Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ba245307-a792-3414-8ad4-7c3e11e14756.roa
File: ba245307-a792-3414-8ad4-7c3e11e14756.roa (raw, json)
Hash identifier: 9cW/nzrgLQBMVyZ6q9V0gH/8rbWR8hkVNrhv3xvzLRI=
Subject key identifier: F3:DA:4F:60:92:3C:BA:A2:B3:73:2E:64:0C:86:AE:36:D5:7D:EC:76
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584804DFB7960FEDB62B38A08900
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ba245307-a792-3414-8ad4-7c3e11e14756.roa
Signing time: Wed 27 Nov 2024 14:00:52 +0000
ROA not before: Wed 27 Nov 2024 14:00:52 +0000
ROA not after: Tue 25 Feb 2025 14:00:52 +0000
asID: 35916
IP address blocks: 142.171.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:04:df:b7:96:0f:ed:b6:2b:38:a0:89:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Nov 27 14:00:52 2024 GMT
Not After : Feb 25 14:00:52 2025 GMT
Subject: CN=b3bc6702-d2d8-4666-8389-d1a9fc3e99ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ac:5b:70:28:3c:6e:c8:8e:ac:b8:8a:37:57:
e4:60:92:ad:6a:87:4d:4f:dc:85:17:03:f7:c5:a8:
bf:ed:e6:57:87:17:09:d4:0d:c1:18:b7:d7:f4:01:
12:18:7b:2c:34:6b:f8:f5:e5:c3:90:06:a4:c3:52:
48:b9:f9:ad:10:4e:91:0a:e1:14:1f:8e:b8:dd:f0:
d2:98:1d:ef:61:d5:bc:66:b8:3b:bc:81:64:a3:48:
20:a8:0c:b4:7b:56:9e:86:f5:07:ff:c5:7b:74:33:
bf:a8:6a:40:93:0e:66:04:09:d4:74:46:12:08:4a:
ab:05:97:ef:4b:12:e2:ab:8c:a9:b4:33:6f:61:7f:
cd:4f:46:82:82:8c:c1:e2:9d:7b:da:bc:2d:be:da:
82:90:fe:3b:fa:8f:d0:d1:14:fe:3b:6b:dc:86:fa:
b5:c9:5c:16:f1:ec:bc:36:32:9c:04:38:2e:5e:6a:
20:14:17:38:ff:86:e0:bd:9a:d3:b2:d3:bd:02:19:
26:98:3c:e9:8c:d8:b4:b7:b3:17:d0:dd:0a:53:8b:
9a:05:a7:24:ae:bb:16:09:fa:96:cc:35:95:6b:33:
a9:4b:c6:b6:c1:f5:d1:67:a2:48:40:14:f1:5b:c9:
74:b0:ca:5e:d4:fe:b6:32:f5:cb:ea:d0:bd:cb:a3:
69:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DA:4F:60:92:3C:BA:A2:B3:73:2E:64:0C:86:AE:36:D5:7D:EC:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ba245307-a792-3414-8ad4-7c3e11e14756.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
142.171.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:a4:2b:cc:42:2b:54:9b:de:38:e0:71:4d:6e:5e:28:41:c1:
d8:af:5e:1f:c2:32:cb:72:26:02:26:44:cd:20:8b:01:a5:10:
47:4c:a1:c7:99:30:ac:93:b9:25:88:ba:bd:88:54:bd:c1:0d:
33:21:94:85:f1:3e:49:4c:02:e8:50:e2:07:83:a9:63:d2:41:
f2:ff:2d:e5:25:85:09:85:26:a7:eb:6d:6b:4e:d4:26:f7:18:
b4:14:b0:5a:27:ec:e8:b1:f5:78:e4:21:08:d1:45:18:fc:fb:
99:f8:e0:fb:f8:fd:95:69:b4:a9:25:eb:d5:9a:37:ea:62:20:
e5:68:c9:e9:c2:56:f2:20:38:e8:e7:3e:df:19:66:87:eb:d1:
73:29:63:07:a5:89:32:cd:9a:0b:20:3f:d8:83:64:a7:9b:ab:
24:76:f9:20:fb:68:6f:03:b8:3f:d4:ee:d2:fe:e4:88:e6:c2:
e8:20:bb:9b:4e:51:44:b1:a7:12:50:05:c7:05:cb:46:76:fc:
ad:f8:c1:0d:ba:cf:81:fc:45:73:1c:2e:37:f4:ae:2e:8b:29:
18:4e:f2:df:06:95:9f:9c:17:e5:9b:2b:3b:2f:10:b2:06:f4:
eb:22:1b:04:d4:47:d6:88:1f:49:0e:b5:78:70:17:02:70:29:
fa:1f:e5:b3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEgE37eWD+22KzigiQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI0MTEyNzE0MDA1MloXDTI1MDIyNTE0MDA1MlowLzEtMCsGA1UEAxMk
YjNiYzY3MDItZDJkOC00NjY2LTgzODktZDFhOWZjM2U5OWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6xbcCg8bsiOrLiKN1fkYJKtaodNT9yFFwP3
xai/7eZXhxcJ1A3BGLfX9AESGHssNGv49eXDkAakw1JIufmtEE6RCuEUH4643fDS
mB3vYdW8Zrg7vIFko0ggqAy0e1aehvUH/8V7dDO/qGpAkw5mBAnUdEYSCEqrBZfv
SxLiq4yptDNvYX/NT0aCgozB4p172rwtvtqCkP47+o/Q0RT+O2vchvq1yVwW8ey8
NjKcBDguXmogFBc4/4bgvZrTstO9AhkmmDzpjNi0t7MX0N0KU4uaBackrrsWCfqW
zDWVazOpS8a2wfXRZ6JIQBTxW8l0sMpe1P62MvXL6tC9y6NpfQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPPaT2CSPLqis3MuZAyGrjbVfex2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYmEyNDUzMDctYTc5Mi0z
NDE0LThhZDQtN2MzZTExZTE0NzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjqswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEADqQrzEIrVJveOOBxTW5eKEHB2K9eH8Iyy3ImAiZEzSCLAaUQR0yhx5kw
rJO5JYi6vYhUvcENMyGUhfE+SUwC6FDiB4OpY9JB8v8t5SWFCYUmp+tta07UJvcY
tBSwWifs6LH1eOQhCNFFGPz7mfjg+/j9lWm0qSXr1Zo36mIg5WjJ6cJW8iA46Oc+
3xlmh+vRcyljB6WJMs2aCyA/2INkp5urJHb5IPtobwO4P9Tu0v7kiObC6CC7m05R
RLGnElAFxwXLRnb8rfjBDbrPgfxFcxwuN/SuLospGE7y3waVn5wX5ZsrOy8Qsgb0
6yIbBNRH1ogfSQ61eHAXAnAp+h/lsw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:09:33 2025 by rpki-client