Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/0bb0f391-d564-3720-9fae-91c0e9415077.roa
File: 0bb0f391-d564-3720-9fae-91c0e9415077.roa (raw, json)
Hash identifier: dqNa7TnGK0WVZkHP40PXvgsKeuaCwd2KDIVriRh4fkI=
Subject key identifier: 2E:45:26:99:4D:4B:E0:A0:16:9E:00:CA:8B:9D:B9:7A:B6:02:5C:BA
Certificate issuer: /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial: 010D0C9F432858481F6526DFB1485B326142C400
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/0bb0f391-d564-3720-9fae-91c0e9415077.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 394434
IP address blocks: 159.183.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:26:df:b1:48:5b:32:61:42:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=c3039014-3051-4c09-8a6b-6e450383db83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e4:7a:85:c8:87:85:75:81:d7:8f:e6:b8:22:
4a:eb:c7:9f:18:4c:d4:11:99:1e:20:33:f5:f9:f2:
63:44:a1:03:aa:d6:aa:a7:bd:07:00:6d:ba:86:a5:
dd:c8:f5:a4:72:6b:00:dc:c6:98:2f:5f:a8:64:d7:
af:f8:1c:ec:12:62:4a:da:14:d8:dd:1a:d3:d2:1f:
24:f2:6c:50:ab:25:5a:e4:14:71:f4:8d:3c:62:0c:
a5:19:0c:63:4e:fd:c0:28:8e:e1:1c:86:93:ec:fa:
78:5e:66:22:07:2b:25:56:3a:ba:e5:72:d4:dd:5a:
be:ea:38:c1:74:29:1d:fc:e2:9b:26:43:00:e9:a3:
86:33:9c:f0:8d:2b:e7:85:78:5c:bc:c1:1a:fe:75:
a6:ec:37:cc:b6:e7:88:28:00:a0:6a:4b:92:7a:04:
a6:21:72:24:0e:2e:f6:77:18:9a:cf:b2:b1:be:a4:
f3:ab:84:08:c3:8d:6e:af:05:cd:9e:0d:9a:a5:63:
15:67:db:43:ba:cb:7e:10:86:be:d3:2b:43:d4:80:
e2:f9:89:a3:fc:bf:f3:96:65:5f:24:97:c9:81:09:
7f:a3:34:29:c1:ca:a4:2c:23:e3:2f:a7:5c:fa:d9:
b9:a4:d4:54:6e:a7:fd:e3:ab:6a:3f:ac:d2:0e:a1:
cd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:45:26:99:4D:4B:E0:A0:16:9E:00:CA:8B:9D:B9:7A:B6:02:5C:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/0bb0f391-d564-3720-9fae-91c0e9415077.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
X509v3 Authority Key Identifier:
keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
sbgp-ipAddrBlock: critical
IPv4:
159.183.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:af:cf:c8:2d:db:5a:06:10:ff:b9:c8:16:8d:e9:b6:83:dd:
2b:5f:45:14:4d:fd:fc:4d:1a:b3:7e:b6:4e:a7:23:be:78:3a:
93:db:4a:22:b5:90:a8:19:1c:ca:d4:09:8e:b4:14:b9:68:f9:
4c:1d:0f:34:32:dd:7b:07:ce:cb:a1:46:43:c9:f3:dc:56:c0:
a4:d4:91:68:20:3c:09:49:dd:eb:3a:90:51:f3:3b:72:d9:ea:
4c:4a:5c:40:74:49:3d:b0:ac:0e:6f:ab:c9:73:9c:a9:5b:8d:
fe:dd:8e:83:aa:03:8a:6a:3c:2a:7c:fc:1e:ab:fa:ec:fd:f7:
c1:ba:59:a5:9b:ca:7b:67:3c:17:a4:09:ec:ce:dd:25:b6:98:
87:12:53:87:03:f6:be:c3:e0:5b:76:5b:ad:cf:aa:30:9e:54:
8a:96:08:ca:75:89:02:3d:76:2f:68:c9:11:11:a4:cd:52:42:
11:23:5f:b1:50:ef:69:05:4b:c6:e6:46:87:66:b6:f2:49:b1:
bb:0c:99:36:d0:3c:d7:fe:72:04:04:5e:27:d3:ab:c5:6f:a4:
d2:38:9b:b9:ff:12:61:1e:b7:5c:a8:50:d0:e6:97:2b:36:40:
8b:4a:a6:f4:2a:ab:76:c0:ca:a2:24:89:05:9c:a3:b2:ac:60:
4b:a2:09:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgfZSbfsUhbMmFCxAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU1NGU1ZmMtNWYxYS00YzczLTkxMTQtODkyZWQ1ZDA1
MGI4MB4XDTI0MTIwNzAyMDAzOVoXDTI1MDMwNzAyMDAzOVowLzEtMCsGA1UEAxMk
YzMwMzkwMTQtMzA1MS00YzA5LThhNmItNmU0NTAzODNkYjgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8+R6hciHhXWB14/muCJK68efGEzUEZkeIDP1
+fJjRKEDqtaqp70HAG26hqXdyPWkcmsA3MaYL1+oZNev+BzsEmJK2hTY3RrT0h8k
8mxQqyVa5BRx9I08YgylGQxjTv3AKI7hHIaT7Pp4XmYiByslVjq65XLU3Vq+6jjB
dCkd/OKbJkMA6aOGM5zwjSvnhXhcvMEa/nWm7DfMtueIKACgakuSegSmIXIkDi72
dxiaz7KxvqTzq4QIw41urwXNng2apWMVZ9tDust+EIa+0ytD1IDi+Ymj/L/zlmVf
JJfJgQl/ozQpwcqkLCPjL6dc+tm5pNRUbqf946tqP6zSDqHNBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC5FJplNS+CgFp4AyouduXq2Aly6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0
ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJlZDVkMDUwYjgvMGJiMGYzOTEtZDU2NC0z
NzIwLTlmYWUtOTFjMGU5NDE1MDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDU1NGU1ZmMtNWYxYS00YzczLTkx
MTQtODkyZWQ1ZDA1MGI4LzQ1NTRlNWZjLTVmMWEtNGM3My05MTE0LTg5MmVkNWQw
NTBiOC5jcmwwHwYDVR0jBBgwFoAU3+QEWiaDm8xXidGwF1BetYvaRmswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80NTU0ZTVmYy01ZjFhLTRjNzMtOTExNC04OTJl
ZDVkMDUwYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCn7f8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHKvz8gt21oGEP+5yBaN6baD3StfRRRN/fxNGrN+tk6nI754OpPbSiK1
kKgZHMrUCY60FLlo+UwdDzQy3XsHzsuhRkPJ89xWwKTUkWggPAlJ3es6kFHzO3LZ
6kxKXEB0ST2wrA5vq8lznKlbjf7djoOqA4pqPCp8/B6r+uz998G6WaWbyntnPBek
CezO3SW2mIcSU4cD9r7D4Ft2W63PqjCeVIqWCMp1iQI9di9oyRERpM1SQhEjX7FQ
72kFS8bmRodmtvJJsbsMmTbQPNf+cgQEXifTq8VvpNI4m7n/EmEet1yoUNDmlys2
QItKpvQqq3bAyqIkiQWco7KsYEuiCVg=
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:57:26 2025 by rpki-client