Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/e8701d46-d019-31ab-beee-5bfc34ed3804.roa
File: e8701d46-d019-31ab-beee-5bfc34ed3804.roa (raw, json)
Hash identifier: xQKL7z3XRM8Pw98/QiOa/9QhNkr9+N3qo+27glsKPpE=
Subject key identifier: B8:A9:FE:2B:05:B4:30:2F:1E:B8:3E:78:9B:5B:1B:C7:52:36:37:74
Certificate issuer: /CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1
Certificate serial: 010D0C9F432858482EC006A7C18B41C1A68E2280
Authority key identifier: 34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/e8701d46-d019-31ab-beee-5bfc34ed3804.roa
Signing time: Thu 12 Dec 2024 14:00:51 +0000
ROA not before: Thu 12 Dec 2024 14:00:51 +0000
ROA not after: Wed 12 Mar 2025 13:00:51 +0000
asID: 18986
IP address blocks: 173.255.152.0/24 maxlen: 24
173.255.153.0/24 maxlen: 24
173.255.154.0/24 maxlen: 24
173.255.155.0/24 maxlen: 24
173.255.156.0/23 maxlen: 23
173.255.158.0/24 maxlen: 24
173.255.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2e:c0:06:a7:c1:8b:41:c1:a6:8e:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1
Validity
Not Before: Dec 12 14:00:51 2024 GMT
Not After : Mar 12 13:00:51 2025 GMT
Subject: CN=52875d3b-c1ec-4800-993e-549e9dbe0502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1b:bf:fa:2e:dd:65:66:a5:49:ba:cf:5c:95:
07:85:d8:4b:f7:96:0e:2a:d6:b0:ba:3b:b0:2d:ac:
4a:cb:4a:cf:05:7d:61:c0:7f:5a:e2:0a:be:f2:0b:
51:f5:fc:b3:de:3a:bb:c6:f5:db:9c:c4:ed:b2:e2:
d8:8c:de:04:a9:6b:6a:d3:ab:3f:b6:59:c5:4e:e5:
32:da:8c:5f:3d:8c:2e:02:8d:a3:87:be:f7:28:b8:
1e:ef:47:66:98:bd:55:28:c9:4a:9f:2e:3e:a9:f5:
94:bc:55:d8:93:33:ce:0d:63:76:3c:42:65:8e:d2:
04:37:0b:5c:d7:71:58:3e:5f:31:b4:45:21:82:21:
31:f3:98:b0:f2:0e:57:05:c3:6f:21:ca:17:65:40:
4e:d6:e5:b3:bd:32:17:da:fd:f6:1e:6b:5a:d5:0e:
83:3f:d0:36:36:5d:df:e5:3e:f9:fa:f5:4d:15:ef:
ef:97:27:e2:f6:da:ae:36:ec:4d:55:dc:eb:5d:35:
31:99:6e:37:7b:aa:5b:1d:78:44:70:1f:6f:d3:94:
9a:51:82:86:b9:02:20:c7:cb:b5:47:d7:42:92:e7:
dd:40:44:fd:3e:bc:b8:56:b7:54:9f:d6:5e:35:0a:
fa:08:ed:57:80:f6:f3:4f:d7:5a:e0:f2:14:c5:62:
cd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A9:FE:2B:05:B4:30:2F:1E:B8:3E:78:9B:5B:1B:C7:52:36:37:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/e8701d46-d019-31ab-beee-5bfc34ed3804.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl
X509v3 Authority Key Identifier:
keyid:34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer
sbgp-ipAddrBlock: critical
IPv4:
173.255.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:b5:d9:43:be:c3:50:b0:76:ef:c4:02:5d:37:3d:f2:d4:db:
42:50:a5:f9:ca:e8:63:00:f7:9f:1c:0c:6e:9f:64:ee:86:09:
9f:83:56:c1:c8:db:de:51:2e:4b:e4:51:57:75:da:71:1d:bd:
dd:7f:b6:8a:48:1e:e5:92:97:a8:e8:89:c7:9a:f6:91:f7:66:
1e:ec:ea:6f:31:9f:19:c0:8f:03:9c:ea:a9:86:32:e4:f6:44:
e0:dc:ea:27:df:6f:af:bf:47:2b:3b:93:4b:4b:94:b3:96:09:
60:9c:0b:c9:85:43:76:44:0e:5e:0e:19:2d:c7:75:82:d1:0c:
e0:7c:2f:fc:ae:48:64:65:fc:4b:69:c4:da:a1:bc:34:16:6e:
08:d7:32:44:3f:f0:65:f4:14:7a:99:69:21:aa:2b:4a:7d:ae:
7a:38:4d:02:58:6a:a5:ce:28:ec:4e:6e:60:7d:01:e1:e4:c6:
a0:cb:b4:11:37:a1:27:33:85:46:e4:19:c6:91:5f:0b:e4:ac:
2c:12:b7:30:d5:56:38:69:9c:3b:23:ce:22:66:ca:96:21:a9:
86:89:e5:ab:e8:27:ea:36:60:26:cc:73:a0:5f:74:17:ec:c4:
94:77:07:5e:b4:66:4f:56:64:09:69:ff:e1:40:d9:fc:15:95:
c5:5c:95:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEguwAanwYtBwaaOIoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVhM2YwODgtMDViNy00NzBhLTlhZjUtNDViZDI1ZWU4
ZmMxMB4XDTI0MTIxMjE0MDA1MVoXDTI1MDMxMjEzMDA1MVowLzEtMCsGA1UEAxMk
NTI4NzVkM2ItYzFlYy00ODAwLTk5M2UtNTQ5ZTlkYmUwNTAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBu/+i7dZWalSbrPXJUHhdhL95YOKtawujuw
LaxKy0rPBX1hwH9a4gq+8gtR9fyz3jq7xvXbnMTtsuLYjN4EqWtq06s/tlnFTuUy
2oxfPYwuAo2jh773KLge70dmmL1VKMlKny4+qfWUvFXYkzPODWN2PEJljtIENwtc
13FYPl8xtEUhgiEx85iw8g5XBcNvIcoXZUBO1uWzvTIX2v32Hmta1Q6DP9A2Nl3f
5T75+vVNFe/vlyfi9tquNuxNVdzrXTUxmW43e6pbHXhEcB9v05SaUYKGuQIgx8u1
R9dCkufdQET9Pry4VrdUn9ZeNQr6CO1XgPbzT9da4PIUxWLNdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLip/isFtDAvHrg+eJtbG8dSNjd0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNWEz
ZjA4OC0wNWI3LTQ3MGEtOWFmNS00NWJkMjVlZThmYzEvZTg3MDFkNDYtZDAxOS0z
MWFiLWJlZWUtNWJmYzM0ZWQzODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzVhM2YwODgtMDViNy00NzBhLTlh
ZjUtNDViZDI1ZWU4ZmMxLzM1YTNmMDg4LTA1YjctNDcwYS05YWY1LTQ1YmQyNWVl
OGZjMS5jcmwwHwYDVR0jBBgwFoAUNK7WIvW+qxwynlURzXYDdVCcFwUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8zNWEzZjA4OC0wNWI3LTQ3MGEtOWFmNS00NWJk
MjVlZThmYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrf+YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAES12UO+w1Cwdu/EAl03PfLU20JQpfnK6GMA958cDG6fZO6GCZ+DVsHI
295RLkvkUVd12nEdvd1/topIHuWSl6joicea9pH3Zh7s6m8xnxnAjwOc6qmGMuT2
RODc6iffb6+/Rys7k0tLlLOWCWCcC8mFQ3ZEDl4OGS3HdYLRDOB8L/yuSGRl/Etp
xNqhvDQWbgjXMkQ/8GX0FHqZaSGqK0p9rno4TQJYaqXOKOxObmB9AeHkxqDLtBE3
oSczhUbkGcaRXwvkrCwStzDVVjhpnDsjziJmypYhqYaJ5avoJ+o2YCbMc6BfdBfs
xJR3B160Zk9WZAlp/+FA2fwVlcVclcM=
-----END CERTIFICATE-----
Generated at Tue Apr 29 20:19:02 2025 by rpki-client