Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/7c882028-6fde-3be8-8781-e768b7849341.roa
File: 7c882028-6fde-3be8-8781-e768b7849341.roa (raw, json)
Hash identifier: ZSkCePKCrOwqImobXl5kfXZyGbbSM4mUqzankj+fU9o=
Subject key identifier: D2:5C:88:63:CE:66:CE:67:FC:9C:21:73:DF:B8:7B:1D:E6:AF:68:67
Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial: 010D0C9F432858495579D7D2AF69F7B50E40CA80
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/7c882028-6fde-3be8-8781-e768b7849341.roa
Signing time: Fri 28 Mar 2025 03:43:02 +0000
ROA not before: Fri 28 Mar 2025 03:43:02 +0000
ROA not after: Thu 26 Jun 2025 03:43:02 +0000
asID: 401585
IP address blocks: 161.129.35.0/24 maxlen: 24
161.129.39.0/24 maxlen: 24
161.129.41.0/24 maxlen: 24
161.129.42.0/24 maxlen: 24
161.129.45.0/24 maxlen: 24
161.129.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:55:79:d7:d2:af:69:f7:b5:0e:40:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Validity
Not Before: Mar 28 03:43:02 2025 GMT
Not After : Jun 26 03:43:02 2025 GMT
Subject: CN=28874a11-8211-4be1-80e0-8fb37b8262fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e5:41:bb:f7:7a:b3:8e:3f:09:33:2c:22:89:
67:ac:14:b2:58:92:3f:53:66:3e:47:d6:58:a6:ec:
83:c8:65:68:48:25:71:87:ad:00:49:b7:73:70:b0:
f4:1e:5d:50:e3:f3:a9:2d:0e:60:da:cb:f6:49:c5:
01:a3:23:52:17:8e:4e:1e:3d:95:62:80:eb:c1:2d:
c5:b6:dc:e9:64:a3:d0:84:f2:e0:59:39:56:b0:63:
a3:01:e8:64:36:30:86:78:46:e2:90:26:8c:fc:2e:
c4:ca:ee:29:1a:5d:d1:d3:f1:68:51:b4:fa:a5:1e:
df:d0:3d:ac:a7:9a:60:9a:b5:40:a1:06:c1:d6:5c:
9e:5a:dc:06:ac:79:6c:14:f8:92:f5:60:ad:a9:ec:
72:30:80:3e:d8:1c:57:ef:17:a3:8a:6c:95:59:60:
0d:5c:d6:a1:8e:c6:99:40:82:04:74:5a:b4:af:1d:
50:9b:1c:7e:6c:e7:d7:1d:07:1f:c8:e7:f5:b0:77:
d3:3b:47:06:3f:ae:17:a2:9e:84:eb:0b:67:95:e1:
1c:7f:ee:9f:d6:0d:3e:36:9a:35:9a:cd:c9:e5:c1:
f4:ca:87:f6:35:7c:31:26:33:00:84:96:68:df:56:
30:80:51:a0:f0:8a:5e:d0:f3:26:db:a1:bd:7f:ed:
a8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5C:88:63:CE:66:CE:67:FC:9C:21:73:DF:B8:7B:1D:E6:AF:68:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/7c882028-6fde-3be8-8781-e768b7849341.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
X509v3 Authority Key Identifier:
keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
sbgp-ipAddrBlock: critical
IPv4:
161.129.35.0/24
161.129.39.0/24
161.129.41.0-161.129.42.255
161.129.45.0-161.129.46.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:20:db:93:99:1a:97:c1:16:c7:60:f9:fc:10:e9:28:11:b2:
