Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/ae548fa2-acd0-3aa2-9463-b60c668965c8.roa
File: ae548fa2-acd0-3aa2-9463-b60c668965c8.roa (raw, json)
Hash identifier: ++68sNR8GRECNPRbOXwH5Bn9gxNJLJaNZOf0Siv73MY=
Subject key identifier: 6B:CF:4E:80:4E:D0:40:F9:FF:CE:DF:6E:0B:E1:35:22:88:71:C6:A2
Certificate issuer: /CN=1ec086e2-3054-4b39-ac69-6f7453ed188f
Certificate serial: 010D0C9F43285847EA5A13ECA7D2C5B27A3C4900
Authority key identifier: B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/ae548fa2-acd0-3aa2-9463-b60c668965c8.roa
Signing time: Mon 18 Nov 2024 02:00:27 +0000
ROA not before: Mon 18 Nov 2024 02:00:27 +0000
ROA not after: Sun 16 Feb 2025 02:00:27 +0000
asID: 40495
IP address blocks: 174.137.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ea:5a:13:ec:a7:d2:c5:b2:7a:3c:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ec086e2-3054-4b39-ac69-6f7453ed188f
Validity
Not Before: Nov 18 02:00:27 2024 GMT
Not After : Feb 16 02:00:27 2025 GMT
Subject: CN=f9994d9a-2b3d-4ea8-8a55-d3a380bf7c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:01:5b:ec:dc:8f:6a:98:ec:55:34:81:01:92:
4c:37:34:f3:e2:2c:8b:7e:51:9c:cf:09:cd:ac:2f:
e8:3f:45:9b:21:2a:e8:b4:12:70:d7:62:a8:49:74:
f4:4e:cc:2e:40:a1:83:78:90:7b:db:52:5a:3b:f7:
95:86:45:3f:16:8e:e3:76:60:1f:74:72:b5:e3:a2:
49:40:f8:29:63:50:c8:55:d2:45:0f:63:71:07:d3:
87:a6:04:bf:bc:28:91:4e:ec:5b:d1:56:f4:8e:11:
6a:2b:07:ff:f9:78:a0:69:a6:72:b8:f1:12:ef:95:
92:7c:dd:99:50:9d:ab:8c:09:df:f4:3c:89:58:10:
62:8c:08:aa:3e:16:5e:aa:c0:9d:81:d2:93:19:9e:
c1:78:41:29:24:56:4b:7b:11:d7:86:60:c7:4a:f5:
34:33:20:11:9a:27:fe:51:e7:02:c4:a9:21:5e:b0:
3a:ce:62:1b:a1:90:71:6d:fc:dc:a5:c8:08:cd:47:
b2:81:bd:c7:05:b2:a0:1b:60:7a:16:a9:55:f9:89:
de:72:16:e6:26:b3:f0:74:7a:0f:29:6b:ad:59:c7:
eb:a2:cd:f7:69:5d:46:d1:bb:4b:31:6e:a3:2c:3e:
00:39:9b:dc:f7:5f:b4:15:32:75:1f:b5:be:ef:36:
63:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CF:4E:80:4E:D0:40:F9:FF:CE:DF:6E:0B:E1:35:22:88:71:C6:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/ae548fa2-acd0-3aa2-9463-b60c668965c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl
X509v3 Authority Key Identifier:
keyid:B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer
sbgp-ipAddrBlock: critical
IPv4:
174.137.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:b4:27:ef:ac:32:41:76:f8:8f:ce:42:93:b6:a2:10:5e:14:
57:71:c6:3b:2c:e8:5f:81:1e:ab:b7:d2:c7:99:66:a3:23:91:
