Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/25b58f89-8ee9-34dc-b823-18c4d81a0dc3.roa
File: 25b58f89-8ee9-34dc-b823-18c4d81a0dc3.roa (raw, json)
Hash identifier: GCtLUTLWo0DW+9sV1spWI8hqXjt/2/ExsKZrGOtiC/k=
Subject key identifier: DB:E4:D3:D1:07:77:F5:F9:1E:16:F4:6B:DF:88:47:94:8C:8F:BC:92
Certificate issuer: /CN=65efdd79-a2c2-4fd4-ad1a-5d5384138412
Certificate serial: 010D0C9F43285848A400C25B81D92BE9D858BD20
Authority key identifier: AC:12:E4:98:4B:F2:07:3C:A9:8C:3F:88:21:06:DD:26:65:FC:5C:A6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/25b58f89-8ee9-34dc-b823-18c4d81a0dc3.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 14048
IP address blocks: 141.225.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:c2:5b:81:d9:2b:e9:d8:58:bd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65efdd79-a2c2-4fd4-ad1a-5d5384138412
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=1990fa46-00a2-4a63-95b1-dce07bed7c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:33:39:e6:75:9e:2e:f6:8b:61:a1:7a:c7:ed:
cc:08:f4:5f:7e:71:79:17:c4:d5:99:51:fc:fb:33:
8d:15:ed:62:32:12:cf:47:8a:e9:77:4f:77:f3:5c:
c7:f5:e4:30:bf:05:bf:d9:9e:28:8d:33:da:44:b2:
98:51:04:b7:3e:10:12:7f:a6:25:ff:77:10:78:6e:
a9:01:cf:99:58:d6:2e:f9:c5:56:9c:a2:9d:a8:41:
f8:98:a1:3f:b8:17:5b:8e:5b:68:47:3e:73:c8:30:
bc:0f:14:08:fc:0a:48:1c:f9:e2:ca:12:c3:bf:9e:
dc:fa:e9:e2:37:f7:e3:19:50:c7:16:8e:1d:25:43:
a9:6f:4d:ec:a6:da:a2:fd:7b:d0:33:03:ca:b5:75:
a3:6b:f3:d0:03:27:3c:0f:12:e4:89:85:15:35:b5:
b4:40:16:bb:e6:4f:38:49:38:94:bb:0a:42:e8:cf:
24:75:ee:7d:58:14:97:af:dc:90:05:b7:a1:a9:44:
a2:a5:3f:6d:89:05:c7:e1:07:a8:d2:58:51:fa:8f:
f8:66:2d:c9:66:35:3a:8e:f7:cf:33:4d:b5:14:4c:
ad:22:c2:5c:dd:fa:65:f2:3b:04:02:72:19:64:17:
b2:d8:36:7a:82:84:c3:a3:18:ba:bc:be:9d:eb:b7:
e9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E4:D3:D1:07:77:F5:F9:1E:16:F4:6B:DF:88:47:94:8C:8F:BC:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/25b58f89-8ee9-34dc-b823-18c4d81a0dc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.crl
X509v3 Authority Key Identifier:
keyid:AC:12:E4:98:4B:F2:07:3C:A9:8C:3F:88:21:06:DD:26:65:FC:5C:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer
sbgp-ipAddrBlock: critical
IPv4:
141.225.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:56:cb:ce:ef:be:61:0e:16:95:29:cf:3e:d5:e6:84:29:d3:
54:36:1e:22:71:fb:61:55:8e:4f:9e:10:e0:b6:cf:74:fb:bb:
cb:e5:28:b8:f4:90:89:d6:f0:bf:92:97:c3:0d:5e:c3:66:f4:
66:44:4f:52:90:22:0c:d2:d3:ee:bc:da:4d:15:52:af:e8:02:
ee:32:74:b4:5f:9d:cd:2a:82:0a:12:e8:79:bd:5b:12:be:b3:
88:23:44:4d:a0:ad:28:09:90:ec:db:53:a7:0a:af:de:ce:69:
ff:84:50:f5:0e:ba:e1:71:ac:6b:94:89:01:ec:04:50:e9:08:
d1:0e:dc:54:81:59:23:ff:bd:ed:aa:ac:d9:d0:29:41:b6:37:
ab:8e:38:f7:e3:23:30:fb:e6:54:f6:fb:b0:ac:96:d3:ad:30:
d1:1b:1c:0a:db:d1:6a:f6:29:d1:ae:1c:61:55:8e:18:0a:7f:
c2:00:9b:27:4c:9b:09:69:2e:aa:0f:2c:a2:22:17:3f:97:1c:
71:1d:56:a1:02:a3:5b:fb:e8:36:c6:20:f9:4a:94:ca:c9:6a:
60:46:5f:dd:a6:c5:16:ed:25:34:47:fb:b3:45:b9:6f:d5:6a:
7d:f0:20:86:34:de:0f:f5:28:01:33:7f:b4:52:c1:b3:d7:dd:
2c:b2:90:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAMJbgdkr6dhYvSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjVlZmRkNzktYTJjMi00ZmQ0LWFkMWEtNWQ1Mzg0MTM4
NDEyMB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk
MTk5MGZhNDYtMDBhMi00YTYzLTk1YjEtZGNlMDdiZWQ3YzAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTM55nWeLvaLYaF6x+3MCPRffnF5F8TVmVH8
+zONFe1iMhLPR4rpd09381zH9eQwvwW/2Z4ojTPaRLKYUQS3PhASf6Yl/3cQeG6p
Ac+ZWNYu+cVWnKKdqEH4mKE/uBdbjltoRz5zyDC8DxQI/ApIHPniyhLDv57c+uni
N/fjGVDHFo4dJUOpb03sptqi/XvQMwPKtXWja/PQAyc8DxLkiYUVNbW0QBa75k84
STiUuwpC6M8kde59WBSXr9yQBbehqUSipT9tiQXH4Qeo0lhR+o/4Zi3JZjU6jvfP
M021FEytIsJc3fpl8jsEAnIZZBey2DZ6goTDoxi6vL6d67fpeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNvk09EHd/X5Hhb0a9+IR5SMj7ySMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82NWVm
ZGQ3OS1hMmMyLTRmZDQtYWQxYS01ZDUzODQxMzg0MTIvMjViNThmODktOGVlOS0z
NGRjLWI4MjMtMThjNGQ4MWEwZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjVlZmRkNzktYTJjMi00ZmQ0LWFk
MWEtNWQ1Mzg0MTM4NDEyLzY1ZWZkZDc5LWEyYzItNGZkNC1hZDFhLTVkNTM4NDEz
ODQxMi5jcmwwHwYDVR0jBBgwFoAUrBLkmEvyBzypjD+IIQbdJmX8XKYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS82NWVmZGQ3OS1hMmMyLTRmZDQtYWQxYS01ZDUz
ODQxMzg0MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHjeGAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACFWy87vvmEOFpUpzz7V5oQp01Q2HiJx+2FVjk+eEOC2z3T7u8vlKLj0
kInW8L+Sl8MNXsNm9GZET1KQIgzS0+682k0VUq/oAu4ydLRfnc0qggoS6Hm9WxK+
s4gjRE2grSgJkOzbU6cKr97Oaf+EUPUOuuFxrGuUiQHsBFDpCNEO3FSBWSP/ve2q
rNnQKUG2N6uOOPfjIzD75lT2+7CsltOtMNEbHArb0Wr2KdGuHGFVjhgKf8IAmydM
mwlpLqoPLKIiFz+XHHEdVqECo1v76DbGIPlKlMrJamBGX92mxRbtJTRH+7NFuW/V
an3wIIY03g/1KAEzf7RSwbPX3SyykAE=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:10:57 2025 by rpki-client