Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/b0e32122-6b33-3956-9eaf-de5a6dfc455a.roa
File: b0e32122-6b33-3956-9eaf-de5a6dfc455a.roa (raw, json)
Hash identifier: n+EygLukMDzsNfqDPxZogg2466yFmqjeYBgcXK7smIY=
Subject key identifier: 3C:06:74:03:8B:0F:21:F5:B1:64:40:56:DB:5C:44:52:F2:95:41:88
Certificate issuer: /CN=b741a525-1b5e-4308-93b6-815fed38e182
Certificate serial: 010D0C9F4328584869E9F1E9A9072C682B804740
Authority key identifier: B9:2F:F8:2F:D3:08:81:EE:3C:3A:BC:B0:88:BD:60:E2:F0:88:EE:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/b0e32122-6b33-3956-9eaf-de5a6dfc455a.roa
Signing time: Thu 02 Jan 2025 18:38:08 +0000
ROA not before: Thu 02 Jan 2025 18:38:08 +0000
ROA not after: Wed 02 Apr 2025 17:38:08 +0000
asID: 32490
IP address blocks: 162.252.152.0/22 maxlen: 22
199.101.204.0/22 maxlen: 22
205.209.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:e9:f1:e9:a9:07:2c:68:2b:80:47:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b741a525-1b5e-4308-93b6-815fed38e182
Validity
Not Before: Jan 2 18:38:08 2025 GMT
Not After : Apr 2 17:38:08 2025 GMT
Subject: CN=8cfe340a-0eb2-49af-a440-70141fa64c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b0:18:a6:21:72:28:95:04:6e:22:b9:2b:54:
2b:10:14:d4:c1:32:e3:7b:46:a5:c1:ab:a7:92:ba:
79:c8:ae:a3:21:6e:43:59:d7:99:99:38:04:31:7d:
47:e9:09:31:73:dd:bb:95:c4:73:5f:18:cb:e9:57:
f0:9c:a6:39:c8:89:24:88:28:5b:af:3e:fb:0c:56:
f8:d1:4f:ac:0b:60:c4:55:43:31:62:9d:aa:9a:8b:
42:b1:f2:32:58:b4:0b:b3:11:3e:d6:17:0d:7b:42:
20:7b:46:9e:b2:10:ef:48:2b:f1:59:bf:56:d8:81:
9a:09:2d:0c:75:41:fe:9b:79:52:90:51:df:3f:56:
71:fb:2f:41:4d:ff:da:50:2e:f7:fc:14:3b:8f:81:
70:8b:ce:3a:98:62:17:4c:b0:c3:5d:6d:de:58:1d:
ef:54:a7:1e:bd:ce:69:76:c1:91:e6:47:ea:a2:11:
27:53:8c:31:9d:8f:6f:8a:74:28:81:dc:d8:07:30:
61:5b:2a:ca:fe:f9:42:55:4a:35:e4:e8:e9:98:51:
39:7d:05:d6:f1:70:23:fe:2d:d5:90:aa:2e:e8:e7:
cd:dc:01:cb:48:67:fe:b1:06:c4:79:f2:3f:38:2c:
24:33:4c:c4:6a:63:3f:23:1e:d9:1a:7a:17:c1:07:
3f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:06:74:03:8B:0F:21:F5:B1:64:40:56:DB:5C:44:52:F2:95:41:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/b0e32122-6b33-3956-9eaf-de5a6dfc455a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/b741a525-1b5e-4308-93b6-815fed38e182.crl
X509v3 Authority Key Identifier:
keyid:B9:2F:F8:2F:D3:08:81:EE:3C:3A:BC:B0:88:BD:60:E2:F0:88:EE:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182.cer
sbgp-ipAddrBlock: critical
IPv4:
162.252.152.0/22
199.101.204.0/22
205.209.12.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:a4:ed:da:dd:31:f3:da:f1:4d:73:3b:3a:8e:d6:65:7e:28:
