Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/53a28954-9970-39e6-a84e-6fc7573780fa.roa
File: 53a28954-9970-39e6-a84e-6fc7573780fa.roa (raw, json)
Hash identifier: dSMtfFJwJtehfeigSsWX6MZbmFM/909c0OK3leXq6qY=
Subject key identifier: 05:C8:1B:A8:7A:B3:51:9C:81:14:FC:AF:78:CB:F0:D3:DF:EC:83:B1
Certificate issuer: /CN=c86a7ba5-67c5-481d-b278-0b265dc97144
Certificate serial: 010D0C9F432858486AC595C04EB4E0EDE72397B2
Authority key identifier: 69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/53a28954-9970-39e6-a84e-6fc7573780fa.roa
Signing time: Fri 03 Jan 2025 02:00:40 +0000
ROA not before: Fri 03 Jan 2025 02:00:40 +0000
ROA not after: Thu 03 Apr 2025 01:00:40 +0000
asID: 8075
IP address blocks: 170.39.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6a:c5:95:c0:4e:b4:e0:ed:e7:23:97:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c86a7ba5-67c5-481d-b278-0b265dc97144
Validity
Not Before: Jan 3 02:00:40 2025 GMT
Not After : Apr 3 01:00:40 2025 GMT
Subject: CN=86c6afc6-5576-4b9e-9cdd-df764124fa3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a7:f3:ee:48:14:f4:65:c3:c3:ca:09:d8:36:
00:53:a3:16:60:c3:8a:19:c7:4a:2d:95:44:77:f5:
9a:14:11:28:40:fa:f6:c3:e1:28:8e:7c:66:e7:39:
0c:49:1a:c0:3b:0f:53:ed:37:c2:ee:d1:75:90:2d:
a0:81:9e:82:dd:7c:51:96:c6:7d:ba:92:6b:ec:37:
48:ab:f0:81:6c:30:8e:ef:44:9d:fb:a1:e1:48:2a:
5c:ab:4f:fb:97:2c:74:6e:b2:1a:5f:c2:0f:cb:fd:
26:2a:a5:00:69:8b:7a:90:1d:c2:22:43:8a:00:2f:
2b:5f:ca:7b:9b:b2:c9:52:84:17:8e:32:d3:0c:d1:
6e:ef:79:5b:a6:a5:a1:af:ee:74:79:ea:f4:4c:94:
bd:47:46:e7:27:18:18:d9:69:d5:19:85:e8:fd:cf:
df:7d:da:95:cd:64:09:78:b5:c9:e6:56:ea:fd:66:
68:09:28:c9:77:58:34:04:c5:fd:ec:be:46:a7:64:
23:b3:da:d0:ea:cd:72:a0:6f:a9:c6:1b:d8:15:ba:
f4:87:ef:35:47:c8:04:95:25:6d:4f:ce:1b:67:31:
8d:2d:df:53:83:d8:92:b0:bf:ff:f1:40:3b:6f:eb:
6d:06:3e:6e:15:ff:0e:9e:7d:b5:7b:a1:43:70:ca:
af:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C8:1B:A8:7A:B3:51:9C:81:14:FC:AF:78:CB:F0:D3:DF:EC:83:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/53a28954-9970-39e6-a84e-6fc7573780fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl
X509v3 Authority Key Identifier:
keyid:69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
sbgp-ipAddrBlock: critical
IPv4:
170.39.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:7f:57:e9:f2:66:43:48:38:8d:77:bf:d4:09:4e:c2:f2:ff:
05:72:a7:eb:55:6d:be:5c:2f:31:6a:f0:e5:40:ac:3d:97:d1:
0a:a5:7c:52:43:80:15:ed:01:90:a9:ac:fa:0d:a0:29:be:8b:
cf:75:82:13:37:06:e5:70:8e:d7:6f:a3:88:1b:69:52:3b:f6:
1e:c1:ac:12:17:04:c9:c2:50:8f:fe:ae:c1:91:73:38:c1:2a:
2b:f5:f5:6d:3e:45:da:2b:e7:7e:6c:3a:ca:63:2b:f5:d7:63:
ab:2f:73:a8:6e:0e:3a:51:7b:37:bd:5e:e6:9b:05:94:8c:ac:
63:99:e2:fd:0e:84:c6:43:ab:6c:dc:53:a3:b8:01:cb:61:d6:
8c:76:5e:ed:2c:fd:92:e4:96:3e:63:d4:91:e3:44:40:a1:cf:
c9:0e:47:1b:a6:87:59:b0:1c:3f:2c:ec:4a:f7:f0:a9:9a:78:
4d:9f:f5:0a:43:80:e8:f9:f8:e5:28:a0:3a:2e:bf:bd:27:ad:
ad:61:a5:af:4a:cf:45:76:4e:4a:99:86:ad:46:0c:7c:34:a2:
aa:82:5d:f6:be:57:9d:98:34:b5:b9:da:90:e8:77:d8:48:58:
ab:72:40:fa:f3:56:c8:3f:0c:25:4c:dc:84:91:0e:83:7f:79:
9c:5b:f3:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhqxZXATrTg7ecjl7IwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzg2YTdiYTUtNjdjNS00ODFkLWIyNzgtMGIyNjVkYzk3
MTQ0MB4XDTI1MDEwMzAyMDA0MFoXDTI1MDQwMzAxMDA0MFowLzEtMCsGA1UEAxMk
ODZjNmFmYzYtNTU3Ni00YjllLTljZGQtZGY3NjQxMjRmYTNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqfz7kgU9GXDw8oJ2DYAU6MWYMOKGcdKLZVE
d/WaFBEoQPr2w+Eojnxm5zkMSRrAOw9T7TfC7tF1kC2ggZ6C3XxRlsZ9upJr7DdI
q/CBbDCO70Sd+6HhSCpcq0/7lyx0brIaX8IPy/0mKqUAaYt6kB3CIkOKAC8rX8p7
m7LJUoQXjjLTDNFu73lbpqWhr+50eer0TJS9R0bnJxgY2WnVGYXo/c/ffdqVzWQJ
eLXJ5lbq/WZoCSjJd1g0BMX97L5Gp2Qjs9rQ6s1yoG+pxhvYFbr0h+81R8gElSVt
T84bZzGNLd9Tg9iSsL//8UA7b+ttBj5uFf8Onn21e6FDcMqvFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAXIG6h6s1GcgRT8r3jL8NPf7IOxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODZh
N2JhNS02N2M1LTQ4MWQtYjI3OC0wYjI2NWRjOTcxNDQvNTNhMjg5NTQtOTk3MC0z
OWU2LWE4NGUtNmZjNzU3Mzc4MGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg2YTdiYTUtNjdjNS00ODFkLWIy
NzgtMGIyNjVkYzk3MTQ0L2M4NmE3YmE1LTY3YzUtNDgxZC1iMjc4LTBiMjY1ZGM5
NzE0NC5jcmwwHwYDVR0jBBgwFoAUaZKNg8T0tJIYwf7weKQ89x3QKzwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODZhN2JhNS02N2M1LTQ4MWQtYjI3OC0wYjI2
NWRjOTcxNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqidWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMR/V+nyZkNIOI13v9QJTsLy/wVyp+tVbb5cLzFq8OVArD2X0QqlfFJD
gBXtAZCprPoNoCm+i891ghM3BuVwjtdvo4gbaVI79h7BrBIXBMnCUI/+rsGRczjB
Kiv19W0+Rdor535sOspjK/XXY6svc6huDjpReze9XuabBZSMrGOZ4v0OhMZDq2zc
U6O4Acth1ox2Xu0s/ZLklj5j1JHjREChz8kORxumh1mwHD8s7Er38KmaeE2f9QpD
gOj5+OUooDouv70nra1hpa9Kz0V2TkqZhq1GDHw0oqqCXfa+V52YNLW52pDod9hI
WKtyQPrzVsg/DCVM3ISRDoN/eZxb80E=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:00 2025 by rpki-client