2b:d4:14:94:cd:87:da:7c:cd:5b:23:4a:65:fb:e0:f9:98:c7:
af:84:9c:47:6a:c3:26:0f:86:23:58:27:00:08:22:f2:8e:cd:
02:40:47:42:d2:a5:71:4e:24:e7:72:cf:be:7a:c7:d8:de:47:
91:09:a5:d0:bd:15:a9:fb:db:47:02:42:a4:29:5c:cd:d0:0f:
98:ab:98:c8:a0:52:5f:e3:3e:c9:69:91:b8:63:82:7e:e3:fe:
e9:bb:1c:1e:42:37:ec:2a:29:65:cd:e3:fd:bd:cc:d2:3b:9e:
7f:3d:ba:de:00:bb:86:29:39:cb:12:56:3d:9c:c8:d9:a5:c0:
3f:b0:bd:35:c5:c7:62:64:1a:69:05:cf:6c:dd:88:98:0a:02:
b7:34:f4:9d:19:0b:76:a5:ee:23:90:ef:57:ca:03:51:27:74:
8b:7e:c1:fa:8a:80:79:d9:20:e9:c9:f3:20:76:62:ec:91:a7:
ff:be:4c:df:92:0c:a2:72:9a:34:32:7c:e9:fe:4c:d1:25:24:
f0:ee:d3:e7:1c:1d:0e:97:57:70:fa:97:a2:2f:45:cf:80:42:
ea:1e:a7:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfqWhPsp9LFsno8SQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWVjMDg2ZTItMzA1NC00YjM5LWFjNjktNmY3NDUzZWQx
ODhmMB4XDTI0MTExODAyMDAyN1oXDTI1MDIxNjAyMDAyN1owLzEtMCsGA1UEAxMk
Zjk5OTRkOWEtMmIzZC00ZWE4LThhNTUtZDNhMzgwYmY3Yzc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwFb7NyPapjsVTSBAZJMNzTz4iyLflGczwnN
rC/oP0WbISrotBJw12KoSXT0TswuQKGDeJB721JaO/eVhkU/Fo7jdmAfdHK146JJ
QPgpY1DIVdJFD2NxB9OHpgS/vCiRTuxb0Vb0jhFqKwf/+XigaaZyuPES75WSfN2Z
UJ2rjAnf9DyJWBBijAiqPhZeqsCdgdKTGZ7BeEEpJFZLexHXhmDHSvU0MyARmif+
UecCxKkhXrA6zmIboZBxbfzcpcgIzUeygb3HBbKgG2B6FqlV+YnechbmJrPwdHoP
KWutWcfros33aV1G0btLMW6jLD4AOZvc91+0FTJ1H7W+7zZj1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGvPToBO0ED5/87fbgvhNSKIccaiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMw
ODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0NTNlZDE4OGYvYWU1NDhmYTItYWNkMC0z
YWEyLTk0NjMtYjYwYzY2ODk2NWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWVjMDg2ZTItMzA1NC00YjM5LWFj
NjktNmY3NDUzZWQxODhmLzFlYzA4NmUyLTMwNTQtNGIzOS1hYzY5LTZmNzQ1M2Vk
MTg4Zi5jcmwwHwYDVR0jBBgwFoAUs5ge2ktB1FAXDDXcH9pAYauvSX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMwODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0
NTNlZDE4OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArol5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA+0J++sMkF2+I/OQpO2ohBeFFdxxjss6F+BHqu30seZZqMjkSvUFJTN
h9p8zVsjSmX74PmYx6+EnEdqwyYPhiNYJwAIIvKOzQJAR0LSpXFOJOdyz756x9je
R5EJpdC9Fan720cCQqQpXM3QD5irmMigUl/jPslpkbhjgn7j/um7HB5CN+wqKWXN
4/29zNI7nn89ut4Au4YpOcsSVj2cyNmlwD+wvTXFx2JkGmkFz2zdiJgKArc09J0Z
C3al7iOQ71fKA1EndIt+wfqKgHnZIOnJ8yB2YuyRp/++TN+SDKJymjQyfOn+TNEl
JPDu0+ccHQ6XV3D6l6IvRc+AQuoepwY=
-----END CERTIFICATE-----
Generated at Tue Apr 29 15:39:51 2025 by rpki-client