Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/6cae7079-d82b-3522-9dcc-9c972fbd2758.roa
File: 6cae7079-d82b-3522-9dcc-9c972fbd2758.roa (raw, json)
Hash identifier: CaUFdR+Wh0uRyX1JjyFCWJFMQddNDTYtukJWM1+Gh2Y=
Subject key identifier: A9:1B:97:F9:9B:AA:99:F6:E0:70:7F:9D:78:FB:5B:CE:6C:23:52:2D
Certificate issuer: /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial: 010D0C9F432858481F65289DCF7FC720951BA240
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/6cae7079-d82b-3522-9dcc-9c972fbd2758.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 16509
IP address blocks: 192.161.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:28:9d:cf:7f:c7:20:95:1b:a2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=ced9cc53-ab24-4570-a3ec-529f9d759332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:46:9d:17:f8:c0:3f:e8:6b:f4:40:2d:4b:b0:
9e:d0:da:0e:38:d5:33:53:d9:0d:3c:85:27:1a:94:
54:e8:70:a8:7f:cf:34:f4:28:a1:ed:9b:93:5c:ad:
00:79:eb:de:9e:5d:90:b4:cf:66:03:e1:b0:08:fe:
e2:45:80:39:d7:20:cb:24:5e:99:22:50:d4:2c:0a:
aa:8b:74:36:d3:66:be:14:a4:ee:f8:4b:28:10:b9:
29:10:5d:69:28:6d:23:c5:79:b7:9a:95:0a:86:2d:
6c:10:2c:64:71:0a:ad:61:8e:58:a0:8b:90:a4:7a:
c5:b0:b9:d7:b6:00:6f:a3:11:ba:73:c4:44:3c:c7:
2f:42:1d:17:03:1e:01:16:10:1c:0f:9b:21:c1:9d:
24:81:d3:da:de:ca:34:6e:bc:93:b6:7f:a2:be:57:
86:31:d6:18:0a:2f:6d:f7:11:a7:f6:76:ef:8e:74:
51:ee:d7:19:90:09:b3:08:9f:a2:40:f9:dd:84:df:
5e:5b:ad:79:50:39:3f:c4:69:4e:2a:54:8a:93:33:
a0:1a:cb:68:7d:6f:8d:72:e0:ac:c4:b1:ba:dc:f0:
ca:33:90:f2:0d:27:7a:9a:30:c1:d8:9c:ad:3c:d2:
5f:2e:ec:70:4c:7d:fc:97:64:e2:db:30:68:4c:35:
95:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1B:97:F9:9B:AA:99:F6:E0:70:7F:9D:78:FB:5B:CE:6C:23:52:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/6cae7079-d82b-3522-9dcc-9c972fbd2758.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
X509v3 Authority Key Identifier:
keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
sbgp-ipAddrBlock: critical
IPv4:
192.161.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:7f:7f:13:38:d5:dd:87:66:f0:ee:0f:f7:25:66:d7:a6:57:
07:99:56:c1:1e:f4:b4:cb:4c:fc:1c:4d:dc:e2:e1:63:f3:21:
14:3c:74:70:4a:65:02:ec:be:6f:a6:8d:01:2f:aa:bd:b9:8c:
99:8a:4d:fc:1a:b3:ad:88:18:21:8d:6b:cc:42:de:06:e7:5b:
c8:ee:56:d1:73:69:33:e7:cb:f5:a3:0e:96:19:15:c6:48:c4:
9d:ef:f5:cd:b4:a1:e2:f0:8d:6f:87:96:90:96:2d:1d:2f:0a:
69:74:b8:7a:87:08:1e:29:83:b1:36:cb:67:06:97:5f:55:35:
f7:49:5d:f9:5a:d4:f7:ee:fc:ab:c4:66:2c:79:04:0b:5f:e5:
8d:84:30:91:95:c4:e6:cc:77:48:14:e5:b0:52:e5:95:04:26:
e9:91:5a:23:c5:69:02:38:8c:2f:51:d7:35:d6:7a:58:26:b0:
d9:78:c7:40:06:64:3c:45:1a:63:fb:dc:36:43:56:c6:2d:d9:
60:67:02:1f:b3:2d:6b:1a:a9:45:9c:49:2e:59:56:29:77:9c:
4a:18:54:a4:19:fd:36:52:4d:97:8e:d6:a6:61:1b:05:78:15:
f2:73:12:d5:a3:b6:bc:7c:42:21:cb:c0:a4:90:93:ca:42:cd:
64:59:34:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgfZSidz3/HIJUbokAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzY3ZTRiZmUtYjE2NS00MWZhLWFiMjItM2Y3ODU1NTQ5
MGNmMB4XDTI0MTIwNzAyMDAzOVoXDTI1MDMwNzAyMDAzOVowLzEtMCsGA1UEAxMk
Y2VkOWNjNTMtYWIyNC00NTcwLWEzZWMtNTI5ZjlkNzU5MzMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0adF/jAP+hr9EAtS7Ce0NoOONUzU9kNPIUn
GpRU6HCof8809Cih7ZuTXK0Aeevenl2QtM9mA+GwCP7iRYA51yDLJF6ZIlDULAqq
i3Q202a+FKTu+EsoELkpEF1pKG0jxXm3mpUKhi1sECxkcQqtYY5YoIuQpHrFsLnX
tgBvoxG6c8REPMcvQh0XAx4BFhAcD5shwZ0kgdPa3so0bryTtn+ivleGMdYYCi9t
9xGn9nbvjnRR7tcZkAmzCJ+iQPndhN9eW615UDk/xGlOKlSKkzOgGstofW+NcuCs
xLG63PDKM5DyDSd6mjDB2JytPNJfLuxwTH38l2Ti2zBoTDWVkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKkbl/mbqpn24HB/nXj7W85sI1ItMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdl
NGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4NTU1NDkwY2YvNmNhZTcwNzktZDgyYi0z
NTIyLTlkY2MtOWM5NzJmYmQyNzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY3ZTRiZmUtYjE2NS00MWZhLWFi
MjItM2Y3ODU1NTQ5MGNmLzM2N2U0YmZlLWIxNjUtNDFmYS1hYjIyLTNmNzg1NTU0
OTBjZi5jcmwwHwYDVR0jBBgwFoAU3Roo7YWvv2p4CpyI5O7Q5tws+hMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdlNGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4
NTU1NDkwY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKGYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJp/fxM41d2HZvDuD/clZtemVweZVsEe9LTLTPwcTdzi4WPzIRQ8dHBK
ZQLsvm+mjQEvqr25jJmKTfwas62IGCGNa8xC3gbnW8juVtFzaTPny/WjDpYZFcZI
xJ3v9c20oeLwjW+HlpCWLR0vCml0uHqHCB4pg7E2y2cGl19VNfdJXfla1Pfu/KvE
Zix5BAtf5Y2EMJGVxObMd0gU5bBS5ZUEJumRWiPFaQI4jC9R1zXWelgmsNl4x0AG
ZDxFGmP73DZDVsYt2WBnAh+zLWsaqUWcSS5ZVil3nEoYVKQZ/TZSTZeO1qZhGwV4
FfJzEtWjtrx8QiHLwKSQk8pCzWRZNMo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:06:45 2025 by rpki-client