f7:c4:dd:c8:69:76:d9:23:ab:0f:e5:14:83:ae:37:b7:27:5b:
cb:f0:ce:49:d7:7c:06:bd:2a:a7:db:da:66:8f:f9:29:fc:d4:
e1:65:a8:ad:c1:49:4e:bd:82:72:34:41:d8:19:0a:b0:04:ea:
15:df:2b:45:9f:34:07:33:da:e7:f5:c9:a8:cb:8c:56:9d:53:
9f:74:ee:7b:b3:23:85:06:0f:a5:7f:0f:86:4d:97:e5:24:05:
2e:d5:68:bd:21:65:7f:eb:f0:2f:f1:f0:52:03:16:bb:1c:2f:
de:8f:2d:78:17:91:8c:b3:96:0a:a9:98:15:27:e5:98:07:d5:
b2:90:6b:e8:4d:c8:03:4d:da:62:54:1c:37:04:52:b7:2e:c4:
d2:ee:54:8e:20:c1:fa:49:ee:5d:fb:33:7a:22:91:62:99:ad:
c1:b9:2c:b5:49:48:ec:e4:61:60:5e:69:0a:e4:1f:97:07:25:
14:1b:94:56:36:3c:f0:30:b5:c0:ca:89:5c:10:94:6a:bc:99:
e4:0e:04:3c:d0:94:39:46:53:50:3b:03:6f:b7:38:1e:25:ee:
ce:54:d0:59:57:f5:af:9a:39:d8:f2:a6:46:09:56:62:9d:d7:
9d:4b:4c:82
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEhp6fHpqQcsaCuAR0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjc0MWE1MjUtMWI1ZS00MzA4LTkzYjYtODE1ZmVkMzhl
MTgyMB4XDTI1MDEwMjE4MzgwOFoXDTI1MDQwMjE3MzgwOFowLzEtMCsGA1UEAxMk
OGNmZTM0MGEtMGViMi00OWFmLWE0NDAtNzAxNDFmYTY0YzBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbAYpiFyKJUEbiK5K1QrEBTUwTLje0alwaun
krp5yK6jIW5DWdeZmTgEMX1H6Qkxc927lcRzXxjL6VfwnKY5yIkkiChbrz77DFb4
0U+sC2DEVUMxYp2qmotCsfIyWLQLsxE+1hcNe0Ige0aeshDvSCvxWb9W2IGaCS0M
dUH+m3lSkFHfP1Zx+y9BTf/aUC73/BQ7j4Fwi846mGIXTLDDXW3eWB3vVKcevc5p
dsGR5kfqohEnU4wxnY9vinQogdzYBzBhWyrK/vlCVUo15OjpmFE5fQXW8XAj/i3V
kKou6OfN3AHLSGf+sQbEefI/OCwkM0zEamM/Ix7ZGnoXwQc/5wIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFDwGdAOLDyH1sWRAVttcRFLylUGIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNzQx
YTUyNS0xYjVlLTQzMDgtOTNiNi04MTVmZWQzOGUxODIvYjBlMzIxMjItNmIzMy0z
OTU2LTllYWYtZGU1YTZkZmM0NTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjc0MWE1MjUtMWI1ZS00MzA4LTkz
YjYtODE1ZmVkMzhlMTgyL2I3NDFhNTI1LTFiNWUtNDMwOC05M2I2LTgxNWZlZDM4
ZTE4Mi5jcmwwHwYDVR0jBBgwFoAUuS/4L9MIge48OrywiL1g4vCI7ngwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNzQxYTUyNS0xYjVlLTQzMDgtOTNiNi04MTVm
ZWQzOGUxODIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCovyYAwQC
x2XMAwQCzdEMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAFqk7drdMfPa8U1zOzqO1mV+KPfE3chpdtkjqw/l
FIOuN7cnW8vwzknXfAa9Kqfb2maP+Sn81OFlqK3BSU69gnI0QdgZCrAE6hXfK0Wf
NAcz2uf1yajLjFadU5907nuzI4UGD6V/D4ZNl+UkBS7VaL0hZX/r8C/x8FIDFrsc
L96PLXgXkYyzlgqpmBUn5ZgH1bKQa+hNyANN2mJUHDcEUrcuxNLuVI4gwfpJ7l37
M3oikWKZrcG5LLVJSOzkYWBeaQrkH5cHJRQblFY2PPAwtcDKiVwQlGq8meQOBDzQ
lDlGU1A7A2+3OB4l7s5U0FlX9a+aOdjypkYJVmKd151LTII=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:29:49 2025 by rpki-client