Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/4138c095-a4da-331c-a10c-3621cf1b39cb.roa
File: 4138c095-a4da-331c-a10c-3621cf1b39cb.roa (raw, json)
Hash identifier: bF5KIGgffzj+3m06IKxMV4qx9wpe2Vh+XbROfoTHXAQ=
Subject key identifier: 1E:4F:D0:A4:57:4D:59:F6:EE:F2:43:FA:17:EE:B0:C6:D9:D7:6C:6C
Certificate issuer: /CN=a7a26b13-c295-4f0b-bec5-4645ddd1d0d9
Certificate serial: 010D0C9F43285848BE862CBA66263C399BD51600
Authority key identifier: F2:40:A2:C2:DB:53:C9:2C:89:CF:A6:ED:89:18:13:25:11:AE:D2:5D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/4138c095-a4da-331c-a10c-3621cf1b39cb.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 8134
IP address blocks: 68.70.128.0/20 maxlen: 20
69.19.168.0/21 maxlen: 21
206.51.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:2c:ba:66:26:3c:39:9b:d5:16:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a26b13-c295-4f0b-bec5-4645ddd1d0d9
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=239dd50e-a0f6-4943-90c4-79a6620e9b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fa:5b:0b:28:ef:c8:f8:55:3b:89:c0:ac:18:
f9:cf:f1:40:e1:f3:a6:86:49:90:ca:c4:1d:10:91:
98:67:13:96:c1:eb:6c:47:3c:c3:36:22:de:97:a0:
e1:8d:4d:e0:a3:ec:b3:aa:ee:1a:bd:32:2c:b1:72:
8a:65:6b:66:b8:3a:83:64:81:a0:38:61:30:c2:4f:
8a:99:63:ae:4e:50:74:dc:57:f3:5b:c9:5b:ff:38:
7e:1b:4f:b9:7b:20:10:d9:73:85:74:60:a2:d8:8e:
e2:3c:2e:b6:1f:10:88:89:5f:4c:52:53:80:02:66:
bc:42:89:ef:a5:57:df:6f:f6:27:6d:ed:c9:77:90:
1b:92:e3:0e:00:a5:8c:1e:62:fe:ad:c8:6d:61:d9:
5b:5d:1e:17:77:af:71:b6:50:26:4e:da:37:a6:18:
b7:b7:b9:c6:4a:d1:53:fb:65:27:3c:bd:c2:4f:ed:
b5:f4:2c:66:55:f5:da:64:2c:b3:e9:16:9a:d9:4f:
0f:79:7d:d6:79:8f:58:64:44:76:7a:de:6e:39:48:
fa:12:c4:5d:37:61:b2:62:26:a2:6a:0e:54:c8:c5:
a8:49:27:a3:07:93:12:1b:ba:fd:56:b2:04:8e:8b:
e8:35:47:5b:02:c5:b8:d1:6f:f9:c6:fd:96:6f:df:
87:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4F:D0:A4:57:4D:59:F6:EE:F2:43:FA:17:EE:B0:C6:D9:D7:6C:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/4138c095-a4da-331c-a10c-3621cf1b39cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.crl
X509v3 Authority Key Identifier:
keyid:F2:40:A2:C2:DB:53:C9:2C:89:CF:A6:ED:89:18:13:25:11:AE:D2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a7a26b13-c295-4f0b-bec5-4645ddd1d0d9.cer
sbgp-ipAddrBlock: critical
IPv4:
68.70.128.0/20
69.19.168.0/21
206.51.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:0e:00:01:fa:8a:9d:2c:ea:78:a5:cf:ac:5e:27:84:78:aa:
