Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/ec968a43-a3bc-35cd-9cae-298d0643c351.roa
File: ec968a43-a3bc-35cd-9cae-298d0643c351.roa (raw, json)
Hash identifier: 7rXopUvkLykS0Xla5/XeFVdOmyfO1N8Ok5nbGG5qig8=
Subject key identifier: F6:BD:BE:D3:58:8D:26:EA:5E:00:5A:F8:C8:66:F4:C9:84:8F:6E:FF
Certificate issuer: /CN=3981f6b8-c323-411d-b6b8-03bb44d2adb1
Certificate serial: 010D0C9F4328584827C54ABF8712604F34B0A670
Authority key identifier: 65:C1:6F:A7:39:A0:7A:F7:DE:CA:41:22:DC:8E:56:E3:F7:BC:74:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/ec968a43-a3bc-35cd-9cae-298d0643c351.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 21693
IP address blocks: 170.152.0.0/16 maxlen: 24
192.234.136.0/24 maxlen: 24
192.234.137.0/24 maxlen: 24
192.234.138.0/24 maxlen: 24
192.234.139.0/24 maxlen: 24
192.234.140.0/24 maxlen: 24
198.179.151.0/24 maxlen: 24
198.179.152.0/24 maxlen: 24
198.179.153.0/24 maxlen: 24
198.179.154.0/24 maxlen: 24
198.179.155.0/24 maxlen: 24
198.179.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:4a:bf:87:12:60:4f:34:b0:a6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3981f6b8-c323-411d-b6b8-03bb44d2adb1
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=751160da-d02d-4b9b-9745-dd8a548f6179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9f:07:01:24:4b:4b:c4:6f:58:8f:95:0e:ac:
8d:11:c1:10:7f:5a:c3:80:4d:93:0f:ad:32:7b:60:
54:b8:9c:0e:f7:43:d5:1c:29:8f:8f:25:fe:e1:af:
5c:7c:d4:cb:86:24:5e:1a:25:97:0b:f5:c3:29:cb:
6d:a3:23:51:30:ab:40:34:f2:fe:43:79:57:e0:74:
dd:ee:7b:21:4d:73:4a:3e:a4:34:1b:22:66:fd:de:
81:0f:bd:63:e4:e2:2c:ad:71:a6:f0:99:a0:fe:b7:
ce:47:ba:b9:08:6c:43:14:42:26:16:bd:7e:c1:bc:
00:59:22:fe:8a:7d:c0:5e:2d:7a:b1:4d:64:46:49:
b4:82:dd:8e:5d:b4:eb:0c:b3:40:b5:fd:1c:19:25:
1c:20:43:46:f9:f2:69:0e:11:ee:e1:87:3f:57:47:
76:4e:0a:81:50:4f:e3:8e:f1:b0:f1:d3:2e:1c:31:
8f:cd:f4:09:74:ee:e9:bb:de:17:08:a7:63:a6:c7:
2a:73:35:13:5a:2b:94:2c:f6:86:38:aa:b2:45:03:
7d:66:21:11:de:9c:1c:c1:5f:a4:30:be:81:f8:9e:
24:68:57:df:c2:20:78:76:dd:17:41:78:71:b7:a0:
ea:82:75:39:d0:9c:97:9d:d3:3f:97:e6:4f:96:0d:
aa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BD:BE:D3:58:8D:26:EA:5E:00:5A:F8:C8:66:F4:C9:84:8F:6E:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/ec968a43-a3bc-35cd-9cae-298d0643c351.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.crl
X509v3 Authority Key Identifier:
keyid:65:C1:6F:A7:39:A0:7A:F7:DE:CA:41:22:DC:8E:56:E3:F7:BC:74:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer
sbgp-ipAddrBlock: critical
IPv4:
170.152.0.0/16
192.234.136.0-192.234.140.255
