Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/170b8283-1c49-3af2-a654-4d686ca3d3fa.roa
File: 170b8283-1c49-3af2-a654-4d686ca3d3fa.roa (raw, json)
Hash identifier: RyVYL4lMPpDgWUXUr1A9EgvGDSIc7Mnevu/yrAGt8EY=
Subject key identifier: 79:4A:C4:08:66:01:CD:CC:6B:7C:D7:98:3A:9E:41:BA:9E:84:34:6C
Certificate issuer: /CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1
Certificate serial: 010D0C9F432858482BF29642481EFF0FA5C98780
Authority key identifier: 5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/170b8283-1c49-3af2-a654-4d686ca3d3fa.roa
Signing time: Wed 11 Dec 2024 13:55:26 +0000
ROA not before: Wed 11 Dec 2024 13:55:26 +0000
ROA not after: Tue 11 Mar 2025 12:55:26 +0000
asID: 198949
IP address blocks: 128.135.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f2:96:42:48:1e:ff:0f:a5:c9:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1
Validity
Not Before: Dec 11 13:55:26 2024 GMT
Not After : Mar 11 12:55:26 2025 GMT
Subject: CN=fc8a88d7-bc6e-4654-a4bb-79780c480462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bd:8a:3c:73:f4:8b:fd:d8:ed:bc:fd:e5:77:
a7:51:12:4e:a8:07:be:8c:ae:ae:61:a3:9f:1d:f4:
30:5b:4a:3d:16:7e:5a:e9:84:15:83:27:7b:5e:83:
99:3e:2a:cb:ca:d5:d4:a3:37:50:9a:97:3d:91:46:
41:8f:57:4a:53:27:bf:e7:43:c7:55:d8:e9:18:32:
44:60:33:39:4c:b6:5a:85:db:4a:63:2a:b1:06:33:
1d:e9:05:34:99:d9:f1:e2:25:aa:0e:8c:52:e8:86:
43:0e:e2:c4:4e:0a:c8:f7:cd:d8:71:1e:4e:ec:f3:
91:43:33:2a:21:96:f7:57:67:e8:7c:ed:93:b7:27:
1a:90:d8:5d:5c:a7:d1:33:dd:d9:98:a5:a1:75:f7:
ab:8f:fc:9b:e6:33:74:11:a5:75:41:f5:c2:2a:c4:
79:9e:4c:94:86:f2:5d:f6:00:b6:28:d1:c7:c8:cb:
2f:df:bf:3d:b6:08:0b:07:9e:b7:ee:df:18:b3:3b:
c3:85:ee:79:19:e3:48:14:64:fa:dc:56:75:06:a5:
3a:ed:fe:9f:a3:97:ee:ea:dc:6b:cd:8a:3c:a3:4a:
d2:95:ab:3e:29:16:db:cf:15:b6:ae:c0:e7:21:cd:
4a:43:60:00:12:b7:06:0f:b4:be:60:83:8a:4d:c7:
32:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4A:C4:08:66:01:CD:CC:6B:7C:D7:98:3A:9E:41:BA:9E:84:34:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/170b8283-1c49-3af2-a654-4d686ca3d3fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl
X509v3 Authority Key Identifier:
keyid:5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer
sbgp-ipAddrBlock: critical
IPv4:
128.135.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:33:2a:95:ba:d8:9c:cc:2c:9e:3c:6b:bb:59:4c:74:3c:b9:
4d:f9:06:70:9c:68:e3:92:16:0e:c7:76:7b:86:e5:57:cf:0b:
