Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/10efffec-8118-3912-b378-fa58a2bf751a.roa
File: 10efffec-8118-3912-b378-fa58a2bf751a.roa (raw, json)
Hash identifier: LKXiP/KKkzSAWShzhQlx+uO/HGk68HydsuvG6RWkzQs=
Subject key identifier: C8:52:92:E9:80:83:4B:E5:9C:49:EA:4E:FC:87:7F:59:D0:1E:92:FD
Certificate issuer: /CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
Certificate serial: 010D0C9F43285848CDB55930D4C8CD0CFCD8AD40
Authority key identifier: 97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/10efffec-8118-3912-b378-fa58a2bf751a.roa
Signing time: Fri 07 Feb 2025 12:33:00 +0000
ROA not before: Fri 07 Feb 2025 12:33:00 +0000
ROA not after: Thu 08 May 2025 11:33:00 +0000
asID: 18934
IP address blocks: 142.202.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:b5:59:30:d4:c8:cd:0c:fc:d8:ad:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
Validity
Not Before: Feb 7 12:33:00 2025 GMT
Not After : May 8 11:33:00 2025 GMT
Subject: CN=14b203f9-4c3a-447e-8647-5ce9adeea2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ef:7a:37:c6:82:e4:a5:f1:b5:cb:65:15:86:
53:87:7f:c3:c3:86:17:3c:48:8c:fc:d2:9e:dd:e2:
3e:3e:75:7c:7b:0f:92:74:ac:84:5c:2a:bf:74:f5:
32:ba:95:4b:42:be:d2:6a:24:98:bb:e0:e2:ad:9a:
34:5d:88:fc:bd:10:21:d0:ad:84:14:79:ab:84:c8:
3f:53:10:22:c7:4a:b4:46:7c:c5:1d:b5:d8:5d:37:
48:e3:db:84:fc:31:58:1e:0e:09:3e:ce:9d:87:1a:
e7:d9:b8:cf:46:bf:87:3e:a3:5b:21:67:02:bb:ad:
d9:c0:19:38:25:38:2d:3b:ad:6b:ea:20:2d:ca:c9:
e6:0b:41:2a:13:d3:12:ba:ed:bc:58:61:14:17:c2:
64:8c:6a:6c:ba:f0:10:d9:69:05:d6:b5:7c:c4:ad:
6b:07:48:a4:15:dc:60:53:fe:09:46:92:a8:35:4b:
9a:31:6d:6a:9d:ce:57:7f:62:8f:fa:8b:33:f2:3d:
79:96:7c:40:b1:3f:f1:08:54:73:ce:30:26:9f:bd:
57:48:cf:e3:ac:3e:7b:aa:4d:6c:5f:f3:e4:62:29:
90:28:6c:7e:82:03:d5:ce:ae:8d:e8:e3:2e:a3:fe:
09:7e:37:45:69:49:e9:70:57:46:c2:a1:28:b0:a9:
fd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:52:92:E9:80:83:4B:E5:9C:49:EA:4E:FC:87:7F:59:D0:1E:92:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/10efffec-8118-3912-b378-fa58a2bf751a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl
X509v3 Authority Key Identifier:
keyid:97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
sbgp-ipAddrBlock: critical
IPv4:
142.202.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:04:69:61:76:e0:90:80:c5:e2:08:f2:3e:fd:d2:5d:72:b0:
ba:4e:f7:d1:29:35:76:d3:c2:26:d3:c1:89:59:35:24:42:5f:
15:dc:c6:3c:d9:f5:38:e5:2f:13:9d:30:c0:c0:4b:ca:c9:e5:
c1:ca:82:02:dc:9b:16:d0:eb:dd:8e:fa:55:bc:12:0e:35:ca:
54:70:5f:2c:4a:77:7c:48:1f:1e:e7:15:9e:36:a3:9e:19:4e:
65:c8:2e:d1:17:27:1e:15:96:80:d3:dc:3e:0a:ab:a0:21:8a:
8b:81:0c:7d:6d:29:6c:e8:df:a7:a7:a1:0e:c7:8a:52:64:d8:
64:1a:dc:5e:3d:56:c6:78:0a:e0:4c:31:0f:3b:84:9a:55:d1:
e4:c4:f0:d3:77:a6:9f:c6:2e:23:6f:9e:0c:92:17:99:9a:72:
31:fe:2e:29:e6:ae:a4:e2:a8:ec:03:6c:ed:00:3b:05:a3:8d:
3d:5f:5a:16:13:e5:fb:b6:a7:db:30:f5:47:81:5a:1b:eb:11:
c2:bd:57:e0:e3:e6:78:f8:61:8f:d9:46:92:98:c8:8c:d7:00:
0e:1b:d2:e8:1a:72:e8:13:07:b1:43:55:40:62:0e:01:64:75:
88:fb:e5:53:a1:24:93:14:71:fa:c0:1b:ad:4c:48:3c:1b:75:
ff:5d:c7:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjNtVkw1MjNDPzYrUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzQ5MjEzZjctMjhlMi00ZmExLTg0OTEtNzhlMzU4MGNk
YjdmMB4XDTI1MDIwNzEyMzMwMFoXDTI1MDUwODExMzMwMFowLzEtMCsGA1UEAxMk
MTRiMjAzZjktNGMzYS00NDdlLTg2NDctNWNlOWFkZWVhMmFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu96N8aC5KXxtctlFYZTh3/Dw4YXPEiM/NKe
3eI+PnV8ew+SdKyEXCq/dPUyupVLQr7SaiSYu+DirZo0XYj8vRAh0K2EFHmrhMg/
UxAix0q0RnzFHbXYXTdI49uE/DFYHg4JPs6dhxrn2bjPRr+HPqNbIWcCu63ZwBk4
JTgtO61r6iAtysnmC0EqE9MSuu28WGEUF8JkjGpsuvAQ2WkF1rV8xK1rB0ikFdxg
U/4JRpKoNUuaMW1qnc5Xf2KP+osz8j15lnxAsT/xCFRzzjAmn71XSM/jrD57qk1s
X/PkYimQKGx+ggPVzq6N6OMuo/4JfjdFaUnpcFdGwqEosKn9XwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMhSkumAg0vlnEnqTvyHf1nQHpL9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNDky
MTNmNy0yOGUyLTRmYTEtODQ5MS03OGUzNTgwY2RiN2YvMTBlZmZmZWMtODExOC0z
OTEyLWIzNzgtZmE1OGEyYmY3NTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzQ5MjEzZjctMjhlMi00ZmExLTg0
OTEtNzhlMzU4MGNkYjdmLzM0OTIxM2Y3LTI4ZTItNGZhMS04NDkxLTc4ZTM1ODBj
ZGI3Zi5jcmwwHwYDVR0jBBgwFoAUl16fqcxh1Y3cB+3gRH1f3Ykt9AMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNDkyMTNmNy0yOGUyLTRmYTEtODQ5MS03OGUz
NTgwY2RiN2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjspHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFYEaWF24JCAxeII8j790l1ysLpO99EpNXbTwibTwYlZNSRCXxXcxjzZ
9TjlLxOdMMDAS8rJ5cHKggLcmxbQ692O+lW8Eg41ylRwXyxKd3xIHx7nFZ42o54Z
TmXILtEXJx4VloDT3D4Kq6AhiouBDH1tKWzo36enoQ7HilJk2GQa3F49VsZ4CuBM
MQ87hJpV0eTE8NN3pp/GLiNvngySF5macjH+LinmrqTiqOwDbO0AOwWjjT1fWhYT
5fu2p9sw9UeBWhvrEcK9V+Dj5nj4YY/ZRpKYyIzXAA4b0ugacugTB7FDVUBiDgFk
dYj75VOhJJMUcfrAG61MSDwbdf9dx/Q=
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:03:05 2025 by rpki-client