Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/102a1b54-7a91-37ec-9559-3213bbe645e4.roa
File: 102a1b54-7a91-37ec-9559-3213bbe645e4.roa (raw, json)
Hash identifier: k1pI44ufoOSzv8GU8Gmin7hNJvSzTAPND3lvkodGQPM=
Subject key identifier: 7C:DA:1F:74:D8:B5:6E:57:B7:96:39:08:26:DA:26:69:6A:7A:F1:42
Certificate issuer: /CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65
Certificate serial: 010D0C9F432858492CB2134D8E5226196B5B0DC0
Authority key identifier: FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/102a1b54-7a91-37ec-9559-3213bbe645e4.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 10439
IP address blocks: 209.126.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b2:13:4d:8e:52:26:19:6b:5b:0d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=ed4a0161-5780-4a37-939d-9b34f6b6763a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:41:08:66:82:88:2f:aa:30:be:13:1a:2a:a9:
67:f1:7c:80:a6:87:3e:9b:f0:2b:36:0c:cb:1f:1f:
5b:85:7b:a1:bd:27:9c:ad:a9:8f:8d:82:da:e5:e3:
32:46:8c:75:25:c8:9a:1c:37:37:2e:61:7e:3c:37:
32:4b:92:5d:e9:0b:18:85:0c:3d:f2:ce:24:f6:57:
d9:5d:f1:83:3d:6b:0f:b8:10:b5:e8:d2:97:82:b8:
6c:87:5b:46:35:16:26:d3:49:75:03:fc:dc:6e:68:
f5:f0:9b:84:05:2d:e5:64:af:9f:4b:21:b9:d0:71:
03:6d:b4:e8:17:23:98:f1:b4:c0:6a:65:75:c1:cf:
2a:f5:e2:8a:f0:90:55:6c:7f:9a:a9:3a:cd:36:39:
24:e0:72:52:aa:0b:00:5e:ea:48:ab:78:9d:9c:8b:
e5:95:7b:5f:2d:4b:51:e3:98:af:4e:d6:9b:f9:51:
a1:d9:2c:36:33:26:ea:fa:1c:9c:bc:1f:36:38:92:
e0:75:82:8b:e4:52:28:e6:70:ff:ea:da:63:7b:b3:
29:27:bb:62:fc:51:39:c7:87:ea:fe:23:34:33:35:
aa:b2:5a:59:66:f8:3c:d0:c4:06:f2:86:80:e7:15:
77:16:9d:1d:f9:9d:d2:98:6a:a4:4c:41:09:d7:f5:
80:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DA:1F:74:D8:B5:6E:57:B7:96:39:08:26:DA:26:69:6A:7A:F1:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/102a1b54-7a91-37ec-9559-3213bbe645e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.crl
X509v3 Authority Key Identifier:
keyid:FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer
sbgp-ipAddrBlock: critical
IPv4:
209.126.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:0d:12:ad:6e:d1:97:e4:d5:19:64:e6:a4:af:92:02:ce:73:
dc:c5:30:ef:d7:6d:6c:5e:4d:6d:9a:f9:70:d4:40:ce:69:60:
17:9f:58:b5:a6:44:33:29:6a:af:6b:55:95:56:2d:2c:b9:06:
87:0c:57:74:4b:d3:5a:ee:32:07:05:7e:69:54:89:4d:e2:df:
25:3b:04:4c:fd:96:b0:1f:fa:4d:a3:be:eb:60:ad:8c:fd:5c:
5f:02:79:2b:8f:58:28:28:7a:bd:a2:5f:a8:16:30:ec:e1:3c:
ce:98:43:d1:5a:0b:26:73:5a:d8:cc:d8:09:a1:cc:1c:4e:cf:
29:f4:2d:4f:06:2d:a1:e9:36:b7:c9:8f:68:fd:05:dc:cf:cd:
21:3d:57:95:3d:c0:27:3d:d8:0d:0a:2b:ba:d6:ce:07:b6:da:
c9:8e:63:db:c4:12:1b:ef:60:f7:e0:e0:15:3b:66:6b:8c:8f:
40:d9:14:29:18:64:3a:af:51:38:dd:4f:bf:6d:65:d0:4d:76:
20:25:9f:b2:50:b6:0a:36:1e:97:f4:0f:da:fd:a3:f5:d5:c9:
a2:82:c4:fa:4b:b5:4f:2b:9a:f8:d8:26:64:18:4e:ea:6a:f2:
f7:1d:2d:5b:ab:4f:ed:90:5f:6b:b6:97:31:23:1b:8a:eb:c1:
91:8b:af:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksshNNjlImGWtbDcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmYyZWQ4N2UtMjdmOS00MTRjLWE3YWYtMmI1YjVmZmEz
ZjY1MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZWQ0YTAxNjEtNTc4MC00YTM3LTkzOWQtOWIzNGY2YjY3NjNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0EIZoKIL6owvhMaKqln8XyApoc+m/ArNgzL
Hx9bhXuhvSecramPjYLa5eMyRox1JciaHDc3LmF+PDcyS5Jd6QsYhQw98s4k9lfZ
XfGDPWsPuBC16NKXgrhsh1tGNRYm00l1A/zcbmj18JuEBS3lZK+fSyG50HEDbbTo
FyOY8bTAamV1wc8q9eKK8JBVbH+aqTrNNjkk4HJSqgsAXupIq3idnIvllXtfLUtR
45ivTtab+VGh2Sw2Mybq+hycvB82OJLgdYKL5FIo5nD/6tpje7MpJ7ti/FE5x4fq
/iM0MzWqslpZZvg80MQG8oaA5xV3Fp0d+Z3SmGqkTEEJ1/WA3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHzaH3TYtW5Xt5Y5CCbaJmlqevFCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZjJl
ZDg3ZS0yN2Y5LTQxNGMtYTdhZi0yYjViNWZmYTNmNjUvMTAyYTFiNTQtN2E5MS0z
N2VjLTk1NTktMzIxM2JiZTY0NWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmYyZWQ4N2UtMjdmOS00MTRjLWE3
YWYtMmI1YjVmZmEzZjY1LzJmMmVkODdlLTI3ZjktNDE0Yy1hN2FmLTJiNWI1ZmZh
M2Y2NS5jcmwwHwYDVR0jBBgwFoAU/vz7pQfj5FlRiYJFDoOE89rVKHswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8yZjJlZDg3ZS0yN2Y5LTQxNGMtYTdhZi0yYjVi
NWZmYTNmNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0X6AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALsNEq1u0Zfk1Rlk5qSvkgLOc9zFMO/XbWxeTW2a+XDUQM5pYBefWLWm
RDMpaq9rVZVWLSy5BocMV3RL01ruMgcFfmlUiU3i3yU7BEz9lrAf+k2jvutgrYz9
XF8CeSuPWCgoer2iX6gWMOzhPM6YQ9FaCyZzWtjM2AmhzBxOzyn0LU8GLaHpNrfJ
j2j9BdzPzSE9V5U9wCc92A0KK7rWzge22smOY9vEEhvvYPfg4BU7ZmuMj0DZFCkY
ZDqvUTjdT79tZdBNdiAln7JQtgo2Hpf0D9r9o/XVyaKCxPpLtU8rmvjYJmQYTupq
8vcdLVurT+2QX2u2lzEjG4rrwZGLr6g=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:48 2025 by rpki-client