Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d14f53c9-7fa4-3133-b1ba-d972d30fcacb.roa
File: d14f53c9-7fa4-3133-b1ba-d972d30fcacb.roa (raw, json)
Hash identifier: 64f76MFYfCvwb9CsefMH2FWDNh5qR2LlsvaoWzH0h8g=
Subject key identifier: DC:5E:D8:04:02:01:61:E3:7C:57:7D:7B:FA:B0:09:54:73:57:72:A3
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C3233C86BE67CEC18C400
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d14f53c9-7fa4-3133-b1ba-d972d30fcacb.roa
Signing time: Mon 30 Dec 2024 18:10:32 +0000
ROA not before: Mon 30 Dec 2024 18:10:32 +0000
ROA not after: Sun 30 Mar 2025 17:10:32 +0000
asID: 11442
IP address blocks: 152.14.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:32:33:c8:6b:e6:7c:ec:18:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:32 2024 GMT
Not After : Mar 30 17:10:32 2025 GMT
Subject: CN=784cc3f6-ade7-4f0b-b311-a00f91a6bb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3d:ec:6e:ec:b8:a8:6a:d6:19:6c:69:9a:87:
97:88:78:78:e4:cb:a4:bf:03:5e:80:69:59:00:73:
fc:86:08:65:84:7d:dd:13:49:ae:e3:b1:65:30:b7:
36:56:95:69:75:f0:20:c7:54:c6:38:6f:e8:e9:11:
a0:b3:85:3c:94:54:52:77:dc:8f:91:c9:4e:b7:59:
bc:12:78:eb:d2:73:3a:54:a2:95:50:fc:84:b8:8a:
49:5a:b5:ba:d2:84:d2:3a:0a:a9:89:18:4a:0d:d0:
03:ce:3e:bf:47:07:65:18:66:cb:5d:4f:93:c9:ac:
c7:0d:64:ba:6b:8d:c6:88:ba:ad:c1:8b:24:8c:d7:
67:d5:be:8e:1d:04:93:3b:8a:0a:f3:6f:06:14:c5:
c0:11:09:83:8a:0a:8f:6d:c3:bf:a3:a6:a6:a2:61:
91:0c:c8:34:3e:fd:7a:bd:c8:65:98:d8:bf:5f:da:
7a:54:e2:b6:36:8c:f0:56:de:e3:2f:d5:95:34:3d:
86:b1:d8:3b:c4:a9:a4:82:af:a4:84:3c:61:1a:20:
ec:04:67:f0:d0:d9:67:de:cd:43:70:fa:3d:04:63:
e2:77:a0:cb:ae:4b:01:1d:5c:05:4c:8f:88:92:4f:
bc:f4:2d:60:01:1a:39:ff:e5:6f:0e:36:8b:c5:a0:
4c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5E:D8:04:02:01:61:E3:7C:57:7D:7B:FA:B0:09:54:73:57:72:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d14f53c9-7fa4-3133-b1ba-d972d30fcacb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.14.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:c5:6f:1b:8a:c1:f8:0f:d6:06:cb:ba:d9:a8:57:18:5c:e8:
65:f9:72:d3:1c:d0:7e:b7:5c:83:a1:a7:81:dd:43:bb:b5:19:
cd:72:3a:ef:92:a9:94:35:31:dd:8b:f0:d5:de:01:cf:c7:31:
82:7d:45:89:12:53:21:0c:c7:1a:f9:e7:aa:ea:49:5e:00:89:
fd:90:74:e1:96:9d:0f:19:6d:2a:f6:94:b1:42:34:65:c3:86:
d0:64:a3:47:02:5f:3c:62:3d:db:bc:69:73:82:7a:d0:71:53:
e6:e3:61:f0:4b:97:1d:4d:0e:f1:98:dc:3a:6e:4e:f6:f3:78:
0e:89:17:a3:29:c0:bc:aa:a9:29:96:74:55:0d:7b:76:22:b8:
21:57:41:85:73:03:8b:7e:a7:21:05:e6:41:60:94:ef:0b:a6:
6e:38:76:7e:b3:6a:d2:03:e4:09:15:40:a5:93:2c:87:a9:48:
7d:85:71:a7:07:ac:4d:ee:f0:5d:bb:52:2a:51:87:c3:aa:32:
c2:f5:3f:6c:d2:43:d1:b9:e7:e2:1b:4c:32:11:b2:ef:7f:df:
fc:02:d8:1a:f2:b9:f1:8d:eb:3c:d8:e4:95:79:de:e6:c8:cc:
41:94:c3:bf:74:cd:e3:54:a2:db:8c:be:d4:57:9c:96:86:fc:
a9:2c:86:4c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEhhfDIzyGvmfOwYxAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTIzMDE4MTAzMloXDTI1MDMzMDE3MTAzMlowLzEtMCsGA1UEAxMk
Nzg0Y2MzZjYtYWRlNy00ZjBiLWIzMTEtYTAwZjkxYTZiYjVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT3sbuy4qGrWGWxpmoeXiHh45MukvwNegGlZ
AHP8hghlhH3dE0mu47FlMLc2VpVpdfAgx1TGOG/o6RGgs4U8lFRSd9yPkclOt1m8
Enjr0nM6VKKVUPyEuIpJWrW60oTSOgqpiRhKDdADzj6/RwdlGGbLXU+TyazHDWS6
a43GiLqtwYskjNdn1b6OHQSTO4oK828GFMXAEQmDigqPbcO/o6amomGRDMg0Pv16
vchlmNi/X9p6VOK2NozwVt7jL9WVND2Gsdg7xKmkgq+khDxhGiDsBGfw0Nln3s1D
cPo9BGPid6DLrksBHVwFTI+Ikk+89C1gARo5/+VvDjaLxaBMywIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNxe2AQCAWHjfFd9e/qwCVRzV3KjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZDE0ZjUzYzktN2ZhNC0z
MTMzLWIxYmEtZDk3MmQzMGZjYWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmA4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEALMVvG4rB+A/WBsu62ahXGFzoZfly0xzQfrdcg6Gngd1Du7UZzXI675Kp
lDUx3Yvw1d4Bz8cxgn1FiRJTIQzHGvnnqupJXgCJ/ZB04ZadDxltKvaUsUI0ZcOG
0GSjRwJfPGI927xpc4J60HFT5uNh8EuXHU0O8ZjcOm5O9vN4DokXoynAvKqpKZZ0
VQ17diK4IVdBhXMDi36nIQXmQWCU7wumbjh2frNq0gPkCRVApZMsh6lIfYVxpwes
Te7wXbtSKlGHw6oywvU/bNJD0bnn4htMMhGy73/f/ALYGvK58Y3rPNjklXne5sjM
QZTDv3TN41Si24y+1Feclob8qSyGTA==
-----END CERTIFICATE-----
Generated at Sat May 10 16:02:54 2025 by rpki-client