Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/09210bcd-f256-3fd2-9377-2d63cc5d849e.roa
File: 09210bcd-f256-3fd2-9377-2d63cc5d849e.roa (raw, json)
Hash identifier: XeW+YzzZ1oSWaHYgEya826Hd/yXOHpDnsd7FWGtwIgM=
Subject key identifier: 13:84:6E:2E:9A:72:73:D2:F0:82:4C:BE:FD:B1:C4:67:BE:48:97:AB
Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial: 010D0C9F43285848EF613E7E46B424D73912D840
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/09210bcd-f256-3fd2-9377-2d63cc5d849e.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 203
IP address blocks: 192.46.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:3e:7e:46:b4:24:d7:39:12:d8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=712c166b-1fa8-40e5-ac1e-305a44444a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5d:ec:2a:68:4e:b9:92:d3:92:a1:a1:90:0e:
bd:7a:f6:03:26:3e:3b:b3:4f:40:f8:2f:cc:41:09:
7f:cf:01:b4:f3:98:61:c2:72:ca:22:11:4a:a4:52:
15:a3:10:92:e8:bc:c7:fe:ce:17:21:af:5c:f1:85:
24:df:59:79:ca:e2:50:38:8f:3b:27:64:f5:94:fd:
77:ff:aa:14:ba:ad:cf:4d:25:11:a1:6e:af:1f:7b:
60:fd:65:66:ab:d3:9d:d6:36:b3:7c:66:34:a3:16:
b8:0d:03:ff:e0:62:8c:4e:bc:5f:82:74:52:58:7a:
84:de:4d:e5:7f:73:dd:7e:28:b0:e3:c6:ec:51:de:
c5:d1:8a:69:83:3a:aa:2c:8a:64:6c:1d:75:64:62:
26:13:76:02:ca:24:fb:92:49:35:32:e3:30:89:a3:
1d:d4:be:c2:e2:8d:45:e3:65:17:7c:c4:c6:f4:24:
4a:32:ca:dd:68:91:02:26:fb:6a:02:f8:fd:8d:36:
44:e5:96:2d:bd:f3:e4:24:b9:8d:f4:d2:5d:d5:45:
0a:e5:7a:4c:ea:14:f9:15:11:a0:1c:cc:62:19:59:
f6:d4:40:28:50:c0:6a:aa:7e:1b:d7:5d:a3:ab:e4:
1f:bd:1a:93:73:ca:b0:2a:29:dd:86:09:7e:9f:10:
b1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:84:6E:2E:9A:72:73:D2:F0:82:4C:BE:FD:B1:C4:67:BE:48:97:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/09210bcd-f256-3fd2-9377-2d63cc5d849e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
X509v3 Authority Key Identifier:
keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
sbgp-ipAddrBlock: critical
IPv4:
192.46.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:25:0d:ab:36:c3:41:1d:fc:c0:39:da:b2:49:f1:16:8f:05:
d2:3e:1d:f9:e2:48:93:e6:36:8d:fe:9e:74:fe:18:05:21:26:
d5:eb:88:c7:52:b0:14:58:68:ea:16:e8:ea:4c:ce:1a:5d:9b:
a9:61:5c:f9:d0:d4:ab:34:76:9c:07:b5:16:bf:97:f1:f4:da:
2b:e6:9d:11:08:ee:b7:04:e7:8d:2a:13:ce:9d:d7:e8:1b:ff:
1d:38:87:83:98:86:13:63:15:81:9a:18:ef:8f:21:31:2a:64:
78:2c:82:b1:3c:53:15:73:eb:17:8a:f5:3e:84:39:e0:95:11:
18:bd:3a:cd:c1:57:3e:1a:41:c0:24:53:c7:56:c5:98:5d:7c:
68:e6:24:d0:b7:09:1d:11:c7:5f:57:c4:72:22:99:81:12:6b:
4d:90:cc:b1:ee:12:be:03:55:30:f9:6b:47:41:09:32:f4:55:
57:a2:06:26:3b:67:a5:66:2e:c0:56:c1:ad:9f:6f:fe:1a:16:
99:07:09:cb:54:83:e8:0e:56:ba:36:53:28:9f:5f:96:1d:be:
8d:68:12:6e:a6:7b:1d:a1:3a:e1:66:ae:b7:55:d1:72:3d:78:
76:55:8f:40:d8:c3:40:00:91:f8:da:a5:70:65:87:da:5f:63:
1b:07:9b:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYT5+RrQk1zkS2EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
NzEyYzE2NmItMWZhOC00MGU1LWFjMWUtMzA1YTQ0NDQ0YTI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV3sKmhOuZLTkqGhkA69evYDJj47s09A+C/M
QQl/zwG085hhwnLKIhFKpFIVoxCS6LzH/s4XIa9c8YUk31l5yuJQOI87J2T1lP13
/6oUuq3PTSURoW6vH3tg/WVmq9Od1jazfGY0oxa4DQP/4GKMTrxfgnRSWHqE3k3l
f3Pdfiiw48bsUd7F0YppgzqqLIpkbB11ZGImE3YCyiT7kkk1MuMwiaMd1L7C4o1F
42UXfMTG9CRKMsrdaJECJvtqAvj9jTZE5ZYtvfPkJLmN9NJd1UUK5XpM6hT5FRGg
HMxiGVn21EAoUMBqqn4b112jq+QfvRqTc8qwKindhgl+nxCxVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBOEbi6acnPS8IJMvv2xxGe+SJerMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMDkyMTBiY2QtZjI1Ni0z
ZmQyLTkzNzctMmQ2M2NjNWQ4NDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwC6qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGclDas2w0Ed/MA52rJJ8RaPBdI+HfniSJPmNo3+nnT+GAUhJtXriMdS
sBRYaOoW6OpMzhpdm6lhXPnQ1Ks0dpwHtRa/l/H02ivmnREI7rcE540qE86d1+gb
/x04h4OYhhNjFYGaGO+PITEqZHgsgrE8UxVz6xeK9T6EOeCVERi9Os3BVz4aQcAk
U8dWxZhdfGjmJNC3CR0Rx19XxHIimYESa02QzLHuEr4DVTD5a0dBCTL0VVeiBiY7
Z6VmLsBWwa2fb/4aFpkHCctUg+gOVro2UyifX5Ydvo1oEm6mex2hOuFmrrdV0XI9
eHZVj0DYw0AAkfjapXBlh9pfYxsHm7s=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:52 2025 by rpki-client