Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c/8c461faa-10b4-3e1f-a382-73d4ee9fd1d0.roa
File: 8c461faa-10b4-3e1f-a382-73d4ee9fd1d0.roa (raw, json)
Hash identifier: j+byuBmseKJiE1vdS7qrQe7jMo437/nR0/PKtwNR1xI=
Subject key identifier: 73:A6:17:60:CF:E0:60:A5:ED:85:57:F4:46:0F:A1:4B:3C:EF:6B:ED
Certificate issuer: /CN=5d69368b-4714-4878-9f6c-905e98da853c
Certificate serial: 010D0C9F43285848159FF269EDD025CECB46F100
Authority key identifier: 3F:56:59:D3:78:18:67:3A:B0:07:CB:FD:BF:EA:03:ED:47:A9:B3:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c/8c461faa-10b4-3e1f-a382-73d4ee9fd1d0.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 16509
IP address blocks: 158.51.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:f2:69:ed:d0:25:ce:cb:46:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d69368b-4714-4878-9f6c-905e98da853c
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=ced39109-1f2f-4ab6-8496-bf3d81e39442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:11:bb:e9:46:69:56:87:2e:22:ad:84:ca:3b:
52:7e:7c:ef:c8:02:16:2a:af:98:57:39:85:02:6b:
e4:c4:c8:07:8b:94:38:d0:5c:14:29:4a:de:09:f3:
99:9c:5c:03:55:ab:f0:b7:db:a0:81:66:88:92:6b:
94:e6:2f:fe:fb:ec:30:25:12:8e:10:90:84:47:46:
7b:86:30:93:93:6d:cd:11:c6:3b:ea:a0:f4:37:df:
ab:5b:17:38:1f:38:b2:69:c2:16:00:38:13:35:54:
0a:93:de:e8:1e:7a:66:7e:55:59:a0:28:3c:df:e0:
2e:87:87:a7:41:31:83:cf:3d:51:4e:91:c1:77:01:
30:b2:b5:f3:c1:3a:97:28:92:02:31:17:2f:d4:37:
0b:75:b7:b3:c3:8c:06:f9:da:c1:98:f2:8e:5f:9f:
44:9f:7d:7e:94:c5:0a:b4:af:a5:56:87:7e:c1:f3:
c8:b1:9e:90:6a:39:14:e5:57:3d:56:12:4e:ad:0f:
13:86:ce:3b:16:87:b3:5e:c3:87:df:73:cb:9e:1c:
5b:69:4c:38:4a:6f:23:1c:89:56:28:6f:bc:dd:b8:
89:5d:da:dd:5c:ac:10:a3:ad:1e:45:0b:0d:0f:f2:
6c:63:a1:11:69:7c:31:87:5e:b2:a1:87:c2:1b:04:
40:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A6:17:60:CF:E0:60:A5:ED:85:57:F4:46:0F:A1:4B:3C:EF:6B:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c/8c461faa-10b4-3e1f-a382-73d4ee9fd1d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c/5d69368b-4714-4878-9f6c-905e98da853c.crl
X509v3 Authority Key Identifier:
keyid:3F:56:59:D3:78:18:67:3A:B0:07:CB:FD:BF:EA:03:ED:47:A9:B3:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c.cer
sbgp-ipAddrBlock: critical
IPv4:
158.51.65.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:e7:a6:34:cd:b2:d5:f1:61:ff:00:42:5d:88:83:5f:b0:58:
05:c3:ba:63:39:87:59:11:2f:83:50:cc:0e:3d:1f:6d:af:af:
