Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/2b832b6b-5816-3bfa-a0e8-1cb8dc1f9898.roa
File: 2b832b6b-5816-3bfa-a0e8-1cb8dc1f9898.roa (raw, json)
Hash identifier: SNxKooFVDEvOI+Hf/8kLwTEX4k1pdDzBHPWzKN2QvAU=
Subject key identifier: 4E:43:90:34:04:FC:19:26:24:FE:C2:D4:8D:DC:94:FF:46:55:AD:3C
Certificate issuer: /CN=70212b19-99d4-4532-a7e0-a5bdbef20170
Certificate serial: 010D0C9F432858482A8FDF1ADCCBDF0FD4E96040
Authority key identifier: 10:3A:37:8A:5C:7E:F2:98:FB:74:3D:2C:6D:62:04:89:CA:64:A2:F5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/2b832b6b-5816-3bfa-a0e8-1cb8dc1f9898.roa
Signing time: Wed 11 Dec 2024 02:00:38 +0000
ROA not before: Wed 11 Dec 2024 02:00:38 +0000
ROA not after: Tue 11 Mar 2025 01:00:38 +0000
asID: 16509
IP address blocks: 168.100.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8f:df:1a:dc:cb:df:0f:d4:e9:60:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70212b19-99d4-4532-a7e0-a5bdbef20170
Validity
Not Before: Dec 11 02:00:38 2024 GMT
Not After : Mar 11 01:00:38 2025 GMT
Subject: CN=60e9c764-5b24-4d2b-bc53-24af0a827810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f0:4b:70:50:d9:ce:a5:70:1e:bb:96:8e:07:
41:24:ab:19:f7:71:cc:ed:a5:3e:78:34:6a:ff:3d:
2f:06:95:46:80:9a:a0:89:e8:2a:f3:01:13:12:98:
83:cd:c1:fe:b0:67:a3:a6:89:61:70:fd:e4:07:09:
64:5c:66:45:f1:c8:0c:ca:62:d5:73:f3:02:c7:75:
c3:5e:3d:10:94:ef:24:8e:38:36:5e:98:8b:a1:4d:
75:e9:74:a3:c0:8d:02:e7:0c:48:35:7a:88:c3:b4:
e5:90:de:e2:71:96:3d:a9:b8:5c:7a:a4:8d:ed:4a:
7c:3d:09:7b:47:16:d4:92:13:74:24:6c:6d:4d:d6:
a1:0a:25:f3:a8:18:1e:93:44:ca:10:f1:b4:77:62:
60:0c:91:e2:c7:b7:f8:bc:c8:41:5c:01:12:72:6d:
70:fd:bc:bb:a6:94:f8:a1:eb:5f:2c:99:03:0b:b9:
98:9c:de:fc:5f:6e:1b:8f:db:6d:70:59:2e:44:4b:
40:a9:58:e7:2b:70:00:d7:4c:c6:7b:d4:3a:c6:2d:
fb:39:9f:d7:e9:3c:34:fb:6a:30:94:2d:52:e9:90:
03:93:bb:cd:26:9c:4d:35:f7:04:8c:ed:f5:04:79:
23:2a:12:5b:ea:4f:68:86:c0:ba:81:dd:8d:a0:cf:
f5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:43:90:34:04:FC:19:26:24:FE:C2:D4:8D:DC:94:FF:46:55:AD:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/2b832b6b-5816-3bfa-a0e8-1cb8dc1f9898.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170/70212b19-99d4-4532-a7e0-a5bdbef20170.crl
X509v3 Authority Key Identifier:
keyid:10:3A:37:8A:5C:7E:F2:98:FB:74:3D:2C:6D:62:04:89:CA:64:A2:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/70212b19-99d4-4532-a7e0-a5bdbef20170.cer
sbgp-ipAddrBlock: critical
IPv4:
168.100.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:d3:03:81:10:68:f5:cd:39:9c:77:d0:93:7b:43:4b:33:b4:
91:f1:ad:46:31:6b:ce:8e:73:1d:e4:f8:04:dd:b2:77:ae:2e:
9e:92:55:f0:de:cd:80:3b:a7:ad:64:71:57:4f:f8:be:6b:d6:
88:de:ab:9d:04:ad:85:a6:b8:c7:69:64:55:dc:90:a4:2d:51:
e7:2e:6a:72:c4:5b:c7:fb:c5:03:c9:58:8c:ab:38:f8:b5:36:
39:02:41:27:ac:6b:44:22:d9:89:f7:70:15:96:42:cf:cc:87:
4d:cf:3b:56:9b:e0:20:ed:1e:08:b9:09:24:e0:a5:3f:a6:4d:
2a:d3:6a:5a:c2:70:42:6f:49:96:a4:f0:60:cf:11:88:24:6d:
d5:ef:52:60:9d:fe:ea:7f:15:b5:60:bc:25:93:52:69:30:50:
b6:17:cd:bb:19:48:70:22:a9:76:b8:33:05:4a:f7:9f:ae:05:
f9:70:b9:2a:44:52:4c:8b:53:79:61:e9:1a:67:13:4a:36:cd:
81:6e:6c:26:e6:a0:f8:51:f6:fe:fc:ed:95:89:9b:bc:e5:cc:
4d:cb:64:d9:e6:d6:88:3a:2c:12:62:ad:1c:db:e2:9c:c8:3e:
da:3c:44:d5:5a:bd:83:f5:3c:37:4b:6c:46:a9:7b:c1:e0:64:
ea:5c:bd:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgqj98a3MvfD9TpYEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzAyMTJiMTktOTlkNC00NTMyLWE3ZTAtYTViZGJlZjIw
MTcwMB4XDTI0MTIxMTAyMDAzOFoXDTI1MDMxMTAxMDAzOFowLzEtMCsGA1UEAxMk
NjBlOWM3NjQtNWIyNC00ZDJiLWJjNTMtMjRhZjBhODI3ODEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvBLcFDZzqVwHruWjgdBJKsZ93HM7aU+eDRq
/z0vBpVGgJqgiegq8wETEpiDzcH+sGejpolhcP3kBwlkXGZF8cgMymLVc/MCx3XD
Xj0QlO8kjjg2XpiLoU116XSjwI0C5wxINXqIw7TlkN7icZY9qbhceqSN7Up8PQl7
RxbUkhN0JGxtTdahCiXzqBgek0TKEPG0d2JgDJHix7f4vMhBXAEScm1w/by7ppT4
oetfLJkDC7mYnN78X24bj9ttcFkuREtAqVjnK3AA10zGe9Q6xi37OZ/X6Tw0+2ow
lC1S6ZADk7vNJpxNNfcEjO31BHkjKhJb6k9ohsC6gd2NoM/1kQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE5DkDQE/BkmJP7C1I3clP9GVa08MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MDIx
MmIxOS05OWQ0LTQ1MzItYTdlMC1hNWJkYmVmMjAxNzAvMmI4MzJiNmItNTgxNi0z
YmZhLWEwZTgtMWNiOGRjMWY5ODk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzAyMTJiMTktOTlkNC00NTMyLWE3
ZTAtYTViZGJlZjIwMTcwLzcwMjEyYjE5LTk5ZDQtNDUzMi1hN2UwLWE1YmRiZWYy
MDE3MC5jcmwwHwYDVR0jBBgwFoAUEDo3ilx+8pj7dD0sbWIEicpkovUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83MDIxMmIxOS05OWQ0LTQ1MzItYTdlMC1hNWJk
YmVmMjAxNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqGRAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABvTA4EQaPXNOZx30JN7Q0sztJHxrUYxa86Ocx3k+ATdsneuLp6SVfDe
zYA7p61kcVdP+L5r1ojeq50ErYWmuMdpZFXckKQtUecuanLEW8f7xQPJWIyrOPi1
NjkCQSesa0Qi2Yn3cBWWQs/Mh03PO1ab4CDtHgi5CSTgpT+mTSrTalrCcEJvSZak
8GDPEYgkbdXvUmCd/up/FbVgvCWTUmkwULYXzbsZSHAiqXa4MwVK95+uBflwuSpE
UkyLU3lh6RpnE0o2zYFubCbmoPhR9v787ZWJm7zlzE3LZNnm1og6LBJirRzb4pzI
Pto8RNVavYP1PDdLbEape8HgZOpcvbU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:23 2025 by rpki-client