Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e167d7e8-eb70-38f8-833a-de1de5b0d5ef.roa
File: e167d7e8-eb70-38f8-833a-de1de5b0d5ef.roa (raw, json)
Hash identifier: iiZXoKxtGmgvVKifoYsIZHt1lrtksx8nyQlvyFs/smQ=
Subject key identifier: 10:E5:6B:95:2A:C8:F5:DB:8A:2B:27:A3:F1:9E:88:AB:0F:64:65:7F
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F43285848F4F6A2F0866D7F5FC09EAC00
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e167d7e8-eb70-38f8-833a-de1de5b0d5ef.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 3477
IP address blocks: 161.55.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:a2:f0:86:6d:7f:5f:c0:9e:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=c1c45734-794b-4ef4-8aed-147a700cda06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1e:82:3d:58:4c:14:b5:c1:32:5a:96:16:07:
12:b5:9c:23:b7:a3:eb:d3:57:c1:c5:ee:ee:2f:91:
e1:3e:00:ec:46:59:c7:d9:2a:65:2b:a9:57:a0:5c:
ab:76:1b:f2:6d:eb:8d:dc:68:ea:17:2f:e4:77:d4:
d1:2d:00:cf:6e:80:ba:82:94:0f:3c:00:3a:f8:67:
0f:23:68:44:e3:8c:c0:c7:87:8b:ef:f7:7b:e1:b8:
9a:34:13:7d:9e:cd:73:0a:bc:ee:85:5b:40:a2:6e:
e8:fe:88:d5:af:08:f0:a3:6d:10:d8:17:9e:ef:56:
92:95:70:05:dc:a5:11:dc:63:68:80:e5:63:ec:23:
30:92:21:4e:9d:d3:71:08:c2:24:db:57:20:e3:17:
ca:1f:1b:c6:41:df:fd:22:0e:57:af:dc:be:f1:7a:
2a:3a:55:4b:8c:f7:49:a9:8b:3a:73:c8:2e:14:67:
c2:7c:94:86:ad:91:6e:57:30:76:d7:83:4a:b5:80:
71:15:0f:c7:6f:ab:40:22:e9:35:51:77:b9:36:2f:
40:23:e6:c4:2b:75:53:1b:4d:a9:1e:7d:f0:a8:70:
f8:8f:bd:2f:a0:2c:7f:6c:b9:42:fa:a8:b8:fd:4d:
4a:a1:b5:5b:37:e9:ea:61:a5:dd:51:3d:80:b7:5a:
2e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E5:6B:95:2A:C8:F5:DB:8A:2B:27:A3:F1:9E:88:AB:0F:64:65:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e167d7e8-eb70-38f8-833a-de1de5b0d5ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
161.55.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:9b:6d:7c:fc:a1:98:2c:07:7c:fa:42:61:bf:a1:51:9c:04:
2e:15:61:1f:5f:e6:8d:ff:64:38:0d:37:8b:f2:17:b9:6f:92:
e8:22:aa:a6:87:f6:1a:57:87:f4:d2:f9:b7:aa:f8:a9:6e:3a:
7b:35:de:54:5e:86:a3:a8:01:15:1a:42:1a:96:ba:ec:0f:49:
f8:ef:c3:e5:1c:82:f0:7b:ac:95:e0:bf:47:5b:19:44:cf:27:
b0:0c:4d:1f:16:61:4c:74:00:13:4a:4d:30:51:ad:e8:d3:56:
bc:94:75:19:58:85:1b:1c:92:f0:5f:51:fb:dd:a6:e4:13:19:
0c:d7:86:19:33:f0:3f:3e:1e:d0:3e:3f:ea:b7:3a:38:92:cf:
5f:08:21:35:d6:d0:be:ad:b8:fd:51:ea:c8:29:c7:5f:11:47:
a2:91:29:9e:65:2c:16:d6:f3:38:9c:e0:2a:a0:b3:e5:8b:ef:
f5:51:f4:48:ae:45:3c:ef:f4:18:f1:cb:74:0f:01:e2:c7:8b:
7b:c4:01:17:51:f7:dc:4d:55:39:30:1a:6d:7d:1b:58:d1:40:
61:98:bd:ee:ae:67:66:c6:18:ad:bc:a7:cb:67:fc:d1:ff:2c:
68:42:9c:47:64:5b:2e:70:80:fc:1c:af:78:6b:e4:3b:12:05:
29:59:c4:3f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEj09qLwhm1/X8CerAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5
YzIwMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
YzFjNDU3MzQtNzk0Yi00ZWY0LThhZWQtMTQ3YTcwMGNkYTA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhB6CPVhMFLXBMlqWFgcStZwjt6Pr01fBxe7u
L5HhPgDsRlnH2SplK6lXoFyrdhvybeuN3GjqFy/kd9TRLQDPboC6gpQPPAA6+GcP
I2hE44zAx4eL7/d74biaNBN9ns1zCrzuhVtAom7o/ojVrwjwo20Q2Bee71aSlXAF
3KUR3GNogOVj7CMwkiFOndNxCMIk21cg4xfKHxvGQd/9Ig5Xr9y+8XoqOlVLjPdJ
qYs6c8guFGfCfJSGrZFuVzB214NKtYBxFQ/Hb6tAIuk1UXe5Ni9AI+bEK3VTG02p
Hn3wqHD4j70voCx/bLlC+qi4/U1KobVbN+nqYaXdUT2At1oupwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBDla5UqyPXbiisno/GeiKsPZGV/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx
MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvZTE2N2Q3ZTgtZWI3MC0z
OGY4LTgzM2EtZGUxZGU1YjBkNWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi
M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi
OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm
YmE0YjljMjAuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoTcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAiJttfPyhmCwHfPpCYb+hUZwELhVhH1/mjf9kOA03i/IXuW+S6CKqpof2
GleH9NL5t6r4qW46ezXeVF6Go6gBFRpCGpa67A9J+O/D5RyC8HusleC/R1sZRM8n
sAxNHxZhTHQAE0pNMFGt6NNWvJR1GViFGxyS8F9R+92m5BMZDNeGGTPwPz4e0D4/
6rc6OJLPXwghNdbQvq24/VHqyCnHXxFHopEpnmUsFtbzOJzgKqCz5Yvv9VH0SK5F
PO/0GPHLdA8B4seLe8QBF1H33E1VOTAabX0bWNFAYZi97q5nZsYYrbyny2f80f8s
aEKcR2RbLnCA/ByveGvkOxIFKVnEPw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:39:01 2025 by rpki-client