Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/641dc7ab-2e97-4a45-ad4f-12f5134d7ae8/6b9050ed-b31a-306e-8c22-9cdfcc700699.roa
File: 6b9050ed-b31a-306e-8c22-9cdfcc700699.roa (raw, json)
Hash identifier: h2hwk45hFKOpOxhejFLjct2uAQ8zcFw4uYW3rs61Gy0=
Subject key identifier: 93:5C:1A:F8:A0:DA:36:BE:5B:7F:C9:86:9A:0D:7B:F0:2D:69:23:E8
Certificate issuer: /CN=641dc7ab-2e97-4a45-ad4f-12f5134d7ae8
Certificate serial: 010D0C9F43285848A9962A2EEE10D47845E0F4E0
Authority key identifier: 89:67:B2:A4:07:2E:B2:8A:46:A1:AA:AF:FC:44:ED:4A:F2:B1:B5:A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/641dc7ab-2e97-4a45-ad4f-12f5134d7ae8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/641dc7ab-2e97-4a45-ad4f-12f5134d7ae8/6b9050ed-b31a-306e-8c22-9cdfcc700699.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 31914
IP address blocks: 139.64.216.0/23 maxlen: 24
162.249.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:2a:2e:ee:10:d4:78:45:e0:f4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641dc7ab-2e97-4a45-ad4f-12f5134d7ae8
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=9fded5cc-31ea-4cf7-b5d6-336ada330541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f2:48:76:7e:d0:67:81:1f:11:a0:a1:b3:b4:
3c:90:bb:e4:a5:77:24:f5:7b:10:b0:94:d1:1f:8f:
e5:3d:51:52:9d:5e:ae:5e:48:2b:06:d0:b3:8d:39:
ad:6c:d1:45:68:ff:ff:90:cc:03:2f:d4:e0:63:1c:
50:12:f0:14:24:29:73:47:c2:12:1a:01:fc:63:32:
84:a4:57:29:90:d9:22:bf:d0:78:aa:a6:5f:ad:63:
ff:bd:7c:48:85:29:2a:fb:d4:43:db:6b:ea:d6:7b:
72:29:63:f4:96:52:cc:fb:ed:59:09:66:84:2e:5c:
ab:ed:87:8e:db:d2:f0:a6:9b:d0:5f:a4:f0:53:ea:
86:eb:39:ce:6f:bf:95:e5:6a:9d:fd:03:b5:6d:56:
8a:9e:b0:70:6d:61:04:41:2b:4f:cb:7c:36:b4:d2:
48:60:5f:f8:7c:b2:09:e8:fc:6e:61:40:e6:3c:3c:
96:64:75:d0:62:6e:08:d4:45:17:ca:02:1e:b8:68:
91:a2:c6:cc:d2:0f:ab:7d:e6:a3:fc:01:66:39:74:
0f:e7:41:44:45:29:c1:a0:58:e0:c0:ad:0d:45:00:
2d:73:39:d0:a2:fc:67:db:0a:69:36:c1:37:69:3b:
20:6f:3d:06:c1:b4:1e:46:d2:c4:db:02:bf:e5:a8:
1f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5C:1A:F8:A0:DA:36:BE:5B:7F:C9:86:9A:0D:7B:F0:2D:69:23:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/641dc7ab-2e97-4a45-ad4f-12f5134d7ae8/6b9050ed-b31a-306e-8c22-9cdfcc700699.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/641dc7ab-2e97-4a45-ad4f-12f5134d7ae8/641dc7ab-2e97-4a45-ad4f-12f5134d7ae8.crl
X509v3 Authority Key Identifier:
keyid:89:67:B2:A4:07:2E:B2:8A:46:A1:AA:AF:FC:44:ED:4A:F2:B1:B5:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/641dc7ab-2e97-4a45-ad4f-12f5134d7ae8.cer
sbgp-ipAddrBlock: critical
IPv4:
139.64.216.0/23
