Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/4e01cf1c-b427-3d56-ab85-07dbd2ce44c5.roa
File: 4e01cf1c-b427-3d56-ab85-07dbd2ce44c5.roa (raw, json)
Hash identifier: OR2nxRQ+2FoT/VlXlWrE7571f6o4oTBJPfeGikwu/qk=
Subject key identifier: E0:F3:31:8B:F2:6C:24:89:24:34:E1:57:6D:81:32:D2:7E:40:E8:20
Certificate issuer: /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
Certificate serial: 010D0C9F432858487FB5DB4D7395FA067EE53FE0
Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/4e01cf1c-b427-3d56-ab85-07dbd2ce44c5.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 44486
IP address blocks: 134.65.192.0/22 maxlen: 22
164.152.160.0/22 maxlen: 22
169.155.44.0/22 maxlen: 22
169.155.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:db:4d:73:95:fa:06:7e:e5:3f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=ced7074e-26f0-48f4-a347-2b4fc0fba17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8d:fa:bd:bf:a5:7f:0e:c7:a1:99:f1:03:87:
da:04:eb:8d:32:06:56:2a:3f:d0:52:cf:50:40:83:
11:44:bf:c6:14:cc:0e:87:ac:a8:63:27:be:86:92:
62:36:82:a2:58:5c:98:a9:e9:df:37:21:23:71:97:
ca:fd:60:4c:af:45:97:e0:b5:57:08:c3:03:0e:c0:
37:86:1f:97:b7:9b:e1:4b:51:0b:00:85:75:86:57:
95:70:c0:16:4e:c7:d2:a2:0f:0b:06:e4:e7:f8:9d:
b8:4f:1d:4a:5d:c3:6b:0b:fe:31:44:5c:6f:b0:86:
77:f6:59:be:29:36:d2:b9:3f:78:b3:bf:4d:c5:c9:
82:91:06:7a:0e:4f:ad:3a:b1:94:b9:b5:71:eb:46:
7f:80:14:a2:08:f1:4b:96:5b:e7:a5:e5:57:08:83:
82:1e:f9:35:05:1e:3f:86:1b:cb:d4:57:32:e4:f3:
c8:6c:2e:be:34:0a:f6:85:d6:87:bd:04:4c:4f:99:
5d:b9:bf:84:df:a8:64:ab:2e:3d:3c:7b:e0:4e:a6:
f5:c0:26:c4:3d:34:d4:b9:08:c0:85:3c:f2:44:c0:
c3:2d:22:79:c5:87:26:bc:a3:06:2a:ed:95:bf:26:
1d:57:c8:a7:28:8b:f1:be:96:57:d9:16:0f:a7:0d:
c7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F3:31:8B:F2:6C:24:89:24:34:E1:57:6D:81:32:D2:7E:40:E8:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/4e01cf1c-b427-3d56-ab85-07dbd2ce44c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl
X509v3 Authority Key Identifier:
keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
sbgp-ipAddrBlock: critical
IPv4:
134.65.192.0/22
164.152.160.0/22
169.155.44.0/22
169.155.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:d2:65:c8:ca:c2:05:d2:17:6a:5c:4c:07:7d:40:2b:bf:d5:
74:d0:1f:6b:ba:f5:a0:ab:62:02:f6:ff:ba:6f:e9:d6:6c:27:
42:8d:69:02:69:a7:07:c3:fd:99:26:a7:7b:97:24:e9:5b:26:
10:60:a5:e4:54:a2:c7:29:74:22:4c:f6:86:a6:aa:b6:ce:7a:
c1:b3:08:72:64:01:fe:16:7a:2f:aa:6c:d8:ab:bd:72:aa:d3:
3e:6c:79:ca:35:79:ab:e9:34:41:d9:47:da:75:84:78:9d:47:
e2:6e:55:0d:b5:24:ba:3d:2c:7a:89:77:31:63:b5:10:b2:1a:
d3:81:06:6b:97:3a:0a:48:c6:47:ed:2f:8d:19:df:2b:6a:1b:
e5:0d:cf:d6:5b:fd:0a:6a:20:c9:da:b5:7d:3d:6d:32:9a:ab:
02:78:2e:fb:d9:ca:71:6d:9c:b4:5d:43:51:11:71:43:e2:70:
5b:75:f5:d8:f3:9b:3e:fe:a4:68:6e:49:b9:22:b4:79:fc:ea:
18:89:44:ea:f9:5d:a6:f9:ba:cd:b0:35:6c:4c:c4:4b:83:f1:
44:fe:92:a9:13:1c:e4:67:a1:46:27:9f:b2:b6:35:06:b9:fb:
47:dc:ae:b0:55:f1:78:9a:c4:b2:dd:11:cb:fc:5a:c6:99:70:
21:69:0f:92
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEh/tdtNc5X6Bn7lP+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzkwY2ViMWUtMzhmMC00NjkwLThlMTItZmRlZjBkYzBl
ZGRiMB4XDTI1MDExMDE0MDA1MVoXDTI1MDQxMDEzMDA1MVowLzEtMCsGA1UEAxMk
Y2VkNzA3NGUtMjZmMC00OGY0LWEzNDctMmI0ZmMwZmJhMTdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhI36vb+lfw7HoZnxA4faBOuNMgZWKj/QUs9Q
QIMRRL/GFMwOh6yoYye+hpJiNoKiWFyYqenfNyEjcZfK/WBMr0WX4LVXCMMDDsA3
hh+Xt5vhS1ELAIV1hleVcMAWTsfSog8LBuTn+J24Tx1KXcNrC/4xRFxvsIZ39lm+
KTbSuT94s79NxcmCkQZ6Dk+tOrGUubVx60Z/gBSiCPFLllvnpeVXCIOCHvk1BR4/
hhvL1Fcy5PPIbC6+NAr2hdaHvQRMT5ldub+E36hkqy49PHvgTqb1wCbEPTTUuQjA
hTzyRMDDLSJ5xYcmvKMGKu2VvyYdV8inKIvxvpZX2RYPpw3HzwIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFODzMYvybCSJJDThV22BMtJ+QOggMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zOTBj
ZWIxZS0zOGYwLTQ2OTAtOGUxMi1mZGVmMGRjMGVkZGIvNGUwMWNmMWMtYjQyNy0z
ZDU2LWFiODUtMDdkYmQyY2U0NGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzkwY2ViMWUtMzhmMC00NjkwLThl
MTItZmRlZjBkYzBlZGRiLzM5MGNlYjFlLTM4ZjAtNDY5MC04ZTEyLWZkZWYwZGMw
ZWRkYi5jcmwwHwYDVR0jBBgwFoAU7IhVYel9//xGKMwSEvEQkth0VUswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zOTBjZWIxZS0zOGYwLTQ2OTAtOGUxMi1mZGVm
MGRjMGVkZGIuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQChkHAAwQC
pJigAwQCqZssAwQCqZuoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBADPSZcjKwgXSF2pcTAd9QCu/1XTQH2u6
9aCrYgL2/7pv6dZsJ0KNaQJppwfD/Zkmp3uXJOlbJhBgpeRUoscpdCJM9oamqrbO
esGzCHJkAf4Wei+qbNirvXKq0z5seco1eavpNEHZR9p1hHidR+JuVQ21JLo9LHqJ
dzFjtRCyGtOBBmuXOgpIxkftL40Z3ytqG+UNz9Zb/QpqIMnatX09bTKaqwJ4LvvZ
ynFtnLRdQ1ERcUPicFt19djzmz7+pGhuSbkitHn86hiJROr5Xab5us2wNWxMxEuD
8UT+kqkTHORnoUYnn7K2NQa5+0fcrrBV8XiaxLLdEcv8WsaZcCFpD5I=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:24 2025 by rpki-client