Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c637fa0-0773-40d6-afca-d49122516b4f/4156e161-fe37-3a2d-bccb-623dcb67e98a.roa
File: 4156e161-fe37-3a2d-bccb-623dcb67e98a.roa (raw, json)
Hash identifier: 0+St11zmvwqYt5+fKoRz3ZQ23fQTNJ0H+kZNOx80tYg=
Subject key identifier: 34:CC:C2:EE:36:61:CB:47:52:8F:63:68:69:04:3A:BF:C8:47:C0:62
Certificate issuer: /CN=3c637fa0-0773-40d6-afca-d49122516b4f
Certificate serial: 010D0C9F432858483E1AB68283DA296C012B3900
Authority key identifier: DB:F8:2A:9D:61:50:27:49:55:00:2D:3E:F6:C7:62:AE:F9:DC:0F:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c637fa0-0773-40d6-afca-d49122516b4f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c637fa0-0773-40d6-afca-d49122516b4f/4156e161-fe37-3a2d-bccb-623dcb67e98a.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 16509
IP address blocks: 204.87.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:b6:82:83:da:29:6c:01:2b:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c637fa0-0773-40d6-afca-d49122516b4f
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=19e16b68-bbe7-4e24-b161-777392f02ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:19:e1:67:db:5f:e5:d7:61:1b:1b:fb:a8:57:
64:36:9b:76:a7:9f:39:9c:dd:bb:61:10:cb:3e:ea:
a0:4c:65:8c:b8:60:ab:8b:8d:14:78:68:bb:a0:92:
62:7b:f6:e9:68:58:8e:95:b0:97:42:ea:61:9a:d1:
bd:8f:0d:1e:82:26:85:09:e2:35:b5:7c:e1:40:52:
1e:ff:da:81:b2:44:0b:df:e3:ed:86:d5:a5:c8:2b:
91:8f:96:3f:be:2f:4c:dc:bc:61:8b:1a:d9:f6:d1:
f5:ce:4f:f3:f0:f3:ce:34:3b:8a:08:bb:24:ca:bc:
38:9c:d8:05:34:6b:3d:e4:bc:4a:6b:e9:15:5c:16:
1d:ed:76:93:70:ef:e4:0c:7a:bd:8e:d1:8f:f0:42:
91:50:26:2f:ba:30:c2:56:26:0c:91:f6:2b:88:d3:
2a:8b:d2:31:a8:a9:8f:b8:95:c4:82:94:5e:a1:29:
b9:1f:5b:d2:b1:f5:c3:e5:60:be:76:37:02:73:f4:
36:e8:5a:b4:22:8e:d7:23:8c:27:3d:e4:aa:71:b2:
8f:48:67:0e:10:38:d5:df:75:81:31:80:11:5e:b5:
18:79:82:11:43:fa:c6:9d:a7:ee:01:22:5a:a1:55:
a3:b6:49:c5:e9:9c:4d:e2:55:89:19:b4:f2:66:66:
4b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CC:C2:EE:36:61:CB:47:52:8F:63:68:69:04:3A:BF:C8:47:C0:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c637fa0-0773-40d6-afca-d49122516b4f/4156e161-fe37-3a2d-bccb-623dcb67e98a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c637fa0-0773-40d6-afca-d49122516b4f/3c637fa0-0773-40d6-afca-d49122516b4f.crl
X509v3 Authority Key Identifier:
keyid:DB:F8:2A:9D:61:50:27:49:55:00:2D:3E:F6:C7:62:AE:F9:DC:0F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c637fa0-0773-40d6-afca-d49122516b4f.cer
sbgp-ipAddrBlock: critical
IPv4:
