Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/03130b74-b49f-3d2c-b7c6-21b1c558c35e.roa
File: 03130b74-b49f-3d2c-b7c6-21b1c558c35e.roa (raw, json)
Hash identifier: Ay/g4yMkiC0VNRQmS8whjGq7xIpv+JGKaTMrOYGByP4=
Subject key identifier: 16:C2:84:31:82:3F:D4:31:AD:08:CF:98:8F:EE:11:65:39:E1:B0:B4
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F432858490F7C0338421B82E6084AFB00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/03130b74-b49f-3d2c-b7c6-21b1c558c35e.roa
Signing time: Mon 03 Mar 2025 02:00:39 +0000
ROA not before: Mon 03 Mar 2025 02:00:39 +0000
ROA not after: Sun 01 Jun 2025 01:00:39 +0000
asID: 54113
IP address blocks: 131.125.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0f:7c:03:38:42:1b:82:e6:08:4a:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Mar 3 02:00:39 2025 GMT
Not After : Jun 1 01:00:39 2025 GMT
Subject: CN=8b0e7941-ebcd-4ee2-9c23-6df0efe44035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1e:af:cf:60:2e:51:60:a7:4d:80:a1:ae:d6:
d1:e7:b3:98:05:81:af:c4:15:f7:ab:21:3d:f6:fb:
98:51:64:a2:b5:e5:f8:94:c4:cf:f3:e5:fc:29:18:
d4:59:67:95:fc:7f:e5:55:a2:d8:82:b7:46:92:a6:
37:45:64:4b:47:ff:18:9d:50:d6:e8:9c:bd:cc:d3:
df:8f:ac:45:3a:a6:4d:79:5b:e6:f7:22:e9:1f:81:
a2:e7:9c:bd:ec:59:aa:bd:8f:de:03:f4:8f:59:44:
73:ae:04:d8:78:26:54:1e:a0:fc:99:fd:1d:da:9a:
1b:8a:e4:7e:53:42:8d:14:45:4b:3e:f2:a7:71:af:
8d:51:42:96:37:2f:7a:e4:dd:14:e6:c6:e1:72:71:
69:29:1f:f1:12:bb:cd:e8:28:23:49:6f:db:45:01:
67:01:c1:3c:dc:0b:2e:44:a8:f6:28:eb:fc:84:9c:
95:d8:b7:1a:2c:80:ad:14:b7:a7:b0:46:73:87:bc:
1e:06:50:d1:31:01:3a:44:fe:cd:34:90:b1:df:8b:
18:77:2c:76:ba:0f:03:01:bc:f8:6c:06:bb:f2:0d:
5e:7f:82:8f:2a:c0:24:ad:9c:de:8f:3c:34:ec:4e:
bb:76:24:2a:76:e4:03:af:11:37:ee:f6:75:5c:94:
5c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C2:84:31:82:3F:D4:31:AD:08:CF:98:8F:EE:11:65:39:E1:B0:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/03130b74-b49f-3d2c-b7c6-21b1c558c35e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
131.125.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:76:f2:64:4d:18:58:36:fb:e6:62:25:b3:dc:ff:77:38:5c:
bc:c3:49:2f:eb:1b:e7:ad:2e:80:ab:3b:ff:2b:b4:75:00:ac:
0a:23:40:49:6a:e7:42:8e:cc:06:33:ab:8a:f8:48:6d:63:6e:
9b:b1:e3:60:77:bd:c7:7c:1f:41:60:8e:a4:b4:9f:2a:c9:67:
cf:f8:63:6c:70:5f:1c:b1:2b:cc:e8:a7:23:be:6b:6f:2a:8e:
e6:3e:d4:b8:8b:6d:fe:fe:3b:81:dc:e1:ea:c5:60:ed:f5:e3:
27:fa:aa:82:a5:c7:3e:a8:c9:ae:8d:a6:d7:8a:3b:c5:ea:be:
6f:4d:62:cb:1e:b0:63:46:8e:72:47:c3:c6:d4:e0:b6:2f:41:
bd:69:eb:31:bd:a3:7a:5c:59:ff:27:8b:d6:23:53:dd:9d:22:
1e:6c:b7:9e:a4:45:94:07:f8:a4:19:33:37:28:9c:64:04:25:
56:12:18:4b:ff:c4:75:08:84:51:21:d0:d0:d1:1a:99:30:67:
80:57:52:fb:ab:cc:ac:20:5a:49:aa:a2:91:18:33:8d:85:3b:
b3:7f:87:5d:61:18:6a:66:6f:42:4c:1a:d4:3f:56:b4:17:ec:
d4:d8:9b:13:0b:e3:e1:a3:25:8a:1e:74:fc:5e:98:93:9f:fd:
70:09:08:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkPfAM4QhuC5ghK+wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDMwMzAyMDAzOVoXDTI1MDYwMTAxMDAzOVowLzEtMCsGA1UEAxMk
OGIwZTc5NDEtZWJjZC00ZWUyLTljMjMtNmRmMGVmZTQ0MDM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhh6vz2AuUWCnTYChrtbR57OYBYGvxBX3qyE9
9vuYUWSiteX4lMTP8+X8KRjUWWeV/H/lVaLYgrdGkqY3RWRLR/8YnVDW6Jy9zNPf
j6xFOqZNeVvm9yLpH4Gi55y97FmqvY/eA/SPWURzrgTYeCZUHqD8mf0d2pobiuR+
U0KNFEVLPvKnca+NUUKWNy965N0U5sbhcnFpKR/xErvN6CgjSW/bRQFnAcE83Asu
RKj2KOv8hJyV2LcaLICtFLensEZzh7weBlDRMQE6RP7NNJCx34sYdyx2ug8DAbz4
bAa78g1ef4KPKsAkrZzejzw07E67diQqduQDrxE37vZ1XJRcWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBbChDGCP9QxrQjPmI/uEWU54bC0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMDMxMzBiNzQtYjQ5Zi0z
ZDJjLWI3YzYtMjFiMWM1NThjMzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31lMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFN28mRNGFg2++ZiJbPc/3c4XLzDSS/rG+etLoCrO/8rtHUArAojQElq
50KOzAYzq4r4SG1jbpux42B3vcd8H0FgjqS0nyrJZ8/4Y2xwXxyxK8zopyO+a28q
juY+1LiLbf7+O4Hc4erFYO314yf6qoKlxz6oya6NpteKO8Xqvm9NYssesGNGjnJH
w8bU4LYvQb1p6zG9o3pcWf8ni9YjU92dIh5st56kRZQH+KQZMzconGQEJVYSGEv/
xHUIhFEh0NDRGpkwZ4BXUvurzKwgWkmqopEYM42FO7N/h11hGGpmb0JMGtQ/VrQX
7NTYmxML4+GjJYoedPxemJOf/XAJCKQ=
-----END CERTIFICATE-----
Generated at Thu Apr 3 02:38:42 2025 by rpki-client