Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/314c5060-9dc1-31aa-a138-b009a803caf5.roa
File: 314c5060-9dc1-31aa-a138-b009a803caf5.roa (raw, json)
Hash identifier: ZMoSdJtcvajP7do6yfVAgmzwflF2+NRRTGCAN2NpDaU=
Subject key identifier: B3:AD:A6:9B:A5:BB:A9:2A:27:9E:F9:58:F4:D8:4E:87:27:D2:33:BD
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F43285849071BE58635A3258FD1DE52A0
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/314c5060-9dc1-31aa-a138-b009a803caf5.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 271
IP address blocks: 142.231.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1b:e5:86:35:a3:25:8f:d1:de:52:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=8632cc6b-ed73-4ca6-8809-81d840d00dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c5:28:3a:0b:ee:be:d0:26:9e:07:a8:12:58:
9e:9d:56:51:a1:63:82:b4:1c:7b:cd:1c:32:9f:c9:
2d:88:5f:51:e3:55:12:5e:95:e1:b4:f7:d6:2b:c5:
0c:62:55:a6:0b:62:66:a8:24:21:00:13:89:c3:04:
39:0a:e3:e5:d1:b9:fe:03:b6:e6:f9:c8:b8:2c:1b:
16:e7:6e:32:3f:01:08:3d:69:44:76:cc:8e:f9:d6:
55:08:93:8d:e5:8b:d5:98:9f:38:4a:27:99:59:77:
84:13:1a:44:d2:28:b7:ba:26:50:57:84:88:db:5d:
3f:4f:f8:76:86:b4:21:aa:bc:68:50:9a:ea:6d:ef:
d9:99:a6:52:9d:e0:39:52:a2:19:76:d6:36:f2:78:
85:50:00:14:05:da:9a:6b:e5:dc:21:9f:c7:03:6e:
e1:ca:0c:0c:c7:45:74:37:49:be:aa:f4:b8:6e:82:
1a:a6:df:91:d2:e4:7b:fa:f0:0b:63:ad:3a:b9:84:
37:39:c1:7a:cc:cb:41:ad:f0:d6:f8:f0:ab:01:76:
f8:6e:8b:f9:0d:c5:37:72:56:d2:e4:38:36:7b:9e:
05:63:3e:d6:80:4c:5a:8c:ca:3a:df:68:2c:61:49:
7b:8a:bc:f8:40:af:e8:04:49:75:9a:00:11:ee:91:
39:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AD:A6:9B:A5:BB:A9:2A:27:9E:F9:58:F4:D8:4E:87:27:D2:33:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/314c5060-9dc1-31aa-a138-b009a803caf5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
142.231.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:d4:c6:a5:88:a8:b5:41:54:51:c1:10:d0:7d:d4:f1:85:c0:
93:3b:dc:85:33:60:87:64:9d:62:3d:05:d8:a8:fa:3b:aa:16:
f3:10:f4:45:eb:ba:97:a8:4f:c4:5d:ef:77:0e:c5:66:47:0b:
aa:dd:9e:6d:73:1d:42:80:46:73:c0:d1:b2:92:71:df:6a:f1:
e2:d0:83:4e:cc:09:ee:2b:cd:d8:ac:75:4c:41:da:6f:40:46:
5b:07:96:d6:43:68:db:02:c7:68:11:6e:fa:2a:9a:96:5e:1f:
5e:d8:84:ee:ff:f8:bb:05:6f:a0:d1:ab:9d:8f:32:a3:e7:7b:
7a:4e:5e:31:6b:0a:a5:c7:5a:08:ee:6a:ec:d4:9b:37:52:e2:
3c:ca:a1:5d:a4:73:9b:00:66:90:93:b0:36:c9:d8:4d:55:14:
d0:26:ac:63:c5:1b:f3:88:d0:b1:b8:d3:23:55:05:0a:0c:44:
54:fe:31:47:04:c4:15:6e:8d:59:33:04:23:d2:28:6d:31:da:
9e:32:d3:2a:16:eb:1d:3d:9d:22:7b:79:0c:5d:6e:d9:8a:3a:
43:8f:11:89:d4:5d:38:75:af:ad:3f:51:34:65:80:26:9b:83:
64:4d:d7:0e:f8:a1:33:b6:a7:4f:4c:27:25:01:46:55:35:9c:
0d:97:bc:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG+WGNaMlj9HeUqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk
ODYzMmNjNmItZWQ3My00Y2E2LTg4MDktODFkODQwZDAwZGQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicUoOgvuvtAmngeoElienVZRoWOCtBx7zRwy
n8ktiF9R41USXpXhtPfWK8UMYlWmC2JmqCQhABOJwwQ5CuPl0bn+A7bm+ci4LBsW
524yPwEIPWlEdsyO+dZVCJON5YvVmJ84SieZWXeEExpE0ii3uiZQV4SI210/T/h2
hrQhqrxoUJrqbe/ZmaZSneA5UqIZdtY28niFUAAUBdqaa+XcIZ/HA27hygwMx0V0
N0m+qvS4boIapt+R0uR7+vALY606uYQ3OcF6zMtBrfDW+PCrAXb4bov5DcU3clbS
5Dg2e54FYz7WgExajMo632gsYUl7irz4QK/oBEl1mgAR7pE5VQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLOtppulu6kqJ575WPTYTocn0jO9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvMzE0YzUwNjAtOWRjMS0z
MWFhLWExMzgtYjAwOWE4MDNjYWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjud1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADHUxqWIqLVBVFHBENB91PGFwJM73IUzYIdknWI9Bdio+juqFvMQ9EXr
upeoT8Rd73cOxWZHC6rdnm1zHUKARnPA0bKScd9q8eLQg07MCe4rzdisdUxB2m9A
RlsHltZDaNsCx2gRbvoqmpZeH17YhO7/+LsFb6DRq52PMqPne3pOXjFrCqXHWgju
auzUmzdS4jzKoV2kc5sAZpCTsDbJ2E1VFNAmrGPFG/OI0LG40yNVBQoMRFT+MUcE
xBVujVkzBCPSKG0x2p4y0yoW6x09nSJ7eQxdbtmKOkOPEYnUXTh1r60/UTRlgCab
g2RN1w74oTO2p09MJyUBRlU1nA2XvIs=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:13:05 2025 by rpki-client