Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/bbafee31-46f6-3ca6-abab-6d00e2297780.roa
File: bbafee31-46f6-3ca6-abab-6d00e2297780.roa (raw, json)
Hash identifier: h5+hYy0fIke9Fs5h2GF3DR/0VfFBsR773b7F8nhzs9Y=
Subject key identifier: 8B:D3:B9:DC:9D:E2:DD:E4:05:8C:5F:8D:AF:FE:E6:6A:D0:35:59:18
Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial: 010D0C9F432858493243F6E32BCABEB98EE6B6C0
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/bbafee31-46f6-3ca6-abab-6d00e2297780.roa
Signing time: Sat 15 Mar 2025 13:00:52 +0000
ROA not before: Sat 15 Mar 2025 13:00:52 +0000
ROA not after: Fri 13 Jun 2025 13:00:52 +0000
asID: 6079
IP address blocks: 131.106.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:32:43:f6:e3:2b:ca:be:b9:8e:e6:b6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Validity
Not Before: Mar 15 13:00:52 2025 GMT
Not After : Jun 13 13:00:52 2025 GMT
Subject: CN=a8879f2d-2e91-4ae4-92be-dc1fd3716766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b4:01:3e:42:40:46:93:38:1f:b3:3f:18:78:
8c:60:14:01:0a:97:28:eb:19:f3:ed:64:c5:38:f2:
46:18:64:1a:7f:10:76:46:26:d0:8b:9a:b4:c5:d6:
b0:d6:6e:20:67:8e:20:30:89:84:e5:20:27:a4:9f:
74:43:3d:7e:fb:34:80:58:d4:54:cb:f7:f6:fb:bd:
06:10:2d:3c:01:d0:8a:7f:71:e6:07:f7:59:23:e3:
33:54:72:9d:75:f8:0b:e8:0c:96:12:45:94:2b:45:
7f:be:c3:c7:a5:75:de:f4:54:64:87:90:37:a0:3a:
77:80:62:49:36:24:29:e2:44:ff:64:c6:15:6d:bb:
a5:56:33:55:62:b5:14:f1:08:8d:5e:af:ac:9f:5e:
92:1a:f5:23:c3:d0:8b:f0:44:98:1b:dd:92:41:d6:
1e:75:4e:56:d6:7b:15:8a:67:57:7c:f6:c9:f9:34:
5a:84:94:50:3e:06:c7:8e:d6:21:55:c8:9d:7a:0a:
2f:a7:8f:32:4d:7d:33:60:72:51:32:de:f0:80:97:
34:02:fb:1d:e3:d8:7c:a8:78:c5:64:65:f9:3b:d7:
69:82:8d:4a:7f:55:88:75:22:83:c5:a2:1b:74:6c:
40:6b:57:ad:d7:17:91:68:72:b3:ee:6c:bd:f0:b8:
cb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D3:B9:DC:9D:E2:DD:E4:05:8C:5F:8D:AF:FE:E6:6A:D0:35:59:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/bbafee31-46f6-3ca6-abab-6d00e2297780.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
X509v3 Authority Key Identifier:
keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
sbgp-ipAddrBlock: critical
IPv4:
131.106.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:cc:88:6e:5b:6c:ba:39:57:a9:22:92:55:48:f1:e5:e1:da:
2d:fd:c7:9b:aa:87:bc:18:c6:84:35:5d:bf:45:94:c1:3f:e3:
ab:10:b0:06:c1:6c:4c:de:b5:a6:b5:55:01:f9:01:8b:21:11:
b7:6f:29:5a:bd:7d:1b:22:2b:3e:df:2a:28:08:b7:b5:bb:fd:
7b:61:46:98:63:fd:5f:da:91:8d:cf:d5:35:61:89:1c:4e:8c:
73:90:e3:e3:33:91:86:d2:36:7d:1b:9b:de:5c:a9:b6:68:64:
a8:f2:60:19:78:50:9f:ea:d9:dd:31:1d:0b:1c:f6:a8:ff:85:
12:b3:fd:3a:ba:77:6e:5e:7a:f8:ba:bd:f9:80:84:b0:fe:a1:
1d:b8:ee:22:bc:d5:cc:b3:e3:89:a5:14:1e:d5:54:5b:91:83:
1a:1b:d0:28:21:64:29:46:a6:3d:41:21:fa:61:9e:a2:ab:2c:
f7:7d:7f:5c:1c:bf:3a:56:cc:1f:fc:24:7f:44:4d:62:0e:ee:
57:4c:2e:08:a4:93:30:d1:2b:c5:6d:c3:9b:56:07:de:75:bb:
dd:73:83:ac:8e:54:d1:77:66:18:1d:1f:6c:e7:2e:e6:af:bf:
c0:96:4d:a9:0a:b2:d6:07:1d:f4:d6:07:60:9e:0a:c9:93:15:
a4:30:b2:53
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkyQ/bjK8q+uY7mtsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2
ODczMB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk
YTg4NzlmMmQtMmU5MS00YWU0LTkyYmUtZGMxZmQzNzE2NzY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7QBPkJARpM4H7M/GHiMYBQBCpco6xnz7WTF
OPJGGGQafxB2RibQi5q0xdaw1m4gZ44gMImE5SAnpJ90Qz1++zSAWNRUy/f2+70G
EC08AdCKf3HmB/dZI+MzVHKddfgL6AyWEkWUK0V/vsPHpXXe9FRkh5A3oDp3gGJJ
NiQp4kT/ZMYVbbulVjNVYrUU8QiNXq+sn16SGvUjw9CL8ESYG92SQdYedU5W1nsV
imdXfPbJ+TRahJRQPgbHjtYhVcidegovp48yTX0zYHJRMt7wgJc0Avsd49h8qHjF
ZGX5O9dpgo1Kf1WIdSKDxaIbdGxAa1et1xeRaHKz7my98LjLGQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIvTudyd4t3kBYxfja/+5mrQNVkYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0
NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvYmJhZmVlMzEtNDZmNi0z
Y2E2LWFiYWItNmQwMGUyMjk3NzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli
MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk
Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw
MTRkZDY4NzMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAg2owVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAbMyIbltsujlXqSKSVUjx5eHaLf3Hm6qHvBjGhDVdv0WUwT/jqxCwBsFs
TN61prVVAfkBiyERt28pWr19GyIrPt8qKAi3tbv9e2FGmGP9X9qRjc/VNWGJHE6M
c5Dj4zORhtI2fRub3lyptmhkqPJgGXhQn+rZ3TEdCxz2qP+FErP9Orp3bl56+Lq9
+YCEsP6hHbjuIrzVzLPjiaUUHtVUW5GDGhvQKCFkKUamPUEh+mGeoqss931/XBy/
OlbMH/wkf0RNYg7uV0wuCKSTMNErxW3Dm1YH3nW73XODrI5U0XdmGB0fbOcu5q+/
wJZNqQqy1gcd9NYHYJ4KyZMVpDCyUw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:29:44 2025 by rpki-client