Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/088c14c0-87f9-31b9-9bc1-18e2325bcf39.roa
File: 088c14c0-87f9-31b9-9bc1-18e2325bcf39.roa (raw, json)
Hash identifier: iJIV9ODbH7wi0H1fzy7TG64Db8CUADpRtSTQmz99dOQ=
Subject key identifier: AC:21:28:72:07:94:D3:8D:6F:CE:23:2F:CF:8B:02:F5:0F:FB:29:F0
Certificate issuer: /CN=28b0e2e4-5f2a-4ecd-ad6b-97416951f017
Certificate serial: 010D0C9F43285848854B5122E34BDA4B6D3928C0
Authority key identifier: 78:E0:85:36:78:70:3F:C9:6B:CE:79:FC:9F:32:58:F4:FF:32:02:55
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/088c14c0-87f9-31b9-9bc1-18e2325bcf39.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 393249
IP address blocks: 137.82.0.0/16 maxlen: 16
142.103.0.0/16 maxlen: 16
192.5.96.0/24 maxlen: 24
192.73.5.0/24 maxlen: 24
198.162.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:51:22:e3:4b:da:4b:6d:39:28:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28b0e2e4-5f2a-4ecd-ad6b-97416951f017
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=4647f542-5017-4a1c-a25f-cddb54cc2a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3a:8a:3c:6e:a7:7c:18:f6:fb:04:dc:9c:f6:
bb:7d:e3:9a:ee:c9:f8:76:26:24:f7:b4:de:e6:d1:
f1:37:6d:fa:1c:42:49:8a:7c:50:b4:82:64:76:cb:
c3:c4:28:f4:ae:bd:dd:c8:58:02:7d:84:da:06:2c:
a7:c3:40:66:57:15:54:f7:19:02:57:d3:35:84:4c:
54:2c:9d:66:93:e1:ff:71:15:d3:14:a3:98:3a:7c:
4b:1b:e5:2f:df:75:48:36:47:ec:65:48:01:91:ab:
de:c4:d0:15:03:c3:32:24:41:b7:3c:ab:1b:48:41:
f3:b4:1e:d3:b9:e1:12:0d:9f:7c:32:d6:19:ca:01:
37:d6:df:1b:e6:e3:18:87:d1:06:26:8c:f0:d7:99:
cc:47:d0:fb:da:6a:8e:d7:8e:4a:21:ac:e3:aa:66:
7d:9f:85:cf:26:d9:bf:33:96:b5:aa:01:a5:b0:23:
13:d3:4f:2c:35:40:cf:36:95:bd:28:7c:ef:ed:d5:
2c:e6:f0:3f:ae:7b:88:93:1c:3f:9f:ad:a2:e8:a1:
ac:a4:9b:39:2c:ee:8e:23:8a:48:3e:3a:2c:91:d3:
e4:de:42:55:b4:9e:6e:b3:d1:31:13:0e:c6:b1:fa:
8d:7b:c8:c3:c3:37:6f:31:64:7e:d2:d6:da:f0:61:
28:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:21:28:72:07:94:D3:8D:6F:CE:23:2F:CF:8B:02:F5:0F:FB:29:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/088c14c0-87f9-31b9-9bc1-18e2325bcf39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.crl
X509v3 Authority Key Identifier:
keyid:78:E0:85:36:78:70:3F:C9:6B:CE:79:FC:9F:32:58:F4:FF:32:02:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.cer
sbgp-ipAddrBlock: critical
IPv4:
137.82.0.0/16
142.103.0.0/16
192.5.96.0/24
192.73.5.0/24
198.162.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:a5:5d:65:33:2f:d3:44:f4:b5:b4:da:a9:0e:89:71:90:49:
0a:09:64:40:21:14:02:a9:f6:80:e5:d2:fa:0c:63:32:e2:51:
c1:14:5d:8d:77:1d:e3:28:7c:97:e8:b8:7c:e3:11:9b:89:bb:
41:d5:a2:02:63:d6:d1:46:20:47:3e:85:75:41:83:0b:f8:0c:
bc:5e:e7:fb:1c:5b:71:9a:fe:07:5c:c4:73:8c:d4:fb:a9:96:
3a:3d:0f:64:c9:b0:da:15:ba:d8:21:5b:21:b9:88:88:e1:30:
8b:62:eb:58:24:cb:42:c1:19:59:1f:fd:6d:fd:b8:eb:4b:d3:
2a:93:72:8e:f3:fc:80:f8:d6:0d:63:28:41:48:bc:16:1c:ab:
30:a5:e3:2d:12:60:de:92:94:3f:b8:08:ac:d3:9e:f7:5a:75:
c5:b3:c2:bb:c9:27:c3:0d:17:9a:41:01:a0:9d:15:9b:7d:f2:
57:2c:11:6a:e3:9c:63:54:b8:5b:ea:46:60:41:d3:2b:12:22:
2b:93:8f:7d:30:63:65:3a:56:d6:ed:e1:dd:2e:f0:47:40:b3:
17:fc:1c:63:68:c7:fa:7f:ed:7f:5b:0f:cd:fc:41:47:fa:57:
a3:12:11:93:a6:19:1e:e9:d1:ac:fa:98:b1:02:36:e5:86:ae:
29:10:ab:4e
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEiFS1Ei40vaS205KMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjhiMGUyZTQtNWYyYS00ZWNkLWFkNmItOTc0MTY5NTFm
MDE3MB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk
NDY0N2Y1NDItNTAxNy00YTFjLWEyNWYtY2RkYjU0Y2MyYTUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTqKPG6nfBj2+wTcnPa7feOa7sn4diYk97Te
5tHxN236HEJJinxQtIJkdsvDxCj0rr3dyFgCfYTaBiynw0BmVxVU9xkCV9M1hExU
LJ1mk+H/cRXTFKOYOnxLG+Uv33VINkfsZUgBkavexNAVA8MyJEG3PKsbSEHztB7T
ueESDZ98MtYZygE31t8b5uMYh9EGJozw15nMR9D72mqO145KIazjqmZ9n4XPJtm/
M5a1qgGlsCMT008sNUDPNpW9KHzv7dUs5vA/rnuIkxw/n62i6KGspJs5LO6OI4pI
PjoskdPk3kJVtJ5us9ExEw7GsfqNe8jDwzdvMWR+0tba8GEoywIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFKwhKHIHlNONb84jL8+LAvUP+ynwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yOGIw
ZTJlNC01ZjJhLTRlY2QtYWQ2Yi05NzQxNjk1MWYwMTcvMDg4YzE0YzAtODdmOS0z
MWI5LTliYzEtMThlMjMyNWJjZjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjhiMGUyZTQtNWYyYS00ZWNkLWFk
NmItOTc0MTY5NTFmMDE3LzI4YjBlMmU0LTVmMmEtNGVjZC1hZDZiLTk3NDE2OTUx
ZjAxNy5jcmwwHwYDVR0jBBgwFoAUeOCFNnhwP8lrznn8nzJY9P8yAlUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yOGIwZTJlNC01ZjJhLTRlY2QtYWQ2Yi05NzQx
Njk1MWYwMTcuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcAwMAiVIDAwCO
ZwMEAMAFYAMEAMBJBQMEBcaiIDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCYpV1lMy/TRPS1tNqpDolxkEkK
CWRAIRQCqfaA5dL6DGMy4lHBFF2Ndx3jKHyX6Lh84xGbibtB1aICY9bRRiBHPoV1
QYML+Ay8Xuf7HFtxmv4HXMRzjNT7qZY6PQ9kybDaFbrYIVshuYiI4TCLYutYJMtC
wRlZH/1t/bjrS9Mqk3KO8/yA+NYNYyhBSLwWHKswpeMtEmDekpQ/uAis0573WnXF
s8K7ySfDDReaQQGgnRWbffJXLBFq45xjVLhb6kZgQdMrEiIrk499MGNlOlbW7eHd
LvBHQLMX/BxjaMf6f+1/Ww/N/EFH+lejEhGTphke6dGs+pixAjblhq4pEKtO
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:14:18 2025 by rpki-client