Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/de7fcbf7-d5f3-374e-a149-1439ce6c3d24.roa
File: de7fcbf7-d5f3-374e-a149-1439ce6c3d24.roa (raw, json)
Hash identifier: sWkH6q11qbBbA8JyeoszFvGUXQmpoORRQIkg+PtikSw=
Subject key identifier: 95:2F:CD:88:B1:12:14:D0:3D:53:4F:79:DE:20:58:98:12:F5:34:2A
Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial: 010D0C9F43285848AFB0BE7FAFBE2A9752AB4B40
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/de7fcbf7-d5f3-374e-a149-1439ce6c3d24.roa
Signing time: Mon 27 Jan 2025 18:29:28 +0000
ROA not before: Mon 27 Jan 2025 18:29:28 +0000
ROA not after: Sun 27 Apr 2025 17:29:28 +0000
asID: 15164
IP address blocks: 138.199.120.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:b0:be:7f:af:be:2a:97:52:ab:4b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Validity
Not Before: Jan 27 18:29:28 2025 GMT
Not After : Apr 27 17:29:28 2025 GMT
Subject: CN=b3feff0d-a81e-4b8d-91c1-3041e5120336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:14:43:b9:30:1c:bc:bb:bb:1d:4c:87:ff:aa:
b4:69:97:ff:80:b9:69:93:a4:17:f8:33:47:bf:89:
f8:d1:d1:24:73:9a:d3:d0:27:f5:9f:4d:06:86:df:
db:69:3d:95:e6:7a:90:01:7a:8f:ef:50:30:84:0c:
98:6c:9e:11:e9:92:0d:a5:18:6e:dd:0d:af:d5:9e:
6e:6d:ad:d4:ea:d9:90:84:31:c5:b7:17:4e:9e:e6:
98:3a:80:22:9f:e8:f3:d8:58:b3:be:b9:cb:88:9d:
0c:9e:5b:96:57:2c:45:4a:7c:a9:0c:9a:f4:42:a6:
76:44:5f:6a:c7:d8:c3:8b:2d:6d:b3:92:bf:42:eb:
3c:18:0f:19:5e:9b:b1:ae:27:09:d0:8d:71:29:18:
bc:7d:5c:41:a8:4e:04:09:17:dd:18:6a:db:ed:bc:
65:1b:be:19:dd:d4:5f:f2:6d:70:b9:82:80:56:9e:
eb:45:35:7b:10:05:81:08:f9:3f:6e:c2:3b:94:0e:
f7:42:22:b1:3f:a8:0e:9c:dc:7b:73:a8:8f:5a:f8:
58:a2:2e:4e:11:8b:5c:24:0e:9f:34:75:dc:00:35:
59:94:86:67:2e:23:7d:04:70:85:2d:8f:f8:ee:08:
d5:15:16:33:0e:2b:09:26:7e:81:59:77:0c:b8:c4:
8c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2F:CD:88:B1:12:14:D0:3D:53:4F:79:DE:20:58:98:12:F5:34:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/de7fcbf7-d5f3-374e-a149-1439ce6c3d24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
X509v3 Authority Key Identifier:
keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
sbgp-ipAddrBlock: critical
IPv4:
138.199.120.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:5e:68:a2:1d:b3:cf:80:9f:05:ee:1b:e8:3c:3f:14:e5:00:
8e:83:51:cb:a3:e3:70:08:d5:bb:3f:fa:c0:d9:b1:41:77:f1:
7b:8a:45:a7:87:f6:40:45:4d:ef:7c:b8:7a:39:cf:95:cd:34:
91:16:61:c8:b7:0c:f9:2e:98:f4:ad:be:44:7d:0c:51:87:dd:
48:c7:f4:37:b4:71:7c:39:e8:77:75:82:51:6c:54:54:71:fd:
5e:58:80:fb:9f:17:fc:68:19:44:70:05:13:8a:93:cc:53:c0:
93:ab:f5:02:93:48:bc:7f:9f:dc:59:2d:30:45:2c:10:61:2f:
0b:3c:be:7f:78:85:ee:7f:a8:c8:92:c1:83:e5:94:43:3e:ce:
70:b7:d0:21:c7:c0:6d:4c:42:41:9b:22:43:eb:c4:cc:52:6b:
1d:6f:3d:8b:04:1c:54:c0:80:b4:64:2e:6a:ce:96:8d:8e:6e:
8b:7d:f7:11:c8:82:01:66:c8:9d:ef:4d:d9:56:77:41:ed:c5:
e4:43:2b:43:83:82:98:f9:15:79:4a:08:5a:06:c1:5c:de:56:
9f:ca:f3:c5:a8:5d:96:aa:94:7e:e7:e3:70:c7:ea:a9:16:db:
b9:59:be:0c:07:1f:dd:c0:18:f3:52:78:d1:29:58:7c:88:83:
24:90:ee:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivsL5/r74ql1KrS0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1
OTg4MB4XDTI1MDEyNzE4MjkyOFoXDTI1MDQyNzE3MjkyOFowLzEtMCsGA1UEAxMk
YjNmZWZmMGQtYTgxZS00YjhkLTkxYzEtMzA0MWU1MTIwMzM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRRDuTAcvLu7HUyH/6q0aZf/gLlpk6QX+DNH
v4n40dEkc5rT0Cf1n00Ght/baT2V5nqQAXqP71AwhAyYbJ4R6ZINpRhu3Q2v1Z5u
ba3U6tmQhDHFtxdOnuaYOoAin+jz2FizvrnLiJ0MnluWVyxFSnypDJr0QqZ2RF9q
x9jDiy1ts5K/Qus8GA8ZXpuxricJ0I1xKRi8fVxBqE4ECRfdGGrb7bxlG74Z3dRf
8m1wuYKAVp7rRTV7EAWBCPk/bsI7lA73QiKxP6gOnNx7c6iPWvhYoi5OEYtcJA6f
NHXcADVZlIZnLiN9BHCFLY/47gjVFRYzDisJJn6BWXcMuMSMpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJUvzYixEhTQPVNPed4gWJgS9TQqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0
NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvZGU3ZmNiZjctZDVmMy0z
NzRlLWExNDktMTQzOWNlNmMzZDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi
MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl
NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3
ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBisd4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEBeaKIds8+AnwXuG+g8PxTlAI6DUcuj43AI1bs/+sDZsUF38XuKRaeH
9kBFTe98uHo5z5XNNJEWYci3DPkumPStvkR9DFGH3UjH9De0cXw56Hd1glFsVFRx
/V5YgPufF/xoGURwBROKk8xTwJOr9QKTSLx/n9xZLTBFLBBhLws8vn94he5/qMiS
wYPllEM+znC30CHHwG1MQkGbIkPrxMxSax1vPYsEHFTAgLRkLmrOlo2Obot99xHI
ggFmyJ3vTdlWd0HtxeRDK0ODgpj5FXlKCFoGwVzeVp/K88WoXZaqlH7n43DH6qkW
27lZvgwHH93AGPNSeNEpWHyIgySQ7mg=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:25 2025 by rpki-client