Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/3af0b3a8-2175-3ff5-9a4a-e134a4f16e10.roa
File: 3af0b3a8-2175-3ff5-9a4a-e134a4f16e10.roa (raw, json)
Hash identifier: PrQGryYMPN71v5koDeF/o3NVGDijweM24wRQq3G4mDw=
Subject key identifier: 1C:64:1A:60:5F:CE:51:1A:9E:93:3B:70:A3:6A:24:BB:76:92:62:2E
Certificate issuer: /CN=ccdced21-8f04-4273-8f8a-07593c3968fb
Certificate serial: 010D0C9F4328584940F76CB416AA43DA0809BB00
Authority key identifier: B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/3af0b3a8-2175-3ff5-9a4a-e134a4f16e10.roa
Signing time: Thu 20 Mar 2025 19:24:05 +0000
ROA not before: Thu 20 Mar 2025 19:24:05 +0000
ROA not after: Wed 18 Jun 2025 19:24:05 +0000
asID: 401243
IP address blocks: 140.235.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:f7:6c:b4:16:aa:43:da:08:09:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccdced21-8f04-4273-8f8a-07593c3968fb
Validity
Not Before: Mar 20 19:24:05 2025 GMT
Not After : Jun 18 19:24:05 2025 GMT
Subject: CN=69d46365-bf98-4954-9538-538353fd3b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5e:be:81:65:31:d7:1a:aa:a3:92:8a:7f:b7:
c6:76:a9:f8:f9:67:5e:f4:5c:46:49:f6:58:b4:8a:
36:f7:09:99:91:6b:76:36:52:87:01:60:40:7a:64:
3b:8b:e1:e3:d1:d7:25:e1:e0:5c:2d:fc:71:ce:d5:
18:2c:d2:7b:a2:e5:2c:40:a8:81:53:64:cf:21:e9:
20:db:15:c5:b0:a3:db:c0:23:dc:20:5d:c8:45:05:
69:1d:0a:1f:3c:df:15:e6:04:f4:d7:00:1b:4b:da:
7d:7f:d5:e5:f9:54:ad:45:0e:e4:7f:7f:01:38:7d:
a6:b8:3e:3f:7a:a2:23:42:04:d2:16:8c:b2:0f:f6:
d2:23:12:24:e7:f8:c3:d5:9b:d0:0f:61:c7:54:9e:
9a:a9:04:2d:f0:ea:37:f2:87:d1:19:9b:87:a7:57:
ba:9e:b2:3b:ee:21:66:bc:86:fe:c2:80:a8:03:0e:
25:0e:77:25:74:54:ce:6e:e6:fd:40:5d:3b:47:20:
16:55:f3:65:21:12:f7:85:a2:41:54:e7:57:48:98:
75:a1:d7:44:3b:53:4b:86:c6:34:39:ba:01:5a:ed:
b3:57:7f:d2:8c:03:90:d5:fd:01:e6:e3:37:2c:d8:
d5:8b:1e:61:96:2d:83:ed:45:18:59:b5:7a:ef:1a:
69:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:64:1A:60:5F:CE:51:1A:9E:93:3B:70:A3:6A:24:BB:76:92:62:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/3af0b3a8-2175-3ff5-9a4a-e134a4f16e10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl
X509v3 Authority Key Identifier:
keyid:B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
sbgp-ipAddrBlock: critical
IPv4:
140.235.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:ed:d4:db:a0:68:89:55:84:0e:cc:e7:70:b2:8e:29:f5:d5:
6f:8b:06:ff:d7:6e:63:4e:2a:bf:de:37:59:67:a7:b4:3a:52:
