Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b4f61161-b1a2-33a8-8d46-fa2170fb2c71.roa
File: b4f61161-b1a2-33a8-8d46-fa2170fb2c71.roa (raw, json)
Hash identifier: SlA1+9R6vqV0X3UuZ8I6oDNx813A5TkrAeIeHLQKQnA=
Subject key identifier: 78:1D:9F:42:AF:80:10:41:99:F2:D4:94:15:76:B6:D4:49:B6:75:2C
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E809C4E438108C09A8B00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b4f61161-b1a2-33a8-8d46-fa2170fb2c71.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 128.109.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:80:9c:4e:43:81:08:c0:9a:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=aaf9f35d-3b17-4c08-bc5f-1bcb688e5c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fd:af:bf:2a:94:a3:35:99:f9:de:9c:aa:f0:
fa:76:63:b1:2d:fc:91:f2:da:67:58:70:b9:e0:8e:
6a:b8:8e:10:54:1f:74:33:b9:d0:6e:6e:82:cc:52:
ec:09:74:2a:9d:b1:c4:bf:49:37:36:5c:d3:99:91:
f2:04:e7:c3:45:dd:8a:b3:be:95:28:2a:bc:e5:b9:
fc:5c:93:cf:87:01:a6:1e:7a:5e:39:0b:22:a3:61:
9a:2c:50:b7:c2:49:1c:8f:2e:b2:89:34:8a:62:97:
f8:8a:55:12:0c:9d:b8:fb:c5:f6:38:9d:5b:eb:46:
2b:78:76:7e:4b:93:96:06:7c:e9:af:2a:08:eb:43:
00:14:ba:18:86:76:82:60:2a:06:e1:5a:5e:67:d6:
06:f0:db:ee:77:cd:ca:96:63:a4:63:5f:b4:7c:88:
05:56:fd:36:a7:6f:5d:a1:ed:43:da:e3:1c:a1:3d:
17:7f:a6:a4:36:df:a1:1d:ed:87:c1:3b:77:73:29:
23:f3:a2:16:9d:3d:5a:45:7b:77:b5:12:b5:e8:d3:
6e:ba:ab:cb:43:44:33:b4:40:18:9c:d2:2b:93:f7:
1a:89:58:30:69:ea:7b:71:16:11:06:85:da:49:ad:
74:76:0a:5a:42:56:2b:95:80:87:90:a5:6b:0b:eb:
67:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1D:9F:42:AF:80:10:41:99:F2:D4:94:15:76:B6:D4:49:B6:75:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b4f61161-b1a2-33a8-8d46-fa2170fb2c71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
128.109.48.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:70:27:af:db:17:8c:e6:d3:db:5e:87:0a:f8:d2:04:d6:c5:
fa:fa:77:2e:eb:ce:6a:6b:4c:66:40:f9:57:23:87:3a:e9:da:
91:12:b9:79:3b:1a:5f:92:e9:ae:54:d9:14:de:57:63:ef:70:
26:d1:52:a0:cf:06:ac:16:74:d5:89:73:a8:92:90:9b:38:a8:
50:3c:a7:62:36:6d:42:1c:4c:16:11:c2:97:59:e5:d0:7b:d6:
79:26:98:9c:de:7a:d8:eb:11:c1:58:3a:47:ba:c9:a5:07:b5:
21:86:48:a3:c0:c7:68:34:c7:5f:e4:9a:93:8a:cc:de:59:d9:
a0:4b:ff:12:ef:5e:39:ec:54:49:2c:ba:3a:83:5e:1b:73:8c:
0b:1f:3d:84:85:d2:38:a6:ce:b8:47:07:a8:f8:77:3c:be:a4:
c5:e3:7c:a4:3a:d3:96:51:41:1a:81:2e:46:dc:de:e9:24:cf:
e9:c0:1e:da:73:7e:83:c3:7b:ab:ae:2a:f6:5e:f9:29:b2:02:
1f:85:97:30:59:14:d0:e9:6d:9f:d8:6f:28:fe:30:cd:dc:af:
e8:86:80:0a:4f:4b:d2:f4:a2:2e:ad:88:b4:a6:16:56:59:74:
6e:0f:1a:2f:29:a0:de:5a:bb:6a:81:63:25:50:4a:cb:d2:92:
d1:d4:97:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElBnoCcTkOBCMCaiwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDMyMTAxMDAzOVoXDTI1MDYxOTAxMDAzOVowLzEtMCsGA1UEAxMk
YWFmOWYzNWQtM2IxNy00YzA4LWJjNWYtMWJjYjY4OGU1Yzg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov2vvyqUozWZ+d6cqvD6dmOxLfyR8tpnWHC5
4I5quI4QVB90M7nQbm6CzFLsCXQqnbHEv0k3NlzTmZHyBOfDRd2Ks76VKCq85bn8
XJPPhwGmHnpeOQsio2GaLFC3wkkcjy6yiTSKYpf4ilUSDJ24+8X2OJ1b60YreHZ+
S5OWBnzpryoI60MAFLoYhnaCYCoG4VpeZ9YG8Nvud83KlmOkY1+0fIgFVv02p29d
oe1D2uMcoT0Xf6akNt+hHe2HwTt3cykj86IWnT1aRXt3tRK16NNuuqvLQ0QztEAY
nNIrk/caiVgwaep7cRYRBoXaSa10dgpaQlYrlYCHkKVrC+tnlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHgdn0KvgBBBmfLUlBV2ttRJtnUsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYjRmNjExNjEtYjFhMi0z
M2E4LThkNDYtZmEyMTcwZmIyYzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG0wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADdwJ6/bF4zm09tehwr40gTWxfr6dy7rzmprTGZA+Vcjhzrp2pESuXk7
Gl+S6a5U2RTeV2PvcCbRUqDPBqwWdNWJc6iSkJs4qFA8p2I2bUIcTBYRwpdZ5dB7
1nkmmJzeetjrEcFYOke6yaUHtSGGSKPAx2g0x1/kmpOKzN5Z2aBL/xLvXjnsVEks
ujqDXhtzjAsfPYSF0jimzrhHB6j4dzy+pMXjfKQ605ZRQRqBLkbc3ukkz+nAHtpz
foPDe6uuKvZe+SmyAh+FlzBZFNDpbZ/Ybyj+MM3cr+iGgApPS9L0oi6tiLSmFlZZ
dG4PGi8poN5au2qBYyVQSsvSktHUl+k=
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:56:00 2025 by rpki-client