Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0bc6169c-5034-391b-8523-8a1898e0af5b.roa
File: 0bc6169c-5034-391b-8523-8a1898e0af5b.roa (raw, json)
Hash identifier: LspxaSEtdGIWNFkgYueEKzdYg5CtdyBo4P6wugOQkjY=
Subject key identifier: F1:AC:28:84:F8:71:12:F7:D6:30:27:A7:C9:74:67:63:24:59:64:45
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848C815ED4D89A10D8EA47CA950
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0bc6169c-5034-391b-8523-8a1898e0af5b.roa
Signing time: Wed 05 Feb 2025 12:12:44 +0000
ROA not before: Wed 05 Feb 2025 12:12:44 +0000
ROA not after: Tue 06 May 2025 11:12:44 +0000
asID: 134190
IP address blocks: 205.177.199.64/27 maxlen: 32
205.177.209.224/27 maxlen: 32
205.177.210.32/27 maxlen: 32
205.177.211.0/27 maxlen: 32
205.177.212.64/27 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:15:ed:4d:89:a1:0d:8e:a4:7c:a9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Feb 5 12:12:44 2025 GMT
Not After : May 6 11:12:44 2025 GMT
Subject: CN=771e568a-0f1e-43bf-8a43-9f0df6298c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:98:94:a6:a8:90:8a:db:1c:d6:2e:9c:25:
41:ef:f1:0d:30:03:d9:72:86:88:70:84:bf:4d:3b:
8f:d6:f6:4d:ef:44:8a:ab:20:49:e2:e2:bb:cb:d0:
da:a5:e2:04:41:f5:ab:b8:52:38:09:ce:dc:92:5a:
9c:10:f4:0c:b2:a2:91:23:ae:ff:54:2e:2e:18:a8:
e7:cf:d3:3c:5f:2d:42:85:94:6e:bd:b6:27:a5:71:
dc:9f:e4:c4:a5:a3:81:83:3f:6c:91:44:27:91:fa:
79:6a:e0:ff:b5:78:5b:df:53:32:0b:b7:40:ca:92:
a6:79:6f:c0:9a:23:57:39:97:f3:5f:e7:d4:61:35:
23:a7:6a:94:4a:9a:0a:1e:e5:87:76:3e:b1:11:87:
a0:a6:6a:d4:72:e3:60:e9:98:24:ef:6e:2b:3e:7c:
9f:92:19:9b:cf:6c:76:aa:98:20:58:f0:2c:cc:da:
eb:f6:b8:c8:d1:7f:f3:5f:10:a7:49:d6:e0:57:0e:
f0:47:fb:dd:97:7b:30:71:60:83:a0:fd:80:8b:27:
e5:c2:bf:8e:b8:bc:fb:34:cd:21:5f:8a:25:22:1d:
c1:fc:39:9f:aa:20:b1:71:74:66:1b:87:8d:2c:46:
ca:41:92:ec:58:35:75:04:5e:05:88:51:34:77:b2:
24:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AC:28:84:F8:71:12:F7:D6:30:27:A7:C9:74:67:63:24:59:64:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0bc6169c-5034-391b-8523-8a1898e0af5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
205.177.199.64/27
205.177.209.224/27
205.177.210.32/27
205.177.211.0/27
205.177.212.64/27
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:e3:d1:dc:b9:1e:41:d1:bc:83:0e:22:0b:fd:dc:03:fd:b0:
c9:4c:00:c9:3f:b9:3e:f0:6e:72:35:df:64:0e:66:4d:eb:a2:
ce:73:2d:27:ad:79:71:e7:cb:89:1c:b9:2c:c2:2b:5b:3a:0a:
3e:59:89:99:7f:c9:a8:64:b7:e8:9c:a6:3d:65:d1:c7:e5:b0:
da:5a:b0:05:df:a4:b9:a8:d5:ab:57:a5:9f:e7:5b:9a:54:1c:
04:ba:59:4e:7d:50:e1:9b:11:d9:6f:1a:4c:c6:89:9c:5a:ba:
22:c1:39:e0:99:ca:7f:b9:99:7f:dc:da:ff:96:1a:c6:b0:1e:
45:7f:88:82:8f:ad:c3:80:ea:95:54:8e:d4:69:0e:cf:00:82:
7a:9f:2e:0a:30:16:6a:a6:44:7d:8d:a9:29:6a:3d:1d:b2:be:
2f:14:51:4c:36:d2:b6:ac:a8:e1:65:87:e2:9c:39:cf:c5:e8:
40:02:63:fd:5f:07:37:69:dc:ea:66:df:57:ff:e4:2c:70:17:
25:af:43:b6:91:f2:44:18:bb:e4:a0:63:01:f0:82:3b:bd:6e:
b5:af:f1:67:3d:00:b3:08:67:65:bd:58:66:26:f4:67:50:08:
a8:5c:40:2a:46:12:36:e6:7b:b8:dd:80:48:3c:5d:9b:b3:97:
eb:11:31:2a
-----BEGIN CERTIFICATE-----
MIIGYDCCBUigAwIBAgIUAQ0Mn0MoWEjIFe1NiaENjqR8qVAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw
YzQ4MB4XDTI1MDIwNTEyMTI0NFoXDTI1MDUwNjExMTI0NFowLzEtMCsGA1UEAxMk
NzcxZTU2OGEtMGYxZS00M2JmLThhNDMtOWYwZGY2Mjk4YzNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6qYlKaokIrbHNYunCVB7/ENMAPZcoaIcIS/
TTuP1vZN70SKqyBJ4uK7y9DapeIEQfWruFI4Cc7cklqcEPQMsqKRI67/VC4uGKjn
z9M8Xy1ChZRuvbYnpXHcn+TEpaOBgz9skUQnkfp5auD/tXhb31MyC7dAypKmeW/A
miNXOZfzX+fUYTUjp2qUSpoKHuWHdj6xEYegpmrUcuNg6Zgk724rPnyfkhmbz2x2
qpggWPAszNrr9rjI0X/zXxCnSdbgVw7wR/vdl3swcWCDoP2Aiyflwr+OuLz7NM0h
X4olIh3B/DmfqiCxcXRmG4eNLEbKQZLsWDV1BF4FiFE0d7IkowIDAQABo4IDcjCC
A24wHQYDVR0OBBYEFPGsKIT4cRL31jAnp8l0Z2MkWWRFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5
ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvMGJjNjE2OWMtNTAzNC0z
OTFiLTg1MjMtOGExODk4ZTBhZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm
MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy
MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl
ZGEyMjBjNDguY2VyMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAATAjAwUFzbHHQAMF
Bc2x0eADBQXNsdIgAwUFzbHTAAMFBc2x1EAwVAYDVR0gAQH/BEowSDBGBggrBgEF
BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj
ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQ+PR3LkeQdG8gw4i
C/3cA/2wyUwAyT+5PvBucjXfZA5mTeuiznMtJ615cefLiRy5LMIrWzoKPlmJmX/J
qGS36JymPWXRx+Ww2lqwBd+kuajVq1eln+dbmlQcBLpZTn1Q4ZsR2W8aTMaJnFq6
IsE54JnKf7mZf9za/5YaxrAeRX+Igo+tw4DqlVSO1GkOzwCCep8uCjAWaqZEfY2p
KWo9HbK+LxRRTDbStqyo4WWH4pw5z8XoQAJj/V8HN2nc6mbfV//kLHAXJa9DtpHy
RBi75KBjAfCCO71uta/xZz0AswhnZb1YZib0Z1AIqFxAKkYSNuZ7uN2ASDxdm7OX
6xExKg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:09:15 2025 by rpki-client