Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/482d9b16-dd7d-3437-8c83-21265a1bc5ce.roa
File: 482d9b16-dd7d-3437-8c83-21265a1bc5ce.roa (raw, json)
Hash identifier: OjZgDA3kItPOf8fHQL94YhHf+kyzNornYxhQDyi2KF8=
Subject key identifier: 07:00:C8:53:96:C7:20:F0:5F:A7:B5:D4:80:D0:0D:7F:9D:C6:A4:80
Certificate issuer: /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial: 010D0C9F43285848ADC62402428C1F3AFEC8CC80
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/482d9b16-dd7d-3437-8c83-21265a1bc5ce.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 14793
IP address blocks: 76.164.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:24:02:42:8c:1f:3a:fe:c8:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=c2d6fb59-b048-4bbd-b1f9-24094048d2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d8:ac:91:4d:a4:48:76:f3:5f:a2:1e:20:8b:
c8:af:1f:fd:90:e7:fc:f6:a2:5e:12:70:ae:75:1c:
5b:68:2a:ea:08:ef:c0:3a:e2:de:ff:42:6f:e7:21:
23:7a:35:fe:89:f2:b2:6c:c2:2a:82:f1:67:fe:df:
1d:c3:36:11:b8:f5:75:6a:bc:76:71:8d:90:87:84:
a4:5d:23:34:15:09:69:04:8d:f2:94:6a:7e:e0:c2:
55:6a:c8:c8:5a:0c:cc:72:3d:a8:e9:25:44:b7:34:
17:a6:2c:c0:eb:78:bf:a3:7f:a8:18:e2:0b:3d:6b:
19:14:b0:cb:6b:ed:d7:77:a4:37:20:06:ab:13:86:
ce:56:4c:10:81:6d:52:df:6f:8d:12:77:f3:aa:a5:
5c:ac:7f:71:0d:94:22:94:12:60:a8:cd:b4:0c:d6:
7c:58:6f:9f:e9:cc:d1:9f:c3:e3:ca:35:d0:2a:3b:
8e:12:15:22:12:01:72:bc:ae:8f:1a:68:3a:e7:6c:
6e:67:6e:ea:b9:89:ad:78:8a:a5:4e:82:e4:23:00:
f3:a7:81:84:51:d8:86:76:9e:ef:25:96:b0:f5:29:
74:a6:d6:c6:49:19:4c:b6:39:e3:24:43:b9:4f:45:
06:86:cd:bb:08:72:5a:b4:74:6f:f0:d0:60:59:82:
e8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:00:C8:53:96:C7:20:F0:5F:A7:B5:D4:80:D0:0D:7F:9D:C6:A4:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/482d9b16-dd7d-3437-8c83-21265a1bc5ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
X509v3 Authority Key Identifier:
keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.164.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:14:9e:a0:dc:fc:6f:d1:ed:40:2a:e7:69:bd:b1:c3:d3:ce:
29:f3:74:62:2c:e6:f2:2a:ed:3b:ff:f8:c5:db:2c:c3:c5:84:
79:c7:a3:a4:65:2c:c4:3d:12:cf:c0:34:32:3f:8d:6f:31:13:
3a:b8:38:1c:b8:43:28:5b:a1:18:73:f4:5c:78:f2:99:ef:c1:
c0:bf:9c:cc:7d:ff:a1:67:71:7e:d7:51:e6:2d:e1:f5:e8:b9:
80:a1:60:17:37:f1:55:f3:fa:84:59:57:82:bf:0d:18:72:17:
16:c7:7c:b7:5e:c9:6a:36:1e:58:f9:16:08:0c:e4:2a:db:70:
75:5d:e6:12:a4:9c:57:fd:dc:62:a8:f4:34:3b:58:80:fb:47:
02:11:29:78:f2:af:43:48:70:7c:1b:d9:33:c4:66:df:7f:ac:
53:ad:f5:0e:64:28:31:2a:2d:07:b6:87:53:d6:e3:3f:da:21:
86:28:a6:bf:8f:e1:da:d9:07:a2:41:41:8c:fb:67:09:b8:8d:
13:db:7b:67:43:fe:6c:e9:6d:3a:c7:b2:fb:c7:45:43:8b:19:
de:e2:89:ac:87:32:dc:aa:63:23:9e:df:a7:41:69:a6:28:77:
e2:f7:02:b5:f2:7f:3b:e6:54:dd:f6:76:01:6f:45:c0:96:70:
b3:aa:d7:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxiQCQowfOv7IzIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQwMzc4YTktMTAzYy00NWNhLTg2OWQtN2M5MTE1Yzdi
MGY2MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk
YzJkNmZiNTktYjA0OC00YmJkLWIxZjktMjQwOTQwNDhkMmU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9iskU2kSHbzX6IeIIvIrx/9kOf89qJeEnCu
dRxbaCrqCO/AOuLe/0Jv5yEjejX+ifKybMIqgvFn/t8dwzYRuPV1arx2cY2Qh4Sk
XSM0FQlpBI3ylGp+4MJVasjIWgzMcj2o6SVEtzQXpizA63i/o3+oGOILPWsZFLDL
a+3Xd6Q3IAarE4bOVkwQgW1S32+NEnfzqqVcrH9xDZQilBJgqM20DNZ8WG+f6czR
n8PjyjXQKjuOEhUiEgFyvK6PGmg652xuZ27quYmteIqlToLkIwDzp4GEUdiGdp7v
JZaw9Sl0ptbGSRlMtjnjJEO5T0UGhs27CHJatHRv8NBgWYLo4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAcAyFOWxyDwX6e11IDQDX+dxqSAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAz
NzhhOS0xMDNjLTQ1Y2EtODY5ZC03YzkxMTVjN2IwZjYvNDgyZDliMTYtZGQ3ZC0z
NDM3LThjODMtMjEyNjVhMWJjNWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQwMzc4YTktMTAzYy00NWNhLTg2
OWQtN2M5MTE1YzdiMGY2LzBkMDM3OGE5LTEwM2MtNDVjYS04NjlkLTdjOTExNWM3
YjBmNi5jcmwwHwYDVR0jBBgwFoAUQpcvL3NZ63r1YWANDjlXhTjWG8kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAzNzhhOS0xMDNjLTQ1Y2EtODY5ZC03Yzkx
MTVjN2IwZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATKStMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABYUnqDc/G/R7UAq52m9scPTzinzdGIs5vIq7Tv/+MXbLMPFhHnHo6Rl
LMQ9Es/ANDI/jW8xEzq4OBy4QyhboRhz9Fx48pnvwcC/nMx9/6FncX7XUeYt4fXo
uYChYBc38VXz+oRZV4K/DRhyFxbHfLdeyWo2Hlj5FggM5CrbcHVd5hKknFf93GKo
9DQ7WID7RwIRKXjyr0NIcHwb2TPEZt9/rFOt9Q5kKDEqLQe2h1PW4z/aIYYopr+P
4drZB6JBQYz7Zwm4jRPbe2dD/mzpbTrHsvvHRUOLGd7iiayHMtyqYyOe36dBaaYo
d+L3ArXyfzvmVN32dgFvRcCWcLOq17Y=
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:18:23 2025 by rpki-client