Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b77ec2a2-5b69-4fde-a83e-d5f8ae0231b2/a8952ba0-0688-3408-8645-ab4893961008.roa
File: a8952ba0-0688-3408-8645-ab4893961008.roa (raw, json)
Hash identifier: doNC+RUSIN52c07EzEkAKegCN8T3+X33UEF1Xuz1LV4=
Subject key identifier: 9A:7C:69:0F:51:1F:F5:C8:01:B7:53:4D:62:CA:3C:87:17:F3:75:90
Certificate issuer: /CN=b77ec2a2-5b69-4fde-a83e-d5f8ae0231b2
Certificate serial: 010D0C9F432858484945618A39CC16AE460AD5C0
Authority key identifier: AF:75:BF:33:66:F7:25:5C:A3:1D:D0:6B:5A:46:83:50:13:EA:77:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b77ec2a2-5b69-4fde-a83e-d5f8ae0231b2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b77ec2a2-5b69-4fde-a83e-d5f8ae0231b2/a8952ba0-0688-3408-8645-ab4893961008.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 25844
IP address blocks: 162.90.0.0/16 maxlen: 16
162.90.0.0/22 maxlen: 22
162.90.1.0/24 maxlen: 24
162.90.96.0/24 maxlen: 24
162.90.97.0/24 maxlen: 24
162.90.98.0/24 maxlen: 24
162.90.99.0/24 maxlen: 24
162.90.112.0/24 maxlen: 24
162.90.114.0/24 maxlen: 24
162.90.116.0/24 maxlen: 24
162.90.118.0/24 maxlen: 24
162.90.144.0/20 maxlen: 20
162.90.160.0/20 maxlen: 20
162.90.176.0/20 maxlen: 20
162.90.192.0/20 maxlen: 20
162.90.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:61:8a:39:cc:16:ae:46:0a:d5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b77ec2a2-5b69-4fde-a83e-d5f8ae0231b2
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=eead0b37-4709-40b4-a119-a126e2c1f1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:28:1b:60:45:2f:fe:92:ca:00:04:ef:ff:70:
cb:80:c9:95:86:3c:10:18:66:7c:38:51:af:cf:e2:
76:99:ff:36:df:18:e0:2a:9b:7a:5a:0c:5b:92:6a:
94:e1:7e:1b:44:fb:36:a5:ea:63:09:b1:19:2a:ed:
2c:b0:8c:7c:d9:6b:b8:d2:0d:1d:f5:54:82:92:2b:
33:54:d4:77:db:ee:eb:75:2d:6b:b2:49:5f:55:48:
cc:8b:93:81:d8:06:ec:36:a4:55:cc:a4:fc:cd:9f:
86:a2:bc:d4:2a:58:55:33:8d:bc:84:b3:83:cd:7e:
6e:65:50:f2:7d:97:ab:fb:69:0b:27:c1:c8:0b:6e:
cb:fb:8c:b3:a7:e1:d5:e4:ef:32:88:63:3f:b5:dd:
c0:ae:4b:3a:92:20:63:f4:39:1f:56:d7:c4:f2:02:
66:09:66:69:78:e1:33:b2:4e:9d:99:4a:b3:38:53:
dc:ea:85:02:02:be:d9:a6:6b:a8:df:eb:16:ab:73:
73:21:db:fb:00:6b:46:91:d3:ba:5f:d7:8b:2f:f0:
c9:9d:33:21:07:b5:85:05:39:f3:c1:90:79:16:26:
2a:41:58:be:8c:0a:e7:c2:02:e1:db:ac:2a:e5:31:
a9:e1:e4:fb:18:1f:75:48:40:d6:d3:4a:bb:33:a5:
0a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7C:69:0F:51:1F:F5:C8:01:B7:53:4D:62:CA:3C:87:17:F3:75:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b77ec2a2-5b69-4fde-a83e-d5f8ae0231b2/a8952ba0-0688-3408-8645-ab4893961008.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b77ec2a2-5b69-4fde-a83e-d5f8ae0231b2/b77ec2a2-5b69-4fde-a83e-d5f8ae0231b2.crl
X509v3 Authority Key Identifier:
keyid:AF:75:BF:33:66:F7:25:5C:A3:1D:D0:6B:5A:46:83:50:13:EA:77:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b77ec2a2-5b69-4fde-a83e-d5f8ae0231b2.cer
sbgp-ipAddrBlock: critical
IPv4:
162.90.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:a8:7b:22:46:d5:14:74:a3:43:e8:c3:83:f4:29:5e:c1:71:
79:0d:52:f9:e7:ac:51:4d:f1:d4:70:08:28:cb:eb:04:be:f2:
21:11:88:b2:39:b9:f1:da:de:fa:b7:e4:6f:57:84:a3:c5:cb:
43:cb:69:bf:99:59:39:4c:94:d3:27:3e:e3:4c:cf:b1:23:26:
fa:22:6f:9c:b4:51:f0:af:a8:a0:f3:2f:79:c1:f2:8d:76:48:
4c:9b:f4:04:04:04:59:26:1e:bc:73:fa:d0:09:8b:e8:62:e5:
71:5d:cc:cb:d4:36:8b:40:4c:de:2c:12:f4:2d:1a:9f:c8:82:
34:0b:1f:8c:5f:1e:79:5b:dd:a4:af:b8:8c:d2:a6:26:86:3b:
49:29:74:f6:a0:8a:9f:9e:98:32:41:d8:36:3c:a3:81:a4:9f:
12:1f:2b:1f:77:44:12:26:8b:12:83:49:1d:ee:cf:d9:1c:ee:
43:98:c2:4f:47:e6:70:a0:f7:f0:f5:3e:8d:0a:dd:fc:04:d3:
ff:61:06:4c:ae:1a:db:78:f9:2e:0a:c7:ed:fe:35:ae:df:a7:
36:54:75:18:aa:79:e3:67:ad:72:a0:48:8f:5e:91:a2:6f:52:
6c:f8:14:10:7e:7d:73:fc:6a:e5:5f:19:0f:5e:c2:4b:1e:b6:
12:9c:c7:56
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEhJRWGKOcwWrkYK1cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjc3ZWMyYTItNWI2OS00ZmRlLWE4M2UtZDVmOGFlMDIz
MWIyMB4XDTI0MTIyMjAyMDAzOVoXDTI1MDMyMjAxMDAzOVowLzEtMCsGA1UEAxMk
ZWVhZDBiMzctNDcwOS00MGI0LWExMTktYTEyNmUyYzFmMWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoygbYEUv/pLKAATv/3DLgMmVhjwQGGZ8OFGv
z+J2mf823xjgKpt6WgxbkmqU4X4bRPs2pepjCbEZKu0ssIx82Wu40g0d9VSCkisz
VNR32+7rdS1rsklfVUjMi5OB2AbsNqRVzKT8zZ+GorzUKlhVM428hLODzX5uZVDy
fZer+2kLJ8HIC27L+4yzp+HV5O8yiGM/td3Arks6kiBj9DkfVtfE8gJmCWZpeOEz
sk6dmUqzOFPc6oUCAr7Zpmuo3+sWq3NzIdv7AGtGkdO6X9eLL/DJnTMhB7WFBTnz
wZB5FiYqQVi+jArnwgLh26wq5TGp4eT7GB91SEDW00q7M6UKKwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJp8aQ9RH/XIAbdTTWLKPIcX83WQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iNzdl
YzJhMi01YjY5LTRmZGUtYTgzZS1kNWY4YWUwMjMxYjIvYTg5NTJiYTAtMDY4OC0z
NDA4LTg2NDUtYWI0ODkzOTYxMDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjc3ZWMyYTItNWI2OS00ZmRlLWE4
M2UtZDVmOGFlMDIzMWIyL2I3N2VjMmEyLTViNjktNGZkZS1hODNlLWQ1ZjhhZTAy
MzFiMi5jcmwwHwYDVR0jBBgwFoAUr3W/M2b3JVyjHdBrWkaDUBPqd54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iNzdlYzJhMi01YjY5LTRmZGUtYTgzZS1kNWY4
YWUwMjMxYjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAolowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEASKh7IkbVFHSjQ+jDg/QpXsFxeQ1S+eesUU3x1HAIKMvrBL7yIRGIsjm5
8dre+rfkb1eEo8XLQ8tpv5lZOUyU0yc+40zPsSMm+iJvnLRR8K+ooPMvecHyjXZI
TJv0BAQEWSYevHP60AmL6GLlcV3My9Q2i0BM3iwS9C0an8iCNAsfjF8eeVvdpK+4
jNKmJoY7SSl09qCKn56YMkHYNjyjgaSfEh8rH3dEEiaLEoNJHe7P2RzuQ5jCT0fm
cKD38PU+jQrd/ATT/2EGTK4a23j5LgrH7f41rt+nNlR1GKp542etcqBIj16Rom9S
bPgUEH59c/xq5V8ZD17CSx62EpzHVg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:35:01 2025 by rpki-client