Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/d5db2009-1fe6-3a7b-a729-f42e9b7b1c26.roa
File: d5db2009-1fe6-3a7b-a729-f42e9b7b1c26.roa (raw, json)
Hash identifier: Zg7WDkr4xzYEj3bwxCppVMBvNdU45QZV73E2Yz/nR8M=
Subject key identifier: 12:E9:EA:23:0A:C9:31:42:02:3C:D4:0B:69:4F:1B:46:54:C0:C6:62
Certificate issuer: /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial: 010D0C9F43285848291456063CE3EA947EF89760
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/d5db2009-1fe6-3a7b-a729-f42e9b7b1c26.roa
Signing time: Tue 10 Dec 2024 13:16:00 +0000
ROA not before: Tue 10 Dec 2024 13:16:00 +0000
ROA not after: Mon 10 Mar 2025 12:16:00 +0000
asID: 394946
IP address blocks: 169.145.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:29:14:56:06:3c:e3:ea:94:7e:f8:97:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Validity
Not Before: Dec 10 13:16:00 2024 GMT
Not After : Mar 10 12:16:00 2025 GMT
Subject: CN=9c816c1a-5706-4755-a77e-0b86f374140f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f2:fb:ce:be:86:37:74:be:96:59:5b:90:0b:
da:eb:e2:c0:a6:90:81:43:ec:b4:d8:21:51:79:45:
ef:8d:5c:c0:8f:2a:d7:f4:86:06:43:66:dc:1e:05:
cc:97:8e:1a:cc:a1:31:8d:04:8a:6f:35:06:83:58:
a7:6e:2f:5f:c7:17:e7:5b:dc:88:71:80:cb:68:ed:
67:76:d3:43:4e:75:20:f7:cd:32:2a:39:17:26:dc:
58:35:b9:52:4e:a1:cd:e3:ed:9d:f1:c2:93:58:8d:
2d:2d:96:29:9e:89:12:06:47:f6:8a:b6:ec:a2:ee:
59:ca:c3:bb:3f:9b:a1:ed:55:87:87:a3:e3:91:ea:
f9:d2:ff:a0:34:09:51:66:34:8b:76:44:08:28:9d:
98:8d:a1:b9:24:89:1e:f5:18:5c:68:ab:12:19:ff:
fd:50:a9:9d:c2:d1:a8:13:4b:d6:62:52:f5:7a:b9:
14:0b:6a:29:4b:65:95:70:93:28:08:bd:43:52:bf:
c5:45:76:86:14:a8:11:4c:cb:d6:03:fb:e2:7c:5d:
cf:3e:76:3f:09:29:93:55:35:07:0f:c9:f1:5f:12:
e6:05:36:09:20:7c:05:3b:0b:03:91:af:74:bc:6f:
f9:68:ba:f3:6b:12:15:4d:69:72:c6:d0:e7:2f:c5:
3e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E9:EA:23:0A:C9:31:42:02:3C:D4:0B:69:4F:1B:46:54:C0:C6:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/d5db2009-1fe6-3a7b-a729-f42e9b7b1c26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
X509v3 Authority Key Identifier:
keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
sbgp-ipAddrBlock: critical
IPv4:
169.145.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:40:f1:64:4a:29:0c:a7:8d:01:34:c4:01:6a:37:43:68:b8:
70:58:59:85:21:6f:42:68:82:d3:47:2d:4d:5f:37:fa:f0:c6:
b5:db:b4:9e:5f:f9:2f:05:a2:86:25:11:4f:60:09:b7:b6:de:
