Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/db3fd789-f63a-3a50-9a79-0b4cb63a7600.roa
File: db3fd789-f63a-3a50-9a79-0b4cb63a7600.roa (raw, json)
Hash identifier: Ise9iaDUB1dfw1vmzaPAvchaEZG3xeeVIstP5xwDtnE=
Subject key identifier: BB:C9:A8:FC:05:A1:97:58:18:F6:DB:1A:C8:36:2F:5D:6C:64:67:88
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D1632319AD94A064C4B2F0
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/db3fd789-f63a-3a50-9a79-0b4cb63a7600.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 131.150.128.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:63:23:19:ad:94:a0:64:c4:b2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=dfc93a04-940d-48ba-8abe-8036ca286bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:24:30:c0:59:fe:5a:38:83:bf:21:79:37:d0:
28:0e:7a:3d:01:58:78:a1:35:8a:50:74:fe:8f:87:
dc:d5:6c:f3:94:c1:9e:ab:9c:1e:d4:e5:0a:6e:4f:
c8:54:e5:cb:b0:c7:27:cd:42:7d:29:82:de:92:e7:
35:81:cc:42:5a:5d:8e:62:97:af:0f:d9:15:ad:06:
4c:a6:80:a5:c7:12:11:a7:a3:a0:fb:84:15:bb:71:
50:83:f2:a3:54:ea:1f:cd:ff:1e:db:56:13:b9:50:
fd:2b:8b:66:cb:4d:a6:0e:6c:3c:f4:2f:db:1d:05:
63:98:31:01:af:4f:94:42:27:d5:5c:91:a0:e8:a1:
10:67:44:c0:c1:bd:38:4e:76:81:1f:f9:dd:b1:a7:
ca:8f:f7:ea:b6:55:8c:b6:76:f8:bc:97:6d:22:d9:
22:f9:66:06:22:39:2e:8a:5e:5a:04:30:a4:3e:e4:
e0:0d:bf:61:8a:be:02:60:cb:02:19:47:5d:39:01:
96:0e:b8:2d:d7:a6:4b:0e:65:5c:36:8a:02:5d:9c:
f2:97:cd:8c:39:e3:fe:5f:7f:0a:8c:64:31:04:f4:
e8:8e:31:29:04:4e:5c:d7:8f:7e:a1:d8:df:fd:ea:
58:36:01:71:8d:ad:de:fc:26:d6:84:65:b7:97:aa:
7e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C9:A8:FC:05:A1:97:58:18:F6:DB:1A:C8:36:2F:5D:6C:64:67:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/db3fd789-f63a-3a50-9a79-0b4cb63a7600.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
131.150.128.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:b8:4d:6d:cb:82:b8:fa:fb:bd:39:b3:58:d6:43:c2:c4:ae:
7a:c0:49:d7:2b:8b:dd:14:2a:6c:90:44:6d:81:c8:c7:15:90:
2f:96:56:33:fd:b2:3d:35:ba:1b:fc:ed:8e:ef:7e:7d:5a:e9:
e4:0a:53:7a:5d:91:0d:50:3c:27:df:83:51:63:08:b3:c8:66:
10:e0:ea:19:38:4f:a6:de:e6:bf:0b:fb:49:07:77:71:b6:dd:
fe:b5:9e:3c:41:b8:83:3b:30:33:37:ff:36:4d:f7:72:d4:ab:
06:44:4b:2e:d6:b5:5c:a1:07:c1:6d:ba:b1:07:56:97:3d:ba:
dd:54:c7:65:c0:e1:35:bf:ae:bd:c6:40:e2:d5:9f:93:6b:2c:
7a:4b:91:dd:a1:16:23:44:b5:2f:54:f6:c6:22:e5:ce:3a:77:
69:32:2e:17:b8:f4:a3:da:3c:a4:de:b9:ec:f0:cb:52:76:aa:
74:92:3d:68:ca:b7:58:b8:c3:5a:4c:69:a4:27:3b:ce:01:3c:
82:14:62:d8:7c:12:48:4e:e6:07:81:64:19:2d:01:f1:42:6d:
71:48:aa:9d:4f:40:ea:46:5c:32:c3:dd:d8:e6:b5:fa:90:92:
17:5a:8f:ce:8c:ef:95:46:c0:50:c8:81:85:3e:0c:21:0b:53:
c8:5c:d3:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0WMjGa2UoGTEsvAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
ZGZjOTNhMDQtOTQwZC00OGJhLThhYmUtODAzNmNhMjg2YmQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCQwwFn+WjiDvyF5N9AoDno9AVh4oTWKUHT+
j4fc1WzzlMGeq5we1OUKbk/IVOXLsMcnzUJ9KYLekuc1gcxCWl2OYpevD9kVrQZM
poClxxIRp6Og+4QVu3FQg/KjVOofzf8e21YTuVD9K4tmy02mDmw89C/bHQVjmDEB
r0+UQifVXJGg6KEQZ0TAwb04TnaBH/ndsafKj/fqtlWMtnb4vJdtItki+WYGIjku
il5aBDCkPuTgDb9hir4CYMsCGUddOQGWDrgt16ZLDmVcNooCXZzyl82MOeP+X38K
jGQxBPTojjEpBE5c149+odjf/epYNgFxja3e/CbWhGW3l6p+mQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLvJqPwFoZdYGPbbGsg2L11sZGeIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZGIzZmQ3ODktZjYzYS0z
YTUwLTlhNzktMGI0Y2I2M2E3NjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5aAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF+4TW3Lgrj6+705s1jWQ8LErnrASdcri90UKmyQRG2ByMcVkC+WVjP9
sj01uhv87Y7vfn1a6eQKU3pdkQ1QPCffg1FjCLPIZhDg6hk4T6be5r8L+0kHd3G2
3f61njxBuIM7MDM3/zZN93LUqwZESy7WtVyhB8FturEHVpc9ut1Ux2XA4TW/rr3G
QOLVn5NrLHpLkd2hFiNEtS9U9sYi5c46d2kyLhe49KPaPKTeuezwy1J2qnSSPWjK
t1i4w1pMaaQnO84BPIIUYth8EkhO5geBZBktAfFCbXFIqp1PQOpGXDLD3djmtfqQ
khdaj86M75VGwFDIgYU+DCELU8hc01Q=
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:08:18 2025 by rpki-client