Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/1a0270fa-423b-3a16-9ca8-0b653ab781e8.roa
File: 1a0270fa-423b-3a16-9ca8-0b653ab781e8.roa (raw, json)
Hash identifier: xDbTsjX/S1YKHIPI0usjjQxgRAnzkuN17nwy7p2TsFg=
Subject key identifier: B3:C3:64:05:43:70:48:73:DE:87:11:A0:AE:00:D6:2A:A7:D5:AA:5D
Certificate issuer: /CN=c7504c4b-7514-464e-a79e-1f4b462c7e7c
Certificate serial: 010D0C9F432858482EC004D72DB40B5DE9D32200
Authority key identifier: BD:B1:CF:BB:D1:DE:D3:95:B4:EF:EB:D8:1F:97:D9:B9:D7:DF:45:0A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/1a0270fa-423b-3a16-9ca8-0b653ab781e8.roa
Signing time: Thu 12 Dec 2024 14:00:51 +0000
ROA not before: Thu 12 Dec 2024 14:00:51 +0000
ROA not after: Wed 12 Mar 2025 13:00:51 +0000
asID: 46208
IP address blocks: 170.249.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2e:c0:04:d7:2d:b4:0b:5d:e9:d3:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7504c4b-7514-464e-a79e-1f4b462c7e7c
Validity
Not Before: Dec 12 14:00:51 2024 GMT
Not After : Mar 12 13:00:51 2025 GMT
Subject: CN=be68b25a-4ef9-4267-8334-a17f5c175104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7f:8f:29:f6:4a:54:6b:1c:24:bf:be:ad:f8:
62:04:53:d4:9c:da:35:36:84:dc:0c:75:bf:99:de:
10:c7:70:1a:95:fe:fb:75:51:d8:10:c3:02:0c:4f:
e0:5d:fb:65:ae:0c:fa:a5:e2:94:8d:50:66:92:43:
9d:8f:f8:93:30:27:cf:ab:eb:0b:fa:d7:bb:99:d7:
2a:10:f0:e1:b5:13:91:30:f2:7b:26:35:8d:43:5f:
d9:d3:7b:9d:67:1d:42:c7:6c:39:7e:a3:4d:a5:4e:
ef:db:72:76:a7:c6:b7:95:cd:7a:ae:57:a4:6a:8f:
93:c7:0d:c9:4b:64:36:3e:01:bf:72:3a:5b:55:c0:
ce:08:43:78:ee:2d:e9:cc:93:94:e3:71:a5:13:49:
2d:76:c4:90:ea:2f:4a:67:01:ca:23:8e:98:b9:04:
b6:be:5a:8e:14:a4:83:0b:a8:1e:5c:39:b7:93:4b:
3a:a3:7e:45:3e:93:a9:42:4b:ed:2b:9e:dd:82:67:
d5:fb:1f:cb:df:48:24:ee:21:76:50:17:0b:ea:7c:
fc:49:74:3c:79:2a:55:11:dc:01:8c:3a:e8:b0:cd:
60:ab:75:f8:7c:4c:8b:d2:eb:9a:cc:2f:01:ed:96:
72:0d:1e:45:7c:3d:70:cf:0d:11:21:71:79:3b:08:
ae:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C3:64:05:43:70:48:73:DE:87:11:A0:AE:00:D6:2A:A7:D5:AA:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/1a0270fa-423b-3a16-9ca8-0b653ab781e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/c7504c4b-7514-464e-a79e-1f4b462c7e7c.crl
X509v3 Authority Key Identifier:
keyid:BD:B1:CF:BB:D1:DE:D3:95:B4:EF:EB:D8:1F:97:D9:B9:D7:DF:45:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c.cer
sbgp-ipAddrBlock: critical
IPv4:
170.249.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:1f:d4:23:96:7c:5b:d4:c6:3b:9e:70:bb:4e:18:d9:53:ea:
db:76:95:53:53:43:cb:4a:7b:be:8b:34:67:f6:cc:f3:df:57:
58:bf:c5:bd:3b:3f:a9:66:a6:14:db:fa:02:b2:84:62:c2:86:
d3:4f:0b:50:5f:77:8a:74:8a:d4:4c:de:63:e9:06:0a:b7:84:
b1:19:3b:1d:62:59:e1:a3:bc:45:d2:be:a3:61:2b:20:81:00:
75:8c:fb:7e:bb:31:24:84:24:2c:fb:64:60:45:dc:bb:9d:c4:
d1:fd:c9:20:fd:db:86:0d:3b:1d:b4:44:c7:aa:12:d0:97:01:
d1:32:fc:29:7f:d2:96:3d:63:8e:96:0e:b2:f2:32:74:e6:54:
1c:3c:ff:33:74:e7:d3:00:ac:60:03:a5:a8:45:1e:b9:d0:12:
af:63:cf:3a:32:95:68:17:2d:be:8a:13:eb:6d:d4:32:a7:fe:
ce:45:a2:7f:ab:e1:55:e4:0d:5b:6b:03:b9:4f:32:10:81:4e:
7e:2d:97:7a:ee:a0:ef:e5:a5:56:ff:f2:0e:48:c8:7b:28:62:
0a:98:03:12:0f:92:84:ea:af:6d:c0:df:c7:d4:71:fa:38:80:
c6:6b:9f:ee:79:a6:11:98:48:1f:70:00:d0:02:6e:f1:09:76:
03:29:a2:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEguwATXLbQLXenTIgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzc1MDRjNGItNzUxNC00NjRlLWE3OWUtMWY0YjQ2MmM3
ZTdjMB4XDTI0MTIxMjE0MDA1MVoXDTI1MDMxMjEzMDA1MVowLzEtMCsGA1UEAxMk
YmU2OGIyNWEtNGVmOS00MjY3LTgzMzQtYTE3ZjVjMTc1MTA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX+PKfZKVGscJL++rfhiBFPUnNo1NoTcDHW/
md4Qx3Aalf77dVHYEMMCDE/gXftlrgz6peKUjVBmkkOdj/iTMCfPq+sL+te7mdcq
EPDhtRORMPJ7JjWNQ1/Z03udZx1Cx2w5fqNNpU7v23J2p8a3lc16rlekao+Txw3J
S2Q2PgG/cjpbVcDOCEN47i3pzJOU43GlE0ktdsSQ6i9KZwHKI46YuQS2vlqOFKSD
C6geXDm3k0s6o35FPpOpQkvtK57dgmfV+x/L30gk7iF2UBcL6nz8SXQ8eSpVEdwB
jDrosM1gq3X4fEyL0uuazC8B7ZZyDR5FfD1wzw0RIXF5Owiu9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLPDZAVDcEhz3ocRoK4A1iqn1apdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jNzUw
NGM0Yi03NTE0LTQ2NGUtYTc5ZS0xZjRiNDYyYzdlN2MvMWEwMjcwZmEtNDIzYi0z
YTE2LTljYTgtMGI2NTNhYjc4MWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzc1MDRjNGItNzUxNC00NjRlLWE3
OWUtMWY0YjQ2MmM3ZTdjL2M3NTA0YzRiLTc1MTQtNDY0ZS1hNzllLTFmNGI0NjJj
N2U3Yy5jcmwwHwYDVR0jBBgwFoAUvbHPu9He05W07+vYH5fZudffRQowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jNzUwNGM0Yi03NTE0LTQ2NGUtYTc5ZS0xZjRi
NDYyYzdlN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqvkAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGMf1COWfFvUxjuecLtOGNlT6tt2lVNTQ8tKe76LNGf2zPPfV1i/xb07
P6lmphTb+gKyhGLChtNPC1Bfd4p0itRM3mPpBgq3hLEZOx1iWeGjvEXSvqNhKyCB
AHWM+367MSSEJCz7ZGBF3LudxNH9ySD924YNOx20RMeqEtCXAdEy/Cl/0pY9Y46W
DrLyMnTmVBw8/zN059MArGADpahFHrnQEq9jzzoylWgXLb6KE+tt1DKn/s5Fon+r
4VXkDVtrA7lPMhCBTn4tl3ruoO/lpVb/8g5IyHsoYgqYAxIPkoTqr23A38fUcfo4
gMZrn+55phGYSB9wANACbvEJdgMpojE=
-----END CERTIFICATE-----
Generated at Thu May 8 23:24:33 2025 by rpki-client