Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b97501a5-c1f0-3b1d-b523-c4703b659f7b.roa
File: b97501a5-c1f0-3b1d-b523-c4703b659f7b.roa (raw, json)
Hash identifier: f66t6Je3Lbfv4QvDcomuJAshyjbqLGzB0bRS2MwYP4M=
Subject key identifier: F7:B5:41:29:34:CB:4A:7A:D7:44:86:5A:F1:5F:55:12:D2:05:2C:20
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F4328584875F058B178F04CB47BF76780
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b97501a5-c1f0-3b1d-b523-c4703b659f7b.roa
Signing time: Tue 07 Jan 2025 02:00:39 +0000
ROA not before: Tue 07 Jan 2025 02:00:39 +0000
ROA not after: Mon 07 Apr 2025 01:00:39 +0000
asID: 14618
IP address blocks: 216.157.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:75:f0:58:b1:78:f0:4c:b4:7b:f7:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Jan 7 02:00:39 2025 GMT
Not After : Apr 7 01:00:39 2025 GMT
Subject: CN=9f3f0b87-0924-43c3-a33e-16e2f2733c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a2:9d:71:c5:b9:8e:d4:b3:68:13:3b:da:11:
e4:fb:0b:59:3f:47:c4:bd:79:ed:6b:f2:b2:49:86:
9b:06:61:3f:0e:4a:67:bd:07:61:f5:3b:78:42:c6:
37:7d:aa:f0:85:1a:e1:04:05:1d:fa:00:83:f8:9e:
7a:74:8c:3e:bb:c4:04:97:ee:1e:eb:3e:0f:c9:ed:
6b:97:18:37:46:2f:e9:3a:7d:59:e9:4d:f8:99:72:
98:5e:01:9c:63:0f:bf:e8:ce:49:64:96:86:8a:1a:
5b:83:80:68:31:ef:04:ad:76:d4:05:b7:fb:6f:39:
46:ee:5c:7b:1d:5f:2c:17:f4:14:4e:43:2e:d3:3a:
a0:68:be:55:ee:9d:79:2b:cd:4b:e2:c1:bb:26:2c:
c5:be:23:f6:b2:3c:cf:11:6d:ec:c9:34:8c:19:19:
8d:64:c8:2f:0d:c6:74:72:c5:d2:48:a2:22:c1:3b:
6e:f2:f0:72:23:8e:44:39:ce:90:00:73:cb:9d:5b:
2d:70:01:92:a2:6c:76:38:48:5a:60:ec:f2:2a:f1:
b2:a3:e4:4c:d5:a4:d4:d6:56:27:d8:54:3e:bb:89:
b1:94:62:8d:dd:70:e1:75:f4:40:ed:0b:58:d1:83:
a1:e2:a5:c7:d7:50:aa:26:ed:0c:4a:50:d8:e4:63:
f5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B5:41:29:34:CB:4A:7A:D7:44:86:5A:F1:5F:55:12:D2:05:2C:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b97501a5-c1f0-3b1d-b523-c4703b659f7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv4:
216.157.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:85:65:3b:98:91:31:f1:f0:c8:6b:e3:12:d8:2c:3b:48:9c:
fa:66:65:d1:6c:7e:68:a9:91:c0:20:9e:a4:33:bd:d5:45:90:
fe:ac:b0:80:97:1a:08:fe:fe:94:b6:50:c0:d6:19:db:8b:60:
4e:25:98:a9:cf:ce:17:99:4a:7f:f7:9e:a5:33:b3:72:d6:b6:
4b:9e:96:fb:80:56:66:1e:b7:8d:2b:a9:66:20:9e:2f:1d:e6:
9b:5a:84:2f:e9:88:e8:87:59:f3:5b:2d:52:39:66:b1:b3:e0:
58:e0:ba:9d:3f:51:0b:ee:d7:2b:cf:5f:11:e9:07:19:98:62:
11:10:5d:b4:39:c8:3a:76:30:34:16:24:bc:eb:61:09:c7:74:
f9:6c:3c:23:48:29:95:31:2d:d3:fd:91:a7:2a:90:0b:b0:1d:
b1:da:d1:69:55:cf:d8:f4:75:94:b1:b3:df:3b:5e:15:01:b2:
98:01:59:af:33:00:c5:5c:76:1d:03:d8:c3:fb:0b:8f:fa:14:
06:79:c3:1b:5a:85:9b:5f:cc:70:f1:78:55:37:34:46:01:4f:
ed:59:f0:b6:63:41:18:24:76:1e:01:49:66:05:3a:e1:28:cc:
82:ef:52:00:eb:43:cd:fa:7b:bc:91:7c:e8:7e:c0:1a:5c:24:
62:be:26:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh18FixePBMtHv3Z4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz
M2Q3MB4XDTI1MDEwNzAyMDAzOVoXDTI1MDQwNzAxMDAzOVowLzEtMCsGA1UEAxMk
OWYzZjBiODctMDkyNC00M2MzLWEzM2UtMTZlMmYyNzMzYzg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqKdccW5jtSzaBM72hHk+wtZP0fEvXnta/Ky
SYabBmE/DkpnvQdh9Tt4QsY3farwhRrhBAUd+gCD+J56dIw+u8QEl+4e6z4Pye1r
lxg3Ri/pOn1Z6U34mXKYXgGcYw+/6M5JZJaGihpbg4BoMe8ErXbUBbf7bzlG7lx7
HV8sF/QUTkMu0zqgaL5V7p15K81L4sG7JizFviP2sjzPEW3syTSMGRmNZMgvDcZ0
csXSSKIiwTtu8vByI45EOc6QAHPLnVstcAGSomx2OEhaYOzyKvGyo+RM1aTU1lYn
2FQ+u4mxlGKN3XDhdfRA7QtY0YOh4qXH11CqJu0MSlDY5GP1yQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPe1QSk0y0p610SGWvFfVRLSBSwgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl
ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvYjk3NTAxYTUtYzFmMC0z
YjFkLWI1MjMtYzQ3MDNiNjU5ZjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4
NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm
MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2
YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIOFZTuYkTHx8Mhr4xLYLDtInPpmZdFsfmipkcAgnqQzvdVFkP6ssICX
Ggj+/pS2UMDWGduLYE4lmKnPzheZSn/3nqUzs3LWtkuelvuAVmYet40rqWYgni8d
5ptahC/piOiHWfNbLVI5ZrGz4Fjgup0/UQvu1yvPXxHpBxmYYhEQXbQ5yDp2MDQW
JLzrYQnHdPlsPCNIKZUxLdP9kacqkAuwHbHa0WlVz9j0dZSxs987XhUBspgBWa8z
AMVcdh0D2MP7C4/6FAZ5wxtahZtfzHDxeFU3NEYBT+1Z8LZjQRgkdh4BSWYFOuEo
zILvUgDrQ836e7yRfOh+wBpcJGK+Jjg=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:21 2025 by rpki-client