Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/3d3cb45a-61fe-3633-8f13-e51266e75732.roa
File: 3d3cb45a-61fe-3633-8f13-e51266e75732.roa (raw, json)
Hash identifier: XyLp9Drize0RndJS0X8Usyv/NMOPuggjojChwqTnHRg=
Subject key identifier: AD:8A:69:3E:94:EE:58:2B:3B:C3:9B:AB:0E:0E:72:EF:63:A7:11:6C
Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
Certificate serial: 010D0C9F43285847E1FA1A238BA8DA86AB25FF70
Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/3d3cb45a-61fe-3633-8f13-e51266e75732.roa
Signing time: Fri 15 Nov 2024 02:00:28 +0000
ROA not before: Fri 15 Nov 2024 02:00:28 +0000
ROA not after: Thu 13 Feb 2025 02:00:28 +0000
asID: 14618
IP address blocks: 159.172.195.0/24 maxlen: 24
159.172.200.0/24 maxlen: 24
159.172.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e1:fa:1a:23:8b:a8:da:86:ab:25:ff:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
Validity
Not Before: Nov 15 02:00:28 2024 GMT
Not After : Feb 13 02:00:28 2025 GMT
Subject: CN=4978e89e-9945-4960-a7b3-7bc49da77636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cb:20:b4:3b:67:8a:c7:ab:20:68:1c:ee:6d:
b5:f0:8b:19:3b:33:c9:54:74:84:9e:db:d6:7e:8c:
0b:03:93:29:53:1d:94:76:5d:a0:55:11:6d:02:cd:
15:14:a7:24:78:f5:af:df:7f:a4:98:b1:ad:36:9a:
65:c4:00:34:4d:d2:4f:e8:45:97:46:4e:6e:b4:31:
d1:2c:4f:bc:db:e0:a9:f3:84:d5:9d:fb:0a:f8:76:
a6:d0:48:20:f3:bc:e2:84:7e:0a:ed:0b:77:b8:b4:
b2:ea:29:ff:68:80:53:35:b5:8d:b1:fc:f5:cc:ba:
e5:f7:57:89:51:24:8b:98:a7:f6:c4:51:76:47:f5:
44:b2:8a:cc:ea:87:ee:66:5a:eb:e9:68:86:cd:85:
66:58:36:4f:3d:10:e4:06:cb:ab:76:ca:e3:25:a8:
f6:9c:12:ef:42:52:26:05:e7:6f:b2:85:18:ea:86:
24:ef:29:86:fd:64:24:4f:d1:b9:85:4d:9e:78:f7:
fc:6e:23:8e:05:57:dd:04:65:3e:d0:e7:ce:be:2e:
30:be:03:c3:d6:fd:d4:80:6d:4e:68:ae:79:32:5b:
96:fd:ba:5a:12:6c:f7:a0:05:cc:a4:41:e3:33:51:
be:f6:f7:00:56:b2:96:1a:b5:58:f2:49:01:68:f8:
f5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8A:69:3E:94:EE:58:2B:3B:C3:9B:AB:0E:0E:72:EF:63:A7:11:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/3d3cb45a-61fe-3633-8f13-e51266e75732.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl
X509v3 Authority Key Identifier:
keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
sbgp-ipAddrBlock: critical
IPv4:
159.172.195.0/24
159.172.200.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:87:a8:56:45:92:bb:8b:ee:e4:51:66:4f:8a:ba:83:b2:bb:
52:72:5c:54:51:21:dd:e9:dc:3b:b1:59:e4:41:e6:0a:74:d2:
db:58:a4:16:e6:7c:eb:c4:9a:36:a4:d4:a0:21:f6:e1:50:d7:
7d:90:a5:6d:e4:2a:e0:cb:53:74:1e:51:47:ff:9c:78:24:70:
74:ac:a3:8c:0e:02:b3:ec:77:c3:17:d8:bd:e6:f6:3d:92:30:
04:15:71:49:98:df:8c:8d:db:22:81:16:fd:35:9a:db:8c:ea:
87:30:fc:f6:dc:82:17:7e:cd:72:2c:37:cb:c8:32:84:3a:54:
d0:d5:aa:87:a7:0d:5f:3b:af:9a:69:d1:c3:29:70:ab:02:fa:
37:c5:1c:f6:1c:47:27:8c:76:42:61:25:75:8b:b6:54:ae:4d:
64:38:cc:6d:16:50:84:62:ef:b8:9c:10:77:aa:99:22:6a:d1:
bd:98:ce:ce:8a:f0:de:51:de:56:56:1a:f3:3e:b5:b7:94:4c:
57:66:6f:95:6a:a5:83:25:2a:01:39:ab:d9:42:0b:2b:a5:98:
9b:2b:f5:37:86:fd:f8:72:be:47:bc:85:d1:bd:33:89:60:48:
74:d1:94:fb:92:c6:b1:1f:75:78:7c:9b:49:63:88:e6:7b:f8:
23:52:ce:c9
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEfh+hoji6jahqsl/3AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2
ZDcyMB4XDTI0MTExNTAyMDAyOFoXDTI1MDIxMzAyMDAyOFowLzEtMCsGA1UEAxMk
NDk3OGU4OWUtOTk0NS00OTYwLWE3YjMtN2JjNDlkYTc3NjM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMsgtDtniserIGgc7m218IsZOzPJVHSEntvW
fowLA5MpUx2Udl2gVRFtAs0VFKckePWv33+kmLGtNpplxAA0TdJP6EWXRk5utDHR
LE+82+Cp84TVnfsK+Ham0Egg87zihH4K7Qt3uLSy6in/aIBTNbWNsfz1zLrl91eJ
USSLmKf2xFF2R/VEsorM6ofuZlrr6WiGzYVmWDZPPRDkBsurdsrjJaj2nBLvQlIm
BedvsoUY6oYk7ymG/WQkT9G5hU2eePf8biOOBVfdBGU+0OfOvi4wvgPD1v3UgG1O
aK55MluW/bpaEmz3oAXMpEHjM1G+9vcAVrKWGrVY8kkBaPj14QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFK2KaT6U7lgrO8Obqw4Ocu9jpxFsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5
MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvM2QzY2I0NWEtNjFmZS0z
NjMzLThmMTMtZTUxMjY2ZTc1NzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz
MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw
NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5
MWE1MDZkNzIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAn6zDAwQB
n6zIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHeHqFZFkruL7uRRZk+KuoOyu1JyXFRRId3p3DuxWeRB5gp0
0ttYpBbmfOvEmjak1KAh9uFQ132QpW3kKuDLU3QeUUf/nHgkcHSso4wOArPsd8MX
2L3m9j2SMAQVcUmY34yN2yKBFv01mtuM6ocw/Pbcghd+zXIsN8vIMoQ6VNDVqoen
DV87r5pp0cMpcKsC+jfFHPYcRyeMdkJhJXWLtlSuTWQ4zG0WUIRi77icEHeqmSJq
0b2Yzs6K8N5R3lZWGvM+tbeUTFdmb5VqpYMlKgE5q9lCCyulmJsr9TeG/fhyvke8
hdG9M4lgSHTRlPuSxrEfdXh8m0ljiOZ7+CNSzsk=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:14 2025 by rpki-client