Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/95f3b12c-fbc5-3b30-bade-a3126d702a46.roa
File: 95f3b12c-fbc5-3b30-bade-a3126d702a46.roa (raw, json)
Hash identifier: PDKHIK4S+sKQDHiKMOst98O4p0TzSaq5vUzRBCFHZp8=
Subject key identifier: D9:EC:60:A1:F8:2A:7E:3F:D1:66:51:9C:0D:39:C4:13:47:46:14:57
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F43285848E0065D9E720D85E2F228EC20
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/95f3b12c-fbc5-3b30-bade-a3126d702a46.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 204670
IP address blocks: 128.121.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:5d:9e:72:0d:85:e2:f2:28:ec:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=f6e861ef-5e5e-452f-8a81-927c5ccc2ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:00:62:74:12:c6:7d:55:a3:9b:f1:09:bc:47:
c3:2b:ae:1c:bd:63:25:9f:94:22:38:9e:78:8c:dc:
3e:7c:76:8f:0d:96:27:16:9c:6e:0e:a0:7e:14:53:
dd:ed:9e:95:cd:10:07:8e:0b:39:8f:02:88:9a:59:
46:75:30:59:58:df:5c:bf:03:7c:8d:85:8e:78:c1:
84:78:5a:f5:35:3e:12:37:69:41:8e:38:18:2f:34:
ef:0e:9c:b2:58:6f:54:09:6e:fc:03:3e:84:39:69:
90:82:45:23:7c:d6:a0:30:77:99:ec:7f:b7:be:50:
ea:de:6b:3d:12:d8:21:9d:4b:08:92:1a:43:37:4f:
47:6d:03:62:04:b1:f3:79:5e:7e:4a:c7:3a:fc:ef:
12:b7:08:cb:21:95:87:52:73:e3:bd:c0:4a:64:2f:
6c:79:56:b8:8d:10:87:0a:e7:05:12:58:5a:61:0d:
a4:b9:d0:78:43:71:03:4c:fa:e2:e2:c9:93:ff:6a:
00:7d:68:0c:ab:a6:ce:ec:d3:db:70:61:fa:c1:ed:
09:e0:3c:6c:25:ca:99:d7:32:4a:24:1e:3f:99:fc:
0f:82:14:8b:e7:1c:08:af:f4:eb:c9:2b:d7:bf:53:
76:27:5e:73:45:f5:ee:6f:03:58:bb:9f:cd:52:05:
93:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EC:60:A1:F8:2A:7E:3F:D1:66:51:9C:0D:39:C4:13:47:46:14:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/95f3b12c-fbc5-3b30-bade-a3126d702a46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
128.121.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:a4:1d:4b:77:95:d2:0a:0c:f9:5e:e6:10:0c:32:7b:3f:68:
c0:30:54:76:46:90:f0:55:a3:cb:e8:7f:55:33:27:c1:a9:65:
2e:f6:e0:74:e4:21:0f:31:db:42:ef:ec:ea:ec:4c:d1:40:3c:
57:ad:e6:4f:81:7c:bc:66:9c:a6:af:45:32:53:b7:62:47:e4:
fb:40:cc:b7:14:15:97:d5:ca:93:51:3e:59:35:25:c9:f9:09:
0b:77:e4:09:57:96:10:33:8b:49:2a:90:77:8b:b9:02:61:99:
5b:2c:3d:53:7a:40:6b:2e:2f:c3:a9:6f:40:fe:85:1d:62:70:
45:a1:9d:bb:45:59:ed:b6:82:44:44:b0:a2:6a:6d:49:4f:8a:
c6:c7:80:76:d9:c2:f4:d0:09:8f:86:5f:0c:f0:34:2b:fc:0f:
fb:98:bc:69:68:ba:22:b6:84:2e:b6:26:33:95:78:d1:13:f8:
46:60:ac:44:8d:bd:17:e7:85:7b:de:a0:53:50:23:1b:df:65:
6f:c3:c7:43:89:03:71:ba:13:8a:87:24:58:6d:0b:8d:ed:80:
71:2c:77:f5:d1:19:76:e4:ce:0a:44:28:11:bc:69:ea:6c:3b:
d7:3b:0e:f5:22:b6:c3:dd:57:00:d9:8d:47:3e:45:9a:69:3a:
49:8f:c0:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBl2ecg2F4vIo7CAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk
ZjZlODYxZWYtNWU1ZS00NTJmLThhODEtOTI3YzVjY2MyYmExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwBidBLGfVWjm/EJvEfDK64cvWMln5QiOJ54
jNw+fHaPDZYnFpxuDqB+FFPd7Z6VzRAHjgs5jwKImllGdTBZWN9cvwN8jYWOeMGE
eFr1NT4SN2lBjjgYLzTvDpyyWG9UCW78Az6EOWmQgkUjfNagMHeZ7H+3vlDq3ms9
EtghnUsIkhpDN09HbQNiBLHzeV5+Ssc6/O8StwjLIZWHUnPjvcBKZC9seVa4jRCH
CucFElhaYQ2kudB4Q3EDTPri4smT/2oAfWgMq6bO7NPbcGH6we0J4DxsJcqZ1zJK
JB4/mfwPghSL5xwIr/TrySvXv1N2J15zRfXubwNYu5/NUgWTfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNnsYKH4Kn4/0WZRnA05xBNHRhRXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOTVmM2IxMmMtZmJjNS0z
YjMwLWJhZGUtYTMxMjZkNzAyYTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgHkgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIikHUt3ldIKDPle5hAMMns/aMAwVHZGkPBVo8vof1UzJ8GpZS724HTk
IQ8x20Lv7OrsTNFAPFet5k+BfLxmnKavRTJTt2JH5PtAzLcUFZfVypNRPlk1Jcn5
CQt35AlXlhAzi0kqkHeLuQJhmVssPVN6QGsuL8Opb0D+hR1icEWhnbtFWe22gkRE
sKJqbUlPisbHgHbZwvTQCY+GXwzwNCv8D/uYvGlouiK2hC62JjOVeNET+EZgrESN
vRfnhXveoFNQIxvfZW/Dx0OJA3G6E4qHJFhtC43tgHEsd/XRGXbkzgpEKBG8aeps
O9c7DvUitsPdVwDZjUc+RZppOkmPwOM=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:18:25 2025 by rpki-client