45:4d:8a:3b:89:4e:47:dd:16:80:68:0c:da:33:bb:03:fe:63:
9a:a6:c7:40:9c:ab:ac:0d:28:37:2a:06:08:cd:ce:ff:fd:21:
26:3b:59:fc:2a:be:a2:50:77:22:91:6b:e8:de:b8:67:57:ea:
c9:c0:02:41:5e:e3:e3:63:0d:2a:5e:cd:5f:7b:56:7d:f8:b2:
e1:5f:76:4b:a3:ed:ab:46:3e:89:f6:14:0a:13:93:43:35:19:
00:ca:f4:6f:be:ee:d4:4e:11:bc:6c:11:0e:c3:39:19:08:6b:
6b:95:cc:37:78:9b:86:10:3d:63:3e:37:13:21:d2:70:33:f4:
b2:f7:3e:d8:5b:4a:b2:08:0e:d1:db:77:14:d8:38:29:e4:2f:
77:2b:d5:7b:b0:01:54:4d:ae:b9:bb:b4:a8:f9:44:ba:60:95:
0d:18:86:ed:4e:e6:82:7a:43:a8:2e:89:5d:53:fb:76:fc:05:
ba:6d:f6:67:c0:b5:65:2a:68:07:c9:1a:36:80:be:12:76:d7:
fd:65:d4:cb:ce:7e:4f:77:ce:aa:2a:68:39:5a:59:ac:be:5d:
3b:b2:bc:cc:54:2b:2d:d4:e3:e9:5c:95:10:93:6c:8e:48:63:
af:3f:83:81
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEi+hiy6ZiY8OZvVFgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTdhMjZiMTMtYzI5NS00ZjBiLWJlYzUtNDY0NWRkZDFk
MGQ5MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk
MjM5ZGQ1MGUtYTBmNi00OTQzLTkwYzQtNzlhNjYyMGU5YjM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vpbCyjvyPhVO4nArBj5z/FA4fOmhkmQysQd
EJGYZxOWwetsRzzDNiLel6DhjU3go+yzqu4avTIssXKKZWtmuDqDZIGgOGEwwk+K
mWOuTlB03FfzW8lb/zh+G0+5eyAQ2XOFdGCi2I7iPC62HxCIiV9MUlOAAma8Qonv
pVffb/Ynbe3Jd5AbkuMOAKWMHmL+rchtYdlbXR4Xd69xtlAmTto3phi3t7nGStFT
+2UnPL3CT+219CxmVfXaZCyz6Raa2U8PeX3WeY9YZER2et5uOUj6EsRdN2GyYiai
ag5UyMWoSSejB5MSG7r9VrIEjovoNUdbAsW40W/5xv2Wb9+H3wIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFB5P0KRXTVn27vJD+hfusMbZ12xsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hN2Ey
NmIxMy1jMjk1LTRmMGItYmVjNS00NjQ1ZGRkMWQwZDkvNDEzOGMwOTUtYTRkYS0z
MzFjLWExMGMtMzYyMWNmMWIzOWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTdhMjZiMTMtYzI5NS00ZjBiLWJl
YzUtNDY0NWRkZDFkMGQ5L2E3YTI2YjEzLWMyOTUtNGYwYi1iZWM1LTQ2NDVkZGQx
ZDBkOS5jcmwwHwYDVR0jBBgwFoAU8kCiwttTySyJz6btiRgTJRGu0l0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hN2EyNmIxMy1jMjk1LTRmMGItYmVjNS00NjQ1
ZGRkMWQwZDkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEREaAAwQD
RROoAwQEzjNwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAFwOAAH6ip0s6nilz6xeJ4R4qkVNijuJTkfdFoBo
DNozuwP+Y5qmx0Ccq6wNKDcqBgjNzv/9ISY7WfwqvqJQdyKRa+jeuGdX6snAAkFe
4+NjDSpezV97Vn34suFfdkuj7atGPon2FAoTk0M1GQDK9G++7tROEbxsEQ7DORkI
a2uVzDd4m4YQPWM+NxMh0nAz9LL3PthbSrIIDtHbdxTYOCnkL3cr1XuwAVRNrrm7
tKj5RLpglQ0Yhu1O5oJ6Q6guiV1T+3b8Bbpt9mfAtWUqaAfJGjaAvhJ21/1l1MvO
fk93zqoqaDlaWay+XTuyvMxUKy3U4+lclRCTbI5IY68/g4E=
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:01:52 2025 by rpki-client