQ5NDE4ZTM4NWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh
ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl
MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3
ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHmCqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIB0bo65wneP88aYEJtoEsMZwPuPoKvWfb+WQbkggiPtjVHAUXLkrpea
Yif5PvJJIU5hnP3noUvq0W4T/NBqp3cEGXqsGldvx4BphwblzD56Upw0THSggzow
JPaQnnrBObnnpwgHq9ysD45aPx5Fui3PzRMZ6y9wrUZFhNgaCe+aspGp7tCiI946
sVgHwc2S61FPXOS90NVc4LPDzytxAFyxlIbr6c23nf9jx+Aamlaz0sI6Fh8wQlkQ
KPNaAmzhvsTrmu0bl/ZaAV+hhbe/Hs7UjgPyIN1N75RnxnZUAvPL8/GSmoL8A0SA
EiuHM9y9Kf2a4dWYLnZBr+wHhHtxLaA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:34:48 2025 by rpki-client