204.87.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:2c:19:97:87:71:75:60:e5:b6:7f:15:cf:de:88:21:9a:35:
94:58:e9:8a:00:77:c1:ac:58:5d:ed:f7:74:0a:65:3c:07:e5:
03:79:dd:c0:cf:ac:83:0d:00:9b:1a:d9:3a:35:62:30:e8:0d:
5a:de:f9:18:0a:67:fb:88:6f:25:bd:8c:ea:72:1b:2c:10:33:
df:15:15:c8:48:ba:3f:06:55:8d:0f:fd:cd:65:b4:a8:fb:26:
e7:f5:49:ba:20:4a:95:36:77:5c:2c:f7:2a:2f:6f:57:0f:8d:
98:56:a1:48:36:c4:59:f2:e1:0d:4b:bb:f3:21:fe:9e:20:04:
ab:df:09:21:9e:28:49:2b:98:9c:6b:53:1e:e7:c6:ca:d2:73:
59:8b:1e:94:75:4e:04:4a:c3:90:4c:6b:90:12:b9:46:85:72:
a6:82:e2:b9:bb:b2:08:0e:f3:08:97:b6:76:ba:65:c1:8c:d4:
da:22:b8:78:ac:c1:fd:8d:74:ed:74:1d:72:25:d5:c9:1e:42:
28:a3:c4:fe:89:c3:10:fb:b9:61:8a:19:51:e7:e2:30:f5:17:
6d:e3:2d:9a:b2:ec:fa:2f:11:e7:4e:fc:ed:3d:fd:a6:72:81:
69:a5:1d:e3:c1:b8:24:0b:29:0a:33:f9:da:1a:a9:3c:4a:ce:
c4:11:be:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+GraCg9opbAErOQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M2MzdmYTAtMDc3My00MGQ2LWFmY2EtZDQ5MTIyNTE2
YjRmMB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk
MTllMTZiNjgtYmJlNy00ZTI0LWIxNjEtNzc3MzkyZjAyY2E4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihnhZ9tf5ddhGxv7qFdkNpt2p585nN27YRDL
PuqgTGWMuGCri40UeGi7oJJie/bpaFiOlbCXQuphmtG9jw0egiaFCeI1tXzhQFIe
/9qBskQL3+PthtWlyCuRj5Y/vi9M3LxhixrZ9tH1zk/z8PPONDuKCLskyrw4nNgF
NGs95LxKa+kVXBYd7XaTcO/kDHq9jtGP8EKRUCYvujDCViYMkfYriNMqi9IxqKmP
uJXEgpReoSm5H1vSsfXD5WC+djcCc/Q26Fq0Io7XI4wnPeSqcbKPSGcOEDjV33WB
MYARXrUYeYIRQ/rGnafuASJaoVWjtknF6ZxN4lWJGbTyZmZL3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDTMwu42YctHUo9jaGkEOr/IR8BiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zYzYz
N2ZhMC0wNzczLTQwZDYtYWZjYS1kNDkxMjI1MTZiNGYvNDE1NmUxNjEtZmUzNy0z
YTJkLWJjY2ItNjIzZGNiNjdlOThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2M2MzdmYTAtMDc3My00MGQ2LWFm
Y2EtZDQ5MTIyNTE2YjRmLzNjNjM3ZmEwLTA3NzMtNDBkNi1hZmNhLWQ0OTEyMjUx
NmI0Zi5jcmwwHwYDVR0jBBgwFoAU2/gqnWFQJ0lVAC0+9sdirvncD/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8zYzYzN2ZhMC0wNzczLTQwZDYtYWZjYS1kNDkx
MjI1MTZiNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzFeXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIwsGZeHcXVg5bZ/Fc/eiCGaNZRY6YoAd8GsWF3t93QKZTwH5QN53cDP
rIMNAJsa2To1YjDoDVre+RgKZ/uIbyW9jOpyGywQM98VFchIuj8GVY0P/c1ltKj7
Juf1SbogSpU2d1ws9yovb1cPjZhWoUg2xFny4Q1Lu/Mh/p4gBKvfCSGeKEkrmJxr
Ux7nxsrSc1mLHpR1TgRKw5BMa5ASuUaFcqaC4rm7sggO8wiXtna6ZcGM1NoiuHis
wf2NdO10HXIl1ckeQiijxP6JwxD7uWGKGVHn4jD1F23jLZqy7PovEedO/O09/aZy
gWmlHePBuCQLKQoz+doaqTxKzsQRvm0=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:22:11 2025 by rpki-client