Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/c2688585-4217-31ae-8687-7381f6e36d31.roa
File: c2688585-4217-31ae-8687-7381f6e36d31.roa (raw, json)
Hash identifier: vhG2sAZh9Ip++3BqPfVrd+xxORk+oQYCxQRlKZI785k=
Subject key identifier: 3E:CA:85:CC:E2:14:DC:EE:F3:F4:8E:16:1E:DA:95:70:BB:34:99:11
Certificate issuer: /CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f
Certificate serial: 010D0C9F432858483F803BF183D5CE78FE1E8500
Authority key identifier: 3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/c2688585-4217-31ae-8687-7381f6e36d31.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 59253
IP address blocks: 167.253.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:3b:f1:83:d5:ce:78:fe:1e:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=b21967d7-f736-4401-a657-8616ae7ee8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2e:72:b2:9a:67:30:b1:9b:81:37:e3:2a:4e:
23:aa:88:cc:cd:36:2e:5b:01:49:c8:c3:a4:1e:63:
5f:0c:4a:76:00:04:dd:80:16:3c:9d:14:ca:6c:28:
88:00:00:d8:ca:a2:1f:c7:b9:71:94:b5:d5:1b:06:
dc:c0:ac:56:8f:a2:79:a8:8a:26:ee:e5:91:8d:af:
7c:2b:80:33:98:04:6d:32:03:b3:cf:e5:1e:52:fb:
21:d7:6e:51:7f:e0:a8:38:d0:32:12:f2:37:b3:f1:
f4:77:7d:74:7e:43:72:a6:70:84:90:cc:d9:27:a9:
b1:db:37:88:37:70:01:e9:ff:a2:c0:3d:1d:54:c1:
83:f4:ce:fa:f6:a5:5e:6e:03:a2:3b:16:90:59:10:
48:0f:a8:67:6f:4a:1b:05:0e:09:a5:2d:d7:9d:81:
70:ba:20:0c:f5:f1:d1:2a:9b:1c:d6:38:7e:63:96:
30:8d:63:cd:ab:77:5a:4f:57:c8:5b:df:17:8d:90:
08:29:9b:ca:68:93:df:66:20:52:3e:6a:63:fa:06:
86:7a:d6:df:57:34:80:ef:97:d2:3b:44:37:17:97:
bb:02:1d:6b:c3:0c:8a:cc:05:ad:34:fa:83:6f:b0:
13:32:02:0c:0b:80:bf:1e:f0:a9:a9:44:5a:a7:66:
a4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CA:85:CC:E2:14:DC:EE:F3:F4:8E:16:1E:DA:95:70:BB:34:99:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/c2688585-4217-31ae-8687-7381f6e36d31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl
X509v3 Authority Key Identifier:
keyid:3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer
sbgp-ipAddrBlock: critical
IPv4:
167.253.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:1a:c9:80:06:ce:98:9c:a9:53:39:dc:b3:22:a9:a6:f3:a4:
0e:9c:93:2a:22:c5:a4:85:5e:e6:fd:ff:5c:e1:c9:3e:c8:17:
e6:02:48:5f:88:37:a8:0f:21:1d:e5:f9:29:f0:f6:b5:5c:55:
3e:29:d5:f9:6c:25:75:e7:50:b6:74:5f:ed:75:d4:43:58:84:
fd:ab:6d:fe:4e:16:50:e4:ad:45:c4:34:b3:da:93:4e:3d:49:
4d:da:5b:cd:f9:8a:3e:46:8b:ff:6c:63:bb:db:b6:53:7b:bf:
11:47:c7:ba:74:9d:b2:26:df:9c:36:58:d5:df:37:ad:f6:91:
3f:64:65:72:ac:03:05:bd:d9:d1:e3:8a:ca:52:3f:df:9f:29:
16:00:22:0a:f7:46:46:82:7b:76:3f:a0:38:0c:bc:a3:c5:9f:
fa:5b:25:75:36:f6:73:cd:d5:43:f5:4f:a8:d8:d0:75:a1:44:
02:cb:1b:35:af:a4:cf:32:07:51:d0:90:b1:a9:b5:78:84:d6:
03:a7:55:9b:e1:b3:10:19:45:23:7e:5e:40:d5:9e:33:d9:a0:
49:1d:7b:ff:3c:c2:ab:5d:dc:fa:c1:ef:ea:d6:26:b8:d9:fe:
41:d1:7e:c1:05:22:43:6c:bd:18:c6:46:70:c9:22:ae:3b:90:
b0:2e:3b:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg/gDvxg9XOeP4ehQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTNiOTg2MTYtZTRmOC00Yzc2LTg0MTAtY2I0YjZkOTNj
ODVmMB4XDTI0MTIxODE0MDA1MloXDTI1MDMxODEzMDA1MlowLzEtMCsGA1UEAxMk
YjIxOTY3ZDctZjczNi00NDAxLWE2NTctODYxNmFlN2VlOGI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy5ysppnMLGbgTfjKk4jqojMzTYuWwFJyMOk
HmNfDEp2AATdgBY8nRTKbCiIAADYyqIfx7lxlLXVGwbcwKxWj6J5qIom7uWRja98
K4AzmARtMgOzz+UeUvsh125Rf+CoONAyEvI3s/H0d310fkNypnCEkMzZJ6mx2zeI
N3AB6f+iwD0dVMGD9M769qVebgOiOxaQWRBID6hnb0obBQ4JpS3XnYFwuiAM9fHR
Kpsc1jh+Y5YwjWPNq3daT1fIW98XjZAIKZvKaJPfZiBSPmpj+gaGetbfVzSA75fS
O0Q3F5e7Ah1rwwyKzAWtNPqDb7ATMgIMC4C/HvCpqURap2akzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD7KhcziFNzu8/SOFh7alXC7NJkRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hM2I5
ODYxNi1lNGY4LTRjNzYtODQxMC1jYjRiNmQ5M2M4NWYvYzI2ODg1ODUtNDIxNy0z
MWFlLTg2ODctNzM4MWY2ZTM2ZDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTNiOTg2MTYtZTRmOC00Yzc2LTg0
MTAtY2I0YjZkOTNjODVmL2EzYjk4NjE2LWU0ZjgtNGM3Ni04NDEwLWNiNGI2ZDkz
Yzg1Zi5jcmwwHwYDVR0jBBgwFoAUO+HB9azWjjCuxozloUMTYHSe2F4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hM2I5ODYxNi1lNGY4LTRjNzYtODQxMC1jYjRi
NmQ5M2M4NWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/2eMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKoayYAGzpicqVM53LMiqabzpA6ckyoixaSFXub9/1zhyT7IF+YCSF+I
N6gPIR3l+Snw9rVcVT4p1flsJXXnULZ0X+111ENYhP2rbf5OFlDkrUXENLPak049
SU3aW835ij5Gi/9sY7vbtlN7vxFHx7p0nbIm35w2WNXfN632kT9kZXKsAwW92dHj
ispSP9+fKRYAIgr3RkaCe3Y/oDgMvKPFn/pbJXU29nPN1UP1T6jY0HWhRALLGzWv
pM8yB1HQkLGptXiE1gOnVZvhsxAZRSN+XkDVnjPZoEkde/88wqtd3PrB7+rWJrjZ
/kHRfsEFIkNsvRjGRnDJIq47kLAuO3I=
-----END CERTIFICATE-----
Generated at Sat Apr 26 22:57:34 2025 by rpki-client