198.179.151.0-198.179.156.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:33:5b:15:c2:03:86:34:91:04:50:60:d0:63:38:6f:58:26:
0c:44:33:e8:8b:b0:6c:8d:26:06:a8:4c:61:c0:0a:95:ab:ad:
c6:f2:c3:01:9b:3d:c0:2f:6f:09:bf:bc:1a:30:2e:e4:ad:85:
6a:38:59:8e:9b:fd:33:d1:cc:ab:7a:13:95:83:d0:ea:dd:89:
e2:30:24:67:c8:a6:34:d7:40:f2:55:5c:43:5f:0a:55:ed:07:
0e:c2:07:df:5e:ad:93:0d:83:5a:9b:a0:6d:50:f7:cd:c5:f3:
67:8b:eb:82:fa:d2:2e:4b:ba:03:37:29:a7:6d:44:7e:39:d0:
63:0f:71:81:75:6f:3b:97:20:6b:cb:e3:16:87:52:9c:6a:d7:
22:71:8f:80:54:3b:01:6f:df:d8:b1:6e:c1:25:c7:11:21:ef:
49:fe:43:1c:c4:08:83:8f:04:d5:7b:3c:75:ef:0a:5c:f1:bc:
d6:c7:cf:5e:97:0b:d1:cc:5a:80:06:d9:0c:7a:90:dd:d0:9f:
83:6d:cf:2e:ba:f0:1f:6c:d1:b3:e8:50:95:81:fb:7b:d2:77:
f0:b3:26:6f:41:4c:a0:f2:2b:df:03:f5:e6:32:13:d8:cd:a0:
d0:a5:72:47:8e:62:c2:30:9a:66:0f:72:4e:b8:ca:a1:8f:52:
44:a2:36:e0
-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEgnxUq/hxJgTzSwpnAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk4MWY2YjgtYzMyMy00MTFkLWI2YjgtMDNiYjQ0ZDJh
ZGIxMB4XDTI0MTIxMDAyMDA0MFoXDTI1MDMxMDAxMDA0MFowLzEtMCsGA1UEAxMk
NzUxMTYwZGEtZDAyZC00YjliLTk3NDUtZGQ4YTU0OGY2MTc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ8HASRLS8RvWI+VDqyNEcEQf1rDgE2TD60y
e2BUuJwO90PVHCmPjyX+4a9cfNTLhiReGiWXC/XDKcttoyNRMKtANPL+Q3lX4HTd
7nshTXNKPqQ0GyJm/d6BD71j5OIsrXGm8Jmg/rfOR7q5CGxDFEImFr1+wbwAWSL+
in3AXi16sU1kRkm0gt2OXbTrDLNAtf0cGSUcIENG+fJpDhHu4Yc/V0d2TgqBUE/j
jvGw8dMuHDGPzfQJdO7pu94XCKdjpscqczUTWiuULPaGOKqyRQN9ZiER3pwcwV+k
ML6B+J4kaFffwiB4dt0XQXhxt6DqgnU50JyXndM/l+ZPlg2qLQIDAQABo4IDcDCC
A2wwHQYDVR0OBBYEFPa9vtNYjSbqXgBa+Mhm9MmEj27/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zOTgx
ZjZiOC1jMzIzLTQxMWQtYjZiOC0wM2JiNDRkMmFkYjEvZWM5NjhhNDMtYTNiYy0z
NWNkLTljYWUtMjk4ZDA2NDNjMzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzk4MWY2YjgtYzMyMy00MTFkLWI2
YjgtMDNiYjQ0ZDJhZGIxLzM5ODFmNmI4LWMzMjMtNDExZC1iNmI4LTAzYmI0NGQy
YWRiMS5jcmwwHwYDVR0jBBgwFoAUZcFvpzmgevfeykEi3I5W4/e8dL4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zOTgxZjZiOC1jMzIzLTQxMWQtYjZiOC0wM2Ji
NDRkMmFkYjEuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAnBAIAATAhAwMAqpgwDAME
A8DqiAMEAMDqjDAMAwQAxrOXAwQAxrOcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBALkzWxXCA4Y0kQRQYNBj
OG9YJgxEM+iLsGyNJgaoTGHACpWrrcbywwGbPcAvbwm/vBowLuSthWo4WY6b/TPR
zKt6E5WD0OrdieIwJGfIpjTXQPJVXENfClXtBw7CB99erZMNg1qboG1Q983F82eL
64L60i5LugM3KadtRH450GMPcYF1bzuXIGvL4xaHUpxq1yJxj4BUOwFv39ixbsEl
xxEh70n+QxzECIOPBNV7PHXvClzxvNbHz16XC9HMWoAG2Qx6kN3Qn4Ntzy668B9s
0bPoUJWB+3vSd/CzJm9BTKDyK98D9eYyE9jNoNClckeOYsIwmmYPck64yqGPUkSi
NuA=
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:48:34 2025 by rpki-client