Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/954248a7-1747-37a2-8e59-18157153fb0f.roa
File: 954248a7-1747-37a2-8e59-18157153fb0f.roa (raw, json)
Hash identifier: Z3njeA2gsc2iggi54pC7i2z/DCRyERVB3GeEPk3fYp0=
Subject key identifier: A3:07:5E:B8:81:04:9B:30:D9:A5:DF:D2:67:40:74:AD:BE:FE:EF:32
Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Certificate serial: 010D0C9F43285849002156454D63E5BA85265580
Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/954248a7-1747-37a2-8e59-18157153fb0f.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 16509
IP address blocks: 170.176.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:56:45:4d:63:e5:ba:85:26:55:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=2ae6acb9-47f5-4d79-91d8-548184dc17a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d6:98:d5:2a:6a:ec:dc:6d:ef:dc:14:a7:60:
fd:f9:cc:ba:ab:f2:20:3d:db:70:1d:b6:53:7a:01:
40:a2:32:af:28:f8:92:49:be:17:74:f6:40:e6:6a:
b1:ec:be:f6:a7:f1:04:2e:50:68:f1:79:ea:c0:57:
46:04:fe:6b:97:1f:36:2d:5a:7c:55:2e:bf:c8:6b:
dc:62:3f:d8:05:1d:ca:0e:48:59:8f:47:1d:8f:ba:
aa:ce:12:6b:b2:23:e1:99:3c:78:86:96:e6:9e:f6:
88:2e:d8:31:82:76:af:aa:6b:04:60:2f:b6:a5:27:
aa:f0:f7:35:ba:4b:c8:9c:fb:6a:e4:ee:ef:82:b0:
b4:31:ee:35:d6:ef:78:ef:e5:10:7d:4e:59:8d:20:
97:d7:ff:3b:bd:ee:e3:a8:c7:56:42:c8:98:ff:7e:
41:85:24:54:ec:95:b8:c0:e9:21:60:05:8c:77:a3:
2d:44:09:06:66:1f:cf:40:12:a9:28:9e:77:a4:e1:
4d:76:f4:c0:b2:c3:4b:e1:00:3c:cc:05:a3:c8:af:
cb:25:26:8c:b1:e6:98:bd:50:46:ab:68:df:8b:03:
29:aa:aa:d1:36:13:96:be:3d:62:ba:36:65:2b:35:
a4:5f:56:bb:95:bb:04:92:31:8d:e1:db:70:a8:68:
01:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:07:5E:B8:81:04:9B:30:D9:A5:DF:D2:67:40:74:AD:BE:FE:EF:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/954248a7-1747-37a2-8e59-18157153fb0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl
X509v3 Authority Key Identifier:
keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
sbgp-ipAddrBlock: critical
IPv4:
170.176.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:c5:52:f6:fe:3e:3e:87:e8:b8:b0:02:c8:f9:11:a8:7f:c1:
ea:81:d4:bc:22:d3:18:38:85:d5:45:8c:6e:b7:cb:14:0b:f9:
7f:8a:97:f7:ee:e6:52:f6:81:ba:7c:f4:55:43:d3:58:13:d1:
92:e4:81:3a:b9:50:91:ae:e4:6a:13:c2:1a:21:c8:0a:67:d4:
bb:64:19:32:08:80:eb:b2:34:0d:cd:dc:e5:98:14:77:8c:05:
4f:fe:44:75:f2:cf:ed:d8:ae:7a:cb:2b:d6:b0:39:70:37:93:
1e:33:95:4e:73:06:f4:13:22:96:be:83:08:49:0c:c1:8d:8a:
ab:b7:c7:8d:0b:90:6b:34:5b:8f:e0:13:b4:78:07:5b:76:95:
80:ff:1c:a6:20:f2:03:e7:a5:18:64:c7:df:b7:ba:89:2e:d0:
d7:27:b6:0d:c6:30:9a:09:c7:b4:ea:3f:df:20:af:d4:cc:39:
2c:44:85:25:2d:3c:b1:e4:c1:ff:f6:74:2c:c9:42:50:1e:ec:
76:10:88:b2:bc:7d:93:e4:32:6f:00:80:45:6c:ed:a0:72:3d:
15:f2:32:0e:09:2d:24:34:0e:53:02:1a:3c:c5:86:d6:c7:e7:
39:89:0c:99:18:72:b3:30:b1:07:f2:35:3c:f0:f4:b0:24:56:
31:b9:fa:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIVZFTWPluoUmVYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk
Y2M0MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk
MmFlNmFjYjktNDdmNS00ZDc5LTkxZDgtNTQ4MTg0ZGMxN2E2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNaY1Spq7Nxt79wUp2D9+cy6q/IgPdtwHbZT
egFAojKvKPiSSb4XdPZA5mqx7L72p/EELlBo8XnqwFdGBP5rlx82LVp8VS6/yGvc
Yj/YBR3KDkhZj0cdj7qqzhJrsiPhmTx4hpbmnvaILtgxgnavqmsEYC+2pSeq8Pc1
ukvInPtq5O7vgrC0Me411u947+UQfU5ZjSCX1/87ve7jqMdWQsiY/35BhSRU7JW4
wOkhYAWMd6MtRAkGZh/PQBKpKJ53pOFNdvTAssNL4QA8zAWjyK/LJSaMseaYvVBG
q2jfiwMpqqrRNhOWvj1iujZlKzWkX1a7lbsEkjGN4dtwqGgBewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKMHXriBBJsw2aXf0mdAdK2+/u8yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk
ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvOTU0MjQ4YTctMTc0Ny0z
N2EyLThlNTktMTgxNTcxNTNmYjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz
MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3
ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5
M2ZhN2RjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrCZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGjFUvb+Pj6H6LiwAsj5Eah/weqB1Lwi0xg4hdVFjG63yxQL+X+Kl/fu
5lL2gbp89FVD01gT0ZLkgTq5UJGu5GoTwhohyApn1LtkGTIIgOuyNA3N3OWYFHeM
BU/+RHXyz+3YrnrLK9awOXA3kx4zlU5zBvQTIpa+gwhJDMGNiqu3x40LkGs0W4/g
E7R4B1t2lYD/HKYg8gPnpRhkx9+3uoku0Ncntg3GMJoJx7TqP98gr9TMOSxEhSUt
PLHkwf/2dCzJQlAe7HYQiLK8fZPkMm8AgEVs7aByPRXyMg4JLSQ0DlMCGjzFhtbH
5zmJDJkYcrMwsQfyNTzw9LAkVjG5+kA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:16 2025 by rpki-client