fb:fc:4c:39:c5:cd:f6:46:ab:24:90:46:b7:ba:1a:34:26:8e:
1a:03:a9:84:2f:e1:3f:e1:24:d9:cb:a2:75:c2:ce:9d:5a:6e:
4e:1a:94:53:77:8f:71:0b:d5:5c:f3:70:f7:7c:ad:1d:7e:dd:
b5:60:a2:7f:f4:e3:ce:b6:8d:fe:73:db:14:dd:79:ea:84:af:
4c:39:16:8a:0e:06:3c:5e:a5:55:67:d9:b0:2d:7a:6c:8a:6c:
d9:b9:c5:be:f8:ff:7f:7c:8a:d2:48:57:63:44:05:39:5f:de:
58:7f:d6:d4:37:af:8e:9a:8d:ce:35:5e:50:ed:fa:8c:ea:d8:
1d:39:70:18:56:2e:d2:ed:ba:b9:53:ec:94:31:59:e0:ee:59:
6d:76:13:7a:d3:74:ea:63:23:bd:67:4f:87:3d:2e:4a:2c:40:
be:d0:e1:92:8c:9c:d7:80:b8:4e:e0:2c:29:85:16:e1:5a:53:
a5:49:69:26:08:23:20:41:bc:7f:b1:79:2c:b7:8e:30:23:f4:
0c:db:5d:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgpFFYGPOPqlH74l2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzgzNzk5NWItY2M4MC00ZTIzLWFmMDctY2Q0MjJkMGQz
N2E5MB4XDTI0MTIxMDEzMTYwMFoXDTI1MDMxMDEyMTYwMFowLzEtMCsGA1UEAxMk
OWM4MTZjMWEtNTcwNi00NzU1LWE3N2UtMGI4NmYzNzQxNDBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPL7zr6GN3S+lllbkAva6+LAppCBQ+y02CFR
eUXvjVzAjyrX9IYGQ2bcHgXMl44azKExjQSKbzUGg1inbi9fxxfnW9yIcYDLaO1n
dtNDTnUg980yKjkXJtxYNblSTqHN4+2d8cKTWI0tLZYpnokSBkf2irbsou5ZysO7
P5uh7VWHh6Pjker50v+gNAlRZjSLdkQIKJ2YjaG5JIke9RhcaKsSGf/9UKmdwtGo
E0vWYlL1erkUC2opS2WVcJMoCL1DUr/FRXaGFKgRTMvWA/vifF3PPnY/CSmTVTUH
D8nxXxLmBTYJIHwFOwsDka90vG/5aLrzaxIVTWlyxtDnL8U+eQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBLp6iMKyTFCAjzUC2lPG0ZUwMZiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zODM3
OTk1Yi1jYzgwLTRlMjMtYWYwNy1jZDQyMmQwZDM3YTkvZDVkYjIwMDktMWZlNi0z
YTdiLWE3MjktZjQyZTliN2IxYzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzgzNzk5NWItY2M4MC00ZTIzLWFm
MDctY2Q0MjJkMGQzN2E5LzM4Mzc5OTViLWNjODAtNGUyMy1hZjA3LWNkNDIyZDBk
MzdhOS5jcmwwHwYDVR0jBBgwFoAUTaXny8du945GEkC7oBxE2P5AZ0AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zODM3OTk1Yi1jYzgwLTRlMjMtYWYwNy1jZDQy
MmQwZDM3YTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqZGIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEJA8WRKKQynjQE0xAFqN0NouHBYWYUhb0JogtNHLU1fN/rwxrXbtJ5f
+S8FooYlEU9gCbe23vv8TDnFzfZGqySQRre6GjQmjhoDqYQv4T/hJNnLonXCzp1a
bk4alFN3j3EL1VzzcPd8rR1+3bVgon/04862jf5z2xTdeeqEr0w5FooOBjxepVVn
2bAtemyKbNm5xb74/398itJIV2NEBTlf3lh/1tQ3r46ajc41XlDt+ozq2B05cBhW
LtLturlT7JQxWeDuWW12E3rTdOpjI71nT4c9LkosQL7Q4ZKMnNeAuE7gLCmFFuFa
U6VJaSYIIyBBvH+xeSy3jjAj9AzbXRE=
-----END CERTIFICATE-----
Generated at Sun May 4 21:05:35 2025 by rpki-client