Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/a6b12d9f-9271-305e-847c-6c6fdf434670.roa
File: a6b12d9f-9271-305e-847c-6c6fdf434670.roa (raw, json)
Hash identifier: rsLiO2bXLe12gEEECeEajVXyjk3Z1qJoPsG60m9Fl04=
Subject key identifier: 14:7E:E9:EB:60:6F:53:70:E8:78:96:37:5F:86:8A:10:B3:A4:0C:90
Certificate issuer: /CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1
Certificate serial: 010D0C9F432858482BF22AF34700070E1F772AA0
Authority key identifier: 5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/a6b12d9f-9271-305e-847c-6c6fdf434670.roa
Signing time: Wed 11 Dec 2024 13:54:35 +0000
ROA not before: Wed 11 Dec 2024 13:54:35 +0000
ROA not after: Tue 11 Mar 2025 12:54:35 +0000
asID: 160
IP address blocks: 128.135.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f2:2a:f3:47:00:07:0e:1f:77:2a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1
Validity
Not Before: Dec 11 13:54:35 2024 GMT
Not After : Mar 11 12:54:35 2025 GMT
Subject: CN=24b41a87-0ddc-4382-82bf-690ec348b868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f0:d5:21:2b:7a:a6:ef:5e:ab:92:b7:76:67:
f7:a2:ae:a1:a4:5e:73:48:13:a5:74:13:4c:e9:1f:
0d:df:b0:c1:82:8a:c0:42:6f:76:cb:f0:bb:8b:4e:
cb:68:59:4f:ad:74:b2:76:7e:0a:cb:45:18:7d:51:
b8:fc:68:cf:9c:9c:10:1e:66:36:53:d5:4a:99:11:
91:38:b5:61:37:ce:44:c5:e6:13:c3:10:b2:5a:cd:
4a:70:e5:fc:05:a7:fd:4a:19:3f:04:fa:3e:1a:df:
10:d7:c3:49:09:fd:69:e4:19:b6:2b:3a:63:5b:5e:
92:98:6c:81:1a:89:2a:0e:94:49:6e:9f:5f:ed:b3:
f9:f8:fe:5b:02:07:e4:37:3f:8d:81:e6:50:4f:d1:
45:fa:5a:4e:ea:63:e5:79:d7:c7:ae:dd:4b:78:e5:
e0:ef:ff:36:fb:c8:88:ef:76:93:26:ef:f0:1c:a4:
52:0d:ff:95:55:e9:db:08:71:34:68:9e:23:09:2c:
c6:5e:6d:87:a1:c2:e3:a2:38:53:28:3c:db:bf:17:
f9:f3:48:c7:ab:99:bb:a2:38:34:c2:f1:b6:45:e2:
47:c2:3d:83:db:51:9e:05:09:a5:3c:d3:64:ee:f6:
48:49:35:be:9a:50:d6:6a:cd:5b:22:d2:c6:04:8e:
63:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7E:E9:EB:60:6F:53:70:E8:78:96:37:5F:86:8A:10:B3:A4:0C:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/a6b12d9f-9271-305e-847c-6c6fdf434670.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl
X509v3 Authority Key Identifier:
keyid:5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer
sbgp-ipAddrBlock: critical
IPv4:
128.135.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:61:70:49:64:8f:d2:80:61:49:70:b7:fa:43:3f:fa:54:90:
89:a0:28:09:fe:19:de:1f:72:48:69:ba:6c:b1:f3:65:ff:d5:
