Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/233a0102-08e5-3132-8734-cafae1c8bd28.roa
File: 233a0102-08e5-3132-8734-cafae1c8bd28.roa (raw, json)
Hash identifier: TArGRoZrK7PZlnkeBD7MhIjOqDFsLW/4vd+UbBfdY3U=
Subject key identifier: A5:6C:06:4F:FC:75:EC:59:F4:83:A2:71:4C:B2:61:63:BD:E9:8C:0B
Certificate issuer: /CN=4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5
Certificate serial: 010D0C9F4328584871C07E26157DBAC247016600
Authority key identifier: 3D:CC:92:ED:AA:88:DE:1A:64:44:15:F6:EC:41:AE:0E:FF:5D:84:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/233a0102-08e5-3132-8734-cafae1c8bd28.roa
Signing time: Sun 05 Jan 2025 14:00:52 +0000
ROA not before: Sun 05 Jan 2025 14:00:52 +0000
ROA not after: Sat 05 Apr 2025 13:00:52 +0000
asID: 53356
IP address blocks: 167.253.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:71:c0:7e:26:15:7d:ba:c2:47:01:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5
Validity
Not Before: Jan 5 14:00:52 2025 GMT
Not After : Apr 5 13:00:52 2025 GMT
Subject: CN=04d40292-6331-4f0e-82d9-7dfbb5816ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0c:6a:21:c0:5f:d1:e6:70:3f:d2:27:0d:11:
c0:8e:e4:f8:40:9c:bc:dd:91:81:92:e6:5e:13:0f:
e0:db:70:6d:65:e6:54:22:c3:48:76:2c:22:5e:04:
45:13:1d:b2:6b:6f:c1:b6:24:01:8b:a8:20:0f:16:
80:56:88:ee:5f:b7:ec:0c:80:a0:19:3e:69:af:0d:
16:9b:d7:5b:be:07:73:bd:35:83:08:0f:3a:47:75:
cc:e8:da:26:85:af:a7:be:b4:11:01:b6:ba:22:9c:
9f:b1:9f:2c:9e:bd:e6:b3:6f:c8:c4:0f:87:0c:21:
0c:8e:ff:7c:5f:1f:5e:8c:92:7b:18:f2:6a:a9:32:
9f:02:d5:72:3b:b7:b7:2a:0d:a2:15:df:a5:32:3e:
d7:d4:d5:df:a1:67:82:56:29:dd:3b:35:b1:2e:23:
60:e7:46:77:44:2d:d1:27:6f:94:5c:4e:41:d4:f0:
07:2e:a8:6c:8a:8b:c6:64:3c:6c:38:bf:fb:c9:08:
53:d5:b5:de:b3:ee:93:62:4f:c2:8e:7e:65:8b:47:
ce:7c:5c:56:5f:e1:91:bc:85:9d:ea:94:2b:04:13:
ed:ae:aa:21:d3:e7:a9:d3:c4:85:cb:65:ee:9e:93:
46:b4:64:9c:45:1e:bc:50:f0:f9:18:bd:12:56:b8:
65:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6C:06:4F:FC:75:EC:59:F4:83:A2:71:4C:B2:61:63:BD:E9:8C:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/233a0102-08e5-3132-8734-cafae1c8bd28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.crl
X509v3 Authority Key Identifier:
keyid:3D:CC:92:ED:AA:88:DE:1A:64:44:15:F6:EC:41:AE:0E:FF:5D:84:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.cer
sbgp-ipAddrBlock: critical
IPv4:
167.253.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:32:4d:0f:75:c5:61:a6:6f:98:df:b9:51:72:2a:5a:47:83:
