Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7355733f-b374-3a9e-991e-62608414b78b.roa
File: 7355733f-b374-3a9e-991e-62608414b78b.roa (raw, json)
Hash identifier: oJCIf3sTBpn3dWCmutWEz7N7XMRxAv0g8R1h46Axbt4=
Subject key identifier: 20:53:FB:AF:44:2E:C8:78:2B:11:23:A4:1E:5B:D0:98:AD:5C:9F:5B
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F432858491ED6DC9CDA5BBC6A1C1E1600
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7355733f-b374-3a9e-991e-62608414b78b.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 29538
IP address blocks: 128.1.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:dc:9c:da:5b:bc:6a:1c:1e:16:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=a8b09842-306e-4d6f-943b-a32f73ad494d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f3:d2:f4:fe:98:6c:52:bb:e8:52:4a:1d:d1:
ce:ec:1e:70:2f:4b:36:c1:7e:6c:09:4f:3a:7f:d9:
a3:fb:b3:3b:7b:c1:88:17:41:4f:70:c4:f5:ee:87:
47:38:e2:f5:3f:4b:dc:05:83:bd:e9:d0:1c:8b:dd:
5f:d4:5e:38:7c:e1:73:a7:1b:43:d2:59:e9:72:1d:
de:d5:2f:f7:14:81:67:08:b1:cc:ac:9e:3e:fe:5d:
d1:91:01:9c:10:af:91:8c:74:3e:9b:da:7a:67:26:
3a:af:10:a3:f6:e4:c0:24:92:7d:a8:52:06:3d:4d:
e3:64:71:4e:23:c9:b6:0f:27:65:85:d9:af:07:17:
0f:8a:bf:75:02:b7:ff:47:f1:42:bb:30:98:1c:e8:
fa:9d:11:ef:d2:78:a6:25:9f:fd:a7:5e:55:74:4b:
27:63:2a:a7:a5:03:d1:05:8e:83:34:60:e6:92:7b:
b7:cf:6b:ac:78:e2:6f:b7:68:6a:4a:56:44:9e:cd:
98:8c:d9:d2:ec:a2:8f:b9:b7:64:77:45:83:45:19:
b5:dc:c8:a5:1c:d3:d2:11:39:8e:7d:c8:96:5b:98:
4c:be:20:97:7e:a5:d4:7e:a0:b5:60:dc:20:a2:ee:
84:1c:b7:80:70:83:32:48:1a:d2:d7:bb:c7:76:7b:
53:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:53:FB:AF:44:2E:C8:78:2B:11:23:A4:1E:5B:D0:98:AD:5C:9F:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7355733f-b374-3a9e-991e-62608414b78b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
128.1.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:ad:8a:a1:9b:a9:2d:d1:e9:7b:d4:5b:f4:2e:92:e6:28:ca:
02:84:49:9e:14:0c:dc:cf:08:99:ec:6a:97:12:b4:82:1d:78:
0b:ff:ac:97:03:d4:69:00:f1:a0:0b:3e:85:3d:a2:70:a5:8d:
fb:f3:39:8a:31:8f:25:f0:27:f6:b2:33:6a:97:2e:17:1d:1f:
36:a5:33:3c:ff:87:f9:a5:f8:ee:e1:8e:eb:f2:47:b9:94:0c:
45:dc:c6:6a:01:a6:66:5c:ce:e8:24:f1:b0:19:2a:82:db:9c:
38:1c:f4:1d:9d:c7:85:14:6a:23:28:d1:ad:0d:82:a8:b8:e6:
6a:2a:f5:48:4a:05:9b:6d:bc:87:ce:b5:88:f0:3d:20:35:8c:
ae:8f:5b:c0:cc:40:72:29:66:56:b7:ec:09:5f:65:2a:9b:c7:
c2:d6:89:24:57:bd:cb:6d:9d:18:08:c3:3e:69:d8:b6:b7:7c:
0c:a7:a2:98:5e:57:db:f7:a3:23:bc:50:0b:76:a4:7c:15:4a:
10:13:15:e3:5e:c0:59:60:ee:25:35:11:9b:34:e1:82:ae:3f:
87:7c:32:37:d0:06:59:6f:76:35:e3:47:6c:cc:dd:fe:b9:e3:
22:73:ec:cc:61:ad:bf:38:88:65:d3:56:ca:1d:69:9f:5c:62:
e8:49:d6:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1tyc2lu8ahweFgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk
YThiMDk4NDItMzA2ZS00ZDZmLTk0M2ItYTMyZjczYWQ0OTRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/PS9P6YbFK76FJKHdHO7B5wL0s2wX5sCU86
f9mj+7M7e8GIF0FPcMT17odHOOL1P0vcBYO96dAci91f1F44fOFzpxtD0lnpch3e
1S/3FIFnCLHMrJ4+/l3RkQGcEK+RjHQ+m9p6ZyY6rxCj9uTAJJJ9qFIGPU3jZHFO
I8m2DydlhdmvBxcPir91Arf/R/FCuzCYHOj6nRHv0nimJZ/9p15VdEsnYyqnpQPR
BY6DNGDmknu3z2useOJvt2hqSlZEns2YjNnS7KKPubdkd0WDRRm13MilHNPSETmO
fciWW5hMviCXfqXUfqC1YNwgou6EHLeAcIMySBrS17vHdntTdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCBT+69ELsh4KxEjpB5b0JitXJ9bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvNzM1NTczM2YtYjM3NC0z
YTllLTk5MWUtNjI2MDg0MTRiNzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAEfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADetiqGbqS3R6XvUW/QukuYoygKESZ4UDNzPCJnsapcStIIdeAv/rJcD
1GkA8aALPoU9onCljfvzOYoxjyXwJ/ayM2qXLhcdHzalMzz/h/ml+O7hjuvyR7mU
DEXcxmoBpmZczugk8bAZKoLbnDgc9B2dx4UUaiMo0a0Ngqi45moq9UhKBZttvIfO
tYjwPSA1jK6PW8DMQHIpZla37AlfZSqbx8LWiSRXvcttnRgIwz5p2La3fAynophe
V9v3oyO8UAt2pHwVShATFeNewFlg7iU1EZs04YKuP4d8MjfQBllvdjXjR2zM3f65
4yJz7Mxhrb84iGXTVsodaZ9cYuhJ1js=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:51:46 2025 by rpki-client