Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/72ea9654-6e11-38af-9a09-c95f74175c2e.roa
File: 72ea9654-6e11-38af-9a09-c95f74175c2e.roa (raw, json)
Hash identifier: xbCERzwVL/bVGZ3FCLre8tPG4a8B0XCRpWSTyHDNues=
Subject key identifier: 04:46:8B:CB:FE:FA:1A:CA:C9:8E:35:8F:38:0B:04:97:06:7E:11:CF
Certificate issuer: /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Certificate serial: 010D0C9F43285848E2D1197AB11D5CA2FFE7C400
Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/72ea9654-6e11-38af-9a09-c95f74175c2e.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 397041
IP address blocks: 134.195.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:19:7a:b1:1d:5c:a2:ff:e7:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=58b67bc9-d30d-4eb3-8673-3b4f4717886c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fb:90:a0:ad:25:26:0d:84:3e:0c:4b:7b:f1:
cc:d3:a3:05:b3:12:07:91:15:2e:51:41:18:46:8f:
46:2f:97:b7:ab:1d:7a:fe:0a:a9:90:6d:5a:3c:3d:
ed:40:5a:b1:ef:e7:6c:ea:f9:a4:50:f0:31:39:37:
19:67:14:4f:97:0f:5a:cb:a7:46:7a:b0:01:7d:60:
bd:9e:c1:9e:3e:eb:b7:a1:1d:e7:12:e7:49:90:4d:
a3:35:6d:b0:0a:e6:80:17:92:46:e3:82:be:0d:b9:
34:bc:10:26:7c:3d:16:50:ce:94:5b:6c:98:ef:4c:
4b:9e:38:1d:d2:70:77:bc:cd:fe:20:cb:61:74:fd:
1b:d3:35:b2:e7:b8:4d:26:d4:e6:3a:5f:ec:bd:46:
2d:89:f3:08:05:03:67:39:f0:41:aa:4a:fa:de:11:
9f:bf:cc:6a:9d:9e:4e:ad:ad:92:9a:fc:78:fe:4d:
ac:27:bc:b6:7a:64:3c:cd:10:d8:58:3a:42:b9:16:
bc:b1:35:2b:c7:77:9c:74:26:ba:d0:bd:22:d9:48:
65:91:0b:38:19:be:87:0a:6c:e7:10:8c:71:b8:b0:
d3:d7:19:73:c8:02:2f:c7:76:cd:37:1c:0f:a4:f1:
96:19:8e:a1:3d:03:81:c1:c4:08:bb:c6:06:93:ba:
fe:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:46:8B:CB:FE:FA:1A:CA:C9:8E:35:8F:38:0B:04:97:06:7E:11:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/72ea9654-6e11-38af-9a09-c95f74175c2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl
X509v3 Authority Key Identifier:
keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
sbgp-ipAddrBlock: critical
IPv4:
134.195.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:b0:53:96:cb:24:7a:7e:ff:3e:91:d7:8d:d7:ff:c4:fd:9e:
f4:05:69:af:96:57:1a:74:00:b8:a0:5c:34:90:d1:02:3f:9a:
85:81:ac:c2:a3:c6:b4:7d:af:b5:14:37:7b:82:2c:7d:be:28:
fb:24:de:4c:ca:51:c8:6a:ba:6f:fd:e9:92:a1:dc:f0:37:40:
51:7d:04:af:f2:45:2b:c6:bc:19:07:18:34:d8:02:fa:ed:57:
a3:2b:cd:3a:8f:5c:2e:24:0a:a1:31:f3:21:f2:d1:d8:73:87:
fb:37:3b:53:aa:b9:b9:9a:c0:e5:7e:9a:5e:bf:89:7d:3b:54:
31:2f:f0:da:d1:bf:6d:e8:47:bb:c8:db:fe:cc:f2:07:56:83:
d6:89:4f:3f:39:54:a0:a0:54:4d:a5:5a:2d:4f:e7:1e:aa:ab:
da:2f:29:f5:b5:c3:77:05:5c:c4:7b:bf:43:8c:8b:34:e6:6f:
ef:d7:b7:1e:17:db:a6:e6:6e:f9:5c:82:81:f6:17:e7:ac:49:
67:52:aa:c8:f8:33:3a:d3:8b:78:a5:fd:0d:f3:01:06:1e:4a:
e4:67:39:13:e7:25:b7:a2:ca:d9:6a:e2:08:0b:76:c4:2f:57:
2e:cb:83:62:de:d7:75:0c:08:27:bc:dc:10:49:9c:46:78:e0:
c0:1f:a4:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0Rl6sR1cov/nxAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTJiNzllYzAtZGMzYi00YWUwLWFjOWEtYmU1ZTQ0MGNm
M2JmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
NThiNjdiYzktZDMwZC00ZWIzLTg2NzMtM2I0ZjQ3MTc4ODZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/uQoK0lJg2EPgxLe/HM06MFsxIHkRUuUUEY
Ro9GL5e3qx16/gqpkG1aPD3tQFqx7+ds6vmkUPAxOTcZZxRPlw9ay6dGerABfWC9
nsGePuu3oR3nEudJkE2jNW2wCuaAF5JG44K+Dbk0vBAmfD0WUM6UW2yY70xLnjgd
0nB3vM3+IMthdP0b0zWy57hNJtTmOl/svUYtifMIBQNnOfBBqkr63hGfv8xqnZ5O
ra2Smvx4/k2sJ7y2emQ8zRDYWDpCuRa8sTUrx3ecdCa60L0i2UhlkQs4Gb6HCmzn
EIxxuLDT1xlzyAIvx3bNNxwPpPGWGY6hPQOBwcQIu8YGk7r+nQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFARGi8v++hrKyY41jzgLBJcGfhHPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMmI3
OWVjMC1kYzNiLTRhZTAtYWM5YS1iZTVlNDQwY2YzYmYvNzJlYTk2NTQtNmUxMS0z
OGFmLTlhMDktYzk1Zjc0MTc1YzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTJiNzllYzAtZGMzYi00YWUwLWFj
OWEtYmU1ZTQ0MGNmM2JmLzEyYjc5ZWMwLWRjM2ItNGFlMC1hYzlhLWJlNWU0NDBj
ZjNiZi5jcmwwHwYDVR0jBBgwFoAUCSgDghQhqZyoQ+WjADdHhNEkZ1kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xMmI3OWVjMC1kYzNiLTRhZTAtYWM5YS1iZTVl
NDQwY2YzYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhsPgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH2wU5bLJHp+/z6R143X/8T9nvQFaa+WVxp0ALigXDSQ0QI/moWBrMKj
xrR9r7UUN3uCLH2+KPsk3kzKUchqum/96ZKh3PA3QFF9BK/yRSvGvBkHGDTYAvrt
V6MrzTqPXC4kCqEx8yHy0dhzh/s3O1OqubmawOV+ml6/iX07VDEv8NrRv23oR7vI
2/7M8gdWg9aJTz85VKCgVE2lWi1P5x6qq9ovKfW1w3cFXMR7v0OMizTmb+/Xtx4X
26bmbvlcgoH2F+esSWdSqsj4MzrTi3il/Q3zAQYeSuRnORPnJbeiytlq4ggLdsQv
Vy7Lg2Le13UMCCe83BBJnEZ44MAfpD4=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:42:13 2025 by rpki-client