Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/45db1138-014a-3675-81af-627a0951dfec.roa
File: 45db1138-014a-3675-81af-627a0951dfec.roa (raw, json)
Hash identifier: 6Xkgc8yhTbzktBjtThfM0VKhsF2ljUb+5hnOjf6zakg=
Subject key identifier: F5:22:80:EB:27:D0:C6:90:98:7C:5D:DA:D0:B2:C4:59:08:B6:91:98
Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial: 010D0C9F4328584817051283C098AE79FB608380
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/45db1138-014a-3675-81af-627a0951dfec.roa
Signing time: Wed 04 Dec 2024 02:00:39 +0000
ROA not before: Wed 04 Dec 2024 02:00:39 +0000
ROA not after: Tue 04 Mar 2025 02:00:39 +0000
asID: 400754
IP address blocks: 160.153.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:17:05:12:83:c0:98:ae:79:fb:60:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Validity
Not Before: Dec 4 02:00:39 2024 GMT
Not After : Mar 4 02:00:39 2025 GMT
Subject: CN=5445a547-58e0-48c0-9a3c-ae360808c07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f5:0c:ad:7e:a1:d7:41:bd:df:4d:5b:a0:1c:
01:c9:56:bf:3e:76:40:6e:4d:8b:4d:ae:b6:b5:ff:
d3:9d:90:d5:85:65:25:84:90:6e:fc:05:fc:ab:50:
49:16:d6:4c:31:e4:a1:08:6d:57:d0:4a:0c:78:1b:
04:83:d1:c1:7e:7f:99:81:8f:19:11:6b:cc:30:44:
fa:e8:ea:da:dd:4d:05:9d:91:eb:07:80:3c:c5:38:
0f:f5:a2:41:fa:56:7d:1c:b6:2b:04:51:3a:cd:a1:
91:d5:c6:72:09:51:1d:06:9d:2f:37:44:d7:72:5c:
ac:fd:7c:e8:ff:41:15:26:96:70:e7:1f:35:3e:af:
05:c5:19:f5:a4:2b:c7:bc:f8:37:9c:3b:f2:2b:6f:
e0:77:a2:28:af:fb:c8:c2:13:34:7e:22:69:a3:35:
e7:7d:3a:e9:96:16:84:2b:0c:02:68:d0:f9:77:63:
4f:95:94:50:d5:32:e3:7f:e2:d3:93:f9:79:1a:d2:
a4:d8:c9:a6:79:ce:4a:27:6e:51:6f:e5:03:e5:e1:
ca:0c:2a:9b:68:81:d7:c0:0c:63:d0:a3:8f:36:41:
57:38:f2:80:a1:e9:ff:03:99:a9:65:0f:b9:c2:1c:
c0:f5:2f:33:8a:40:8e:97:dc:99:10:63:5d:d1:82:
67:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:22:80:EB:27:D0:C6:90:98:7C:5D:DA:D0:B2:C4:59:08:B6:91:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/45db1138-014a-3675-81af-627a0951dfec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
X509v3 Authority Key Identifier:
keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
sbgp-ipAddrBlock: critical
IPv4:
160.153.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:11:17:41:2a:67:64:19:a8:21:97:a9:2f:7a:ac:86:e5:70:
97:27:85:a9:a6:56:23:f6:91:d7:50:57:14:c5:84:d8:d3:ec:
22:e1:a3:ea:30:00:3b:56:f2:72:07:0a:e7:be:ae:20:7d:7f:
26:d3:ed:67:d6:3f:e7:67:75:b0:2e:cb:08:96:9a:b7:c8:b9:
63:ac:d2:07:46:f8:53:7b:da:5a:7a:45:bd:5f:21:6b:c4:36:
91:52:7f:ea:78:4a:1b:9b:88:9e:9f:70:5d:88:de:68:d3:aa:
f3:5f:0d:3f:9c:c2:f5:d3:a8:00:89:81:38:f1:0b:cc:ef:8b:
ac:16:6f:f8:72:5d:37:18:62:28:1b:89:38:81:55:fb:2f:8d:
e3:3a:31:16:c3:46:a5:ef:32:19:16:07:16:2d:47:01:32:05:
0e:7c:f5:cb:04:7b:6e:b6:4e:b6:e4:fe:ab:c4:d6:44:97:8c:
cb:b9:3c:21:b7:ec:fd:a5:32:0c:a5:00:a1:53:1a:62:58:7f:
9a:07:46:26:a4:02:91:c1:4c:75:77:ed:bd:25:75:62:ab:e7:
2b:f2:d6:85:a7:6c:12:65:91:88:ee:a7:26:74:98:42:e9:a2:
47:72:ee:c4:be:32:c3:76:ea:74:96:6a:16:57:66:a2:c7:54:
64:6b:16:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgXBRKDwJiueftgg4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWVkNWNlODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4Y2Nm
MTNmMB4XDTI0MTIwNDAyMDAzOVoXDTI1MDMwNDAyMDAzOVowLzEtMCsGA1UEAxMk
NTQ0NWE1NDctNThlMC00OGMwLTlhM2MtYWUzNjA4MDhjMDdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/UMrX6h10G9301boBwByVa/PnZAbk2LTa62
tf/TnZDVhWUlhJBu/AX8q1BJFtZMMeShCG1X0EoMeBsEg9HBfn+ZgY8ZEWvMMET6
6Ora3U0FnZHrB4A8xTgP9aJB+lZ9HLYrBFE6zaGR1cZyCVEdBp0vN0TXclys/Xzo
/0EVJpZw5x81Pq8FxRn1pCvHvPg3nDvyK2/gd6Ior/vIwhM0fiJpozXnfTrplhaE
KwwCaND5d2NPlZRQ1TLjf+LTk/l5GtKk2Mmmec5KJ25Rb+UD5eHKDCqbaIHXwAxj
0KOPNkFXOPKAoen/A5mpZQ+5whzA9S8zikCOl9yZEGNd0YJnPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPUigOsn0MaQmHxd2tCyxFkItpGYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1
Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZjZThjY2YxM2YvNDVkYjExMzgtMDE0YS0z
Njc1LTgxYWYtNjI3YTA5NTFkZmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWVkNWNlODAtMjI0ZS00NmFiLTk0
ZjEtMWFmY2U4Y2NmMTNmLzllZDVjZTgwLTIyNGUtNDZhYi05NGYxLTFhZmNlOGNj
ZjEzZi5jcmwwHwYDVR0jBBgwFoAUOB2fprp8wahErgn+WgCWnTv84Q8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZj
ZThjY2YxM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoJkBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAQRF0EqZ2QZqCGXqS96rIblcJcnhammViP2kddQVxTFhNjT7CLho+ow
ADtW8nIHCue+riB9fybT7WfWP+dndbAuywiWmrfIuWOs0gdG+FN72lp6Rb1fIWvE
NpFSf+p4ShubiJ6fcF2I3mjTqvNfDT+cwvXTqACJgTjxC8zvi6wWb/hyXTcYYigb
iTiBVfsvjeM6MRbDRqXvMhkWBxYtRwEyBQ589csEe262Trbk/qvE1kSXjMu5PCG3
7P2lMgylAKFTGmJYf5oHRiakApHBTHV37b0ldWKr5yvy1oWnbBJlkYjupyZ0mELp
okdy7sS+MsN26nSWahZXZqLHVGRrFqQ=
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:29:10 2025 by rpki-client