162.249.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:4d:dc:d3:09:c3:f3:ad:dd:3c:a9:32:18:cf:2a:2f:ad:ba:
65:34:d4:f5:6b:c6:a9:56:92:e1:1d:13:15:93:33:e2:e2:cc:
dd:c1:05:6f:f7:89:f6:82:b2:f2:20:88:c1:73:8f:91:85:fd:
78:b4:27:01:a4:88:65:dc:9e:f3:34:c5:fd:07:7e:cd:21:83:
63:98:db:ad:17:e3:93:7e:bf:3c:bf:94:e6:80:de:b5:36:1a:
49:12:8a:5c:a0:16:bf:20:54:91:a4:d5:57:24:c7:03:99:bc:
db:fd:da:9a:07:7e:40:dc:67:a2:09:f8:1b:50:e3:4d:07:fb:
56:1f:a7:0e:c0:d6:8a:fa:df:8d:92:2c:bf:c2:56:f7:4f:8c:
12:9b:05:80:db:f2:c1:23:5d:3d:d9:c2:dc:c1:06:bd:cc:59:
30:d4:98:4b:91:5d:a6:83:12:83:11:89:b8:1c:d4:4c:cc:4b:
63:7f:ba:c3:86:e9:96:f5:8f:91:72:4e:01:38:43:33:fa:c2:
51:33:a2:c2:8c:91:73:7b:3d:4f:40:51:91:d6:40:18:8b:7f:
18:80:fc:62:f1:a9:9f:88:13:5a:33:db:5d:a6:eb:5b:f1:bd:
60:d4:97:5a:6b:06:83:2c:58:dd:8d:a1:85:43:de:5a:b2:c2:
68:eb:1b:a8
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEipliou7hDUeEXg9OAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjQxZGM3YWItMmU5Ny00YTQ1LWFkNGYtMTJmNTEzNGQ3
YWU4MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
OWZkZWQ1Y2MtMzFlYS00Y2Y3LWI1ZDYtMzM2YWRhMzMwNTQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfJIdn7QZ4EfEaChs7Q8kLvkpXck9XsQsJTR
H4/lPVFSnV6uXkgrBtCzjTmtbNFFaP//kMwDL9TgYxxQEvAUJClzR8ISGgH8YzKE
pFcpkNkiv9B4qqZfrWP/vXxIhSkq+9RD22vq1ntyKWP0llLM++1ZCWaELlyr7YeO
29LwppvQX6TwU+qG6znOb7+V5Wqd/QO1bVaKnrBwbWEEQStPy3w2tNJIYF/4fLIJ
6PxuYUDmPDyWZHXQYm4I1EUXygIeuGiRosbM0g+rfeaj/AFmOXQP50FERSnBoFjg
wK0NRQAtcznQovxn2wppNsE3aTsgbz0GwbQeRtLE2wK/5agfMwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFJNcGvig2ja+W3/JhpoNe/AtaSPoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NDFk
YzdhYi0yZTk3LTRhNDUtYWQ0Zi0xMmY1MTM0ZDdhZTgvNmI5MDUwZWQtYjMxYS0z
MDZlLThjMjItOWNkZmNjNzAwNjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjQxZGM3YWItMmU5Ny00YTQ1LWFk
NGYtMTJmNTEzNGQ3YWU4LzY0MWRjN2FiLTJlOTctNGE0NS1hZDRmLTEyZjUxMzRk
N2FlOC5jcmwwHwYDVR0jBBgwFoAUiWeypAcusopGoaqv/ETtSvKxtaEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NDFkYzdhYi0yZTk3LTRhNDUtYWQ0Zi0xMmY1
MTM0ZDdhZTguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBi0DYAwQC
ovkoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGtN3NMJw/Ot3TypMhjPKi+tumU01PVrxqlWkuEdExWTM+Li
zN3BBW/3ifaCsvIgiMFzj5GF/Xi0JwGkiGXcnvM0xf0Hfs0hg2OY260X45N+vzy/
lOaA3rU2GkkSilygFr8gVJGk1VckxwOZvNv92poHfkDcZ6IJ+BtQ400H+1Yfpw7A
1or6342SLL/CVvdPjBKbBYDb8sEjXT3ZwtzBBr3MWTDUmEuRXaaDEoMRibgc1EzM
S2N/usOG6Zb1j5FyTgE4QzP6wlEzosKMkXN7PU9AUZHWQBiLfxiA/GLxqZ+IE1oz
212m61vxvWDUl1prBoMsWN2NoYVD3lqywmjrG6g=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:07:47 2025 by rpki-client