Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/42b9e44c-659d-35fa-8da3-8f2339416b02.roa
File: 42b9e44c-659d-35fa-8da3-8f2339416b02.roa (raw, json)
Hash identifier: 4kPmOZDr6LEgmPCeG/Hn3BOByzoWHp29Lu0bsn3484A=
Subject key identifier: 39:87:6E:3D:99:90:45:A1:A2:20:5E:33:7F:4F:62:71:3A:9A:DB:2D
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F43285848F4F6A2B56C72084807C48B40
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/42b9e44c-659d-35fa-8da3-8f2339416b02.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 3477
IP address blocks: 140.90.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:a2:b5:6c:72:08:48:07:c4:8b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=2dba1a60-1bb8-4220-a3a2-f9252f4642bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b9:22:86:b6:d9:50:11:e2:86:0b:7b:1b:84:
85:69:a7:70:bb:44:eb:e4:a1:0f:c8:2b:2f:be:65:
6f:33:66:6f:ad:c6:67:99:51:5b:84:b5:89:4e:a3:
3a:43:43:08:16:63:54:c6:12:a3:fb:e3:fd:98:d9:
29:03:e5:c0:55:3a:03:d6:2f:cd:5f:0b:ab:28:3e:
84:da:da:4b:72:e8:99:8a:b9:e2:ba:c8:41:68:32:
29:b0:cf:08:34:db:91:8b:96:51:f2:d4:c6:40:97:
49:f9:2c:0c:a5:9e:09:83:2d:99:c3:f6:93:e8:35:
8f:00:6a:53:64:54:92:de:e1:9e:ea:4a:75:7e:ab:
d5:a6:66:7e:e3:8a:c2:68:1f:b5:69:b6:f7:75:48:
77:12:82:4a:40:77:c7:d2:08:e6:a0:83:da:8f:34:
0e:5a:26:e7:c3:50:72:50:8a:ac:48:7d:21:ab:6f:
35:ff:19:fb:e4:eb:71:9a:08:5d:1a:82:5b:c3:96:
d5:20:b9:ff:dd:e2:4c:31:a7:9b:b2:d8:00:24:e3:
1d:20:77:00:d7:97:a2:47:6e:80:c4:90:06:54:08:
1d:53:79:3a:f8:6f:22:ad:89:f3:8c:d2:22:01:c2:
59:b5:c9:1d:cb:19:e7:cc:b8:e8:6b:90:df:64:61:
8b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:87:6E:3D:99:90:45:A1:A2:20:5E:33:7F:4F:62:71:3A:9A:DB:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/42b9e44c-659d-35fa-8da3-8f2339416b02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
140.90.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:a1:c3:d7:a2:1e:de:24:c9:97:1c:61:37:32:a1:90:7a:3d:
93:e7:f6:39:93:11:67:54:32:1b:90:53:9e:ae:68:68:40:6e:
87:44:c2:ae:ed:9e:c2:19:ab:fd:79:c1:ed:39:89:d1:f0:87:
9a:fa:0a:56:7f:ee:21:fc:0a:7d:41:17:35:ba:a8:f2:8d:fb:
10:1c:75:3c:f2:13:21:6e:45:e7:5d:d0:67:9c:3d:f7:cc:80:
2a:cd:7d:39:ac:52:6f:59:88:6d:42:22:4f:08:4a:85:8c:f4:
81:57:34:6c:f7:23:04:84:42:56:5f:a4:54:84:d9:b1:3a:fd:
d6:e4:ea:52:0e:36:24:5f:65:35:bc:d3:56:54:8d:b3:5c:6f:
74:78:04:28:c3:ec:45:08:db:91:67:e3:73:b9:04:f6:cc:ba:
2d:03:e2:5e:82:2c:9d:08:a2:63:9f:62:5a:02:84:34:c2:33:
4e:96:f2:6b:8f:9e:98:e8:a6:34:e4:65:8b:5e:65:ce:8c:52:
50:a5:d1:be:49:c9:90:04:22:9d:ef:b5:5e:58:22:a6:59:07:
22:9f:e6:45:e5:03:56:8f:4f:3a:0e:98:05:16:7f:41:ec:4c:
7d:ea:64:9f:08:01:4c:5b:7b:40:ae:36:6d:b8:dd:ef:c0:40:
3a:78:eb:85
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEj09qK1bHIISAfEi0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5
YzIwMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
MmRiYTFhNjAtMWJiOC00MjIwLWEzYTItZjkyNTJmNDY0MmJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLkihrbZUBHihgt7G4SFaadwu0Tr5KEPyCsv
vmVvM2ZvrcZnmVFbhLWJTqM6Q0MIFmNUxhKj++P9mNkpA+XAVToD1i/NXwurKD6E
2tpLcuiZirniushBaDIpsM8INNuRi5ZR8tTGQJdJ+SwMpZ4Jgy2Zw/aT6DWPAGpT
ZFSS3uGe6kp1fqvVpmZ+44rCaB+1abb3dUh3EoJKQHfH0gjmoIPajzQOWibnw1By
UIqsSH0hq281/xn75OtxmghdGoJbw5bVILn/3eJMMaebstgAJOMdIHcA15eiR26A
xJAGVAgdU3k6+G8irYnzjNIiAcJZtckdyxnnzLjoa5DfZGGLPwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDmHbj2ZkEWhoiBeM39PYnE6mtstMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx
MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvNDJiOWU0NGMtNjU5ZC0z
NWZhLThkYTMtOGYyMzM5NDE2YjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi
M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi
OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm
YmE0YjljMjAuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjFowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAe6HD16Ie3iTJlxxhNzKhkHo9k+f2OZMRZ1QyG5BTnq5oaEBuh0TCru2e
whmr/XnB7TmJ0fCHmvoKVn/uIfwKfUEXNbqo8o37EBx1PPITIW5F513QZ5w998yA
Ks19OaxSb1mIbUIiTwhKhYz0gVc0bPcjBIRCVl+kVITZsTr91uTqUg42JF9lNbzT
VlSNs1xvdHgEKMPsRQjbkWfjc7kE9sy6LQPiXoIsnQiiY59iWgKENMIzTpbya4+e
mOimNORli15lzoxSUKXRvknJkAQine+1XlgiplkHIp/mReUDVo9POg6YBRZ/QexM
fepknwgBTFt7QK42bbjd78BAOnjrhQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:39:06 2025 by rpki-client