Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/a3d697fb-881c-3ed6-a31a-85b5e6882a6c.roa
File: a3d697fb-881c-3ed6-a31a-85b5e6882a6c.roa (raw, json)
Hash identifier: nhbHyrbnvNjneW4j/VpNVk/cs0+aiJx3zFoDz1o0t4Q=
Subject key identifier: BD:85:03:A4:DF:90:D4:20:D4:51:A3:73:CA:97:25:67:EA:3B:A8:09
Certificate issuer: /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial: 010D0C9F4328584953C4210112BE3D3B7EB6A680
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/a3d697fb-881c-3ed6-a31a-85b5e6882a6c.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 6250
IP address blocks: 137.118.70.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:21:01:12:be:3d:3b:7e:b6:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=83e10553-277c-4e48-9cbe-dd2cfbede6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5b:f3:56:95:be:9f:66:45:be:96:10:93:e0:
9e:9e:a5:37:8b:04:f3:27:a1:13:94:dd:57:96:33:
f9:97:6e:b9:75:26:5f:34:78:a5:19:1e:f5:57:7e:
83:d7:ec:98:d9:f9:7b:54:21:97:72:22:0c:75:f8:
80:78:57:ee:16:63:28:c4:48:2d:46:a6:ea:33:8e:
6a:8a:3f:0a:fc:04:b6:d9:b0:0d:16:32:c9:46:f9:
30:00:eb:5f:9d:26:21:0a:2b:98:d6:5c:d6:39:63:
35:a3:49:f4:c5:33:33:41:c8:07:1a:ae:b7:f9:e7:
b8:45:4a:55:46:41:b4:97:dd:e5:bf:09:77:b5:0b:
63:7f:a8:33:1b:bb:42:65:28:36:0d:55:ea:8f:85:
70:ed:e6:22:27:d1:01:58:f2:a5:01:86:3d:8b:1b:
ae:e3:d8:d1:54:27:79:c1:ed:e6:e7:15:a5:1d:41:
6a:dc:ba:13:5c:d5:81:83:43:4a:28:9b:cd:21:8e:
9b:da:e6:55:53:2a:77:a1:24:e9:51:6a:dd:39:bb:
a3:65:2a:1b:d5:1c:41:b7:56:65:05:47:0b:ff:13:
56:fa:26:aa:04:52:7d:95:cc:ae:1f:6f:60:7b:98:
81:15:e2:0c:9b:18:47:b7:98:dc:de:a7:82:10:e1:
71:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:85:03:A4:DF:90:D4:20:D4:51:A3:73:CA:97:25:67:EA:3B:A8:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/a3d697fb-881c-3ed6-a31a-85b5e6882a6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
X509v3 Authority Key Identifier:
keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
sbgp-ipAddrBlock: critical
IPv4:
137.118.70.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:89:8d:90:46:68:38:eb:34:01:f2:90:85:38:67:90:c3:77:
68:22:0d:1f:05:aa:5b:9b:65:e3:12:04:a7:d0:98:a4:4a:25:
43:0b:79:a2:50:b6:81:23:78:af:3e:d3:6f:1a:65:8a:ad:59:
a9:d1:64:3f:33:a2:c0:13:c3:a5:ae:ee:08:43:3b:99:9e:51:
46:b3:ef:10:17:56:aa:7c:a9:c1:4f:26:b0:69:43:24:f2:81:
1d:2c:34:fc:34:41:ef:b0:13:74:c5:61:42:8a:48:70:f9:4e:
ac:a3:2d:8a:ea:df:36:2a:99:8d:64:0a:03:c4:4b:1c:ce:5a:
d8:b4:f3:f9:01:12:8e:b7:ed:7a:57:f6:8e:3c:e7:b6:8a:36:
88:c6:c9:07:84:3c:53:dc:1d:63:fc:50:3a:74:90:fc:34:0a:
cf:fd:78:f5:4b:19:7d:09:ef:8e:36:d6:e2:f5:7a:ea:eb:6f:
27:a5:99:d8:ce:69:24:32:b8:e4:05:e0:fd:7b:12:73:03:26:
c4:33:7e:7d:a3:01:9b:87:f1:1e:c7:68:ef:a7:53:87:b0:1d:
f1:6e:92:8d:d8:eb:57:e3:97:05:8f:1a:63:7c:31:20:8f:4e:
cd:91:79:2c:8c:e9:66:11:54:c5:99:ce:da:1c:5a:4c:70:80:
60:3d:30:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxCEBEr49O362poAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQwMzc4YTktMTAzYy00NWNhLTg2OWQtN2M5MTE1Yzdi
MGY2MB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
ODNlMTA1NTMtMjc3Yy00ZTQ4LTljYmUtZGQyY2ZiZWRlNmEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1vzVpW+n2ZFvpYQk+CenqU3iwTzJ6ETlN1X
ljP5l265dSZfNHilGR71V36D1+yY2fl7VCGXciIMdfiAeFfuFmMoxEgtRqbqM45q
ij8K/AS22bANFjLJRvkwAOtfnSYhCiuY1lzWOWM1o0n0xTMzQcgHGq63+ee4RUpV
RkG0l93lvwl3tQtjf6gzG7tCZSg2DVXqj4Vw7eYiJ9EBWPKlAYY9ixuu49jRVCd5
we3m5xWlHUFq3LoTXNWBg0NKKJvNIY6b2uZVUyp3oSTpUWrdObujZSob1RxBt1Zl
BUcL/xNW+iaqBFJ9lcyuH29ge5iBFeIMmxhHt5jc3qeCEOFxlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL2FA6TfkNQg1FGjc8qXJWfqO6gJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAz
NzhhOS0xMDNjLTQ1Y2EtODY5ZC03YzkxMTVjN2IwZjYvYTNkNjk3ZmItODgxYy0z
ZWQ2LWEzMWEtODViNWU2ODgyYTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQwMzc4YTktMTAzYy00NWNhLTg2
OWQtN2M5MTE1YzdiMGY2LzBkMDM3OGE5LTEwM2MtNDVjYS04NjlkLTdjOTExNWM3
YjBmNi5jcmwwHwYDVR0jBBgwFoAUQpcvL3NZ63r1YWANDjlXhTjWG8kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAzNzhhOS0xMDNjLTQ1Y2EtODY5ZC03Yzkx
MTVjN2IwZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiXZGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACeJjZBGaDjrNAHykIU4Z5DDd2giDR8FqlubZeMSBKfQmKRKJUMLeaJQ
toEjeK8+028aZYqtWanRZD8zosATw6Wu7ghDO5meUUaz7xAXVqp8qcFPJrBpQyTy
gR0sNPw0Qe+wE3TFYUKKSHD5TqyjLYrq3zYqmY1kCgPESxzOWti08/kBEo637XpX
9o4857aKNojGyQeEPFPcHWP8UDp0kPw0Cs/9ePVLGX0J74421uL1eurrbyelmdjO
aSQyuOQF4P17EnMDJsQzfn2jAZuH8R7HaO+nU4ewHfFuko3Y61fjlwWPGmN8MSCP
Ts2ReSyM6WYRVMWZztocWkxwgGA9MGk=
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:08:18 2025 by rpki-client