b0:f6:10:c4:75:76:dc:4b:75:e3:05:e1:5c:e4:05:da:74:47:
45:b1:90:76:2a:6e:67:93:0b:cc:04:60:52:5f:0d:be:fa:d5:
c4:bf:a5:da:c1:56:f8:2c:fa:d5:fe:d8:b2:ae:fb:6f:3f:cb:
83:6c:66:b2:b5:16:75:91:32:4b:35:93:d3:03:22:7e:06:10:
98:24:5f:d1:d3:52:04:59:d9:d9:dc:cf:ee:26:f8:1e:68:b4:
7b:71:a1:f1:73:60:6a:20:91:d0:d0:4f:29:25:e0:95:01:ff:
11:ac:dd:a8:01:ed:06:fc:df:bc:79:a3:52:bb:d3:40:82:e0:
b9:55:0c:9e:32:b9:f9:ff:f3:60:a0:3a:8d:b8:e0:57:f4:b2:
8c:aa:03:7f:ed:3a:7f:5f:e4:0c:f1:bd:56:e5:1c:0f:b0:ea:
c5:48:a0:d8:83:e3:ef:19:50:ce:49:64:14:83:cf:94:64:90:
5d:e0:20:1a:1c:95:22:55:1b:65:b3:7d:c8:20:7f:7e:cb:4d:
3b:03:a0:39:a4:48:ac:8d:c3:f4:6f:96:f0:ef:e1:6f:ca:1e:
51:3f:24:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgVn/Jp7dAlzstG8QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ2OTM2OGItNDcxNC00ODc4LTlmNmMtOTA1ZTk4ZGE4
NTNjMB4XDTI0MTIwMzE0MDA1MloXDTI1MDMwMzE0MDA1MlowLzEtMCsGA1UEAxMk
Y2VkMzkxMDktMWYyZi00YWI2LTg0OTYtYmYzZDgxZTM5NDQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRG76UZpVocuIq2EyjtSfnzvyAIWKq+YVzmF
AmvkxMgHi5Q40FwUKUreCfOZnFwDVavwt9uggWaIkmuU5i/+++wwJRKOEJCER0Z7
hjCTk23NEcY76qD0N9+rWxc4HziyacIWADgTNVQKk97oHnpmflVZoCg83+Auh4en
QTGDzz1RTpHBdwEwsrXzwTqXKJICMRcv1DcLdbezw4wG+drBmPKOX59En31+lMUK
tK+lVod+wfPIsZ6QajkU5Vc9VhJOrQ8Ths47FoezXsOH33PLnhxbaUw4Sm8jHIlW
KG+83biJXdrdXKwQo60eRQsND/JsY6ERaXwxh16yoYfCGwRAKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHOmF2DP4GCl7YVX9EYPoUs872vtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDY5
MzY4Yi00NzE0LTQ4NzgtOWY2Yy05MDVlOThkYTg1M2MvOGM0NjFmYWEtMTBiNC0z
ZTFmLWEzODItNzNkNGVlOWZkMWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ2OTM2OGItNDcxNC00ODc4LTlm
NmMtOTA1ZTk4ZGE4NTNjLzVkNjkzNjhiLTQ3MTQtNDg3OC05ZjZjLTkwNWU5OGRh
ODUzYy5jcmwwHwYDVR0jBBgwFoAUP1ZZ03gYZzqwB8v9v+oD7Ueps3wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDY5MzY4Yi00NzE0LTQ4NzgtOWY2Yy05MDVl
OThkYTg1M2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjNBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ/npjTNstXxYf8AQl2Ig1+wWAXDumM5h1kRL4NQzA49H22vr7D2EMR1
dtxLdeMF4VzkBdp0R0WxkHYqbmeTC8wEYFJfDb761cS/pdrBVvgs+tX+2LKu+28/
y4NsZrK1FnWRMks1k9MDIn4GEJgkX9HTUgRZ2dncz+4m+B5otHtxofFzYGogkdDQ
Tykl4JUB/xGs3agB7Qb837x5o1K700CC4LlVDJ4yufn/82CgOo244Ff0soyqA3/t
On9f5AzxvVblHA+w6sVIoNiD4+8ZUM5JZBSDz5RkkF3gIBoclSJVG2Wzfcggf37L
TTsDoDmkSKyNw/RvlvDv4W/KHlE/JKg=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:30:24 2025 by rpki-client