Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/651c7010-2779-3e43-956b-dcc22baffc29.roa
File: 651c7010-2779-3e43-956b-dcc22baffc29.roa (raw, json)
Hash identifier: E2og6TzoRnrTLxx17HdSGFXQzVcv1jPBIC6+77OPALo=
Subject key identifier: DE:3A:2E:09:16:30:AE:D9:6C:4C:19:74:49:A7:60:F0:E5:14:8C:55
Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
Certificate serial: 010D0C9F432858485F9ADBF73C5CD8075D812F80
Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/651c7010-2779-3e43-956b-dcc22baffc29.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 14618
IP address blocks: 159.172.202.0/24 maxlen: 24
159.172.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:db:f7:3c:5c:d8:07:5d:81:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=ce66b9f4-e0b2-450e-b07f-dd242bc50a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cb:cb:35:ad:dc:5a:02:4c:d3:bc:86:6d:a9:
a2:88:5b:8c:e6:ee:ee:d5:18:39:90:94:d5:df:9a:
0c:ca:5e:27:bc:a6:fc:db:5f:1f:bf:66:90:66:a7:
48:95:e9:e6:a9:be:2d:f5:50:6b:30:24:d0:2e:54:
4a:53:27:44:52:91:a4:56:a2:6e:48:4b:e2:b3:c5:
50:f3:7d:98:7f:22:5e:dc:71:10:42:80:92:2b:a1:
2b:28:4c:ab:17:cc:98:0e:1a:20:ea:b5:ea:60:2c:
2c:65:01:44:25:cb:35:91:2d:ae:31:9e:f4:10:f5:
53:a2:71:3f:1d:68:ef:3d:61:57:fb:52:cb:63:76:
c1:89:5a:61:6e:f5:cd:a8:8d:a9:ea:41:30:ae:05:
08:bd:8e:27:a3:f4:d6:90:65:15:c6:4a:52:ba:ec:
28:0c:7e:bd:ea:19:4a:e3:cd:e0:a6:5a:d4:cc:ec:
f3:74:b8:96:83:7e:37:b2:4b:01:51:e8:d0:ac:07:
96:73:10:7b:1a:e6:4a:14:6f:6e:4c:5c:db:fe:42:
8c:d1:97:49:4b:ee:d8:2d:2a:ee:90:01:82:89:68:
6b:fd:75:92:6f:a8:37:d1:61:ee:a2:8c:e7:45:0a:
3a:4f:8c:36:6e:56:af:97:a8:d5:e7:53:90:5e:1b:
b0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:3A:2E:09:16:30:AE:D9:6C:4C:19:74:49:A7:60:F0:E5:14:8C:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/651c7010-2779-3e43-956b-dcc22baffc29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl
X509v3 Authority Key Identifier:
keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
sbgp-ipAddrBlock: critical
IPv4:
159.172.202.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:3d:dd:01:2d:76:5c:9b:fb:4f:5d:c2:bb:07:ce:b1:2b:20:
44:66:38:ba:2a:4f:2c:6b:b2:14:90:e6:84:b7:2e:73:0e:bd:
af:37:39:fe:84:71:a7:ff:56:9c:fa:9c:43:8c:55:4d:ce:9d:
b3:66:6f:a3:b4:97:a5:63:92:67:49:a5:78:27:38:71:f2:d8:
8a:cc:cb:98:d5:dd:b2:80:6c:9a:39:00:f2:55:74:ca:e2:2d:
82:51:40:18:13:b5:86:09:9f:4b:ee:6a:7f:3d:6f:ae:89:01:
9e:09:a0:f0:8c:f5:d0:48:a5:d7:b5:f0:ed:ac:a3:4d:aa:de:
2a:99:b6:5f:26:95:db:7d:4d:93:59:35:5e:9f:08:63:2a:d0:
1c:3d:20:af:fe:fa:3c:59:4a:c5:85:d4:4b:42:c1:e7:cd:96:
1b:64:e4:3d:3d:c4:78:a3:be:79:4c:01:e3:e5:17:81:ca:ce:
ac:2f:be:7a:11:9f:29:36:66:c0:30:ae:ee:88:2d:73:26:e3:
54:1d:86:50:d1:e1:70:cf:ef:45:20:8a:53:5c:ef:4d:92:3a:
84:fd:2f:f9:6d:c6:db:5e:bd:d5:4f:4a:67:75:85:3d:71:ff:
ff:03:ae:40:47:db:1c:26:ca:eb:66:84:d0:43:a3:19:89:d3:
35:e1:8b:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhfmtv3PFzYB12BL4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2
ZDcyMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk
Y2U2NmI5ZjQtZTBiMi00NTBlLWIwN2YtZGQyNDJiYzUwYTI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcvLNa3cWgJM07yGbamiiFuM5u7u1Rg5kJTV
35oMyl4nvKb8218fv2aQZqdIlenmqb4t9VBrMCTQLlRKUydEUpGkVqJuSEvis8VQ
832YfyJe3HEQQoCSK6ErKEyrF8yYDhog6rXqYCwsZQFEJcs1kS2uMZ70EPVTonE/
HWjvPWFX+1LLY3bBiVphbvXNqI2p6kEwrgUIvY4no/TWkGUVxkpSuuwoDH696hlK
483gplrUzOzzdLiWg343sksBUejQrAeWcxB7GuZKFG9uTFzb/kKM0ZdJS+7YLSru
kAGCiWhr/XWSb6g30WHuooznRQo6T4w2blavl6jV51OQXhuwVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN46LgkWMK7ZbEwZdEmnYPDlFIxVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5
MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvNjUxYzcwMTAtMjc3OS0z
ZTQzLTk1NmItZGNjMjJiYWZmYzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz
MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw
NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5
MWE1MDZkNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBn6zKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABo93QEtdlyb+09dwrsHzrErIERmOLoqTyxrshSQ5oS3LnMOva83Of6E
caf/Vpz6nEOMVU3OnbNmb6O0l6VjkmdJpXgnOHHy2IrMy5jV3bKAbJo5APJVdMri
LYJRQBgTtYYJn0vuan89b66JAZ4JoPCM9dBIpde18O2so02q3iqZtl8mldt9TZNZ
NV6fCGMq0Bw9IK/++jxZSsWF1EtCwefNlhtk5D09xHijvnlMAePlF4HKzqwvvnoR
nyk2ZsAwru6ILXMm41QdhlDR4XDP70UgilNc702SOoT9L/ltxttevdVPSmd1hT1x
//8DrkBH2xwmyutmhNBDoxmJ0zXhi4E=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:04 2025 by rpki-client