Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/6d600f3b-f2b8-3e94-ad98-43b4403b553e.roa
File: 6d600f3b-f2b8-3e94-ad98-43b4403b553e.roa (raw, json)
Hash identifier: yR98Txnu5E3gf6lbm+LQoJa0ZybwByQcSegnXWdWB8c=
Subject key identifier: A8:08:B9:C5:20:ED:B2:14:F2:F7:D5:B9:7D:EF:14:0F:93:84:9E:DA
Certificate issuer: /CN=78ffdd14-7e7a-46d4-993a-4b51f8031030
Certificate serial: 010D0C9F43285848D979315A592274AFF15AD780
Authority key identifier: FD:0B:B3:86:00:15:86:0D:7D:0A:2F:1B:5B:33:97:97:B9:95:4E:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/6d600f3b-f2b8-3e94-ad98-43b4403b553e.roa
Signing time: Tue 11 Feb 2025 17:41:29 +0000
ROA not before: Tue 11 Feb 2025 17:41:29 +0000
ROA not after: Mon 12 May 2025 16:41:29 +0000
asID: 22903
IP address blocks: 165.140.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d9:79:31:5a:59:22:74:af:f1:5a:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ffdd14-7e7a-46d4-993a-4b51f8031030
Validity
Not Before: Feb 11 17:41:29 2025 GMT
Not After : May 12 16:41:29 2025 GMT
Subject: CN=be70de5d-f2a0-43ed-b1aa-e2939f6822bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bb:36:60:24:27:2c:04:33:cc:fe:1e:06:d3:
16:09:82:bd:53:99:2e:d7:50:35:74:e8:8e:18:cb:
cb:e0:d0:6f:db:41:5d:10:a6:69:33:2f:36:0a:15:
42:e8:65:19:b2:0e:b7:63:3e:42:59:bb:b0:53:51:
9d:1f:92:db:e5:e5:64:a3:a3:e3:b2:8e:31:c4:55:
5f:bb:4b:40:8c:1f:6c:27:76:41:16:b8:97:e9:05:
9c:9e:36:15:eb:80:50:db:89:4c:c3:fc:83:b3:cb:
59:4c:ed:16:6b:df:df:20:19:a0:0f:4f:44:63:e5:
da:b4:9e:2d:60:c6:09:00:30:e6:11:bc:aa:cb:51:
f1:12:3f:87:b6:50:41:69:66:63:96:d8:aa:20:11:
fa:e4:f7:f0:7a:c7:81:c3:d4:24:b8:ec:b5:c9:44:
80:7b:c6:97:68:60:db:e0:47:d9:ca:b5:c7:88:68:
1c:29:de:27:5e:29:8e:12:76:30:bb:ab:26:92:57:
f1:9b:22:6e:8d:f6:be:77:af:da:76:09:bc:b3:79:
6a:05:f7:b0:29:9c:56:9b:b2:b2:49:d1:d3:cf:00:
fc:dc:ff:91:13:d5:28:fe:54:53:3e:17:40:91:86:
92:1c:ca:45:26:47:1b:aa:6d:aa:e5:0f:27:ef:36:
93:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:08:B9:C5:20:ED:B2:14:F2:F7:D5:B9:7D:EF:14:0F:93:84:9E:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/6d600f3b-f2b8-3e94-ad98-43b4403b553e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030/78ffdd14-7e7a-46d4-993a-4b51f8031030.crl
X509v3 Authority Key Identifier:
keyid:FD:0B:B3:86:00:15:86:0D:7D:0A:2F:1B:5B:33:97:97:B9:95:4E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/78ffdd14-7e7a-46d4-993a-4b51f8031030.cer
sbgp-ipAddrBlock: critical
IPv4:
165.140.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:ac:f2:c2:48:07:46:51:17:fb:84:ef:ff:a8:b9:42:6f:de:
77:38:c3:32:a6:c1:78:2c:99:f1:30:5f:3b:bb:37:8b:87:a8:
c9:14:b8:cf:fd:54:71:93:47:12:cd:df:29:6a:3d:41:0e:78:
cc:47:93:78:1e:58:97:72:bd:13:3d:2f:a6:91:16:85:57:3f:
03:7a:b3:b1:10:73:be:6e:bb:d1:8d:a4:63:bb:a2:0a:bf:b9:
91:ea:35:72:df:37:1c:a9:74:5b:3c:f9:66:28:aa:67:70:53:
5c:64:ff:b5:e3:95:27:28:f8:eb:a8:f1:8b:b4:18:34:5d:9d:
b1:e7:ab:bb:37:7d:92:3a:07:a3:84:b9:89:59:8b:16:5f:17:
7b:3f:55:d3:dc:d4:c0:0e:46:ea:ca:ec:50:6a:06:16:e5:b4:
71:db:37:da:c1:3a:f5:bf:0d:ae:34:3d:4a:54:2e:69:1a:e5:
05:63:69:9e:cf:c7:d6:fa:2a:98:4f:53:13:12:b1:f4:62:66:
b4:a8:94:08:c6:55:46:bd:1f:18:e9:fb:92:bf:58:25:ff:62:
4a:7c:fa:79:e5:00:b3:c2:2f:64:64:66:31:22:dc:3e:a6:db:
ce:fc:98:38:98:f1:00:8b:ff:75:c3:2d:8b:21:56:d3:4c:94:
bd:e3:5d:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjZeTFaWSJ0r/Fa14AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzhmZmRkMTQtN2U3YS00NmQ0LTk5M2EtNGI1MWY4MDMx
MDMwMB4XDTI1MDIxMTE3NDEyOVoXDTI1MDUxMjE2NDEyOVowLzEtMCsGA1UEAxMk
YmU3MGRlNWQtZjJhMC00M2VkLWIxYWEtZTI5MzlmNjgyMmJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLs2YCQnLAQzzP4eBtMWCYK9U5ku11A1dOiO
GMvL4NBv20FdEKZpMy82ChVC6GUZsg63Yz5CWbuwU1GdH5Lb5eVko6Pjso4xxFVf
u0tAjB9sJ3ZBFriX6QWcnjYV64BQ24lMw/yDs8tZTO0Wa9/fIBmgD09EY+XatJ4t
YMYJADDmEbyqy1HxEj+HtlBBaWZjltiqIBH65PfweseBw9QkuOy1yUSAe8aXaGDb
4EfZyrXHiGgcKd4nXimOEnYwu6smklfxmyJujfa+d6/adgm8s3lqBfewKZxWm7Ky
SdHTzwD83P+RE9Uo/lRTPhdAkYaSHMpFJkcbqm2q5Q8n7zaTwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKgIucUg7bIU8vfVuX3vFA+ThJ7aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83OGZm
ZGQxNC03ZTdhLTQ2ZDQtOTkzYS00YjUxZjgwMzEwMzAvNmQ2MDBmM2ItZjJiOC0z
ZTk0LWFkOTgtNDNiNDQwM2I1NTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzhmZmRkMTQtN2U3YS00NmQ0LTk5
M2EtNGI1MWY4MDMxMDMwLzc4ZmZkZDE0LTdlN2EtNDZkNC05OTNhLTRiNTFmODAz
MTAzMC5jcmwwHwYDVR0jBBgwFoAU/QuzhgAVhg19Ci8bWzOXl7mVTrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi83OGZmZGQxNC03ZTdhLTQ2ZDQtOTkzYS00YjUx
ZjgwMzEwMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYw7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGis8sJIB0ZRF/uE7/+ouUJv3nc4wzKmwXgsmfEwXzu7N4uHqMkUuM/9
VHGTRxLN3ylqPUEOeMxHk3geWJdyvRM9L6aRFoVXPwN6s7EQc75uu9GNpGO7ogq/
uZHqNXLfNxypdFs8+WYoqmdwU1xk/7XjlSco+Ouo8Yu0GDRdnbHnq7s3fZI6B6OE
uYlZixZfF3s/VdPc1MAORurK7FBqBhbltHHbN9rBOvW/Da40PUpULmka5QVjaZ7P
x9b6KphPUxMSsfRiZrSolAjGVUa9Hxjp+5K/WCX/Ykp8+nnlALPCL2RkZjEi3D6m
2878mDiY8QCL/3XDLYshVtNMlL3jXT8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:06 2025 by rpki-client