Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/7dd4d18c-1e49-39f7-97be-4177b2d4355a.roa
File: 7dd4d18c-1e49-39f7-97be-4177b2d4355a.roa (raw, json)
Hash identifier: jTViNVFCqF/AgBtDaPqIx206Ac5bQTet19nyQId0MNM=
Subject key identifier: FF:10:E3:A0:72:86:84:9E:98:C4:98:6A:C7:B8:F2:40:3C:21:DD:3C
Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial: 010D0C9F43285848547031D4440A0D1775A17A00
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/7dd4d18c-1e49-39f7-97be-4177b2d4355a.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 36511
IP address blocks: 142.202.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:31:d4:44:0a:0d:17:75:a1:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=a289ad50-3955-47db-8d2c-217d6c37224c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c1:9d:f6:c7:71:33:79:9a:d9:8e:1a:21:76:
e4:3a:31:a5:1a:d8:f8:77:53:33:57:4c:21:0f:65:
f4:dd:2a:31:84:5c:00:33:db:e3:03:40:a6:0d:7f:
eb:aa:6a:f3:e9:13:29:85:a0:e5:96:06:43:f8:ff:
80:c9:35:53:27:16:3d:57:98:eb:7e:52:62:f8:65:
54:aa:9b:2a:1b:7f:26:08:f6:63:c0:03:03:c8:95:
4d:7b:be:90:47:47:25:a5:0e:35:fe:17:bd:7e:1b:
49:7c:3a:60:8b:f2:e4:35:d8:7a:31:6b:37:99:16:
b9:ae:96:76:9b:24:97:46:19:d6:14:61:e6:cb:39:
d5:bf:41:d9:e1:b3:c1:35:02:5a:66:6c:ac:88:55:
f6:39:6a:b3:5a:45:76:7f:9a:34:a7:1c:b2:32:f0:
b4:8a:0f:ae:e4:cc:20:4e:e0:9b:40:68:15:a1:1b:
70:8c:4f:3d:bd:73:85:dd:fd:f2:fd:7f:49:c5:bc:
fd:32:2a:fd:eb:1f:75:7a:5f:d8:7c:7c:65:3f:44:
4a:84:1c:e9:9b:7d:f1:cf:1e:0a:47:28:50:4e:39:
48:3d:f9:98:a8:09:76:f7:f3:14:34:d8:5b:36:73:
60:e0:6b:b7:90:9f:e4:14:05:70:9f:96:33:ba:76:
79:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:10:E3:A0:72:86:84:9E:98:C4:98:6A:C7:B8:F2:40:3C:21:DD:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/7dd4d18c-1e49-39f7-97be-4177b2d4355a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
X509v3 Authority Key Identifier:
keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
sbgp-ipAddrBlock: critical
IPv4:
142.202.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:01:3b:11:b4:0d:e6:c2:38:d0:ba:a1:05:f7:6c:e9:96:24:
c5:45:c1:a2:bd:e3:76:fe:65:33:ba:22:b0:3f:56:c3:f7:81:
3d:36:74:d0:0d:af:19:84:50:0d:7c:ec:e0:85:b7:21:b2:ea:
cd:f8:d1:7e:5d:56:9b:d6:dc:8f:d4:a1:23:dc:c7:79:0b:5e:
7c:5f:6e:cf:58:b9:b3:f1:ad:f6:95:59:68:6d:a1:84:dd:27:
39:ed:0b:4a:c9:11:bd:82:52:22:de:dd:49:ed:1d:99:0a:e9:
bf:05:7a:65:b1:fb:a9:9d:f1:13:cc:17:4d:38:74:46:bd:ce:
0c:8f:35:65:2c:85:25:d2:9b:6f:ad:74:ad:5d:e3:37:5e:08:
dc:a5:6c:a7:0c:a1:e6:1a:9d:7f:49:11:6c:70:14:f6:53:7e:
17:48:d6:a2:37:cc:82:f0:c8:79:0f:a9:b5:f8:cb:41:51:5f:
d4:5c:bb:71:98:12:c6:0b:67:fc:64:05:2b:b9:36:8e:f1:a9:
67:7e:45:5d:fd:43:e9:4a:40:e9:54:24:94:7f:d5:35:3e:bc:
f2:d6:e0:1d:9a:95:e5:57:fd:87:2c:e0:44:b1:5c:0a:bc:c9:
0b:ee:92:bd:f9:2e:7c:fe:7c:4c:f3:48:00:ac:34:19:95:22:
bf:c7:fd:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhUcDHURAoNF3WhegAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5
Y2ZjMB4XDTI0MTIyNjAyMDA0MFoXDTI1MDMyNjAxMDA0MFowLzEtMCsGA1UEAxMk
YTI4OWFkNTAtMzk1NS00N2RiLThkMmMtMjE3ZDZjMzcyMjRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8Gd9sdxM3ma2Y4aIXbkOjGlGtj4d1MzV0wh
D2X03SoxhFwAM9vjA0CmDX/rqmrz6RMphaDllgZD+P+AyTVTJxY9V5jrflJi+GVU
qpsqG38mCPZjwAMDyJVNe76QR0clpQ41/he9fhtJfDpgi/LkNdh6MWs3mRa5rpZ2
mySXRhnWFGHmyznVv0HZ4bPBNQJaZmysiFX2OWqzWkV2f5o0pxyyMvC0ig+u5Mwg
TuCbQGgVoRtwjE89vXOF3f3y/X9Jxbz9Mir96x91el/YfHxlP0RKhBzpm33xzx4K
RyhQTjlIPfmYqAl29/MUNNhbNnNg4Gu3kJ/kFAVwn5YzunZ54wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP8Q46ByhoSemMSYase48kA8Id08MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl
ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvN2RkNGQxOGMtMWU0OS0z
OWY3LTk3YmUtNDE3N2IyZDQzNTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl
MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk
OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1
ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjspwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGUBOxG0DebCONC6oQX3bOmWJMVFwaK943b+ZTO6IrA/VsP3gT02dNAN
rxmEUA187OCFtyGy6s340X5dVpvW3I/UoSPcx3kLXnxfbs9YubPxrfaVWWhtoYTd
JzntC0rJEb2CUiLe3UntHZkK6b8FemWx+6md8RPMF004dEa9zgyPNWUshSXSm2+t
dK1d4zdeCNylbKcMoeYanX9JEWxwFPZTfhdI1qI3zILwyHkPqbX4y0FRX9Rcu3GY
EsYLZ/xkBSu5No7xqWd+RV39Q+lKQOlUJJR/1TU+vPLW4B2aleVX/Ycs4ESxXAq8
yQvukr35Lnz+fEzzSACsNBmVIr/H/fE=
-----END CERTIFICATE-----
Generated at Sat Apr 12 10:12:15 2025 by rpki-client