Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7/e6fdea3d-0a05-3fd0-866a-1305bafe0569.roa
File: e6fdea3d-0a05-3fd0-866a-1305bafe0569.roa (raw, json)
Hash identifier: LzcYHXcSh13FwLWq3KUtpcyBZ+jQ4De5WmQcD4UA19E=
Subject key identifier: 01:AE:0F:21:87:0F:25:AE:54:40:84:18:DB:5A:A3:E8:D9:52:C4:37
Certificate issuer: /CN=2605899c-3814-40b2-905e-c31be23847a7
Certificate serial: 010D0C9F432858487CEB2E75D167183DDBA3FE20
Authority key identifier: 52:68:86:EF:DA:BA:3A:C8:EC:C1:BA:9F:D2:65:39:72:8A:D2:FA:6C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7/e6fdea3d-0a05-3fd0-866a-1305bafe0569.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 4385
IP address blocks: 129.21.0.0/16 maxlen: 16
192.77.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:2e:75:d1:67:18:3d:db:a3:fe:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2605899c-3814-40b2-905e-c31be23847a7
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=bba2c134-fb55-4db7-8f2a-155a2cc3833a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:20:6b:46:73:78:36:23:34:3b:55:93:fe:03:
18:4c:f9:86:c7:d3:10:2c:fc:26:c4:53:40:dc:f6:
cf:83:fa:fd:9b:d9:a9:27:45:91:67:70:af:b5:ed:
93:35:07:92:fb:2c:66:23:07:d6:db:db:83:64:3b:
9a:3f:0d:f5:c2:15:04:d5:bf:18:da:24:cc:80:e1:
35:53:e0:ae:06:57:54:89:46:59:73:e3:2c:1b:a5:
20:b0:e9:c8:54:19:32:21:bb:82:4f:22:c7:71:a1:
53:e3:76:11:5a:d2:2d:54:5e:c3:75:ca:09:06:92:
1e:ea:97:ab:bb:d5:3d:52:6d:a5:3a:c2:08:0a:45:
2c:5a:5a:fb:eb:5f:5c:f1:15:52:40:69:2f:96:87:
5c:62:18:dd:31:6c:48:6e:ac:84:2a:c0:40:92:c8:
78:06:5a:5d:ce:c2:a5:55:13:bd:bb:57:69:9b:8e:
27:2d:2b:14:7f:1f:f3:8b:95:65:e3:64:a5:eb:87:
c2:e5:7b:b4:7f:ca:c0:9d:6a:28:34:09:80:4a:bc:
81:b3:58:82:99:e0:b7:00:18:2e:55:a2:4f:76:ec:
75:83:7d:5e:9b:31:e2:b6:a9:30:47:55:7a:9d:62:
64:f4:1a:05:9d:a9:eb:75:9e:d4:61:2a:da:de:52:
a2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AE:0F:21:87:0F:25:AE:54:40:84:18:DB:5A:A3:E8:D9:52:C4:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7/e6fdea3d-0a05-3fd0-866a-1305bafe0569.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7/2605899c-3814-40b2-905e-c31be23847a7.crl
X509v3 Authority Key Identifier:
keyid:52:68:86:EF:DA:BA:3A:C8:EC:C1:BA:9F:D2:65:39:72:8A:D2:FA:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2605899c-3814-40b2-905e-c31be23847a7.cer
sbgp-ipAddrBlock: critical
IPv4:
129.21.0.0/16
192.77.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:db:cc:ef:45:8f:c0:12:7a:b8:b2:39:85:12:73:1d:b3:7c:
