Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7d9b4f01-e206-3469-8ff2-a89a53def5e1.roa
File: 7d9b4f01-e206-3469-8ff2-a89a53def5e1.roa (raw, json)
Hash identifier: CqNuR5nj/QdPUWtaHROIm0kh64Sm9HiNCaaPpEiIsI4=
Subject key identifier: B2:F6:8E:05:BC:A2:76:DB:D7:DC:D3:D9:B7:E0:AC:AB:3F:62:E5:CD
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F4328584953C421EF959110E1A6460240
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7d9b4f01-e206-3469-8ff2-a89a53def5e1.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 9009
IP address blocks: 136.0.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:21:ef:95:91:10:e1:a6:46:02:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=6a4b9998-ea60-4009-b3f6-c70cbdedaa21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:be:52:65:b6:aa:32:97:92:96:cb:6a:ec:d7:
95:78:50:26:b1:ce:5a:20:ef:22:68:a3:6d:29:15:
66:c6:14:49:4b:7b:e0:12:a7:0a:db:cd:a8:0e:f1:
6d:37:af:a8:85:37:af:44:02:27:2e:cf:38:7b:52:
d5:9c:df:23:8a:1f:b3:c7:ef:e8:20:56:6d:82:30:
ec:52:25:99:6c:59:46:53:3d:58:2b:1e:8e:1c:1c:
ea:f3:24:67:38:c7:09:f8:66:9b:e6:14:29:57:b6:
41:c9:4b:c5:3c:7a:55:7f:09:b0:16:1b:34:b6:73:
0f:1c:f6:74:9c:df:0f:cd:ad:31:f1:bc:48:f6:e3:
df:1c:77:0c:70:ca:ec:19:ef:ff:2b:ed:c1:ab:54:
7d:90:8e:b4:3b:59:49:37:30:66:46:d0:8e:85:18:
7f:aa:fe:fe:71:7b:f9:d2:25:28:88:75:be:b0:8f:
38:4f:7a:b9:cd:f5:bf:75:17:ff:59:7a:5a:cc:fd:
68:bd:ed:f2:b0:5b:36:2c:6c:e7:ff:fe:1b:fa:20:
df:02:e3:3c:62:c9:ad:dd:aa:6b:91:d0:e4:85:ce:
b1:67:dd:e9:1f:06:95:ce:f0:06:c2:f7:89:ea:e0:
73:02:21:e2:97:96:77:60:4b:91:bc:98:1d:24:e5:
9b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F6:8E:05:BC:A2:76:DB:D7:DC:D3:D9:B7:E0:AC:AB:3F:62:E5:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7d9b4f01-e206-3469-8ff2-a89a53def5e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
136.0.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:d2:18:5f:e4:1b:a9:35:c2:c1:cd:dc:92:c4:bf:9a:86:aa:
89:cc:2d:57:2e:dc:73:53:ab:9b:18:fd:18:d5:72:ab:de:58:
1d:14:02:f4:3a:7c:10:d3:5d:e8:2b:6a:b6:5b:ff:09:01:f4:
3c:4c:c0:dd:13:68:0b:df:02:7f:b2:82:cf:a5:a5:04:e9:c7:
f7:77:f3:5e:ec:cc:1a:8b:0a:42:0e:56:b8:27:c8:3c:92:e4:
47:12:3e:99:8d:c8:46:bf:ce:ee:07:b4:c0:f8:e4:55:64:90:
9f:a0:ec:8c:8b:56:2e:a0:24:e4:de:0c:c1:d3:f9:08:d7:9a:
cf:46:cd:64:e7:3d:29:e6:9e:04:33:16:de:ff:8c:e9:fb:b5:
62:ae:57:6f:5d:92:74:d2:58:12:99:55:1b:f0:3b:e3:0e:71:
cb:cc:b0:a0:05:3f:45:a3:c0:e2:a8:fe:28:c0:37:bc:ce:62:
73:52:34:3d:b0:8b:57:f4:0c:f5:f1:fe:ef:bb:a9:e8:ca:87:
d0:bd:e2:49:55:03:22:0c:81:99:7c:cf:be:b2:88:dc:a6:c5:
6e:90:4d:81:7d:68:8e:93:28:12:6b:f5:cc:0e:37:09:ae:3d:
a7:c5:73:d6:41:e1:96:92:3d:da:47:db:b6:d6:b5:5b:5f:48:
e1:c5:23:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxCHvlZEQ4aZGAkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
NmE0Yjk5OTgtZWE2MC00MDA5LWIzZjYtYzcwY2JkZWRhYTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgL5SZbaqMpeSlstq7NeVeFAmsc5aIO8iaKNt
KRVmxhRJS3vgEqcK282oDvFtN6+ohTevRAInLs84e1LVnN8jih+zx+/oIFZtgjDs
UiWZbFlGUz1YKx6OHBzq8yRnOMcJ+Gab5hQpV7ZByUvFPHpVfwmwFhs0tnMPHPZ0
nN8Pza0x8bxI9uPfHHcMcMrsGe//K+3Bq1R9kI60O1lJNzBmRtCOhRh/qv7+cXv5
0iUoiHW+sI84T3q5zfW/dRf/WXpazP1ove3ysFs2LGzn//4b+iDfAuM8Ysmt3apr
kdDkhc6xZ93pHwaVzvAGwveJ6uBzAiHil5Z3YEuRvJgdJOWbVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLL2jgW8onbb19zT2bfgrKs/YuXNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvN2Q5YjRmMDEtZTIwNi0z
NDY5LThmZjItYTg5YTUzZGVmNWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAAZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFPSGF/kG6k1wsHN3JLEv5qGqonMLVcu3HNTq5sY/RjVcqveWB0UAvQ6
fBDTXegrarZb/wkB9DxMwN0TaAvfAn+ygs+lpQTpx/d3817szBqLCkIOVrgnyDyS
5EcSPpmNyEa/zu4HtMD45FVkkJ+g7IyLVi6gJOTeDMHT+QjXms9GzWTnPSnmngQz
Ft7/jOn7tWKuV29dknTSWBKZVRvwO+MOccvMsKAFP0WjwOKo/ijAN7zOYnNSND2w
i1f0DPXx/u+7qejKh9C94klVAyIMgZl8z76yiNymxW6QTYF9aI6TKBJr9cwONwmu
PafFc9ZB4ZaSPdpH27bWtVtfSOHFI1Q=
-----END CERTIFICATE-----
Generated at Wed Apr 9 02:27:22 2025 by rpki-client