Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/68dae09f-47df-3c08-b3d6-68592a6158bf.roa
File: 68dae09f-47df-3c08-b3d6-68592a6158bf.roa (raw, json)
Hash identifier: VbIXpEZe1sHZftw7zI6mjH+U4kB3+0HsYIieNLMPRGM=
Subject key identifier: B4:98:43:2B:92:D1:D5:20:7A:C6:71:6B:76:00:B1:C9:E4:C2:D0:7A
Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial: 010D0C9F4328584908816AA2CFFEAE3B914FBE60
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/68dae09f-47df-3c08-b3d6-68592a6158bf.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 14340
IP address blocks: 13.110.0.0/16 maxlen: 24
96.43.144.0/20 maxlen: 24
96.43.152.0/23 maxlen: 24
136.146.0.0/16 maxlen: 24
136.147.0.0/17 maxlen: 24
136.147.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:6a:a2:cf:fe:ae:3b:91:4f:be:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=30de6b46-13f0-423a-800d-096675259bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3b:d0:4d:21:6c:91:e0:21:07:42:db:67:fa:
d8:a0:b7:56:fd:06:28:53:7d:41:0f:47:d2:46:ce:
df:92:49:25:7c:35:ee:79:01:84:f8:9d:ec:d4:99:
78:82:0d:30:21:18:48:34:34:7e:fa:a7:75:e6:4b:
31:2b:e8:d0:71:6d:e3:df:96:14:e3:97:5d:1c:3f:
91:d3:32:9a:f0:ae:22:f7:89:e9:5e:9f:e3:ad:ab:
07:10:c7:f8:4a:09:ff:8f:39:3f:d4:5f:de:fe:43:
d0:b6:f6:c1:73:2b:cd:89:ba:e8:07:df:cd:2c:b9:
4e:f7:e3:43:0e:09:24:d6:4b:7e:71:e9:cc:55:f5:
66:a8:86:a5:30:9b:20:f2:bc:df:1f:3e:4c:2b:04:
17:b7:88:75:a8:aa:f1:f9:3b:e7:f2:95:f9:37:07:
82:32:eb:eb:64:59:17:88:d6:35:b3:cb:5f:5b:f3:
ed:e3:f5:70:d1:b4:ff:8f:30:b1:15:81:93:e9:ee:
e0:8e:58:22:d7:00:86:3b:f9:aa:cb:fe:0e:3a:58:
c6:7a:f6:a6:ab:df:b4:1d:aa:c4:ff:fe:a9:3c:47:
b5:f0:9c:5d:39:fe:a2:27:a6:0c:ad:f7:38:c8:0e:
61:ba:e5:ba:2b:21:8f:b3:7e:c5:7b:cf:04:01:d8:
91:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:98:43:2B:92:D1:D5:20:7A:C6:71:6B:76:00:B1:C9:E4:C2:D0:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/68dae09f-47df-3c08-b3d6-68592a6158bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
X509v3 Authority Key Identifier:
keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
sbgp-ipAddrBlock: critical
IPv4:
13.110.0.0/16
96.43.144.0/20
136.146.0.0-136.147.127.255
136.147.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:b3:46:96:6f:ce:80:05:9f:82:ce:db:55:b9:c5:4d:d3:19:
92:6b:17:c8:a5:0c:fd:2d:be:7b:e5:6c:aa:8a:48:75:5e:f9:
19:d1:93:3a:67:b2:9d:8f:c3:b1:81:c1:3f:d0:e2:9e:bd:9d:
a0:56:86:48:1b:de:b6:6b:4c:af:44:9c:71:ee:7f:8c:55:30:
e5:20:2d:ab:7e:6a:69:9d:1a:6d:be:d4:33:53:9a:a6:c3:77:
e2:a4:26:4c:63:53:06:20:8f:68:5a:f7:7c:fb:c3:40:96:63:
ff:63:1f:c7:1e:03:db:9e:d8:30:47:a7:c7:57:f0:5b:c7:42:
8c:ca:d0:e0:58:89:36:f9:3a:5d:8b:9c:f3:36:59:78:06:8d:
cc:f2:6e:7d:c8:1f:66:97:ed:b9:1c:1f:ab:cd:b7:81:2f:16:
52:1c:05:1a:4b:3a:54:5e:e8:f5:a2:f2:a1:1b:0e:89:72:5a:
c7:ad:9c:e7:8b:42:c6:97:e7:84:85:15:d6:c9:5a:a3:95:19:
43:cf:56:eb:ef:87:7c:5f:2f:6d:35:fe:0a:2c:17:bd:f3:f3:
81:c8:dc:4d:78:5c:4d:71:6c:b9:a6:f4:a8:41:d6:99:30:ef:
d2:a7:63:c8:d2:25:dd:47:83:28:48:3a:b1:10:e0:0a:ac:f9:
3e:21:50:ff
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEkIgWqiz/6uO5FPvmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl
NTRmMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk
MzBkZTZiNDYtMTNmMC00MjNhLTgwMGQtMDk2Njc1MjU5YmJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDvQTSFskeAhB0LbZ/rYoLdW/QYoU31BD0fS
Rs7fkkklfDXueQGE+J3s1Jl4gg0wIRhINDR++qd15ksxK+jQcW3j35YU45ddHD+R
0zKa8K4i94npXp/jrasHEMf4Sgn/jzk/1F/e/kPQtvbBcyvNibroB9/NLLlO9+ND
Dgkk1kt+cenMVfVmqIalMJsg8rzfHz5MKwQXt4h1qKrx+Tvn8pX5NweCMuvrZFkX
iNY1s8tfW/Pt4/Vw0bT/jzCxFYGT6e7gjlgi1wCGO/mqy/4OOljGevamq9+0HarE
//6pPEe18JxdOf6iJ6YMrfc4yA5huuW6KyGPs37Fe88EAdiRnQIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFLSYQyuS0dUgesZxa3YAscnkwtB6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj
MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvNjhkYWUwOWYtNDdkZi0z
YzA4LWIzZDYtNjg1OTJhNjE1OGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1
NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm
ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz
MWMyZmU1NGYuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwMADW4DBARg
K5AwCwMDAYiSAwQHiJMAAwQEiJPQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJ2zRpZvzoAFn4LO21W5xU3T
GZJrF8ilDP0tvnvlbKqKSHVe+RnRkzpnsp2Pw7GBwT/Q4p69naBWhkgb3rZrTK9E
nHHuf4xVMOUgLat+ammdGm2+1DNTmqbDd+KkJkxjUwYgj2ha93z7w0CWY/9jH8ce
A9ue2DBHp8dX8FvHQozK0OBYiTb5Ol2LnPM2WXgGjczybn3IH2aX7bkcH6vNt4Ev
FlIcBRpLOlRe6PWi8qEbDolyWsetnOeLQsaX54SFFdbJWqOVGUPPVuvvh3xfL201
/gosF73z84HI3E14XE1xbLmm9KhB1pkw79KnY8jSJd1HgyhIOrEQ4Aqs+T4hUP8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:11 2025 by rpki-client