Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/b2efcee3-c214-3e02-92aa-9064905257d6.roa
File: b2efcee3-c214-3e02-92aa-9064905257d6.roa (raw, json)
Hash identifier: y38Dmgz2C+V0A3CIoIEaZpbbMm74fNiuWs1Duo2Q/BE=
Subject key identifier: C3:D8:6E:6B:4B:D2:E1:F7:57:BF:2A:66:A1:3A:AE:B8:FE:20:63:C3
Certificate issuer: /CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f
Certificate serial: 010D0C9F4328584907E87E0E74CFDC5032826700
Authority key identifier: 3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/b2efcee3-c214-3e02-92aa-9064905257d6.roa
Signing time: Fri 28 Feb 2025 08:52:56 +0000
ROA not before: Fri 28 Feb 2025 08:52:56 +0000
ROA not after: Thu 29 May 2025 07:52:56 +0000
asID: 8888
IP address blocks: 167.253.157.0/24 maxlen: 24
167.253.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:e8:7e:0e:74:cf:dc:50:32:82:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f
Validity
Not Before: Feb 28 08:52:56 2025 GMT
Not After : May 29 07:52:56 2025 GMT
Subject: CN=1e06bb3b-6b37-4088-8350-bb9dadcf5b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:df:e3:c1:f9:0e:0a:89:0c:54:d7:c7:7d:b8:
1b:ec:1d:22:ed:ba:7c:ef:44:99:e4:e2:95:3b:44:
0d:c5:a7:c1:f8:b4:66:ca:32:9b:2b:f5:68:76:b0:
54:07:7b:76:47:5c:27:71:b6:86:dd:30:18:c1:32:
c0:bb:ed:72:99:b4:60:21:ab:90:1e:2d:29:8a:8f:
57:c5:9e:ed:9b:2c:60:cb:1b:8c:f6:e2:0d:c6:8b:
5e:1c:0c:31:85:51:1e:43:aa:eb:c7:81:a6:51:e3:
44:94:2b:e7:22:d0:22:e0:cd:de:ec:7b:de:35:60:
d1:6a:94:6f:9a:ed:12:1b:9c:c5:2e:04:a4:ec:c0:
92:a4:17:7c:18:49:fd:e2:76:3b:c9:93:b0:88:28:
97:02:39:56:c2:23:6c:03:d8:e8:35:fc:09:64:8c:
da:aa:20:e0:19:df:e3:8c:27:50:c6:2c:f2:81:71:
18:1f:a6:7b:27:b6:43:ad:37:98:cf:3f:73:c0:75:
cd:9a:d7:16:67:d0:03:6e:52:20:ad:17:40:f0:8d:
20:80:02:89:fc:fe:e7:92:df:cb:fa:b0:d7:82:bf:
8a:34:43:73:30:b2:1b:a4:dd:bc:d4:cf:b2:ad:e4:
fc:fe:69:06:a1:40:28:91:15:ea:65:b6:93:cb:a7:
b2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D8:6E:6B:4B:D2:E1:F7:57:BF:2A:66:A1:3A:AE:B8:FE:20:63:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/b2efcee3-c214-3e02-92aa-9064905257d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl
X509v3 Authority Key Identifier:
keyid:3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer
sbgp-ipAddrBlock: critical
IPv4:
167.253.157.0/24
167.253.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:30:a3:37:a2:fe:c4:59:d0:c1:b6:68:cd:60:06:80:75:25:
59:e3:64:9e:c6:0e:a6:8a:95:b6:65:eb:ed:97:3f:1f:85:c2:
df:ec:41:15:77:1d:59:f3:6d:3a:89:e8:4d:9f:f8:2e:36:48:
ed:5a:32:99:37:d7:4e:69:e5:43:c4:ca:e6:80:04:73:ca:97:
9b:40:6f:a0:9c:8e:3c:60:f9:01:49:91:48:c7:ef:18:f0:dd:
50:c1:bf:ee:25:fa:ee:55:49:f2:95:e0:85:98:28:06:ba:30:
d4:e0:5e:c0:e5:66:c3:57:02:79:40:3a:d9:37:27:38:16:b6:
e7:ed:f4:6b:1f:1f:fd:e8:9d:85:3d:1b:dd:cb:06:91:93:7f:
1d:c2:6f:80:22:db:41:d1:51:18:97:7f:69:16:dc:ac:5b:be:
9a:28:76:d4:01:4a:2f:5d:3f:8c:c6:58:ac:7b:5f:f1:85:64:
3c:1d:22:94:db:49:ea:a2:78:43:70:05:5d:0a:ba:02:95:a2:
86:83:be:58:02:5e:da:51:a7:6d:a1:9e:e1:c2:f3:6b:59:73:
ad:d5:36:47:3f:83:d4:4c:07:c9:3d:23:b6:07:2a:6a:54:d7:
e2:d4:f1:ba:07:71:01:d0:87:4f:91:2e:17:0a:5a:84:5d:83:
e1:3b:06:d0
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEkH6H4OdM/cUDKCZwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTNiOTg2MTYtZTRmOC00Yzc2LTg0MTAtY2I0YjZkOTNj
ODVmMB4XDTI1MDIyODA4NTI1NloXDTI1MDUyOTA3NTI1NlowLzEtMCsGA1UEAxMk
MWUwNmJiM2ItNmIzNy00MDg4LTgzNTAtYmI5ZGFkY2Y1YjBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd/jwfkOCokMVNfHfbgb7B0i7bp870SZ5OKV
O0QNxafB+LRmyjKbK/VodrBUB3t2R1wncbaG3TAYwTLAu+1ymbRgIauQHi0pio9X
xZ7tmyxgyxuM9uINxoteHAwxhVEeQ6rrx4GmUeNElCvnItAi4M3e7HveNWDRapRv
mu0SG5zFLgSk7MCSpBd8GEn94nY7yZOwiCiXAjlWwiNsA9joNfwJZIzaqiDgGd/j
jCdQxizygXEYH6Z7J7ZDrTeYzz9zwHXNmtcWZ9ADblIgrRdA8I0ggAKJ/P7nkt/L
+rDXgr+KNENzMLIbpN281M+yreT8/mkGoUAokRXqZbaTy6eyMQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFMPYbmtL0uH3V78qZqE6rrj+IGPDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hM2I5
ODYxNi1lNGY4LTRjNzYtODQxMC1jYjRiNmQ5M2M4NWYvYjJlZmNlZTMtYzIxNC0z
ZTAyLTkyYWEtOTA2NDkwNTI1N2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTNiOTg2MTYtZTRmOC00Yzc2LTg0
MTAtY2I0YjZkOTNjODVmL2EzYjk4NjE2LWU0ZjgtNGM3Ni04NDEwLWNiNGI2ZDkz
Yzg1Zi5jcmwwHwYDVR0jBBgwFoAUO+HB9azWjjCuxozloUMTYHSe2F4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hM2I5ODYxNi1lNGY4LTRjNzYtODQxMC1jYjRi
NmQ5M2M4NWYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAp/2dAwQA
p/2fMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAL4wozei/sRZ0MG2aM1gBoB1JVnjZJ7GDqaKlbZl6+2XPx+F
wt/sQRV3HVnzbTqJ6E2f+C42SO1aMpk3105p5UPEyuaABHPKl5tAb6Ccjjxg+QFJ
kUjH7xjw3VDBv+4l+u5VSfKV4IWYKAa6MNTgXsDlZsNXAnlAOtk3JzgWtuft9Gsf
H/3onYU9G93LBpGTfx3Cb4Ai20HRURiXf2kW3KxbvpoodtQBSi9dP4zGWKx7X/GF
ZDwdIpTbSeqieENwBV0KugKVooaDvlgCXtpRp22hnuHC82tZc63VNkc/g9RMB8k9
I7YHKmpU1+LU8boHcQHQh0+RLhcKWoRdg+E7BtA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:44:28 2025 by rpki-client