9a:98:c3:f4:8f:e0:ed:2c:a1:f7:cc:15:72:72:29:0c:5a:9b:
1d:c3:c0:fe:de:d3:9c:5e:ae:67:80:ab:44:a3:c4:fe:b5:0f:
54:21:39:de:71:1e:b2:e8:02:73:a7:a0:5e:dc:bc:dc:2c:0d:
0c:66:9a:e7:bf:64:8a:59:b3:16:68:f7:ea:8d:cf:b7:59:84:
ea:cb:7c:43:09:8c:be:0b:53:e5:1b:c1:aa:4e:48:b4:77:76:
a1:23:4b:5e:34:fe:ba:4d:13:cd:17:70:79:f2:dc:6d:b7:58:
4a:14:a5:91:b8:b1:0d:18:c2:67:90:9b:98:40:e3:98:bc:f8:
90:18:9d:cc:f3:b7:a4:99:cb:49:d8:da:19:34:ac:26:f2:b3:
ee:4a:f6:b4:2d:ef:fd:0b:6d:a6:64:d1:53:b1:d0:d5:b3:0f:
e0:be:ca:5e:92:3e:8c:16:12:9f:ba:ba:8c:cf:3c:09:23:d6:
a4:b7:f8:85:88:bc:a3:e0:71:47:b4:89:7c:72:6e:89:c2:1c:
d7:70:ea:27:b1:7b:69:88:5c:2a:96:70:22:b8:ac:a5:b1:b3:
60:39:7c:45
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEgr8irzRwAHDh93KqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDRiMzI2M2EtNGNjYy00YzBmLWEyMGMtMmY1OWJiYzdm
YWMxMB4XDTI0MTIxMTEzNTQzNVoXDTI1MDMxMTEyNTQzNVowLzEtMCsGA1UEAxMk
MjRiNDFhODctMGRkYy00MzgyLTgyYmYtNjkwZWMzNDhiODY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfDVISt6pu9eq5K3dmf3oq6hpF5zSBOldBNM
6R8N37DBgorAQm92y/C7i07LaFlPrXSydn4Ky0UYfVG4/GjPnJwQHmY2U9VKmRGR
OLVhN85ExeYTwxCyWs1KcOX8Baf9Shk/BPo+Gt8Q18NJCf1p5Bm2KzpjW16SmGyB
GokqDpRJbp9f7bP5+P5bAgfkNz+NgeZQT9FF+lpO6mPledfHrt1LeOXg7/82+8iI
73aTJu/wHKRSDf+VVenbCHE0aJ4jCSzGXm2HocLjojhTKDzbvxf580jHq5m7ojg0
wvG2ReJHwj2D21GeBQmlPNNk7vZISTW+mlDWas1bItLGBI5j3wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBR+6etgb1Nw6HiWN1+GihCzpAyQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kNGIz
MjYzYS00Y2NjLTRjMGYtYTIwYy0yZjU5YmJjN2ZhYzEvYTZiMTJkOWYtOTI3MS0z
MDVlLTg0N2MtNmM2ZmRmNDM0NjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDRiMzI2M2EtNGNjYy00YzBmLWEy
MGMtMmY1OWJiYzdmYWMxL2Q0YjMyNjNhLTRjY2MtNGMwZi1hMjBjLTJmNTliYmM3
ZmFjMS5jcmwwHwYDVR0jBBgwFoAUWhVLReOxAsXOslYtuQ/OO+XFdRMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kNGIzMjYzYS00Y2NjLTRjMGYtYTIwYy0yZjU5
YmJjN2ZhYzEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgIcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAWmFwSWSP0oBhSXC3+kM/+lSQiaAoCf4Z3h9ySGm6bLHzZf/VmpjD9I/g
7Syh98wVcnIpDFqbHcPA/t7TnF6uZ4CrRKPE/rUPVCE53nEesugCc6egXty83CwN
DGaa579kilmzFmj36o3Pt1mE6st8QwmMvgtT5RvBqk5ItHd2oSNLXjT+uk0TzRdw
efLcbbdYShSlkbixDRjCZ5CbmEDjmLz4kBidzPO3pJnLSdjaGTSsJvKz7kr2tC3v
/QttpmTRU7HQ1bMP4L7KXpI+jBYSn7q6jM88CSPWpLf4hYi8o+BxR7SJfHJuicIc
13DqJ7F7aYhcKpZwIrispbGzYDl8RQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 03:54:35 2025 by rpki-client