b1:13:f8:8a:e9:47:cf:4a:11:44:83:54:bf:2f:9e:57:b1:75:
6f:45:d3:20:f7:8c:32:4f:b0:f5:c9:92:3d:2f:b9:92:33:83:
62:88:c3:43:76:0f:b1:da:9d:41:e6:1c:91:44:86:0b:bf:0f:
7e:b0:52:e4:51:31:04:0c:89:e0:46:33:b5:c4:cb:bf:bd:b1:
98:3b:59:31:ca:2d:0c:61:09:ec:5f:2e:28:d5:9d:89:75:df:
ea:80:31:4c:31:2f:63:72:55:fa:cb:f4:7a:62:0c:33:9e:25:
4e:d4:4c:f4:b7:29:a0:91:c6:58:0e:94:34:60:97:0f:bc:3c:
a0:5a:0f:8e:29:1c:69:a0:a9:4f:a5:e3:84:c6:8a:2a:39:5a:
34:93:71:e4:c4:e9:0a:f1:89:48:45:02:5b:36:fa:41:f3:3c:
3f:53:d2:ce:ad:79:40:71:ed:d0:e4:aa:60:05:ff:aa:cd:19:
a3:d6:b4:18:75:2c:12:c0:64:67:c8:6f:58:73:e1:20:a2:36:
f0:bd:01:f2:53:5c:f2:e6:5b:21:86:82:86:60:39:76:be:e0:
bb:22:54:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElA92y0FqpD2ggJuwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2NkY2VkMjEtOGYwNC00MjczLThmOGEtMDc1OTNjMzk2
OGZiMB4XDTI1MDMyMDE5MjQwNVoXDTI1MDYxODE5MjQwNVowLzEtMCsGA1UEAxMk
NjlkNDYzNjUtYmY5OC00OTU0LTk1MzgtNTM4MzUzZmQzYjczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF6+gWUx1xqqo5KKf7fGdqn4+Wde9FxGSfZY
tIo29wmZkWt2NlKHAWBAemQ7i+Hj0dcl4eBcLfxxztUYLNJ7ouUsQKiBU2TPIekg
2xXFsKPbwCPcIF3IRQVpHQofPN8V5gT01wAbS9p9f9Xl+VStRQ7kf38BOH2muD4/
eqIjQgTSFoyyD/bSIxIk5/jD1ZvQD2HHVJ6aqQQt8Oo38ofRGZuHp1e6nrI77iFm
vIb+woCoAw4lDncldFTObub9QF07RyAWVfNlIRL3haJBVOdXSJh1oddEO1NLhsY0
OboBWu2zV3/SjAOQ1f0B5uM3LNjVix5hli2D7UUYWbV67xpprQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBxkGmBfzlEanpM7cKNqJLt2kmIuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jY2Rj
ZWQyMS04ZjA0LTQyNzMtOGY4YS0wNzU5M2MzOTY4ZmIvM2FmMGIzYTgtMjE3NS0z
ZmY1LTlhNGEtZTEzNGE0ZjE2ZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2NkY2VkMjEtOGYwNC00MjczLThm
OGEtMDc1OTNjMzk2OGZiL2NjZGNlZDIxLThmMDQtNDI3My04ZjhhLTA3NTkzYzM5
NjhmYi5jcmwwHwYDVR0jBBgwFoAUstSdhUSY71nqCHYPz711A7DiR8cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jY2RjZWQyMS04ZjA0LTQyNzMtOGY4YS0wNzU5
M2MzOTY4ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOuMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABjt1NugaIlVhA7M53Cyjin11W+LBv/XbmNOKr/eN1lnp7Q6UrET+Irp
R89KEUSDVL8vnlexdW9F0yD3jDJPsPXJkj0vuZIzg2KIw0N2D7HanUHmHJFEhgu/
D36wUuRRMQQMieBGM7XEy7+9sZg7WTHKLQxhCexfLijVnYl13+qAMUwxL2NyVfrL
9HpiDDOeJU7UTPS3KaCRxlgOlDRglw+8PKBaD44pHGmgqU+l44TGiio5WjSTceTE
6QrxiUhFAls2+kHzPD9T0s6teUBx7dDkqmAF/6rNGaPWtBh1LBLAZGfIb1hz4SCi
NvC9AfJTXPLmWyGGgoZgOXa+4LsiVBo=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:25:05 2025 by rpki-client