Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ec3e1746-1968-3b3e-ac38-6d206a12815e.roa
File: ec3e1746-1968-3b3e-ac38-6d206a12815e.roa (raw, json)
Hash identifier: w7JkHzgGJsRPSFvlI6qst8Bi8wewAWj+Bz/W6cxzn2o=
Subject key identifier: 5F:8F:C7:09:64:CC:21:42:DA:00:9D:3C:B5:65:E4:C7:7F:3C:B4:3E
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584863CB16401ECF18AFAD7B8500
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ec3e1746-1968-3b3e-ac38-6d206a12815e.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 64267
IP address blocks: 158.62.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:16:40:1e:cf:18:af:ad:7b:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=13318d77-5fad-4a69-b6a4-626e38a461ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:af:2d:c2:7b:ed:1d:19:12:e8:d3:21:97:13:
a0:77:e1:3f:f9:58:a7:8e:ef:e2:0f:03:ca:21:5a:
ef:0a:ee:e3:a8:56:9b:b4:a4:2c:a4:82:ba:22:0c:
9f:b8:36:39:3c:34:84:ec:41:82:a4:d8:f7:a6:6d:
b6:fb:5b:0a:9f:14:29:41:b6:84:b9:6e:ea:4d:44:
f7:bb:e7:11:61:73:b1:11:79:72:69:3a:ae:4f:35:
43:72:97:d4:f2:f7:ad:06:57:c8:83:d4:72:ed:07:
4f:d2:7f:a2:09:53:43:cb:e9:3c:29:88:4b:34:84:
3c:ff:51:f9:1f:39:45:9d:b1:34:94:fc:90:11:37:
a1:10:d6:da:f2:9a:c0:b1:47:67:76:9c:b3:4d:20:
59:a0:06:65:fd:1b:35:be:4c:c9:65:5f:e1:2c:e4:
21:dd:dd:7f:a3:f2:d4:50:a9:1b:9d:08:7b:ab:6a:
aa:04:37:ba:2e:cd:f8:c2:24:ec:90:59:4f:0a:f5:
10:8c:9f:83:d7:2d:a5:01:4d:2f:a6:10:10:29:05:
89:f3:da:00:b2:5e:19:32:4b:6d:da:42:b4:cb:7d:
19:df:cf:2b:5c:d6:c3:b1:40:25:f2:6b:f3:ea:ca:
c0:42:12:9e:03:f9:93:e0:fb:74:0b:06:61:71:0b:
ae:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8F:C7:09:64:CC:21:42:DA:00:9D:3C:B5:65:E4:C7:7F:3C:B4:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ec3e1746-1968-3b3e-ac38-6d206a12815e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
158.62.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:bb:dd:48:c9:87:5b:66:b9:54:51:98:48:22:a5:d2:13:0d:
ec:7b:90:96:f3:0b:6d:f8:c3:8b:98:7e:10:0b:54:17:d0:58:
55:1b:b6:c1:06:8a:cc:3f:19:f7:7d:06:f8:e0:24:7e:0d:6e:
eb:b1:94:5a:3b:68:99:48:24:a8:0e:70:ed:d2:2c:8e:d3:7b:
af:7e:b9:d1:ce:27:53:87:39:c9:26:be:95:87:5c:0a:c1:cf:
88:eb:57:0a:a2:9d:95:25:68:46:4f:30:27:5f:85:d3:69:8e:
a0:49:82:4a:e0:79:ee:a6:87:25:24:6c:5e:05:cb:52:ef:9e:
fc:bd:0a:67:72:7b:e5:97:ed:4f:e6:14:a8:fb:fa:5e:e3:6d:
d3:bf:e5:7d:ca:02:a5:a5:b0:dc:02:87:cf:34:99:a8:c6:d7:
45:12:50:62:cd:59:09:7e:50:57:bd:ab:c2:47:4d:50:de:b1:
20:dd:93:ed:7b:43:d3:ab:74:2e:aa:a6:51:2c:81:bb:dd:c8:
5e:03:30:70:02:69:c8:79:0e:d4:47:cd:4c:42:51:5e:ac:74:
bf:49:83:34:70:56:9a:31:8c:79:79:10:22:55:57:c9:d4:2c:
23:9b:69:8e:ea:40:b9:ab:3c:0a:b4:4c:67:d1:c5:ed:67:25:
2e:1f:50:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhjyxZAHs8Yr617hQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI0MTIzMTE0MDA1M1oXDTI1MDMzMTEzMDA1M1owLzEtMCsGA1UEAxMk
MTMzMThkNzctNWZhZC00YTY5LWI2YTQtNjI2ZTM4YTQ2MWVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj68twnvtHRkS6NMhlxOgd+E/+Vinju/iDwPK
IVrvCu7jqFabtKQspIK6IgyfuDY5PDSE7EGCpNj3pm22+1sKnxQpQbaEuW7qTUT3
u+cRYXOxEXlyaTquTzVDcpfU8vetBlfIg9Ry7QdP0n+iCVNDy+k8KYhLNIQ8/1H5
HzlFnbE0lPyQETehENba8prAsUdndpyzTSBZoAZl/Rs1vkzJZV/hLOQh3d1/o/LU
UKkbnQh7q2qqBDe6Ls34wiTskFlPCvUQjJ+D1y2lAU0vphAQKQWJ89oAsl4ZMktt
2kK0y30Z388rXNbDsUAl8mvz6srAQhKeA/mT4Pt0CwZhcQuuywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF+PxwlkzCFC2gCdPLVl5Md/PLQ+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZWMzZTE3NDYtMTk2OC0z
YjNlLWFjMzgtNmQyMDZhMTI4MTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnj7TMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADK73UjJh1tmuVRRmEgipdITDex7kJbzC234w4uYfhALVBfQWFUbtsEG
isw/Gfd9BvjgJH4NbuuxlFo7aJlIJKgOcO3SLI7Te69+udHOJ1OHOckmvpWHXArB
z4jrVwqinZUlaEZPMCdfhdNpjqBJgkrgee6mhyUkbF4Fy1Lvnvy9Cmdye+WX7U/m
FKj7+l7jbdO/5X3KAqWlsNwCh880majG10USUGLNWQl+UFe9q8JHTVDesSDdk+17
Q9OrdC6qplEsgbvdyF4DMHACach5DtRHzUxCUV6sdL9JgzRwVpoxjHl5ECJVV8nU
LCObaY7qQLmrPAq0TGfRxe1nJS4fUHc=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:36 2025 by rpki-client