Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/1a082d99-dd96-34e7-891e-59aab4062033.roa
File: 1a082d99-dd96-34e7-891e-59aab4062033.roa (raw, json)
Hash identifier: eDX/ViLoSmHy55/YgiT1T9wUjZisoy6XH6cGW0gyBoY=
Subject key identifier: D4:28:38:F8:AA:F0:2A:CB:45:45:22:39:43:FF:0F:26:C4:8F:3D:BD
Certificate issuer: /CN=4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e
Certificate serial: 010D0C9F43285848467AC0357084AEB6BD3DEC78
Authority key identifier: D5:2A:0D:DC:55:F7:80:56:18:71:6E:9A:13:2A:E9:4B:ED:25:93:34
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/1a082d99-dd96-34e7-891e-59aab4062033.roa
Signing time: Sat 21 Dec 2024 02:00:39 +0000
ROA not before: Sat 21 Dec 2024 02:00:39 +0000
ROA not after: Fri 21 Mar 2025 01:00:39 +0000
asID: 14749
IP address blocks: 162.212.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:46:7a:c0:35:70:84:ae:b6:bd:3d:ec:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e
Validity
Not Before: Dec 21 02:00:39 2024 GMT
Not After : Mar 21 01:00:39 2025 GMT
Subject: CN=e915decc-dca5-43d2-a67e-853d69979e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:51:54:51:64:da:53:67:b7:5d:21:3d:8d:cd:
5f:4c:c5:2f:d1:ba:1e:36:9c:a4:e5:eb:3f:dd:b2:
1d:3e:47:b1:be:d5:2e:d4:c8:fe:d2:d6:5d:fe:f8:
a4:07:59:96:5f:2d:d3:d9:0d:96:bc:2e:62:b0:08:
ac:32:34:2e:ae:33:25:6a:a0:79:38:92:95:ee:39:
37:c0:d8:87:84:36:50:de:2f:28:e9:73:b0:f8:ec:
52:96:a2:6e:eb:76:2a:47:bd:53:38:b9:e7:74:4f:
e3:83:d3:33:31:4e:26:27:c8:84:7a:d7:75:85:22:
0a:55:77:7a:3d:2f:85:27:79:f6:5b:34:e0:9f:4a:
82:2b:b2:54:14:3b:d2:71:1a:c6:e0:67:3a:64:6f:
60:35:8c:69:33:83:48:0f:25:f2:a2:4a:79:2a:ef:
bc:1b:70:da:28:8d:77:44:78:4e:57:c5:a7:59:e4:
ac:1b:9d:53:13:10:d3:19:4d:7d:dd:d6:d8:ea:4f:
75:dd:9a:66:83:48:8b:da:06:81:21:07:77:e9:54:
22:0f:94:4b:f4:61:37:d0:16:38:a0:e5:82:d0:12:
e1:11:b1:f4:8f:40:e8:02:88:b5:07:31:09:7e:df:
37:0c:d8:5a:25:79:c8:29:86:e4:33:ea:9b:e1:68:
68:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:28:38:F8:AA:F0:2A:CB:45:45:22:39:43:FF:0F:26:C4:8F:3D:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/1a082d99-dd96-34e7-891e-59aab4062033.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.crl
X509v3 Authority Key Identifier:
keyid:D5:2A:0D:DC:55:F7:80:56:18:71:6E:9A:13:2A:E9:4B:ED:25:93:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.cer
sbgp-ipAddrBlock: critical
IPv4:
162.212.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:9a:c8:19:95:59:3a:8d:dc:64:44:e3:0e:86:0b:cf:76:22:
