Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ea0d9e27-ca72-3c32-aa06-fd6a11460215.roa
File: ea0d9e27-ca72-3c32-aa06-fd6a11460215.roa (raw, json)
Hash identifier: WKzyTQxcKael5UZbL290bUowkSi1xB2yr2bn0xDaf5E=
Subject key identifier: 61:24:3C:F5:E2:36:3E:BD:02:6E:7B:35:FF:7F:C0:16:E7:1A:BB:09
Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial: 010D0C9F43285848451586DD3575482796822117
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ea0d9e27-ca72-3c32-aa06-fd6a11460215.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 14061
IP address blocks: 157.245.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:86:dd:35:75:48:27:96:82:21:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=d0bb0b24-d52b-4c2e-833d-ffc5be3ace85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:27:73:4f:33:da:3e:9f:ef:2d:10:0d:75:a5:
ba:5c:ae:2e:a1:46:53:c1:0d:36:fb:b3:00:a6:1d:
ba:c2:31:2e:a8:80:3f:ee:50:95:46:e2:c9:81:55:
85:9f:b1:e3:83:33:28:92:d7:1d:68:72:6b:7b:3c:
ef:de:48:9e:10:4b:39:8e:80:aa:84:14:63:83:47:
a0:6c:19:64:cd:37:e3:ea:b3:fc:cb:ed:1c:58:99:
a3:72:89:1d:34:95:e1:4c:c4:df:2c:7d:e4:73:22:
a7:34:67:ee:16:21:93:c2:71:b4:b5:a8:6a:53:48:
51:dc:68:c0:02:71:6c:3e:ea:85:9a:2b:52:28:ad:
d6:c5:aa:f4:7f:61:ae:f3:40:94:6e:2c:a2:bd:d3:
1c:a3:4b:3a:fc:8f:94:c9:4f:94:f4:d1:8f:04:4a:
25:bb:c1:0f:d0:0e:cc:10:76:2c:a6:3a:02:85:57:
ec:b5:72:74:cc:6d:b7:b7:38:57:5f:06:d9:50:52:
9b:ab:5e:6a:7c:89:15:41:02:18:11:db:18:36:43:
66:32:58:54:f1:52:85:e2:57:d8:56:54:ac:b6:a8:
38:b9:2f:45:16:8c:7a:df:8b:04:c5:e6:1e:f2:e3:
93:10:6b:fd:9d:1f:09:9d:61:33:62:97:8b:5b:e5:
c4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:24:3C:F5:E2:36:3E:BD:02:6E:7B:35:FF:7F:C0:16:E7:1A:BB:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ea0d9e27-ca72-3c32-aa06-fd6a11460215.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
X509v3 Authority Key Identifier:
keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
sbgp-ipAddrBlock: critical
IPv4:
157.245.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:98:d3:c6:6a:2e:42:28:97:61:eb:96:37:de:bd:95:56:11:
42:a7:4e:34:c2:6e:c8:0f:a2:b0:53:28:b6:2a:55:37:bd:7c:
9f:ec:d4:a9:90:54:7e:95:b3:ab:75:7c:78:d1:81:2c:b5:3f:
76:6e:6e:05:99:b2:60:78:c8:f5:09:bc:88:e7:59:42:52:de:
37:77:f4:43:3a:dc:c3:b0:3c:c7:93:e5:e6:37:79:42:8b:17:
c0:15:48:6d:b1:e3:96:56:f6:ce:db:34:27:af:c5:9c:bc:86:
e5:24:5d:53:e8:43:9e:f5:0a:87:70:95:c1:24:a0:96:1a:a3:
e6:26:ff:47:96:7d:4a:db:80:a1:1c:df:f2:a9:41:3e:85:d6:
de:3a:9e:0c:c8:51:3e:f8:ed:4e:4c:c8:fd:12:f1:c9:be:b7:
53:fb:28:e9:41:06:39:91:99:bf:43:35:f4:61:54:55:1a:0b:
c5:d0:04:f3:c6:a5:e7:7e:29:c5:8d:d6:9c:39:b4:e5:76:34:
00:88:8c:2c:9e:f1:d9:51:27:73:3c:66:b9:fd:2c:f0:38:b7:
58:fb:f0:f3:c5:8c:e4:da:15:38:e7:8d:5e:97:cd:1b:0d:bb:
85:a6:e4:d6:69:35:4e:c9:04:81:96:80:33:ee:65:77:86:b6:
5e:d4:e8:26
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEhFFYbdNXVIJ5aCIRcwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy
Njk4MB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk
ZDBiYjBiMjQtZDUyYi00YzJlLTgzM2QtZmZjNWJlM2FjZTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSdzTzPaPp/vLRANdaW6XK4uoUZTwQ02+7MA
ph26wjEuqIA/7lCVRuLJgVWFn7HjgzMoktcdaHJrezzv3kieEEs5joCqhBRjg0eg
bBlkzTfj6rP8y+0cWJmjcokdNJXhTMTfLH3kcyKnNGfuFiGTwnG0tahqU0hR3GjA
AnFsPuqFmitSKK3Wxar0f2Gu80CUbiyivdMco0s6/I+UyU+U9NGPBEolu8EP0A7M
EHYspjoChVfstXJ0zG23tzhXXwbZUFKbq15qfIkVQQIYEdsYNkNmMlhU8VKF4lfY
VlSstqg4uS9FFox634sExeYe8uOTEGv9nR8JnWEzYpeLW+XEuwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGEkPPXiNj69Am57Nf9/wBbnGrsJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4
ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvZWEwZDllMjctY2E3Mi0z
YzMyLWFhMDYtZmQ2YTExNDYwMjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh
ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl
MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3
ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnfUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAi5jTxmouQiiXYeuWN969lVYRQqdONMJuyA+isFMotipVN718n+zUqZBU
fpWzq3V8eNGBLLU/dm5uBZmyYHjI9Qm8iOdZQlLeN3f0Qzrcw7A8x5Pl5jd5QosX
wBVIbbHjllb2zts0J6/FnLyG5SRdU+hDnvUKh3CVwSSglhqj5ib/R5Z9StuAoRzf
8qlBPoXW3jqeDMhRPvjtTkzI/RLxyb63U/so6UEGOZGZv0M19GFUVRoLxdAE88al
534pxY3WnDm05XY0AIiMLJ7x2VEnczxmuf0s8Di3WPvw88WM5NoVOOeNXpfNGw27
habk1mk1TskEgZaAM+5ld4a2XtToJg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:28:12 2025 by rpki-client