14:1b:09:83:23:f4:c0:a4:ed:f4:d4:54:8a:bf:8a:a0:5e:df:
da:32:30:3c:be:54:34:9a:27:77:6d:62:36:f4:69:27:25:0e:
fb:40:22:ac:25:bb:5c:b4:1d:51:2e:08:d2:9d:17:e5:bd:f1:
0c:3c:46:11:91:01:30:18:f5:ee:45:4d:79:a5:73:10:9b:b9:
2c:07:a4:fa:73:90:51:c1:64:2a:48:0f:8f:85:3c:fa:9f:72:
81:fb:03:65:3b:e7:ff:ad:e0:05:27:43:2f:70:bd:81:00:2b:
a0:57:59:32:ac:db:28:30:df:d1:c7:72:8f:bd:7d:81:2a:77:
02:95:e2:a4:ba:8c:ea:9b:1c:a7:96:87:61:fa:ee:26:2b:3c:
0a:75:f2:35:3b:78:bf:ba:86:7e:e9:83:70:52:5d:0f:26:57:
29:1e:ec:54:82:59:77:9e:00:c6:cd:54:ce:27:34:a6:24:ae:
2e:b4:c8:8c:c0:cb:23:09:3a:dd:27:d2:1f:4a:39:f2:8b:34:
10:9a:5e:6a:03:f5:37:db:21:f6:c6:20:95:06:8e:5f:db:47:
32:4a:dc:54:e1:ce:da:31:dc:19:ef:d0:49:23:a7:b7:51:e6:
16:54:b9:8e
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEh86y510WcYPduj/iAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjYwNTg5OWMtMzgxNC00MGIyLTkwNWUtYzMxYmUyMzg0
N2E3MB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk
YmJhMmMxMzQtZmI1NS00ZGI3LThmMmEtMTU1YTJjYzM4MzNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCBrRnN4NiM0O1WT/gMYTPmGx9MQLPwmxFNA
3PbPg/r9m9mpJ0WRZ3Cvte2TNQeS+yxmIwfW29uDZDuaPw31whUE1b8Y2iTMgOE1
U+CuBldUiUZZc+MsG6UgsOnIVBkyIbuCTyLHcaFT43YRWtItVF7DdcoJBpIe6per
u9U9Um2lOsIICkUsWlr7619c8RVSQGkvlodcYhjdMWxIbqyEKsBAksh4BlpdzsKl
VRO9u1dpm44nLSsUfx/zi5Vl42Sl64fC5Xu0f8rAnWooNAmASryBs1iCmeC3ABgu
VaJPdux1g31emzHitqkwR1V6nWJk9BoFnanrdZ7UYSra3lKiUwIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFAGuDyGHDyWuVECEGNtao+jZUsQ3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yNjA1
ODk5Yy0zODE0LTQwYjItOTA1ZS1jMzFiZTIzODQ3YTcvZTZmZGVhM2QtMGEwNS0z
ZmQwLTg2NmEtMTMwNWJhZmUwNTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjYwNTg5OWMtMzgxNC00MGIyLTkw
NWUtYzMxYmUyMzg0N2E3LzI2MDU4OTljLTM4MTQtNDBiMi05MDVlLWMzMWJlMjM4
NDdhNy5jcmwwHwYDVR0jBBgwFoAUUmiG79q6Osjswbqf0mU5corS+mwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yNjA1ODk5Yy0zODE0LTQwYjItOTA1ZS1jMzFi
ZTIzODQ3YTcuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAgRUDBADA
TQkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAEdvM70WPwBJ6uLI5hRJzHbN8FBsJgyP0wKTt9NRUir+KoF7f
2jIwPL5UNJond21iNvRpJyUO+0AirCW7XLQdUS4I0p0X5b3xDDxGEZEBMBj17kVN
eaVzEJu5LAek+nOQUcFkKkgPj4U8+p9ygfsDZTvn/63gBSdDL3C9gQAroFdZMqzb
KDDf0cdyj719gSp3ApXipLqM6pscp5aHYfruJis8CnXyNTt4v7qGfumDcFJdDyZX
KR7sVIJZd54Axs1Uzic0piSuLrTIjMDLIwk63SfSH0o58os0EJpeagP1N9sh9sYg
lQaOX9tHMkrcVOHO2jHcGe/QSSOnt1HmFlS5jg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:43:22 2025 by rpki-client