97:40:75:cb:9c:b4:53:50:d9:e5:85:55:0f:cd:82:20:bb:6d:
0e:2a:01:9d:15:b9:ed:1b:81:a9:8f:e9:0b:d1:20:50:4f:21:
e6:9c:86:6c:00:1c:1f:57:29:d2:5b:25:d4:b1:64:95:ed:c0:
b1:d7:c4:04:52:3c:d0:b8:a6:d7:7f:35:85:de:73:76:bc:29:
34:bd:46:77:a4:cc:b4:23:3e:ec:7b:2e:4c:32:97:6a:4b:14:
e0:cf:b6:5c:1f:93:38:73:3f:0e:c0:bd:c2:8f:ce:5c:a7:cf:
6e:e5:3b:99:0c:6a:f7:85:1f:35:2c:b4:68:49:10:f3:d7:da:
c0:04:1d:1f:da:a0:55:4a:7e:99:27:92:de:8d:32:cb:3b:40:
4c:03:38:13:c9:fb:3a:2d:81:7b:8e:ef:af:29:d6:9c:3e:b5:
d7:8a:c3:8d:f1:11:dd:5c:d2:cf:bf:73:e3:7a:04:30:45:98:
fe:71:bf:db:46:2d:fe:8d:65:ce:56:bf:d9:4e:59:19:3a:94:
4c:e5:29:cc:cf:da:6b:a3:7d:4d:de:9d:e4:78:bc:d4:c7:70:
66:2b:a4:52:64:3c:02:64:f2:63:14:e8:3c:cb:79:99:90:ad:
5a:df:ad:18
-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWElVedfSr2n3tQ5AyoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx
NzVkMB4XDTI1MDMyODAzNDMwMloXDTI1MDYyNjAzNDMwMlowLzEtMCsGA1UEAxMk
Mjg4NzRhMTEtODIxMS00YmUxLTgwZTAtOGZiMzdiODI2MmZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOVBu/d6s44/CTMsIolnrBSyWJI/U2Y+R9ZY
puyDyGVoSCVxh60ASbdzcLD0Hl1Q4/OpLQ5g2sv2ScUBoyNSF45OHj2VYoDrwS3F
ttzpZKPQhPLgWTlWsGOjAehkNjCGeEbikCaM/C7Eyu4pGl3R0/FoUbT6pR7f0D2s
p5pgmrVAoQbB1lyeWtwGrHlsFPiS9WCtqexyMIA+2BxX7xejimyVWWANXNahjsaZ
QIIEdFq0rx1Qmxx+bOfXHQcfyOf1sHfTO0cGP64Xop6E6wtnleEcf+6f1g0+Npo1
ms3J5cH0yof2NXwxJjMAhJZo31YwgFGg8Ipe0PMm26G9f+2oDQIDAQABo4IDdzCC
A3MwHQYDVR0OBBYEFNJciGPOZs5n/Jwhc9+4ex3mr2hnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw
ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvN2M4ODIwMjgtNmZkZS0z
YmU4LTg3ODEtZTc2OGI3ODQ5MzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky
MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw
MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh
YjgxMDE3NWQuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQAoYEjAwQA
oYEnMAwDBAChgSkDBAChgSowDAMEAKGBLQMEAKGBLjBUBgNVHSABAf8ESjBIMEYG
CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl
c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDCINuTmRqX
wRbHYPn8EOkoEbKXQHXLnLRTUNnlhVUPzYIgu20OKgGdFbntG4Gpj+kL0SBQTyHm
nIZsABwfVynSWyXUsWSV7cCx18QEUjzQuKbXfzWF3nN2vCk0vUZ3pMy0Iz7sey5M
MpdqSxTgz7ZcH5M4cz8OwL3Cj85cp89u5TuZDGr3hR81LLRoSRDz19rABB0f2qBV
Sn6ZJ5LejTLLO0BMAzgTyfs6LYF7ju+vKdacPrXXisON8RHdXNLPv3PjegQwRZj+
cb/bRi3+jWXOVr/ZTlkZOpRM5SnMz9pro31N3p3keLzUx3BmK6RSZDwCZPJjFOg8
y3mZkK1a360Y
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:41:59 2025 by rpki-client