e3:65:07:05:4c:e4:33:a4:cf:45:42:73:45:22:cb:48:ba:62:
90:ff:34:c5:f8:00:58:a7:db:24:7d:ee:af:9f:51:0a:b9:1f:
a7:ac:19:ea:5d:a6:8e:86:6e:31:59:04:f8:9d:d5:fb:9f:75:
5a:78:f3:fc:ce:2b:c8:6f:c2:2e:49:ad:0a:a0:04:47:25:cd:
b7:84:53:fc:31:61:e4:4a:53:0d:01:7c:42:4d:3c:c4:3a:b3:
f5:41:78:36:bc:95:ff:96:a5:e8:42:c1:e1:b9:d7:3e:95:bf:
9f:ff:c9:9e:f5:00:09:db:a5:df:81:fa:08:d9:e7:4f:91:ff:
73:19:ab:fd:ac:e0:c8:67:3e:85:0e:b6:61:90:c6:3f:81:b7:
18:82:de:be:44:dc:75:42:a1:f7:e3:84:c7:53:84:15:26:25:
f5:e2:06:38:b6:e8:d6:1e:d2:67:8e:88:22:25:c9:fa:d5:13:
51:48:63:3f:47:1d:5f:77:f8:52:8d:c6:ed:89:62:f2:c9:46:
58:17:33:0f:2a:88:eb:16:9a:89:c9:a1:03:e5:52:6b:db:f2:
75:2d:2a:2c:55:61:47:c4:95:ef:01:b8:28:0e:49:e8:be:54:
da:11:46:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhxwH4mFX26wkcBZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGRmYzUxZDYtN2UxZS00OGM0LWFjOWItZGJjMDAyNTIw
M2I1MB4XDTI1MDEwNTE0MDA1MloXDTI1MDQwNTEzMDA1MlowLzEtMCsGA1UEAxMk
MDRkNDAyOTItNjMzMS00ZjBlLTgyZDktN2RmYmI1ODE2ZWEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQxqIcBf0eZwP9InDRHAjuT4QJy83ZGBkuZe
Ew/g23BtZeZUIsNIdiwiXgRFEx2ya2/BtiQBi6ggDxaAVojuX7fsDICgGT5prw0W
m9dbvgdzvTWDCA86R3XM6Nomha+nvrQRAba6IpyfsZ8snr3ms2/IxA+HDCEMjv98
Xx9ejJJ7GPJqqTKfAtVyO7e3Kg2iFd+lMj7X1NXfoWeCVindOzWxLiNg50Z3RC3R
J2+UXE5B1PAHLqhsiovGZDxsOL/7yQhT1bXes+6TYk/Cjn5li0fOfFxWX+GRvIWd
6pQrBBPtrqoh0+ep08SFy2XunpNGtGScRR68UPD5GL0SVrhl5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKVsBk/8dexZ9IOicUyyYWO96YwLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80ZGZj
NTFkNi03ZTFlLTQ4YzQtYWM5Yi1kYmMwMDI1MjAzYjUvMjMzYTAxMDItMDhlNS0z
MTMyLTg3MzQtY2FmYWUxYzhiZDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGRmYzUxZDYtN2UxZS00OGM0LWFj
OWItZGJjMDAyNTIwM2I1LzRkZmM1MWQ2LTdlMWUtNDhjNC1hYzliLWRiYzAwMjUy
MDNiNS5jcmwwHwYDVR0jBBgwFoAUPcyS7aqI3hpkRBX27EGuDv9dhGkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS80ZGZjNTFkNi03ZTFlLTQ4YzQtYWM5Yi1kYmMw
MDI1MjAzYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/0QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIYyTQ91xWGmb5jfuVFyKlpHg+NlBwVM5DOkz0VCc0Uiy0i6YpD/NMX4
AFin2yR97q+fUQq5H6esGepdpo6GbjFZBPid1fufdVp48/zOK8hvwi5JrQqgBEcl
zbeEU/wxYeRKUw0BfEJNPMQ6s/VBeDa8lf+WpehCweG51z6Vv5//yZ71AAnbpd+B
+gjZ50+R/3MZq/2s4MhnPoUOtmGQxj+BtxiC3r5E3HVCoffjhMdThBUmJfXiBji2
6NYe0meOiCIlyfrVE1FIYz9HHV93+FKNxu2JYvLJRlgXMw8qiOsWmonJoQPlUmvb
8nUtKixVYUfEle8BuCgOSei+VNoRRqM=
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:35 2025 by rpki-client