Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/c0ac2f53-beae-3b05-97d0-d26974f3905b.roa
File: c0ac2f53-beae-3b05-97d0-d26974f3905b.roa (raw, json)
Hash identifier: LDZfUILe+SXHmEP1kSsupuxTftN18Rgj6Xts4rB2wRY=
Subject key identifier: 04:BD:D6:2A:2A:7E:BE:CE:69:84:D9:38:A8:3E:09:5B:E4:D9:62:61
Certificate issuer: /CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21
Certificate serial: 010D0C9F43285848143A7AFBD52151E78B767E00
Authority key identifier: 1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/c0ac2f53-beae-3b05-97d0-d26974f3905b.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 16713
IP address blocks: 208.70.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:7a:fb:d5:21:51:e7:8b:76:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=163e7c6c-a3cf-4f25-8176-cbe0477f78aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:76:c2:2e:c0:76:b6:f4:e4:c1:d8:62:89:4a:
95:63:12:1f:22:b6:b9:10:7b:67:75:48:5f:1c:8b:
37:10:1a:c2:1e:bd:31:ef:8b:e4:4a:29:39:a8:08:
f6:c8:7e:a4:cd:5c:2d:37:82:82:87:be:6f:fd:8d:
6f:55:e0:8a:3f:88:35:be:33:ea:b5:a1:95:da:19:
e7:9d:2e:c3:87:bf:d6:58:f0:ae:89:37:c8:56:10:
2b:87:8b:90:61:04:fe:26:4b:34:9b:82:9d:25:6a:
70:bb:31:1d:6d:30:5e:f5:cc:53:18:af:42:ae:7d:
19:dc:64:41:b5:a5:bf:a7:35:fd:fd:af:f2:4c:33:
9e:3f:24:37:7b:8d:c3:86:31:fc:9c:83:6d:f3:42:
d4:01:93:69:1e:30:7f:b0:8c:99:ac:a0:ca:0b:be:
40:96:e0:51:54:b4:4c:9c:8c:37:5e:31:73:dc:2d:
f0:0f:a3:58:a8:4f:0a:c4:57:05:f1:b5:44:f1:3e:
46:0f:a7:02:91:3a:3e:ef:3c:9f:f6:29:f1:11:76:
7d:8a:5f:05:db:d4:85:32:b9:34:f8:5e:2c:50:bd:
03:ab:1c:3d:05:c1:15:c4:f0:61:4c:ef:06:c8:1a:
58:da:16:0b:65:a6:67:de:39:ed:ad:0a:43:c0:dd:
65:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BD:D6:2A:2A:7E:BE:CE:69:84:D9:38:A8:3E:09:5B:E4:D9:62:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/c0ac2f53-beae-3b05-97d0-d26974f3905b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl
X509v3 Authority Key Identifier:
keyid:1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer
sbgp-ipAddrBlock: critical
IPv4:
208.70.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:ca:2f:f1:8d:e4:39:e9:c1:81:e6:a6:5e:d9:93:ae:48:bf:
86:2a:90:35:3b:d7:07:07:55:c1:9d:06:35:47:f5:18:c8:05:
2b:37:4c:71:54:f2:05:99:2c:87:dd:81:cb:d3:af:a4:31:13:
ec:58:9f:20:b9:38:3b:04:e3:b1:04:29:2e:dd:0e:b1:3e:c5:
1f:40:9b:c9:e3:82:ad:a2:25:88:7a:04:83:a2:b0:7e:89:1b:
6c:aa:6b:9c:e6:28:2d:01:b6:c1:53:19:4b:3a:10:c0:e0:8d:
96:f0:21:e2:6c:8a:96:6c:85:57:70:c1:8a:32:92:57:11:68:
07:34:0d:cb:55:8a:e1:53:fa:a0:08:78:88:f3:b5:56:f2:f3:
de:da:9b:7b:3f:40:0a:7f:3f:bc:ab:66:d4:da:05:51:80:53:
03:4e:5c:00:43:51:b0:98:46:af:bc:5f:ef:70:21:b8:10:7d:
fe:75:f8:cc:41:82:13:a6:dd:d4:d5:18:5d:e6:49:52:a9:54:
60:c4:9a:dc:85:bc:a8:95:02:8e:7a:97:ea:bd:6b:cb:03:86:
06:62:86:5c:0e:d8:1c:02:21:fb:a2:42:c7:6a:b0:2e:1f:ba:
8d:b6:1f:45:c5:07:4a:59:c5:b8:d5:b4:e7:f7:4d:43:e4:47:
cf:79:a0:5d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOnr71SFR54t2fgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGQ0M2FkZmQtZjZlNC00NTA0LTg2ZjAtMmVmYWRmOWQ0
ZDIxMB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
MTYzZTdjNmMtYTNjZi00ZjI1LTgxNzYtY2JlMDQ3N2Y3OGFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXbCLsB2tvTkwdhiiUqVYxIfIra5EHtndUhf
HIs3EBrCHr0x74vkSik5qAj2yH6kzVwtN4KCh75v/Y1vVeCKP4g1vjPqtaGV2hnn
nS7Dh7/WWPCuiTfIVhArh4uQYQT+Jks0m4KdJWpwuzEdbTBe9cxTGK9Crn0Z3GRB
taW/pzX9/a/yTDOePyQ3e43DhjH8nINt80LUAZNpHjB/sIyZrKDKC75AluBRVLRM
nIw3XjFz3C3wD6NYqE8KxFcF8bVE8T5GD6cCkTo+7zyf9inxEXZ9il8F29SFMrk0
+F4sUL0Dqxw9BcEVxPBhTO8GyBpY2hYLZaZn3jntrQpDwN1lRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAS91ioqfr7OaYTZOKg+CVvk2WJhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQz
YWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZhZGY5ZDRkMjEvYzBhYzJmNTMtYmVhZS0z
YjA1LTk3ZDAtZDI2OTc0ZjM5MDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGQ0M2FkZmQtZjZlNC00NTA0LTg2
ZjAtMmVmYWRmOWQ0ZDIxLzRkNDNhZGZkLWY2ZTQtNDUwNC04NmYwLTJlZmFkZjlk
NGQyMS5jcmwwHwYDVR0jBBgwFoAUHLPKVHX2AJyrqb/kFUAJQKHvOZ0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQzYWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZh
ZGY5ZDRkMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EaXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKHKL/GN5DnpwYHmpl7Zk65Iv4YqkDU71wcHVcGdBjVH9RjIBSs3THFU
8gWZLIfdgcvTr6QxE+xYnyC5ODsE47EEKS7dDrE+xR9Am8njgq2iJYh6BIOisH6J
G2yqa5zmKC0BtsFTGUs6EMDgjZbwIeJsipZshVdwwYoyklcRaAc0DctViuFT+qAI
eIjztVby897am3s/QAp/P7yrZtTaBVGAUwNOXABDUbCYRq+8X+9wIbgQff51+MxB
ghOm3dTVGF3mSVKpVGDEmtyFvKiVAo56l+q9a8sDhgZihlwO2BwCIfuiQsdqsC4f
uo22H0XFB0pZxbjVtOf3TUPkR895oF0=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:13:06 2025 by rpki-client