Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/657b94db-a341-3d2c-8f55-d79aa31e7e18.roa
File: 657b94db-a341-3d2c-8f55-d79aa31e7e18.roa (raw, json)
Hash identifier: As8YrFGtc/bQe+1chOCzbzhQskO4iOBL/xtcBVk9VyE=
Subject key identifier: FA:58:22:4A:96:93:8C:05:05:53:8C:1E:12:11:1B:01:A7:43:24:82
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E80472A4FDB144094B5E0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/657b94db-a341-3d2c-8f55-d79aa31e7e18.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 128.109.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:80:47:2a:4f:db:14:40:94:b5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=d44e6865-b7db-40bd-bd9d-0fd0f0ea360b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:04:a1:76:42:72:e5:d8:c0:39:74:d6:96:b5:
62:fa:4c:d2:73:0e:9e:c6:58:8a:91:f8:96:bc:04:
87:9a:68:6d:1b:15:9f:39:a6:17:47:2b:41:9e:2f:
a0:66:dd:8d:e1:23:b5:17:6b:8a:52:9d:64:8a:f5:
ad:8d:82:ee:11:a8:8d:0c:b8:0d:28:f4:47:69:73:
52:81:06:ff:14:87:02:a7:24:69:1a:d9:95:84:34:
b7:fe:11:8b:43:cc:b7:f8:1f:46:0a:a0:ea:18:b6:
a1:55:d7:25:60:67:fb:9c:16:8e:94:7c:9e:18:9b:
7b:96:31:2b:c8:fe:b5:7b:0c:18:f7:a8:ce:bd:da:
39:4a:49:d3:f2:13:90:7a:21:d9:43:e7:04:9a:e8:
2e:9d:d1:2a:af:0b:c1:32:5a:49:a0:49:60:8d:eb:
c7:9c:15:a5:1a:dc:6b:26:3a:8a:dc:24:e3:9d:9b:
51:d6:8f:cf:49:6f:0b:22:22:ad:cf:2c:11:f8:29:
61:bb:99:d8:7a:f2:5c:49:37:40:a2:33:ad:60:e8:
9d:58:62:ff:00:a8:b9:f8:c2:97:0c:99:49:9c:3b:
a3:d1:2a:ce:02:85:21:64:c4:99:9c:e9:1e:9f:bb:
1d:7b:3c:22:1d:d9:58:af:31:cb:3d:f3:2f:62:0e:
1e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:58:22:4A:96:93:8C:05:05:53:8C:1E:12:11:1B:01:A7:43:24:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/657b94db-a341-3d2c-8f55-d79aa31e7e18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
128.109.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:d7:34:e2:de:f9:b4:7a:65:72:0d:c2:a4:3a:4f:0a:e6:f2:
17:4b:51:6a:07:1d:90:c2:f0:2c:84:f2:2e:56:59:66:48:81:
49:31:dc:18:b8:3c:55:9c:51:e0:6d:a3:09:9f:ae:0d:d9:ba:
5a:be:95:6e:44:26:59:21:c6:ff:d4:5c:29:49:ca:f8:3c:6d:
48:9c:47:30:e0:99:a4:24:6b:3b:af:98:41:0d:1c:25:e6:1c:
ee:9d:2e:b0:aa:b7:76:52:1a:8c:09:e9:2a:0b:12:ce:dc:59:
2e:f0:21:68:e5:04:3f:d6:8e:79:70:4a:71:32:75:e0:74:f1:
1d:d8:5d:aa:3f:2d:fe:6f:56:b3:49:76:c2:f7:d2:75:75:be:
72:df:7b:c7:62:2e:1f:5b:db:d0:51:a2:59:e4:79:cb:7a:ed:
3e:13:94:fc:d0:5f:90:aa:f4:a0:63:2b:ee:ea:23:53:d1:2f:
e2:c2:26:22:35:f2:e0:63:67:f5:94:e7:de:95:9f:f1:3b:f2:
47:71:59:da:d8:e9:a4:52:51:75:18:7f:f0:7d:23:0c:e5:c5:
46:b0:49:e0:3b:c9:47:b7:71:9b:68:0e:e6:d3:1a:67:da:82:
57:4f:cb:b0:d3:52:c6:55:e8:f5:5a:37:dc:a2:d2:98:2c:3e:
98:d2:d7:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElBnoBHKk/bFECUteAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDMyMTAxMDAzOVoXDTI1MDYxOTAxMDAzOVowLzEtMCsGA1UEAxMk
ZDQ0ZTY4NjUtYjdkYi00MGJkLWJkOWQtMGZkMGYwZWEzNjBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAShdkJy5djAOXTWlrVi+kzScw6exliKkfiW
vASHmmhtGxWfOaYXRytBni+gZt2N4SO1F2uKUp1kivWtjYLuEaiNDLgNKPRHaXNS
gQb/FIcCpyRpGtmVhDS3/hGLQ8y3+B9GCqDqGLahVdclYGf7nBaOlHyeGJt7ljEr
yP61ewwY96jOvdo5SknT8hOQeiHZQ+cEmugundEqrwvBMlpJoElgjevHnBWlGtxr
JjqK3CTjnZtR1o/PSW8LIiKtzywR+Clhu5nYevJcSTdAojOtYOidWGL/AKi5+MKX
DJlJnDuj0SrOAoUhZMSZnOken7sdezwiHdlYrzHLPfMvYg4etwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPpYIkqWk4wFBVOMHhIRGwGnQySCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNjU3Yjk0ZGItYTM0MS0z
ZDJjLThmNTUtZDc5YWEzMWU3ZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG2LMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIbXNOLe+bR6ZXINwqQ6Twrm8hdLUWoHHZDC8CyE8i5WWWZIgUkx3Bi4
PFWcUeBtowmfrg3Zulq+lW5EJlkhxv/UXClJyvg8bUicRzDgmaQkazuvmEENHCXm
HO6dLrCqt3ZSGowJ6SoLEs7cWS7wIWjlBD/WjnlwSnEydeB08R3YXao/Lf5vVrNJ
dsL30nV1vnLfe8diLh9b29BRolnkect67T4TlPzQX5Cq9KBjK+7qI1PRL+LCJiI1
8uBjZ/WU596Vn/E78kdxWdrY6aRSUXUYf/B9IwzlxUawSeA7yUe3cZtoDubTGmfa
gldPy7DTUsZV6PVaN9yi0pgsPpjS13M=
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:00:11 2025 by rpki-client