86:1f:c8:e2:cc:92:09:87:75:1a:e5:a9:fe:7d:31:2a:b1:96:
d6:64:e2:fe:de:ea:93:2f:76:a9:05:36:26:de:c5:b7:3e:f7:
8d:c9:61:1e:ec:ed:f6:d9:d0:ef:b2:5a:01:35:84:ed:fc:dd:
ea:9a:11:05:d0:bc:a4:6b:4f:4d:4d:5f:d3:cc:2b:b6:87:bc:
f6:c5:22:b6:8e:62:9a:ad:4b:e3:73:a9:ec:a3:98:c0:71:5d:
e8:2e:3f:15:7f:66:a3:8b:74:33:b6:36:1c:06:d6:2f:27:ab:
fc:5a:e3:96:46:2e:b2:22:c3:10:19:a9:96:1b:a8:54:52:fc:
a1:62:ef:56:c9:b2:d2:60:97:72:12:88:f9:aa:63:79:c8:7b:
37:e6:b0:f8:06:0d:12:f6:ca:db:81:f5:3a:e6:c6:8c:1b:05:
ea:54:26:88:e7:d9:9c:79:3d:01:a5:a7:00:52:ba:bb:33:3c:
71:82:b1:8f:1e:ad:65:db:b7:fa:55:28:09:a4:26:96:23:18:
5a:c8:72:8f:53:ba:e6:ca:e0:b7:34:5d:57:d0:80:cf:0e:2d:
3a:f7:4b:16
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEgr8pZCSB7/D6XJh4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDRiMzI2M2EtNGNjYy00YzBmLWEyMGMtMmY1OWJiYzdm
YWMxMB4XDTI0MTIxMTEzNTUyNloXDTI1MDMxMTEyNTUyNlowLzEtMCsGA1UEAxMk
ZmM4YTg4ZDctYmM2ZS00NjU0LWE0YmItNzk3ODBjNDgwNDYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4L2KPHP0i/3Y7bz95XenURJOqAe+jK6uYaOf
HfQwW0o9Fn5a6YQVgyd7XoOZPirLytXUozdQmpc9kUZBj1dKUye/50PHVdjpGDJE
YDM5TLZahdtKYyqxBjMd6QU0mdnx4iWqDoxS6IZDDuLETgrI983YcR5O7PORQzMq
IZb3V2fofO2TtycakNhdXKfRM93ZmKWhdferj/yb5jN0EaV1QfXCKsR5nkyUhvJd
9gC2KNHHyMsv3789tggLB5637t8YszvDhe55GeNIFGT63FZ1BqU67f6fo5fu6txr
zYo8o0rSlas+KRbbzxW2rsDnIc1KQ2AAErcGD7S+YIOKTccyVQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHlKxAhmAc3Ma3zXmDqeQbqehDRsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kNGIz
MjYzYS00Y2NjLTRjMGYtYTIwYy0yZjU5YmJjN2ZhYzEvMTcwYjgyODMtMWM0OS0z
YWYyLWE2NTQtNGQ2ODZjYTNkM2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDRiMzI2M2EtNGNjYy00YzBmLWEy
MGMtMmY1OWJiYzdmYWMxL2Q0YjMyNjNhLTRjY2MtNGMwZi1hMjBjLTJmNTliYmM3
ZmFjMS5jcmwwHwYDVR0jBBgwFoAUWhVLReOxAsXOslYtuQ/OO+XFdRMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kNGIzMjYzYS00Y2NjLTRjMGYtYTIwYy0yZjU5
YmJjN2ZhYzEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgIcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAMjMqlbrYnMwsnjxru1lMdDy5TfkGcJxo45IWDsd2e4blV88Lhh/I4syS
CYd1GuWp/n0xKrGW1mTi/t7qky92qQU2Jt7Ftz73jclhHuzt9tnQ77JaATWE7fzd
6poRBdC8pGtPTU1f08wrtoe89sUito5imq1L43Op7KOYwHFd6C4/FX9mo4t0M7Y2
HAbWLyer/FrjlkYusiLDEBmplhuoVFL8oWLvVsmy0mCXchKI+apjech7N+aw+AYN
EvbK24H1OubGjBsF6lQmiOfZnHk9AaWnAFK6uzM8cYKxjx6tZdu3+lUoCaQmliMY
Wshyj1O65srgtzRdV9CAzw4tOvdLFg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:19:09 2025 by rpki-client