Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/a805dcee-de5f-32cd-8460-f5c507fc9aac.roa
File: a805dcee-de5f-32cd-8460-f5c507fc9aac.roa (raw, json)
Hash identifier: W9y7k03kd+r4uOJQe+hibkdXd+Wy2q33CTwK+zTw3hA=
Subject key identifier: 1A:11:9C:4C:F2:3C:83:2B:E1:72:C2:46:9C:12:4E:13:4D:6C:B3:B0
Certificate issuer: /CN=b8a29c46-e0f1-4edc-988a-9420affbc339
Certificate serial: 010D0C9F432858486695BFD19E421AFB4803F940
Authority key identifier: AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/a805dcee-de5f-32cd-8460-f5c507fc9aac.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 205627
IP address blocks: 170.2.122.0/23 maxlen: 24
170.2.124.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:bf:d1:9e:42:1a:fb:48:03:f9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8a29c46-e0f1-4edc-988a-9420affbc339
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=0cf6343d-141f-4574-a8ab-1c977049a3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:35:76:eb:62:b6:85:83:28:e5:5a:5b:09:bc:
59:20:7e:0a:2f:ff:49:c6:e3:7a:9c:87:ef:ac:d0:
35:38:65:c9:11:69:93:42:a2:a8:a8:c2:96:af:2a:
3b:98:22:d5:e9:e0:91:38:a2:93:51:cc:e6:2b:04:
fb:81:d0:4f:59:55:86:c8:ee:6e:52:49:6e:d2:7c:
74:0a:6c:5d:77:c3:47:48:e0:bd:e0:90:cd:42:08:
18:7c:71:f6:7d:6b:de:15:1e:ac:b6:fc:ac:f5:a2:
09:12:2a:b1:92:ef:22:86:7c:86:c1:d1:11:da:5b:
db:3d:9f:71:e3:16:57:d0:1e:24:c1:ab:79:29:55:
ca:e3:14:49:9a:5b:5d:59:10:98:68:04:0c:b0:e2:
9f:b2:cd:2c:24:e6:65:d5:df:d6:96:70:33:30:2c:
a5:2d:16:a7:48:75:22:1f:0c:f3:4b:62:7e:08:93:
57:b0:ff:0f:00:c3:c8:cb:56:18:29:1d:6b:b8:1b:
e7:40:1f:26:d3:d1:aa:e4:13:7a:82:a3:d1:64:65:
58:c6:d3:db:09:2c:d1:ee:d1:55:88:e0:14:59:73:
81:34:35:2d:86:bc:e3:96:ba:55:f6:e3:e0:c6:a3:
63:f2:ca:b5:9f:0f:ff:ad:46:ef:54:3c:26:93:56:
44:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:11:9C:4C:F2:3C:83:2B:E1:72:C2:46:9C:12:4E:13:4D:6C:B3:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/a805dcee-de5f-32cd-8460-f5c507fc9aac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl
X509v3 Authority Key Identifier:
keyid:AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer
sbgp-ipAddrBlock: critical
IPv4:
170.2.122.0-170.2.125.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:88:38:56:af:12:81:16:6b:14:f5:ad:93:2b:90:75:e2:66:
0a:54:32:75:d7:f3:54:fb:bb:54:36:f9:72:88:28:33:6e:25:
73:1d:9a:4b:45:bc:5e:f6:dc:a3:a1:04:b7:0f:fc:0d:13:90:
5f:0e:87:e1:df:a4:53:42:d9:74:58:da:4e:23:37:b2:bc:50:
8f:05:b7:86:f0:b5:6e:78:a4:e3:93:50:70:a9:19:97:ea:45:
09:5c:1f:2d:bd:6f:98:ca:27:e5:19:e6:cc:43:06:51:92:c6:
90:64:a0:9d:8b:4c:bd:85:53:d2:6d:d3:83:b5:42:a9:12:5b:
5c:d6:20:a6:52:95:28:01:88:e9:0e:5f:05:c6:11:92:e6:6a:
ce:a9:4c:07:51:eb:0e:fb:0f:6b:e3:3e:6d:c9:f1:83:3b:d8:
47:1f:51:71:9c:e1:3b:d6:6e:64:0c:15:f1:b3:6b:38:e5:a2:
e2:d5:c4:84:6b:0b:06:4a:10:a1:65:94:9f:54:d5:09:fd:ab:
23:5d:c6:63:86:07:bf:96:c2:7d:6d:81:f8:24:32:61:d0:5d:
2a:b1:58:30:c5:96:4d:86:bc:c1:3e:fc:1c:16:cb:57:63:dd:
e6:b3:79:a4:a0:f7:7b:52:a8:54:13:65:68:48:67:83:fd:49:
92:8f:fc:df
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEhmlb/RnkIa+0gD+UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhhMjljNDYtZTBmMS00ZWRjLTk4OGEtOTQyMGFmZmJj
MzM5MB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk
MGNmNjM0M2QtMTQxZi00NTc0LWE4YWItMWM5NzcwNDlhM2Y0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzV262K2hYMo5VpbCbxZIH4KL/9JxuN6nIfv
rNA1OGXJEWmTQqKoqMKWryo7mCLV6eCROKKTUczmKwT7gdBPWVWGyO5uUklu0nx0
Cmxdd8NHSOC94JDNQggYfHH2fWveFR6stvys9aIJEiqxku8ihnyGwdER2lvbPZ9x
4xZX0B4kwat5KVXK4xRJmltdWRCYaAQMsOKfss0sJOZl1d/WlnAzMCylLRanSHUi
HwzzS2J+CJNXsP8PAMPIy1YYKR1ruBvnQB8m09Gq5BN6gqPRZGVYxtPbCSzR7tFV
iOAUWXOBNDUthrzjlrpV9uPgxqNj8sq1nw//rUbvVDwmk1ZEtQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFBoRnEzyPIMr4XLCRpwSThNNbLOwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iOGEy
OWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIwYWZmYmMzMzkvYTgwNWRjZWUtZGU1Zi0z
MmNkLTg0NjAtZjVjNTA3ZmM5YWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjhhMjljNDYtZTBmMS00ZWRjLTk4
OGEtOTQyMGFmZmJjMzM5L2I4YTI5YzQ2LWUwZjEtNGVkYy05ODhhLTk0MjBhZmZi
YzMzOS5jcmwwHwYDVR0jBBgwFoAUrluRChr3agr5yGG6uSyArkHgeRQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9iOGEyOWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIw
YWZmYmMzMzkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGqAnoD
BAGqAnwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAnog4Vq8SgRZrFPWtkyuQdeJmClQyddfzVPu7VDb5cogo
M24lcx2aS0W8Xvbco6EEtw/8DROQXw6H4d+kU0LZdFjaTiM3srxQjwW3hvC1bnik
45NQcKkZl+pFCVwfLb1vmMon5RnmzEMGUZLGkGSgnYtMvYVT0m3Tg7VCqRJbXNYg
plKVKAGI6Q5fBcYRkuZqzqlMB1HrDvsPa+M+bcnxgzvYRx9RcZzhO9ZuZAwV8bNr
OOWi4tXEhGsLBkoQoWWUn1TVCf2rI13GY4YHv5bCfW2B+CQyYdBdKrFYMMWWTYa8
wT78HBbLV2Pd5rN5pKD3e1KoVBNlaEhng/1Jko/83w==
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:25:34 2025 by rpki-client