Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/37e2125b-0513-38b8-b530-2d308d41fbfe.roa
File: 37e2125b-0513-38b8-b530-2d308d41fbfe.roa (raw, json)
Hash identifier: X1Zpczm5tLuDFIdfUHB620LNfCcA6EylB+qius8Fou4=
Subject key identifier: 8A:9F:32:79:26:38:11:73:D1:E2:71:C1:00:35:A5:DA:8E:FC:89:23
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F432858492CAE894975669C7955623E00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/37e2125b-0513-38b8-b530-2d308d41fbfe.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 2914
IP address blocks: 129.250.161.128/27 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:89:49:75:66:9c:79:55:62:3e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=fa21787c-3359-4bd8-b5c8-3b60843437d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c2:28:6c:63:ed:96:74:84:62:e5:a3:82:4a:
10:14:01:e1:a1:9f:f5:b4:a5:0f:35:e3:c6:bd:2d:
98:16:50:77:38:fb:1e:90:94:ec:e7:97:d6:f5:0e:
2d:bc:c1:66:bd:61:33:57:7d:de:61:46:00:0a:25:
83:07:84:71:5a:c0:8a:6e:dc:49:e2:c1:c1:c5:36:
51:b0:b2:44:35:76:4b:24:c4:ec:5d:b7:b6:f4:25:
cb:92:9d:17:12:96:e3:61:4c:35:42:d7:0c:87:e5:
dc:32:15:43:72:db:1a:de:d4:8c:4a:ab:b0:bf:9c:
9f:de:e5:a6:45:93:ae:38:43:1b:68:66:80:0c:0b:
88:da:c4:af:0c:69:e5:68:59:f8:14:3f:60:dd:f2:
d0:29:e7:30:52:c3:c2:57:f2:b7:4d:dc:10:84:f9:
69:4c:ae:9c:92:ec:f8:3e:c2:8f:ab:9e:e1:cd:64:
3d:fd:bc:84:c2:c5:91:0e:c7:1e:0c:9d:ce:ea:a5:
25:cb:ec:1e:7c:a2:7e:7f:b1:fd:49:b8:a0:fc:91:
f6:d8:ba:a2:78:ee:62:cc:d1:8b:fe:10:8a:b1:ac:
1d:29:7f:0b:ce:4c:db:0d:44:8a:b5:93:f0:db:c0:
ff:42:65:9a:f2:f1:7b:67:7f:11:3f:c6:3c:5d:a8:
e2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9F:32:79:26:38:11:73:D1:E2:71:C1:00:35:A5:DA:8E:FC:89:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/37e2125b-0513-38b8-b530-2d308d41fbfe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
129.250.161.128/27
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:97:5a:c2:71:ec:a3:a6:1c:bf:46:9b:a4:eb:44:15:78:39:
10:26:d0:fc:17:52:ca:38:de:99:02:a0:26:26:fe:63:2b:97:
91:e1:10:e7:0b:6f:05:93:3a:1e:9b:fd:bc:94:df:86:3c:98:
f3:de:54:dc:93:3d:ce:09:69:11:d3:29:0e:50:54:da:f8:45:
94:85:c1:17:14:0f:b7:87:9d:60:8b:cd:57:71:47:c8:05:0d:
c6:c1:54:36:e9:67:db:30:ee:6f:f6:8c:da:1b:94:68:8a:df:
2a:8d:e4:62:61:0e:58:c4:fa:04:e3:c1:6c:ae:0d:1e:57:25:
00:75:a4:9d:29:a9:26:95:b7:4f:c2:e0:a5:7b:43:72:c8:bf:
87:9b:71:fb:53:9c:f3:4d:1e:31:80:25:60:5f:58:71:0b:ab:
51:df:a6:99:4a:2a:14:60:af:ce:be:95:8c:0a:87:73:77:91:
1a:a9:75:54:d7:35:73:c7:aa:d2:73:f5:89:38:ab:48:28:93:
f9:76:1f:2f:81:0c:33:47:1a:70:cb:e2:7a:10:8a:e2:6e:a3:
fc:b3:28:a6:37:33:de:f4:3c:d5:9b:b8:65:50:bf:66:72:55:
c0:a1:80:b9:8c:4c:9f:e7:5a:d9:eb:79:7a:16:0f:56:8b:a6:
ae:ca:43:39
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEksrolJdWaceVViPgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZmEyMTc4N2MtMzM1OS00YmQ4LWI1YzgtM2I2MDg0MzQzN2QzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8IobGPtlnSEYuWjgkoQFAHhoZ/1tKUPNePG
vS2YFlB3OPsekJTs55fW9Q4tvMFmvWEzV33eYUYACiWDB4RxWsCKbtxJ4sHBxTZR
sLJENXZLJMTsXbe29CXLkp0XEpbjYUw1QtcMh+XcMhVDctsa3tSMSquwv5yf3uWm
RZOuOEMbaGaADAuI2sSvDGnlaFn4FD9g3fLQKecwUsPCV/K3TdwQhPlpTK6ckuz4
PsKPq57hzWQ9/byEwsWRDsceDJ3O6qUly+wefKJ+f7H9Sbig/JH22LqieO5izNGL
/hCKsawdKX8LzkzbDUSKtZPw28D/QmWa8vF7Z38RP8Y8Xaji3QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIqfMnkmOBFz0eJxwQA1pdqO/IkjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMzdlMjEyNWItMDUxMy0z
OGI4LWI1MzAtMmQzMDhkNDFmYmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFgfqhgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCEl1rCceyjphy/Rpuk60QVeDkQJtD8F1LKON6ZAqAmJv5jK5eR4RDn
C28Fkzoem/28lN+GPJjz3lTckz3OCWkR0ykOUFTa+EWUhcEXFA+3h51gi81XcUfI
BQ3GwVQ26WfbMO5v9ozaG5Roit8qjeRiYQ5YxPoE48Fsrg0eVyUAdaSdKakmlbdP
wuCle0NyyL+Hm3H7U5zzTR4xgCVgX1hxC6tR36aZSioUYK/OvpWMCodzd5EaqXVU
1zVzx6rSc/WJOKtIKJP5dh8vgQwzRxpwy+J6EIribqP8syimNzPe9DzVm7hlUL9m
clXAoYC5jEyf51rZ63l6Fg9Wi6auykM5
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:30:31 2025 by rpki-client