Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4db05b3e-5ce6-391b-b078-b831372f57bf.roa
File: 4db05b3e-5ce6-391b-b078-b831372f57bf.roa (raw, json)
Hash identifier: l9nh2fLkA2qAzOl5d+H+jf7iMUCruC7HzQLjI2+ftrI=
Subject key identifier: 71:D5:FC:E8:FD:41:4A:78:5F:FA:8A:B6:4B:D9:CB:E7:C8:2E:47:A7
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F43285848E0065D22DBED02042CC31900
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4db05b3e-5ce6-391b-b078-b831372f57bf.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 19893
IP address blocks: 128.121.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:5d:22:db:ed:02:04:2c:c3:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=9bf1a920-ea6a-4e31-827c-375edcb14f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e0:56:91:81:c9:ab:5a:11:f4:f8:6c:06:e3:
06:f6:8e:0a:2a:8f:76:c2:4e:34:21:26:d8:fd:49:
38:be:69:6d:d6:63:90:35:a8:4d:44:ed:d7:81:b0:
68:fd:91:8c:76:86:b1:ec:39:75:bf:d3:c2:ab:c2:
db:9a:58:a1:db:a8:47:fd:2d:d9:e9:02:2b:1c:a2:
6b:16:e1:8f:63:f3:86:b8:c0:3e:10:10:a1:9d:e6:
19:4f:a9:cb:89:00:64:18:a5:a9:d3:8c:46:db:f0:
05:5c:42:08:fa:2c:f1:4f:c4:18:49:4d:a7:64:08:
3e:98:fc:a2:05:8d:44:38:19:19:8b:18:7e:04:20:
92:5b:4b:a8:54:80:77:d2:a5:91:6c:ed:fe:5f:0b:
05:ca:9c:c3:6a:b0:8d:b8:92:82:ec:8f:73:a9:c0:
cd:a5:cd:7a:64:b2:57:08:a7:16:c8:f9:76:2d:36:
38:9a:4d:69:b0:5f:55:01:e0:c4:c5:53:cd:6d:29:
53:15:f7:aa:78:52:6b:da:2b:9f:09:ea:0f:89:42:
0b:3f:bb:3e:3b:d2:bd:ca:1a:8b:b1:41:1a:69:da:
56:69:19:23:5a:c2:01:c5:e3:5d:29:0c:60:fc:a0:
81:07:7c:81:72:f2:b1:9f:1a:77:6a:44:7e:af:2c:
f0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D5:FC:E8:FD:41:4A:78:5F:FA:8A:B6:4B:D9:CB:E7:C8:2E:47:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4db05b3e-5ce6-391b-b078-b831372f57bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
128.121.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:fd:ae:e5:45:65:09:41:ff:d2:1e:dc:65:d7:8b:39:39:fe:
69:09:4a:58:f4:09:ee:a0:91:07:2e:68:c7:25:76:a6:9c:2d:
72:ca:04:8e:47:64:6d:be:7d:74:a9:27:0a:55:8b:1b:83:94:
61:3d:0e:a9:3f:54:64:e6:2d:b9:91:b7:12:d3:da:f0:47:41:
b7:22:15:24:27:cb:23:9a:19:c0:f1:9b:a4:25:71:18:f0:99:
43:5f:74:fa:25:1f:bc:52:cc:02:bd:72:f5:04:06:d4:0a:a9:
af:d6:34:fc:13:f1:1e:0c:55:4a:e6:05:7f:25:71:41:c0:92:
30:97:70:57:8c:dd:a2:eb:35:6a:0c:b1:78:50:e6:5f:fd:dd:
66:4b:a1:de:b7:16:86:0f:b2:b8:69:20:d0:8f:11:37:e0:93:
11:79:39:20:71:1e:f9:38:0d:7e:2e:e0:eb:93:2c:fa:f6:8a:
68:cd:36:66:65:17:16:50:63:85:9e:55:4f:d5:2c:a3:7a:66:
9d:34:38:69:ab:9d:e8:f4:f4:ac:8d:3b:5b:4f:06:7b:c9:c9:
27:b2:26:d1:29:18:e9:a9:ae:02:e3:8b:b2:c3:3d:41:7f:d6:
78:e3:bd:f5:77:65:0f:8e:28:8c:fd:72:bf:a3:d8:8b:8c:a1:
cc:08:af:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBl0i2+0CBCzDGQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk
OWJmMWE5MjAtZWE2YS00ZTMxLTgyN2MtMzc1ZWRjYjE0ZjVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeBWkYHJq1oR9PhsBuMG9o4KKo92wk40ISbY
/Uk4vmlt1mOQNahNRO3XgbBo/ZGMdoax7Dl1v9PCq8Lbmlih26hH/S3Z6QIrHKJr
FuGPY/OGuMA+EBChneYZT6nLiQBkGKWp04xG2/AFXEII+izxT8QYSU2nZAg+mPyi
BY1EOBkZixh+BCCSW0uoVIB30qWRbO3+XwsFypzDarCNuJKC7I9zqcDNpc16ZLJX
CKcWyPl2LTY4mk1psF9VAeDExVPNbSlTFfeqeFJr2iufCeoPiUILP7s+O9K9yhqL
sUEaadpWaRkjWsIBxeNdKQxg/KCBB3yBcvKxnxp3akR+ryzwnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHHV/Oj9QUp4X/qKtkvZy+fILkenMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNGRiMDViM2UtNWNlNi0z
OTFiLWIwNzgtYjgzMTM3MmY1N2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgHkrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKD9ruVFZQlB/9Ie3GXXizk5/mkJSlj0Ce6gkQcuaMcldqacLXLKBI5H
ZG2+fXSpJwpVixuDlGE9Dqk/VGTmLbmRtxLT2vBHQbciFSQnyyOaGcDxm6QlcRjw
mUNfdPolH7xSzAK9cvUEBtQKqa/WNPwT8R4MVUrmBX8lcUHAkjCXcFeM3aLrNWoM
sXhQ5l/93WZLod63FoYPsrhpINCPETfgkxF5OSBxHvk4DX4u4OuTLPr2imjNNmZl
FxZQY4WeVU/VLKN6Zp00OGmrnej09KyNO1tPBnvJySeyJtEpGOmprgLji7LDPUF/
1njjvfV3ZQ+OKIz9cr+j2IuMocwIr4o=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:21:30 2025 by rpki-client