Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/98537b11-bb4b-342b-89c8-51acc98a1597.roa
File: 98537b11-bb4b-342b-89c8-51acc98a1597.roa (raw, json)
Hash identifier: vTFap2ju37u0ZqnEFnsOwrXGrziKQ1wQjxwS2ANQlPw=
Subject key identifier: 79:2C:F5:C7:C1:76:60:C9:16:F2:84:51:59:65:A8:74:06:84:18:5D
Certificate issuer: /CN=ccdced21-8f04-4273-8f8a-07593c3968fb
Certificate serial: 010D0C9F432858489E6B5FC6E6C0C1A6424C7900
Authority key identifier: B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/98537b11-bb4b-342b-89c8-51acc98a1597.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 7029
IP address blocks: 140.235.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:5f:c6:e6:c0:c1:a6:42:4c:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccdced21-8f04-4273-8f8a-07593c3968fb
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=4ef63d86-b59f-47c6-b622-2c7a2f6ddc8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8a:88:25:a4:9d:19:d0:16:45:13:86:a7:d1:
08:4e:5b:aa:56:63:cc:60:39:a1:e3:54:89:f1:6d:
a6:53:a3:23:c3:bc:d5:d6:94:5b:a1:f0:d6:fd:79:
4e:e7:6b:59:9a:d7:c7:d5:e3:2e:4b:8b:b6:2d:d3:
bf:9c:38:37:a0:59:95:ef:9c:b7:81:2a:f1:32:a4:
5e:87:ee:14:ad:0e:ec:d9:e3:41:8b:67:5f:35:ad:
2e:f4:36:ad:26:da:9c:5c:a7:87:a3:d9:cb:af:7e:
55:af:54:b6:31:2b:2f:90:c3:e5:11:a6:24:08:92:
61:c0:b4:80:62:bd:98:14:a4:66:88:b2:c5:6d:d9:
9c:ce:68:3b:03:4b:1c:1a:65:50:f9:4e:e1:cd:5d:
ce:32:5f:e2:af:96:6b:ac:07:c1:24:02:cd:c0:ba:
21:f4:a9:79:50:e2:86:62:de:b4:7d:4e:d3:36:6f:
ed:f7:d1:a4:66:41:bd:11:1b:6b:6e:79:ca:75:57:
25:32:e9:40:31:93:3f:76:72:d1:a8:db:5e:0a:02:
83:ee:d5:28:d1:d4:8d:96:f2:bb:32:19:46:30:be:
5a:1b:53:3f:d0:a2:08:d7:e8:d9:90:7f:89:f2:7d:
3e:14:95:a5:02:95:61:ae:0c:4b:73:c9:6b:95:d1:
5c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2C:F5:C7:C1:76:60:C9:16:F2:84:51:59:65:A8:74:06:84:18:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/98537b11-bb4b-342b-89c8-51acc98a1597.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl
X509v3 Authority Key Identifier:
keyid:B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
sbgp-ipAddrBlock: critical
IPv4:
140.235.140.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:92:57:06:79:cc:a7:2f:f2:3f:07:9a:10:5d:e8:0d:d9:53:
af:38:b4:18:6d:bc:69:45:d2:36:af:c3:5e:ab:9d:54:44:b2:
27:51:f8:3d:b3:80:f2:37:1f:2c:26:8c:1c:a1:e2:ac:10:cc:
f4:b3:d2:aa:45:fa:77:79:a1:cb:d9:df:1c:da:9c:0c:59:dd:
b6:dd:f3:a1:6c:5f:ce:9b:6f:0b:7c:71:a4:07:7f:bc:9e:4a:
24:ee:bc:49:13:16:cf:32:87:71:7d:8f:41:a6:7a:19:f5:31:
b4:7b:a4:02:f2:9e:ce:14:85:14:17:dc:13:53:a6:2c:17:50:
a1:51:d9:9c:49:ce:c0:8c:40:9d:dd:8d:2c:37:ee:18:84:8e:
6a:bb:bc:50:75:98:f4:01:a3:a6:d4:d9:f9:e2:d3:cb:aa:3c:
8e:4f:ae:b3:bc:a5:28:a0:51:0d:61:3d:86:55:1d:9a:de:09:
cd:db:6b:22:0e:87:61:5f:ef:1c:ca:fd:0f:37:31:3c:ea:2f:
25:79:3a:35:c4:1f:82:6d:d4:3d:e5:45:e6:5c:8a:64:58:62:
9b:23:77:f6:64:e9:14:58:eb:18:56:12:ce:48:07:20:eb:70:
2c:59:ea:32:4e:ad:2d:79:3b:14:aa:81:b0:d8:31:48:31:a0:
3e:b5:a5:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea1/G5sDBpkJMeQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2NkY2VkMjEtOGYwNC00MjczLThmOGEtMDc1OTNjMzk2
OGZiMB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
NGVmNjNkODYtYjU5Zi00N2M2LWI2MjItMmM3YTJmNmRkYzhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYqIJaSdGdAWRROGp9EITluqVmPMYDmh41SJ
8W2mU6Mjw7zV1pRbofDW/XlO52tZmtfH1eMuS4u2LdO/nDg3oFmV75y3gSrxMqRe
h+4UrQ7s2eNBi2dfNa0u9DatJtqcXKeHo9nLr35Vr1S2MSsvkMPlEaYkCJJhwLSA
Yr2YFKRmiLLFbdmczmg7A0scGmVQ+U7hzV3OMl/ir5ZrrAfBJALNwLoh9Kl5UOKG
Yt60fU7TNm/t99GkZkG9ERtrbnnKdVclMulAMZM/dnLRqNteCgKD7tUo0dSNlvK7
MhlGML5aG1M/0KII1+jZkH+J8n0+FJWlApVhrgxLc8lrldFcxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHks9cfBdmDJFvKEUVllqHQGhBhdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jY2Rj
ZWQyMS04ZjA0LTQyNzMtOGY4YS0wNzU5M2MzOTY4ZmIvOTg1MzdiMTEtYmI0Yi0z
NDJiLTg5YzgtNTFhY2M5OGExNTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2NkY2VkMjEtOGYwNC00MjczLThm
OGEtMDc1OTNjMzk2OGZiL2NjZGNlZDIxLThmMDQtNDI3My04ZjhhLTA3NTkzYzM5
NjhmYi5jcmwwHwYDVR0jBBgwFoAUstSdhUSY71nqCHYPz711A7DiR8cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jY2RjZWQyMS04ZjA0LTQyNzMtOGY4YS0wNzU5
M2MzOTY4ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOuMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEqSVwZ5zKcv8j8HmhBd6A3ZU684tBhtvGlF0javw16rnVREsidR+D2z
gPI3HywmjByh4qwQzPSz0qpF+nd5ocvZ3xzanAxZ3bbd86FsX86bbwt8caQHf7ye
SiTuvEkTFs8yh3F9j0Gmehn1MbR7pALyns4UhRQX3BNTpiwXUKFR2ZxJzsCMQJ3d
jSw37hiEjmq7vFB1mPQBo6bU2fni08uqPI5PrrO8pSigUQ1hPYZVHZreCc3bayIO
h2Ff7xzK/Q83MTzqLyV5OjXEH4Jt1D3lReZcimRYYpsjd/Zk6RRY6xhWEs5IByDr
cCxZ6jJOrS15OxSqgbDYMUgxoD61pbg=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:28:38 2025 by rpki-client