8f:c2:33:c2:3a:ae:8c:62:c3:8c:d8:13:4d:ca:70:56:bc:38:
8c:01:c9:7f:a3:17:81:69:a7:58:e2:03:d6:b6:b6:41:7d:0c:
5a:15:9e:7d:4e:c6:b2:7c:9b:58:4c:2a:de:77:70:a8:0d:ff:
22:ce:3e:bb:9e:d1:5b:11:ff:23:47:fd:f8:01:88:4f:35:19:
7e:f9:d6:a7:33:23:68:57:53:e1:b6:5b:ab:e8:12:3e:cc:b7:
00:80:08:ca:9d:46:85:5a:ff:ef:18:87:ac:82:e4:83:76:10:
a1:c4:d1:82:56:52:c9:85:98:f8:fc:ac:83:2f:5f:39:9e:94:
b4:e3:5c:38:02:aa:0e:dd:53:d3:b8:d1:c4:4c:f3:7b:6d:bf:
56:4f:0f:05:79:c2:b4:ff:35:f5:e6:8f:ad:84:5b:30:da:43:
8f:66:73:c7:bb:35:c0:f2:7f:17:cf:68:43:5d:ef:e1:2d:08:
0b:5a:97:89:10:95:a4:4e:84:09:ec:0c:01:16:1b:75:ee:1f:
d8:07:3f:0d:d8:0a:86:92:0d:b7:7a:8f:39:58:94:e6:d1:7e:
ba:70:10:ed:81:a5:f0:73:ca:f5:ec:f5:25:4e:fd:bb:02:ab:
65:3e:85:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhGesA1cISutr097HgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDQ1OTQxMmMtNmJmNS00ZTJkLTkwZDktNGQ4ZWM1Y2Qz
ZDBlMB4XDTI0MTIyMTAyMDAzOVoXDTI1MDMyMTAxMDAzOVowLzEtMCsGA1UEAxMk
ZTkxNWRlY2MtZGNhNS00M2QyLWE2N2UtODUzZDY5OTc5ZTRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFFUUWTaU2e3XSE9jc1fTMUv0boeNpyk5es/
3bIdPkexvtUu1Mj+0tZd/vikB1mWXy3T2Q2WvC5isAisMjQurjMlaqB5OJKV7jk3
wNiHhDZQ3i8o6XOw+OxSlqJu63YqR71TOLnndE/jg9MzMU4mJ8iEetd1hSIKVXd6
PS+FJ3n2WzTgn0qCK7JUFDvScRrG4Gc6ZG9gNYxpM4NIDyXyokp5Ku+8G3DaKI13
RHhOV8WnWeSsG51TExDTGU193dbY6k913Zpmg0iL2gaBIQd36VQiD5RL9GE30BY4
oOWC0BLhEbH0j0DoAoi1BzEJft83DNhaJXnIKYbkM+qb4WhoZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNQoOPiq8CrLRUUiOUP/DybEjz29MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NDU5
NDEyYy02YmY1LTRlMmQtOTBkOS00ZDhlYzVjZDNkMGUvMWEwODJkOTktZGQ5Ni0z
NGU3LTg5MWUtNTlhYWI0MDYyMDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDQ1OTQxMmMtNmJmNS00ZTJkLTkw
ZDktNGQ4ZWM1Y2QzZDBlLzQ0NTk0MTJjLTZiZjUtNGUyZC05MGQ5LTRkOGVjNWNk
M2QwZS5jcmwwHwYDVR0jBBgwFoAU1SoN3FX3gFYYcW6aEyrpS+0lkzQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80NDU5NDEyYy02YmY1LTRlMmQtOTBkOS00ZDhl
YzVjZDNkMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotSIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJKayBmVWTqN3GRE4w6GC892Io/CM8I6roxiw4zYE03KcFa8OIwByX+j
F4Fpp1jiA9a2tkF9DFoVnn1OxrJ8m1hMKt53cKgN/yLOPrue0VsR/yNH/fgBiE81
GX751qczI2hXU+G2W6voEj7MtwCACMqdRoVa/+8Yh6yC5IN2EKHE0YJWUsmFmPj8
rIMvXzmelLTjXDgCqg7dU9O40cRM83ttv1ZPDwV5wrT/NfXmj62EWzDaQ49mc8e7
NcDyfxfPaENd7+EtCAtal4kQlaROhAnsDAEWG3XuH9gHPw3YCoaSDbd6jzlYlObR
frpwEO2BpfBzyvXs9SVO/bsCq2U+hcs=
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:51:54 2025 by rpki-client