Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/5537a5d8-b701-3f7a-846f-a3abc4709ea7.roa
File: 5537a5d8-b701-3f7a-846f-a3abc4709ea7.roa (raw, json)
Hash identifier: sFIPeC72a51ixNS+OE8BwFZPY5FVM/ueGwHYBqXuP2o=
Subject key identifier: 5A:DF:0E:E3:00:4E:CB:CB:CF:71:7B:39:B8:FA:BE:EC:BC:55:77:A2
Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Certificate serial: 010D0C9F432858480EA50C809AE8566C5083B980
Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/5537a5d8-b701-3f7a-846f-a3abc4709ea7.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 16509
IP address blocks: 170.176.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:0c:80:9a:e8:56:6c:50:83:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=286c3950-6f23-4d96-98d9-33ce3c987d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9f:8a:83:38:5b:42:c4:63:42:b5:96:6b:51:
a9:f5:52:6b:20:a9:c3:e3:3c:42:40:99:f6:5e:b9:
28:30:53:78:d8:fb:99:2a:91:d7:a5:96:d6:10:c4:
c6:9a:ed:71:42:7e:43:03:8e:d8:54:a7:d7:93:0f:
7d:4e:95:1c:cd:da:32:d0:52:3c:29:47:89:aa:27:
16:80:cc:df:d8:b8:1d:00:b7:7f:60:27:57:4d:0f:
2d:75:27:af:8a:e5:13:fa:9e:c7:87:3d:ae:25:86:
4b:ad:70:35:ad:69:cd:02:07:1f:15:29:d3:b7:0d:
4a:59:fd:03:c2:b0:34:8e:27:42:80:c8:53:86:ae:
86:ee:4c:79:26:5b:b9:2b:1b:e2:28:14:02:1a:a3:
40:00:96:fa:a1:d5:d7:1b:1a:d0:dc:4a:e1:52:11:
4c:b0:cc:bd:3e:95:24:45:b3:4e:9e:05:af:05:8f:
f3:86:cd:94:ac:31:53:76:16:02:9b:d7:31:98:77:
79:1e:d1:0b:bb:b3:fd:0c:5e:fd:c6:9b:95:0a:a7:
dd:d0:91:38:19:44:c7:b7:35:37:ae:75:ca:71:50:
fb:9c:38:d0:16:2e:23:1f:5c:26:69:58:9d:10:13:
cb:a7:da:98:9c:a4:35:6b:ec:ad:e7:0a:1a:df:a0:
db:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DF:0E:E3:00:4E:CB:CB:CF:71:7B:39:B8:FA:BE:EC:BC:55:77:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/5537a5d8-b701-3f7a-846f-a3abc4709ea7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl
X509v3 Authority Key Identifier:
keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
sbgp-ipAddrBlock: critical
IPv4:
170.176.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:db:50:d1:b2:ec:0d:41:80:69:be:d1:11:99:06:ed:4b:3f:
ba:48:a2:70:41:a0:a0:cc:ee:0f:8e:20:a3:ca:e8:94:28:8b:
1c:8f:59:11:e6:fa:21:5d:b7:5f:0b:45:da:d5:38:03:5e:e9:
34:fc:b0:27:43:ef:fb:ef:b9:a2:3b:6f:b8:65:cb:6e:ad:a6:
1d:8a:23:e6:fb:b4:f4:ba:68:5c:f6:f6:44:d8:dd:1b:3e:0e:
39:f5:35:fa:43:bc:59:f2:d0:fd:5d:6f:85:e4:e0:24:12:a8:
f9:1b:21:f8:93:23:e9:e6:c6:7a:2d:50:92:5a:91:06:0d:b1:
f9:4e:ae:32:f1:93:0e:5d:e4:cd:81:9c:20:a6:5c:d1:2b:79:
bd:84:3b:61:75:8c:80:04:9a:5a:83:a0:9e:5f:4a:ba:3e:58:
9a:88:4c:d9:3a:19:f8:a3:b6:a1:3f:a9:f0:02:cf:b9:48:9b:
8a:96:5c:51:9b:63:55:f5:b3:96:e1:98:d7:07:91:1f:35:64:
b5:ab:d7:0b:1d:b9:c5:5e:1c:46:36:dd:7f:5a:39:1c:ab:da:
4e:46:ae:f8:07:63:c3:9b:19:3b:9c:d0:17:7a:8b:50:1b:9b:
97:b3:4d:f4:ad:1e:b6:0b:03:4d:68:20:b0:ce:41:dc:98:a3:
a4:80:fb:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgOpQyAmuhWbFCDuYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk
Y2M0MB4XDTI0MTIwMTAyMDAzOVoXDTI1MDMwMTAyMDAzOVowLzEtMCsGA1UEAxMk
Mjg2YzM5NTAtNmYyMy00ZDk2LTk4ZDktMzNjZTNjOTg3ZDY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgp+KgzhbQsRjQrWWa1Gp9VJrIKnD4zxCQJn2
XrkoMFN42PuZKpHXpZbWEMTGmu1xQn5DA47YVKfXkw99TpUczdoy0FI8KUeJqicW
gMzf2LgdALd/YCdXTQ8tdSeviuUT+p7Hhz2uJYZLrXA1rWnNAgcfFSnTtw1KWf0D
wrA0jidCgMhThq6G7kx5Jlu5KxviKBQCGqNAAJb6odXXGxrQ3ErhUhFMsMy9PpUk
RbNOngWvBY/zhs2UrDFTdhYCm9cxmHd5HtELu7P9DF79xpuVCqfd0JE4GUTHtzU3
rnXKcVD7nDjQFi4jH1wmaVidEBPLp9qYnKQ1a+yt5woa36DbCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFrfDuMATsvLz3F7Obj6vuy8VXeiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk
ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvNTUzN2E1ZDgtYjcwMS0z
ZjdhLTg0NmYtYTNhYmM0NzA5ZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz
MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3
ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5
M2ZhN2RjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrCcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALfbUNGy7A1BgGm+0RGZBu1LP7pIonBBoKDM7g+OIKPK6JQoixyPWRHm
+iFdt18LRdrVOANe6TT8sCdD7/vvuaI7b7hly26tph2KI+b7tPS6aFz29kTY3Rs+
Djn1NfpDvFny0P1db4Xk4CQSqPkbIfiTI+nmxnotUJJakQYNsflOrjLxkw5d5M2B
nCCmXNEreb2EO2F1jIAEmlqDoJ5fSro+WJqITNk6GfijtqE/qfACz7lIm4qWXFGb
Y1X1s5bhmNcHkR81ZLWr1wsducVeHEY23X9aORyr2k5GrvgHY8ObGTuc0Bd6i1Ab
m5ezTfStHrYLA01oILDOQdyYo6SA+74=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:52 2025 by rpki-client