Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/4d61f5d1-ce3f-373d-a176-12e8ced186f6.roa
File: 4d61f5d1-ce3f-373d-a176-12e8ced186f6.roa (raw, json)
Hash identifier: KWA6YjivlhG7+0l5kGGpqJPj9qQJKjlcrmBQV8MZPfo=
Subject key identifier: 5C:B3:3B:3C:09:2F:C9:54:61:48:8D:6C:C5:5A:F8:6A:E5:98:8D:A0
Certificate issuer: /CN=0c23b672-82ba-4697-9783-b36dad570d90
Certificate serial: 010D0C9F43285848F65BED2B70F7F1A037D5AE00
Authority key identifier: 74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/4d61f5d1-ce3f-373d-a176-12e8ced186f6.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 399381
IP address blocks: 131.201.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:ed:2b:70:f7:f1:a0:37:d5:ae:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c23b672-82ba-4697-9783-b36dad570d90
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=c9f8352e-9ecd-4eef-a466-b3355635b3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a4:f0:73:5f:b6:0d:dc:34:ff:25:1e:12:99:
21:df:ff:b8:2e:42:b2:94:90:30:56:f5:2b:53:d5:
20:71:50:86:aa:a8:5d:f7:bc:90:1e:43:de:89:78:
63:26:2a:16:15:77:f7:51:ce:eb:d8:58:49:6e:4b:
72:d1:22:db:75:7c:18:fa:35:e8:60:64:1e:f7:c1:
65:d8:3e:cd:3a:ac:72:3e:be:18:a2:c8:6d:9c:88:
f7:b7:06:17:7b:9b:c0:1a:3e:59:9e:b5:09:ea:ee:
49:d0:be:69:67:bc:47:5f:14:45:1e:57:74:f0:0c:
34:12:df:dd:0a:79:3f:06:85:59:2d:ba:69:d8:e2:
31:38:c6:f5:d3:b0:8b:6f:0c:8b:f5:9d:ad:d1:6b:
d8:d5:a6:0a:d7:dc:5c:f1:d9:b7:0d:08:ae:8d:d7:
f9:10:8c:a8:6d:ce:9e:16:d6:db:17:1b:b3:03:c7:
56:8c:f4:d2:9c:b7:92:fc:8c:87:cc:5d:5b:76:8c:
3d:1d:44:30:91:2e:50:0b:6c:78:26:2a:1f:92:ee:
e2:81:16:6a:f5:e9:e8:56:20:6a:bc:e5:d6:8a:9f:
ce:66:d4:d5:91:5f:f1:42:ef:ea:55:a6:b1:49:97:
3a:d2:73:cc:44:44:e5:91:16:9f:2b:eb:dd:06:a0:
ad:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B3:3B:3C:09:2F:C9:54:61:48:8D:6C:C5:5A:F8:6A:E5:98:8D:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/4d61f5d1-ce3f-373d-a176-12e8ced186f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl
X509v3 Authority Key Identifier:
keyid:74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer
sbgp-ipAddrBlock: critical
IPv4:
131.201.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:09:54:35:57:2a:26:53:c4:1e:4d:f8:43:30:3c:ed:5a:6f:
42:fd:aa:5d:d4:87:f7:8f:c3:9b:e3:15:51:94:7b:53:5c:97:
4b:52:c8:26:a9:27:ba:6f:dc:85:45:60:7c:d9:a9:06:9c:4f:
66:71:1a:ff:e7:91:6c:64:4b:c5:ce:1e:a0:67:c0:19:72:cb:
b7:d9:c0:71:f5:be:47:a9:26:69:4a:16:fd:de:b9:b2:80:0a:
70:e8:53:53:ae:0f:d0:47:d4:7b:ed:9b:f3:33:1c:68:ee:30:
ce:f0:ef:fe:23:53:6f:fd:0a:90:3d:1c:48:bf:d8:d3:99:92:
c9:c7:01:e4:bd:46:1e:2a:d9:5b:e6:f5:b4:58:83:dd:63:e0:
9c:b2:e7:ed:6f:6d:68:be:9f:db:a2:fa:4b:43:0a:3e:01:b0:
1b:4e:11:c5:8d:78:e0:92:1c:23:93:ea:d9:9a:8f:f1:12:97:
f7:b8:2a:1e:09:17:dc:0a:40:23:48:c4:40:eb:88:c2:ef:93:
e8:f6:72:c0:4a:c2:4e:9e:8c:a6:8a:fc:dc:a9:85:84:cd:e7:
eb:4b:f9:c6:a4:de:da:3d:a5:ab:9f:f8:1c:8c:1e:f0:55:88:
a6:ba:ef:cf:aa:21:d7:d8:0a:65:8c:04:2a:74:2e:bb:8e:72:
94:98:3c:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+0rcPfxoDfVrgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGMyM2I2NzItODJiYS00Njk3LTk3ODMtYjM2ZGFkNTcw
ZDkwMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk
YzlmODM1MmUtOWVjZC00ZWVmLWE0NjYtYjMzNTU2MzViM2MxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6Twc1+2Ddw0/yUeEpkh3/+4LkKylJAwVvUr
U9UgcVCGqqhd97yQHkPeiXhjJioWFXf3Uc7r2FhJbkty0SLbdXwY+jXoYGQe98Fl
2D7NOqxyPr4YoshtnIj3twYXe5vAGj5ZnrUJ6u5J0L5pZ7xHXxRFHld08Aw0Et/d
Cnk/BoVZLbpp2OIxOMb107CLbwyL9Z2t0WvY1aYK19xc8dm3DQiujdf5EIyobc6e
FtbbFxuzA8dWjPTSnLeS/IyHzF1bdow9HUQwkS5QC2x4Jiofku7igRZq9enoViBq
vOXWip/OZtTVkV/xQu/qVaaxSZc60nPMRETlkRafK+vdBqCtYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFyzOzwJL8lUYUiNbMVa+GrlmI2gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzIz
YjY3Mi04MmJhLTQ2OTctOTc4My1iMzZkYWQ1NzBkOTAvNGQ2MWY1ZDEtY2UzZi0z
NzNkLWExNzYtMTJlOGNlZDE4NmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGMyM2I2NzItODJiYS00Njk3LTk3
ODMtYjM2ZGFkNTcwZDkwLzBjMjNiNjcyLTgyYmEtNDY5Ny05NzgzLWIzNmRhZDU3
MGQ5MC5jcmwwHwYDVR0jBBgwFoAUdAIts2AlChaC3ygaf/53rkvOYnowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8wYzIzYjY3Mi04MmJhLTQ2OTctOTc4My1iMzZk
YWQ1NzBkOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg8kBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFkJVDVXKiZTxB5N+EMwPO1ab0L9ql3Uh/ePw5vjFVGUe1Ncl0tSyCap
J7pv3IVFYHzZqQacT2ZxGv/nkWxkS8XOHqBnwBlyy7fZwHH1vkepJmlKFv3eubKA
CnDoU1OuD9BH1Hvtm/MzHGjuMM7w7/4jU2/9CpA9HEi/2NOZksnHAeS9Rh4q2Vvm
9bRYg91j4Jyy5+1vbWi+n9ui+ktDCj4BsBtOEcWNeOCSHCOT6tmaj/ESl/e4Kh4J
F9wKQCNIxEDriMLvk+j2csBKwk6ejKaK/NyphYTN5+tL+cak3to9pauf+ByMHvBV
iKa678+qIdfYCmWMBCp0LruOcpSYPAA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:50:16 2025 by rpki-client