Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/7154e4f9-3f53-3646-88d2-7f30c9b3a09e.roa
File: 7154e4f9-3f53-3646-88d2-7f30c9b3a09e.roa (raw, json)
Hash identifier: aE4stxn3HTEGOGzTDhtcGfjnMTe9qhgB+ENWSiPcHK8=
Subject key identifier: 0C:78:57:D3:B9:CD:FB:4F:4D:87:67:C6:20:69:AE:18:DB:D7:12:20
Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial: 010D0C9F43285848886BA2D4D9F60EA7981EFF00
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/7154e4f9-3f53-3646-88d2-7f30c9b3a09e.roa
Signing time: Mon 13 Jan 2025 16:53:42 +0000
ROA not before: Mon 13 Jan 2025 16:53:42 +0000
ROA not after: Sun 13 Apr 2025 15:53:42 +0000
asID: 9009
IP address blocks: 172.102.201.0/24 maxlen: 24
172.102.205.0/24 maxlen: 24
172.102.206.0/24 maxlen: 24
172.102.211.0/24 maxlen: 24
172.102.215.0/24 maxlen: 24
172.102.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:6b:a2:d4:d9:f6:0e:a7:98:1e:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Validity
Not Before: Jan 13 16:53:42 2025 GMT
Not After : Apr 13 15:53:42 2025 GMT
Subject: CN=0e55ce3c-46bc-4fc3-b51b-1cf471aabae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ef:cf:67:d1:c7:db:26:fc:ca:f8:c1:a5:1e:
c5:33:6c:99:66:88:a3:31:03:a2:8e:0b:5a:f9:16:
af:4e:1f:37:19:c1:aa:65:66:8e:f8:51:52:0a:ff:
97:88:be:53:9d:e8:3b:06:bc:0d:b1:c8:44:37:9c:
96:02:cf:8e:11:c0:b5:a5:1e:85:90:66:83:e0:98:
27:51:8f:8a:77:c3:ed:b8:bd:e3:9c:1f:b6:ce:1e:
70:09:47:21:2c:b6:dd:ff:e6:75:8b:30:b5:5b:e4:
89:58:72:58:d2:4f:c9:19:17:b8:a2:11:08:1c:9a:
1b:42:8a:2b:9f:19:e6:a7:8a:96:0d:39:77:70:f1:
68:0f:93:88:ac:8c:ec:61:1a:80:24:93:8a:b6:7e:
20:cd:6e:36:a4:81:66:02:61:d8:e0:b1:ef:4a:95:
0d:ff:95:21:18:bd:3d:d3:db:26:e0:d6:51:3c:e0:
de:de:3a:dd:32:76:bf:58:d3:f8:8e:36:d1:53:cc:
6a:f9:4c:b0:d6:07:b5:bb:cd:b8:f1:28:f2:66:e1:
3a:11:0c:a5:53:5a:00:4a:d8:3c:57:bb:aa:68:6a:
87:82:39:5d:24:07:fc:94:ad:f5:60:80:7c:b6:47:
34:0b:44:6b:96:64:35:5b:fc:88:0a:10:74:a0:5b:
e4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:78:57:D3:B9:CD:FB:4F:4D:87:67:C6:20:69:AE:18:DB:D7:12:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/7154e4f9-3f53-3646-88d2-7f30c9b3a09e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
X509v3 Authority Key Identifier:
keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
sbgp-ipAddrBlock: critical
IPv4:
172.102.201.0/24
172.102.205.0-172.102.206.255
172.102.211.0/24
172.102.215.0-172.102.216.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:11:31:5e:72:fd:7f:a0:2d:c9:2c:fc:2f:d3:65:3b:cc:ea:
08:36:b9:d2:77:8d:80:55:b7:3d:68:e6:32:de:73:22:67:53:
a1:2d:3e:c7:8b:39:33:c0:9b:d4:ea:46:c1:1a:bb:cd:7d:4c:
f1:49:99:50:1e:b0:17:e0:3f:5f:24:5c:86:70:95:e6:71:44:
ef:07:a9:72:45:06:9e:ee:f1:de:a7:63:de:63:dc:2c:54:39:
02:db:9c:75:ac:08:bd:8d:09:9b:3b:10:f2:d6:3c:c0:cb:e6:
23:40:21:1c:15:7b:1b:0f:aa:7d:43:56:cd:28:ff:71:9d:17:
3e:05:c6:76:b3:50:f4:26:b4:a8:7d:b1:5a:36:97:73:1e:bf:
0a:d6:aa:eb:59:f2:45:2c:45:00:f7:80:6b:63:64:e7:a2:c7:
5b:b7:2a:f2:b2:97:43:75:0b:04:f0:fd:59:a3:62:f9:87:90:
74:f5:30:bc:bc:c8:12:d5:56:c5:d0:75:a9:0c:99:da:d3:5c:
14:79:68:fa:95:0f:70:af:a5:68:5f:60:6b:bd:7b:41:b9:3f:
82:86:92:c6:f2:59:4b:67:8a:ae:49:a7:d0:d5:e5:39:05:6d:
ca:85:bf:52:d1:1e:06:17:4d:77:fc:26:35:24:f3:de:81:ec:
57:27:03:36
-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWEiIa6LU2fYOp5ge/wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz
M2E0MB4XDTI1MDExMzE2NTM0MloXDTI1MDQxMzE1NTM0MlowLzEtMCsGA1UEAxMk
MGU1NWNlM2MtNDZiYy00ZmMzLWI1MWItMWNmNDcxYWFiYWUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+/PZ9HH2yb8yvjBpR7FM2yZZoijMQOijgta
+RavTh83GcGqZWaO+FFSCv+XiL5Tneg7BrwNschEN5yWAs+OEcC1pR6FkGaD4Jgn
UY+Kd8PtuL3jnB+2zh5wCUchLLbd/+Z1izC1W+SJWHJY0k/JGRe4ohEIHJobQoor
nxnmp4qWDTl3cPFoD5OIrIzsYRqAJJOKtn4gzW42pIFmAmHY4LHvSpUN/5UhGL09
09sm4NZRPODe3jrdMna/WNP4jjbRU8xq+Uyw1ge1u8248SjyZuE6EQylU1oAStg8
V7uqaGqHgjldJAf8lK31YIB8tkc0C0RrlmQ1W/yIChB0oFvkrQIDAQABo4IDdzCC
A3MwHQYDVR0OBBYEFAx4V9O5zftPTYdnxiBprhjb1xIgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2
NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvNzE1NGU0ZjktM2Y1My0z
NjQ2LTg4ZDItN2YzMGM5YjNhMDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1
MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0
MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj
NmFiNDMzYTQuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQArGbJMAwD
BACsZs0DBACsZs4DBACsZtMwDAMEAKxm1wMEAKxm2DBUBgNVHSABAf8ESjBIMEYG
CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl
c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB0ETFecv1/
oC3JLPwv02U7zOoINrnSd42AVbc9aOYy3nMiZ1OhLT7HizkzwJvU6kbBGrvNfUzx
SZlQHrAX4D9fJFyGcJXmcUTvB6lyRQae7vHep2PeY9wsVDkC25x1rAi9jQmbOxDy
1jzAy+YjQCEcFXsbD6p9Q1bNKP9xnRc+BcZ2s1D0JrSofbFaNpdzHr8K1qrrWfJF
LEUA94BrY2TnosdbtyryspdDdQsE8P1Zo2L5h5B09TC8vMgS1VbF0HWpDJna01wU
eWj6lQ9wr6VoX2BrvXtBuT+ChpLG8llLZ4quSafQ1eU5BW3Khb9S0R4GF013/CY1
JPPegexXJwM2
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:23:29 2025 by rpki-client