Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/609a7e87-f0cc-3067-854c-362f7e4e0b2f.roa
File: 609a7e87-f0cc-3067-854c-362f7e4e0b2f.roa (raw, json)
Hash identifier: bzHwTjWLrpUj3vUWL5W6TYKRpCXpF56lgkQgApc3CsI=
Subject key identifier: 02:5B:59:C3:84:04:CD:F1:FA:BA:92:24:28:A1:24:DA:1E:41:4F:94
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F4328584953C4281BCD6F1B034D66A348
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/609a7e87-f0cc-3067-854c-362f7e4e0b2f.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 54113
IP address blocks: 140.248.220.192/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:28:1b:cd:6f:1b:03:4d:66:a3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=131a1a07-0921-4070-af00-13a66db0d0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:04:9f:5d:4e:b7:bd:1b:60:90:36:60:6d:c0:
39:47:a3:39:bd:db:10:98:82:28:95:58:68:ac:0a:
be:23:e7:bd:56:42:0d:b0:ae:67:9a:1c:71:8e:06:
47:d7:02:a6:e9:5f:67:87:37:23:74:d0:87:64:05:
2f:f3:80:44:b9:e0:a3:d2:ad:a9:bd:f4:9a:f4:b4:
de:a3:bd:11:12:55:2d:ff:88:c1:7d:83:b5:04:79:
9b:d9:d9:2b:5d:d3:f1:fb:7e:05:ba:16:d4:4f:43:
c7:4d:69:cc:76:db:d1:19:3f:73:6a:9b:b6:fb:00:
e1:2f:1b:d8:55:26:66:e9:65:33:d5:43:42:45:8f:
8b:a3:c4:98:5b:d5:b1:88:26:65:87:20:60:ba:20:
6d:22:9f:93:e9:98:cd:8c:32:94:2b:73:c9:69:5b:
14:32:04:71:5f:0c:73:0b:7a:bb:cf:c9:8b:ca:54:
a8:bf:84:84:97:df:2f:12:47:cd:03:76:40:07:a2:
87:91:5f:2a:84:9e:1b:cf:82:84:2f:81:fa:12:8d:
fe:38:df:c7:d0:eb:83:85:87:8e:41:8e:5a:63:73:
25:e3:c8:ba:73:ca:a1:4b:06:58:5b:01:07:89:7b:
be:8c:cc:dc:85:d9:b8:e5:c5:20:3e:3b:ed:f7:81:
9b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5B:59:C3:84:04:CD:F1:FA:BA:92:24:28:A1:24:DA:1E:41:4F:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/609a7e87-f0cc-3067-854c-362f7e4e0b2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
140.248.220.192/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:95:f2:ab:1c:46:a8:1a:48:73:91:3d:ca:49:6f:96:b5:28:
53:28:1a:28:20:c2:df:34:0a:25:af:4e:7f:6f:5b:23:98:cb:
58:d7:f6:37:6f:c2:a6:2e:bb:a8:68:a1:c2:28:26:e4:57:aa:
98:49:ff:f8:15:79:6c:9c:d3:61:66:cd:b6:8f:e4:d2:78:f9:
06:56:13:77:26:31:da:24:ba:bd:dc:9e:61:c3:cc:eb:ce:02:
15:e3:f0:a2:37:4a:c5:5a:a1:2e:29:04:bb:2f:a8:50:00:8f:
d6:92:d2:61:be:8c:5a:bf:e3:dd:b7:50:4e:e6:4c:ee:98:a0:
a0:d3:58:9d:e9:be:5d:1b:01:09:17:60:f3:36:1e:45:c6:ae:
5d:e3:3b:b9:fd:40:cf:9d:e3:da:1a:09:c0:1e:4b:62:51:53:
5b:3e:0b:90:c7:58:29:13:cf:38:1a:c3:95:4c:6c:3d:38:bf:
14:34:3a:bd:2b:bf:89:c6:36:8f:e5:ee:99:d5:32:7b:dd:44:
90:ed:30:05:0c:2e:b4:40:ea:14:69:2a:e2:7f:ad:7b:b9:a3:
22:cd:47:c0:c1:ea:72:0c:47:61:1c:74:09:15:d9:e6:7f:6c:
41:67:33:c1:5e:da:7f:c0:08:bd:01:0a:2e:91:88:9d:54:75:
74:28:c5:40
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElTxCgbzW8bA01mo0gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
MTMxYTFhMDctMDkyMS00MDcwLWFmMDAtMTNhNjZkYjBkMGViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQSfXU63vRtgkDZgbcA5R6M5vdsQmIIolVho
rAq+I+e9VkINsK5nmhxxjgZH1wKm6V9nhzcjdNCHZAUv84BEueCj0q2pvfSa9LTe
o70RElUt/4jBfYO1BHmb2dkrXdPx+34FuhbUT0PHTWnMdtvRGT9zapu2+wDhLxvY
VSZm6WUz1UNCRY+Lo8SYW9WxiCZlhyBguiBtIp+T6ZjNjDKUK3PJaVsUMgRxXwxz
C3q7z8mLylSov4SEl98vEkfNA3ZAB6KHkV8qhJ4bz4KEL4H6Eo3+ON/H0OuDhYeO
QY5aY3Ml48i6c8qhSwZYWwEHiXu+jMzchdm45cUgPjvt94Gb/wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAJbWcOEBM3x+rqSJCihJNoeQU+UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNjA5YTdlODctZjBjYy0z
MDY3LTg1NGMtMzYyZjdlNGUwYjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEjPjcwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBWlfKrHEaoGkhzkT3KSW+WtShTKBooIMLfNAolr05/b1sjmMtY1/Y3
b8KmLruoaKHCKCbkV6qYSf/4FXlsnNNhZs22j+TSePkGVhN3JjHaJLq93J5hw8zr
zgIV4/CiN0rFWqEuKQS7L6hQAI/WktJhvoxav+Pdt1BO5kzumKCg01id6b5dGwEJ
F2DzNh5Fxq5d4zu5/UDPnePaGgnAHktiUVNbPguQx1gpE884GsOVTGw9OL8UNDq9
K7+JxjaP5e6Z1TJ73USQ7TAFDC60QOoUaSrif617uaMizUfAwepyDEdhHHQJFdnm
f2xBZzPBXtp/wAi9AQoukYidVHV0KMVA
-----END CERTIFICATE-----
Generated at Thu Apr 3 02:55:14 2025 by rpki-client