Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/b028e0f9-478e-3e38-a8c5-5789ee4f7e32.roa
File: b028e0f9-478e-3e38-a8c5-5789ee4f7e32.roa (raw, json)
Hash identifier: 7pAhnYUM+QnAWf1Q3U8TmmjGiKMAAiKXxUUyJ0ITdIU=
Subject key identifier: D9:89:C3:BF:3C:8F:C1:1C:16:8F:9B:1E:05:FC:8A:0D:FA:EA:DE:4F
Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
Certificate serial: 010D0C9F432858492C4F8DE536EDE07FDEB6FEC0
Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/b028e0f9-478e-3e38-a8c5-5789ee4f7e32.roa
Signing time: Thu 13 Mar 2025 09:49:41 +0000
ROA not before: Thu 13 Mar 2025 09:49:41 +0000
ROA not after: Wed 11 Jun 2025 09:49:41 +0000
asID: 36352
IP address blocks: 104.143.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:4f:8d:e5:36:ed:e0:7f:de:b6:fe:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
Validity
Not Before: Mar 13 09:49:41 2025 GMT
Not After : Jun 11 09:49:41 2025 GMT
Subject: CN=d3035fb5-a5be-4f83-99a6-05ca607e9abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0a:29:2f:f2:a5:6b:36:db:03:b5:c9:df:2b:
aa:a7:38:f8:bd:66:9a:1c:fb:08:62:87:1a:2d:41:
8d:3d:66:49:5e:1c:5b:57:6e:71:0f:e5:27:da:2d:
55:b3:4d:3a:52:ac:03:96:dd:ab:63:b3:6d:c0:a4:
d4:96:82:3f:c2:92:b6:2d:1f:cc:a0:41:f8:02:38:
bf:fb:be:60:06:4b:c8:5a:c0:08:5a:9c:31:eb:db:
7f:55:05:84:c9:1a:37:84:77:a4:fa:77:fd:a1:b7:
bd:ea:cb:58:9e:ac:fb:f4:7f:a7:fd:a5:12:04:06:
fc:ec:1a:90:c5:e5:89:6c:76:16:d1:1b:33:3e:bb:
45:8a:fa:0c:d4:c5:a0:54:d4:a1:06:80:19:0e:b1:
c5:14:b5:53:96:cd:5e:ab:0c:99:c0:ec:09:66:a8:
d4:e2:c5:5c:45:9f:eb:a7:c8:26:e9:ee:8f:17:b5:
97:42:b2:16:0b:8f:ce:ef:3a:84:67:4d:db:a2:39:
8c:97:10:15:c2:4a:aa:0a:4b:c5:3b:fa:6b:5f:0e:
65:88:e8:a2:7f:a1:9b:0c:37:e6:0d:0d:b5:c1:aa:
cc:93:5f:78:a8:40:2c:e3:1a:fb:85:d0:5c:79:8d:
3a:9f:c8:36:4c:ce:2a:53:80:56:d3:cb:39:b4:2c:
40:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:89:C3:BF:3C:8F:C1:1C:16:8F:9B:1E:05:FC:8A:0D:FA:EA:DE:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/b028e0f9-478e-3e38-a8c5-5789ee4f7e32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl
X509v3 Authority Key Identifier:
keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.143.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:4c:15:2d:c0:73:39:06:24:2c:f7:6f:91:cd:56:7d:9a:f2:
70:75:62:c6:5d:93:b3:19:47:02:3c:9f:b1:f2:aa:1a:51:22:
9e:cc:4b:a3:41:36:1c:f6:19:76:41:a7:48:09:a7:7d:53:ca:
99:db:e6:3d:b2:c9:0b:64:a8:dc:53:8a:f7:25:79:c6:33:59:
a5:bc:fc:9f:03:9b:26:90:72:e2:bd:02:be:cb:2a:1e:37:0f:
9e:cc:25:08:80:21:29:fb:36:81:ba:30:7d:e1:0b:e9:3b:aa:
d1:29:a5:ed:94:91:47:a0:fc:34:40:de:e6:90:7a:62:f3:33:
d0:c2:50:f2:32:bb:21:1d:7d:7c:14:13:48:32:1a:49:f5:b6:
ec:26:75:73:fc:24:f2:f5:91:12:e1:70:62:69:eb:8a:98:9e:
16:15:74:cd:04:76:49:7b:b9:98:d8:01:97:cb:89:d9:01:96:
9b:b7:bf:0a:24:c4:37:44:27:5f:e2:4a:ea:06:61:8c:80:a9:
16:0e:17:d9:a4:0f:ec:10:83:3f:44:b0:a8:99:36:f7:6b:a9:
0d:e7:b4:f1:96:ae:a5:68:0f:77:13:e2:79:dc:ec:54:1a:c9:
f7:c8:3b:38:71:e6:56:03:69:e7:dd:6e:5d:5d:a6:6c:e4:2f:
13:a1:88:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksT43lNu3gf962/sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0
YTZkMB4XDTI1MDMxMzA5NDk0MVoXDTI1MDYxMTA5NDk0MVowLzEtMCsGA1UEAxMk
ZDMwMzVmYjUtYTViZS00ZjgzLTk5YTYtMDVjYTYwN2U5YWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwopL/KlazbbA7XJ3yuqpzj4vWaaHPsIYoca
LUGNPWZJXhxbV25xD+Un2i1Vs006UqwDlt2rY7NtwKTUloI/wpK2LR/MoEH4Aji/
+75gBkvIWsAIWpwx69t/VQWEyRo3hHek+nf9obe96stYnqz79H+n/aUSBAb87BqQ
xeWJbHYW0RszPrtFivoM1MWgVNShBoAZDrHFFLVTls1eqwyZwOwJZqjU4sVcRZ/r
p8gm6e6PF7WXQrIWC4/O7zqEZ03bojmMlxAVwkqqCkvFO/prXw5liOiif6GbDDfm
DQ21warMk194qEAs4xr7hdBceY06n8g2TM4qU4BW08s5tCxA/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNmJw788j8EcFo+bHgX8ig366t5PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5
YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvYjAyOGUwZjktNDc4ZS0z
ZTM4LWE4YzUtNTc4OWVlNGY3ZTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj
ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2
NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3
MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaI+AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJJMFS3AczkGJCz3b5HNVn2a8nB1YsZdk7MZRwI8n7HyqhpRIp7MS6NB
Nhz2GXZBp0gJp31Typnb5j2yyQtkqNxTivclecYzWaW8/J8DmyaQcuK9Ar7LKh43
D57MJQiAISn7NoG6MH3hC+k7qtEppe2UkUeg/DRA3uaQemLzM9DCUPIyuyEdfXwU
E0gyGkn1tuwmdXP8JPL1kRLhcGJp64qYnhYVdM0Edkl7uZjYAZfLidkBlpu3vwok
xDdEJ1/iSuoGYYyAqRYOF9mkD+wQgz9EsKiZNvdrqQ3ntPGWrqVoD3cT4nnc7FQa
yffIOzhx5lYDaefdbl1dpmzkLxOhiIs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:40:08 2025 by rpki-client