Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f4c8042-28a7-306f-bc00-576bc266f8e8.roa
File: 8f4c8042-28a7-306f-bc00-576bc266f8e8.roa (raw, json)
Hash identifier: i66UUiFoMeWy/Pwi++Akgs1YNvR6mcP7nnKy0Eo6Nl8=
Subject key identifier: A1:73:30:4B:CD:F3:0F:FB:99:40:8A:9D:96:A6:F0:B5:E3:91:46:DC
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62AA569A6BE25E89C404100
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f4c8042-28a7-306f-bc00-576bc266f8e8.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 396982
IP address blocks: 172.253.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:a5:69:a6:be:25:e8:9c:40:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=139a8f03-ee3b-49a8-b3f5-264e048adab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2d:bf:04:7d:5c:98:26:1a:18:fb:b1:4d:ec:
a3:71:9e:cb:ec:5c:e8:3c:51:44:ed:5f:a5:c5:c4:
31:c8:f9:71:da:0e:5a:b0:94:47:58:79:6a:44:54:
34:37:e3:b4:b3:2d:a5:29:e2:a7:24:a1:a7:8c:55:
26:2d:6d:f3:4e:5b:14:53:23:83:96:95:29:ed:3a:
5c:dd:a7:37:07:3b:16:2b:5d:e4:35:34:f8:36:b8:
bf:0c:27:05:d7:60:00:af:b3:8f:05:cc:8e:f5:96:
be:26:b9:23:99:46:fd:aa:d9:63:fd:6a:7e:d6:27:
15:27:03:82:0e:25:90:a0:58:b9:6f:37:bd:32:08:
ad:c5:f4:60:2e:f8:17:d3:16:76:7d:fa:e5:aa:b8:
e4:e8:aa:45:18:03:6c:f6:67:21:c6:f1:bb:07:39:
b0:92:c7:f9:86:48:9f:d1:1d:3c:d6:c7:43:ae:25:
ed:f9:45:42:88:c3:25:46:57:7c:a3:4b:fe:61:72:
f5:53:61:2c:06:77:f1:51:93:e9:c4:0d:c0:b4:cc:
1b:69:54:fc:b3:ca:18:12:5f:69:8e:0a:54:6e:70:
34:dc:ca:32:3b:5f:5b:d4:f7:04:8a:fc:de:39:2a:
a4:f9:1e:b1:f3:3b:f7:d6:de:cb:a6:6c:fb:ca:93:
bf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:73:30:4B:CD:F3:0F:FB:99:40:8A:9D:96:A6:F0:B5:E3:91:46:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f4c8042-28a7-306f-bc00-576bc266f8e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.253.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:85:11:69:26:2d:b7:9c:6c:4e:a1:cc:e5:20:9b:5b:b9:33:
e9:1c:db:fa:ef:56:7d:33:cc:a2:ad:2b:a5:8d:ae:5a:a4:64:
39:c4:4c:8c:4c:ed:fc:92:dd:23:e0:b8:a4:87:a0:1e:df:70:
43:d8:5f:5d:75:b8:2c:ea:7d:4f:db:3d:0d:cd:84:2f:fe:bb:
ff:c2:ce:1e:9c:d5:97:ce:51:11:f7:5f:54:8a:fb:35:5d:67:
de:85:95:2f:86:4f:04:f2:f9:07:53:da:ad:cb:af:f8:0c:3b:
5d:1e:c1:05:ad:91:bf:ca:e0:ac:8a:43:83:b5:2c:c4:2c:d7:
23:36:dc:10:fe:3b:a7:d8:e4:c0:ae:11:b5:07:99:47:28:89:
d6:2c:c9:77:5c:47:94:d7:6d:a7:f8:31:3f:9c:ed:35:b6:a2:
c2:04:9f:ff:d3:2d:c5:fd:a6:4f:ef:fc:09:a9:53:8a:ff:e0:
26:21:f6:2a:1f:c5:2a:50:23:e4:7e:d7:8c:c7:b2:97:61:a7:
d1:c9:05:6f:e2:0d:be:20:3e:d3:37:fb:42:40:17:4b:59:d4:
41:f0:c4:b6:d3:df:b5:2c:d6:3e:91:7a:02:6f:a0:7b:c7:a9:
6b:a4:04:4e:8b:d5:86:4d:c0:f8:45:3f:dc:12:50:48:01:3c:
f4:9d:be:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKqVppr4l6JxAQQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
MTM5YThmMDMtZWUzYi00OWE4LWIzZjUtMjY0ZTA0OGFkYWIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjC2/BH1cmCYaGPuxTeyjcZ7L7FzoPFFE7V+l
xcQxyPlx2g5asJRHWHlqRFQ0N+O0sy2lKeKnJKGnjFUmLW3zTlsUUyODlpUp7Tpc
3ac3BzsWK13kNTT4Nri/DCcF12AAr7OPBcyO9Za+JrkjmUb9qtlj/Wp+1icVJwOC
DiWQoFi5bze9MgitxfRgLvgX0xZ2ffrlqrjk6KpFGANs9mchxvG7Bzmwksf5hkif
0R081sdDriXt+UVCiMMlRld8o0v+YXL1U2EsBnfxUZPpxA3AtMwbaVT8s8oYEl9p
jgpUbnA03MoyO19b1PcEivzeOSqk+R6x8zv31t7Lpmz7ypO/xwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKFzMEvN8w/7mUCKnZam8LXjkUbcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGY0YzgwNDItMjhhNy0z
MDZmLWJjMDAtNTc2YmMyNjZmOGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErP0QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFuFEWkmLbecbE6hzOUgm1u5M+kc2/rvVn0zzKKtK6WNrlqkZDnETIxM
7fyS3SPguKSHoB7fcEPYX111uCzqfU/bPQ3NhC/+u//Czh6c1ZfOURH3X1SK+zVd
Z96FlS+GTwTy+QdT2q3Lr/gMO10ewQWtkb/K4KyKQ4O1LMQs1yM23BD+O6fY5MCu
EbUHmUcoidYsyXdcR5TXbaf4MT+c7TW2osIEn//TLcX9pk/v/AmpU4r/4CYh9iof
xSpQI+R+14zHspdhp9HJBW/iDb4gPtM3+0JAF0tZ1EHwxLbT37Us1j6RegJvoHvH
qWukBE6L1YZNwPhFP9wSUEgBPPSdvrE=
-----END CERTIFICATE-----
Generated at Fri May 9 12:42:11 2025 by rpki-client