Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/8357b082-17dc-3d36-87f1-8e0746d54610.roa
File: 8357b082-17dc-3d36-87f1-8e0746d54610.roa (raw, json)
Hash identifier: dNVKmICBtfpPP5wGjywF4kprpaszavtKEn0y+Rpt2Yk=
Subject key identifier: FA:89:36:F9:06:1F:76:1C:34:E0:C0:05:3F:13:56:69:6E:D1:D9:A2
Certificate issuer: /CN=d9e22f6d-5551-4712-9f95-3008c51223ec
Certificate serial: 010D0C9F43285848E59BCE221BABBDAE07000D00
Authority key identifier: 28:C8:30:4D:BD:D8:4A:C0:1E:3B:86:1E:E5:4A:31:65:B6:B7:97:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/8357b082-17dc-3d36-87f1-8e0746d54610.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 16430
IP address blocks: 131.95.0.0/17 maxlen: 17
131.95.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:ce:22:1b:ab:bd:ae:07:00:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e22f6d-5551-4712-9f95-3008c51223ec
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=23fc8da7-00dc-430d-9db4-1dfb6e971e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:06:bc:e1:a1:a2:e3:b5:c8:c2:27:cb:3d:06:
38:25:5f:73:75:a6:f9:b8:c4:65:16:17:ce:07:99:
6b:a6:40:61:13:70:40:ac:31:ea:96:a9:b3:7d:17:
a6:6e:0e:ff:a3:b6:0c:4c:a2:c0:7c:b3:9a:cb:e6:
05:f6:19:44:49:c2:ab:08:1b:7c:b1:1f:dd:5a:37:
f7:f9:cc:11:fa:c8:66:35:67:31:18:f9:8d:cf:34:
2f:43:ac:f6:95:f4:08:43:f5:2d:9d:19:81:f0:e8:
ad:d9:f1:54:7a:0e:1e:a9:28:96:52:a2:44:3e:a7:
17:58:3a:fb:82:b2:5d:1d:45:c7:b9:24:80:f4:ed:
0b:d1:2f:12:19:d2:6b:8f:32:4c:66:f7:7d:54:51:
5a:77:d6:a9:8d:ed:8a:77:b7:93:f6:fe:6e:53:1e:
f2:e0:4e:17:b4:91:0c:a0:3c:83:fa:e4:aa:bf:ec:
c7:38:6b:4f:7c:80:71:a1:a4:0e:a3:0d:66:38:ae:
37:f1:6f:fe:95:31:f4:a4:15:bd:0f:b9:0c:fe:25:
43:9e:14:a2:26:26:4f:ab:8c:78:88:ef:b0:9a:fe:
ff:9a:0f:3e:8a:55:13:14:d0:2e:5c:5c:47:4b:a5:
85:bb:0c:a9:6b:6f:72:20:b2:37:b3:f9:47:a7:f7:
0c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:89:36:F9:06:1F:76:1C:34:E0:C0:05:3F:13:56:69:6E:D1:D9:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/8357b082-17dc-3d36-87f1-8e0746d54610.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.crl
X509v3 Authority Key Identifier:
keyid:28:C8:30:4D:BD:D8:4A:C0:1E:3B:86:1E:E5:4A:31:65:B6:B7:97:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec.cer
sbgp-ipAddrBlock: critical
IPv4:
131.95.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:08:2c:e9:33:ff:01:21:a2:ef:8b:b7:57:76:7b:f0:ea:ff:
e3:ca:58:92:57:64:41:91:c1:c5:73:8a:94:95:e6:dc:e0:7c:
28:82:af:f6:b5:bd:e6:ea:3d:c1:05:aa:5a:a0:62:7e:86:7e:
47:a4:53:66:0e:34:cf:b5:ad:db:c8:b4:4a:8a:70:71:0f:18:
6f:91:77:60:ac:f2:99:30:bb:32:a1:e4:c9:f2:f4:b5:cd:08:
cf:f9:6b:96:52:30:80:08:5c:f4:96:20:16:f4:1c:ea:a8:f5:
0e:e1:57:50:dd:31:0c:9a:78:f7:38:c5:a7:07:18:82:4c:57:
7b:82:8a:d2:ff:82:a3:17:ba:c0:7c:87:48:a4:52:2b:b4:5a:
95:f8:7d:b2:80:08:07:0f:fb:ce:d5:cd:0b:4d:57:50:34:f4:
73:19:16:37:78:e2:ce:5a:9a:3c:49:f5:9a:6c:ba:a9:17:4b:
e6:cc:48:68:5b:83:83:0f:47:29:eb:00:84:95:3a:a9:35:e6:
ed:3f:e2:dd:b9:f4:95:f2:13:e9:54:be:7b:aa:6c:72:db:d0:
c1:1a:f5:0f:84:83:2d:1d:3f:6c:2c:f6:89:54:38:e6:7a:11:
97:cb:87:4c:31:be:93:c0:b8:da:b9:f8:00:c7:96:02:73:c5:
f8:92:ec:f7
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjlm84iG6u9rgcADQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDllMjJmNmQtNTU1MS00NzEyLTlmOTUtMzAwOGM1MTIy
M2VjMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk
MjNmYzhkYTctMDBkYy00MzBkLTlkYjQtMWRmYjZlOTcxZTljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAa84aGi47XIwifLPQY4JV9zdab5uMRlFhfO
B5lrpkBhE3BArDHqlqmzfRembg7/o7YMTKLAfLOay+YF9hlEScKrCBt8sR/dWjf3
+cwR+shmNWcxGPmNzzQvQ6z2lfQIQ/UtnRmB8Oit2fFUeg4eqSiWUqJEPqcXWDr7
grJdHUXHuSSA9O0L0S8SGdJrjzJMZvd9VFFad9apje2Kd7eT9v5uUx7y4E4XtJEM
oDyD+uSqv+zHOGtPfIBxoaQOow1mOK438W/+lTH0pBW9D7kM/iVDnhSiJiZPq4x4
iO+wmv7/mg8+ilUTFNAuXFxHS6WFuwypa29yILI3s/lHp/cMLQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPqJNvkGH3YcNODABT8TVmlu0dmiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWUy
MmY2ZC01NTUxLTQ3MTItOWY5NS0zMDA4YzUxMjIzZWMvODM1N2IwODItMTdkYy0z
ZDM2LTg3ZjEtOGUwNzQ2ZDU0NjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDllMjJmNmQtNTU1MS00NzEyLTlm
OTUtMzAwOGM1MTIyM2VjL2Q5ZTIyZjZkLTU1NTEtNDcxMi05Zjk1LTMwMDhjNTEy
MjNlYy5jcmwwHwYDVR0jBBgwFoAUKMgwTb3YSsAeO4Ye5UoxZba3l3cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWUyMmY2ZC01NTUxLTQ3MTItOWY5NS0zMDA4
YzUxMjIzZWMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAg18wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAHQgs6TP/ASGi74u3V3Z78Or/48pYkldkQZHBxXOKlJXm3OB8KIKv9rW9
5uo9wQWqWqBifoZ+R6RTZg40z7Wt28i0SopwcQ8Yb5F3YKzymTC7MqHkyfL0tc0I
z/lrllIwgAhc9JYgFvQc6qj1DuFXUN0xDJp49zjFpwcYgkxXe4KK0v+Coxe6wHyH
SKRSK7Ralfh9soAIBw/7ztXNC01XUDT0cxkWN3jizlqaPEn1mmy6qRdL5sxIaFuD
gw9HKesAhJU6qTXm7T/i3bn0lfIT6VS+e6psctvQwRr1D4SDLR0/bCz2iVQ45noR
l8uHTDG+k8C42rn4AMeWAnPF+JLs9w==
-----END CERTIFICATE-----
Generated at Sat Apr 5 05:06:33 2025 by rpki-client